@evolith/core-domain 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (500) hide show
  1. package/dist/domain/services/default-workflow-definition.js +1 -1
  2. package/dist/domain/services/default-workflow-definition.js.map +1 -1
  3. package/package.json +2 -1
  4. package/rulesets/README.es.md +170 -0
  5. package/rulesets/README.md +170 -0
  6. package/rulesets/acl/README.es.md +41 -0
  7. package/rulesets/acl/README.md +41 -0
  8. package/rulesets/acl/anti-corruption-layer.rules.es.json +99 -0
  9. package/rulesets/acl/anti-corruption-layer.rules.json +99 -0
  10. package/rulesets/adr/ADR_COVERAGE.es.md +133 -0
  11. package/rulesets/adr/ADR_COVERAGE.md +133 -0
  12. package/rulesets/adr/README.es.md +17 -0
  13. package/rulesets/adr/README.md +17 -0
  14. package/rulesets/adr/adr-0002-hexagonal-architecture.rules.json +103 -0
  15. package/rulesets/adr/adr-0005-cicd-quality-gates.rules.json +102 -0
  16. package/rulesets/adr/adr-0010-multi-tenancy.rules.json +129 -0
  17. package/rulesets/adr/adr-0018-testing-pyramid.rules.json +115 -0
  18. package/rulesets/adr/adr-0032-protocol-selection.rules.json +134 -0
  19. package/rulesets/adr/adr-0040-multi-runtime.rules.json +131 -0
  20. package/rulesets/adr/adr-0050-gitflow-branching.rules.json +176 -0
  21. package/rulesets/adr/generated/adr-0001-monorepo-orchestration-principle.rules.json +29 -0
  22. package/rulesets/adr/generated/adr-0006-microservices-transition-via-sidecar-pattern.rules.json +29 -0
  23. package/rulesets/adr/generated/adr-0009-strict-dependency-pinning-and-automated-vulnerability-manage.rules.json +29 -0
  24. package/rulesets/adr/generated/adr-0011-fault-tolerance-and-resiliency-patterns.rules.json +29 -0
  25. package/rulesets/adr/generated/adr-0013-cloud-infrastructure-topology-and-disaster-recovery-dr.rules.json +28 -0
  26. package/rulesets/adr/generated/adr-0014-multi-layer-distributed-caching-strategy.rules.json +29 -0
  27. package/rulesets/adr/generated/adr-0015-event-driven-architecture-eda-for-intra-domain-communication.rules.json +29 -0
  28. package/rulesets/adr/generated/adr-0016-immutable-business-audit-trail-and-change-tracking.rules.json +29 -0
  29. package/rulesets/adr/generated/adr-0017-feature-flagging-strategy-for-progressive-delivery.rules.json +28 -0
  30. package/rulesets/adr/generated/adr-0019-tactical-design-patterns-for-future-proofing.rules.json +29 -0
  31. package/rulesets/adr/generated/adr-0020-identity-provider-abstraction-strategy.rules.json +28 -0
  32. package/rulesets/adr/generated/adr-0024-centralized-configuration-feature-platform.rules.json +28 -0
  33. package/rulesets/adr/generated/adr-0025-feature-flag-provider-abstraction-strategy.rules.json +29 -0
  34. package/rulesets/adr/generated/adr-0028-self-hosted-open-source-hybrid-infrastructure.rules.json +29 -0
  35. package/rulesets/adr/generated/adr-0030-two-tier-distributed-gateway-model.rules.json +28 -0
  36. package/rulesets/adr/generated/adr-0031-schema-per-bounded-context-and-domain-event-catalog.rules.json +29 -0
  37. package/rulesets/adr/generated/adr-0033-transactional-outbox-pattern-for-async-messaging.rules.json +28 -0
  38. package/rulesets/adr/generated/adr-0034-cqrs-pattern-application-matrix.rules.json +29 -0
  39. package/rulesets/adr/generated/adr-0035-distributed-saga-pattern-implementation-strategy.rules.json +29 -0
  40. package/rulesets/adr/generated/adr-0036-message-bus-delivery-flow-control-strategy.rules.json +29 -0
  41. package/rulesets/adr/generated/adr-0037-enterprise-performance-concurrency-chaos-verification-strate.rules.json +28 -0
  42. package/rulesets/adr/generated/adr-0039-deployment-topology-abstraction-environment-switcher.rules.json +29 -0
  43. package/rulesets/adr/generated/adr-0041-dual-engine-policy-evaluation-native-opa.rules.json +28 -0
  44. package/rulesets/adr/generated/adr-0044-configurable-security-persistence-strategy-agnosticism-vs-na.rules.json +29 -0
  45. package/rulesets/adr/generated/adr-0045-microservice-extraction-readiness-criteria.rules.json +29 -0
  46. package/rulesets/adr/generated/adr-0046-unified-traceability-via-w3c-tracecontext.rules.json +29 -0
  47. package/rulesets/adr/generated/adr-0047-progressive-architecture-evolution-framework-modular-monolit.rules.json +29 -0
  48. package/rulesets/adr/generated/adr-0048-enterprise-taxonomy-standardization-and-reference-layout.rules.json +28 -0
  49. package/rulesets/adr/generated/adr-0049-naming-semantics-clean-code-policy-e2e-and-global.rules.json +29 -0
  50. package/rulesets/adr/generated/adr-0051-enterprise-database-engine-selection-strategy.rules.json +29 -0
  51. package/rulesets/adr/generated/adr-0052-unit-testing-isolation-strategy-mocks-vs-stubs.rules.json +29 -0
  52. package/rulesets/adr/generated/adr-0053-integration-and-e2e-testing-strategy.rules.json +29 -0
  53. package/rulesets/adr/generated/adr-0054-database-design-and-normalization-standards.rules.json +29 -0
  54. package/rulesets/adr/generated/adr-0055-microfrontends-architecture-strategy.rules.json +28 -0
  55. package/rulesets/adr/generated/adr-0056-enterprise-naming-design-conventions-multi-language-multi-pl.rules.json +29 -0
  56. package/rulesets/adr/generated/adr-0057-architecture-intelligence-catalog.rules.json +27 -0
  57. package/rulesets/adr/generated/adr-0058-ai-consumable-architecture-knowledge.rules.json +27 -0
  58. package/rulesets/adr/generated/adr-0067-modular-monolith-persistence-boundaries.rules.json +28 -0
  59. package/rulesets/adr/generated/adr-0068-documentation-release-gitflow.rules.json +29 -0
  60. package/rulesets/adr/generated/adr-0069-ai-agent-context-protocol-integration.rules.json +28 -0
  61. package/rulesets/adr/generated/adr-0070-lean-root-repository-taxonomy.rules.json +29 -0
  62. package/rulesets/adr/generated/adr-0071-domain-layer-base-class-and-inheritance-strategy.rules.json +29 -0
  63. package/rulesets/adr/generated/adr-0072-utc-date-storage-browser-timezone-detection-and-language-res.rules.json +29 -0
  64. package/rulesets/adr/generated/adr-0073-unified-cli-mcp-output-contract-and-gate-evidence-schema.rules.json +29 -0
  65. package/rulesets/adr/generated/adr-0074-evolith-core-api-native-exposure-layer.rules.json +29 -0
  66. package/rulesets/adr/generated/adr-0075-core-api-authentication-strategy.rules.json +28 -0
  67. package/rulesets/adr/generated/adr-0076-domain-oriented-microservice-architecture-doma.rules.json +28 -0
  68. package/rulesets/adr/generated/adr-0077-masstransit-v9-commercial-pivot-stay-on-v8-monitor-opentrans.rules.json +28 -0
  69. package/rulesets/adr/generated/adr-0078-domain-financial-separation-governance.rules.json +29 -0
  70. package/rulesets/adr/generated/adr-0079-multi-topology-reference-corpus-and-topology-manifest-contra.rules.json +29 -0
  71. package/rulesets/adr/generated/adr-0080-remote-repository-reference-contract.rules.json +29 -0
  72. package/rulesets/adr/generated/adr-0081-agentic-ai-sandbox-isolation-boundary.rules.json +29 -0
  73. package/rulesets/adr/generated/adr-0082-agentic-ai-prompt-context-and-tool-trust-boundary.rules.json +28 -0
  74. package/rulesets/adr/generated/adr-0083-agentic-ai-action-authorization-and-audit.rules.json +29 -0
  75. package/rulesets/adr/generated/adr-0084-data-mesh-and-data-as-a-product.rules.json +29 -0
  76. package/rulesets/adr/generated/adr-0085-agnostic-opa-wasm-distribution-architecture.rules.json +28 -0
  77. package/rulesets/adr/generated/adr-0086-agentic-ai-telemetry-cost-control-standard.rules.json +27 -0
  78. package/rulesets/adr/generated/adr-0087-attribute-based-access-control-abac-for-agentic-tool-executi.rules.json +29 -0
  79. package/rulesets/adr/generated/adr-0088-sovereign-identity-for-agentic-ai.rules.json +29 -0
  80. package/rulesets/adr/generated/adr-0089-event-driven-agentic-workflow-pattern.rules.json +28 -0
  81. package/rulesets/adr/generated/adr-0090-rag-knowledge-governance-standard.rules.json +29 -0
  82. package/rulesets/adr/generated/adr-0091-workload-identity-token-rotation-standard.rules.json +29 -0
  83. package/rulesets/adr/generated/adr-0092-agent-infinite-loop-prevention-and-circuit-breaker-rules.rules.json +29 -0
  84. package/rulesets/adr/generated/adr-0093-concurrency-control-and-resource-locking-standard-for-mcp-to.rules.json +29 -0
  85. package/rulesets/adr/generated/adr-0094-multi-agent-handoff-and-task-delegation-standards.rules.json +29 -0
  86. package/rulesets/adr/generated/adr-0095-serverless-architecture-governance.rules.json +29 -0
  87. package/rulesets/adr/generated/adr-0096-edge-computing-architecture-governance.rules.json +29 -0
  88. package/rulesets/adr/generated/adr-0097-knowledge-lifecycle-governance-standard.rules.json +29 -0
  89. package/rulesets/adr/generated/adr-0098-rest-uri-versioning-and-deprecation-policy.rules.json +29 -0
  90. package/rulesets/adr/generated/adr-0099-opa-bundle-distribution-via-s3-minio.rules.json +27 -0
  91. package/rulesets/adr/generated/adr-ai-augmented-0001-harness-engineering-for-ai-augmented-development.rules.json +29 -0
  92. package/rulesets/adr/generated/adr-ai-augmented-0002-mcp-integration-protocol-for-agent-tool-invocation.rules.json +29 -0
  93. package/rulesets/adr/generated/adr-ai-augmented-0003-model-selection-governance-for-ai-augmented-workflows.rules.json +29 -0
  94. package/rulesets/adr/generated/adr-ai-augmented-0004-agents-md-as-mandatory-repository-artifact.rules.json +29 -0
  95. package/rulesets/adr/generated/adr-ai-augmented-0005-human-in-the-loop-policy-for-autonomous-agent-operations.rules.json +29 -0
  96. package/rulesets/adr/generated/adr-android-0042-canonical-android-native-mobile-architecture.rules.json +29 -0
  97. package/rulesets/adr/generated/adr-dotnet-0041-canonical-net-c-backend-architecture.rules.json +29 -0
  98. package/rulesets/adr/generated/adr-dotnet-0060-net-multi-tenancy-dual-layer-strategy-ef-core-sql-server.rules.json +29 -0
  99. package/rulesets/adr/generated/adr-dotnet-0061-transactional-event-lifecycle-in-ef-core.rules.json +28 -0
  100. package/rulesets/adr/generated/adr-dotnet-0062-net-immutable-audit-trail-via-ddl-triggers-delta-capture.rules.json +29 -0
  101. package/rulesets/adr/generated/adr-dotnet-0063-b2b-request-idempotency-middleware-in-asp-net-core.rules.json +28 -0
  102. package/rulesets/adr/generated/adr-dotnet-0064-net-request-scope-observability-context-propagation.rules.json +29 -0
  103. package/rulesets/adr/generated/adr-dotnet-0065-net-pii-safe-structured-logging-pipeline-serilog.rules.json +29 -0
  104. package/rulesets/adr/generated/adr-dotnet-0066-net-lightweight-http-idempotency-via-imemorycache-idistribut.rules.json +28 -0
  105. package/rulesets/adr/generated/adr-dotnet-0069-net-grpc-service-setup-protobuf-contracts.rules.json +29 -0
  106. package/rulesets/adr/generated/adr-dotnet-0070-net-api-endpoint-strategy.rules.json +29 -0
  107. package/rulesets/adr/generated/adr-dotnet-0071-net-data-access-strategy-ef-core-as-default-orm-dapper-for-o.rules.json +27 -0
  108. package/rulesets/adr/generated/adr-dotnet-0072-net-aop-cross-cutting-concern-strategy-dispatchproxy-over-pi.rules.json +29 -0
  109. package/rulesets/adr/generated/adr-nodejs-0003-strict-typescript-standards.rules.json +29 -0
  110. package/rulesets/adr/generated/adr-nodejs-0004-frontend-offline-resilience.rules.json +28 -0
  111. package/rulesets/adr/generated/adr-nodejs-0007-observability-with-opentelemetry-loki-and-jaeger.rules.json +29 -0
  112. package/rulesets/adr/generated/adr-nodejs-0008-progressive-multi-module-evolution-with-api-gateway-and-bff-.rules.json +28 -0
  113. package/rulesets/adr/generated/adr-nodejs-0012-advanced-authorization-rbac-abac-strategy.rules.json +28 -0
  114. package/rulesets/adr/generated/adr-nodejs-0021-high-performance-authentication-graph-compilation.rules.json +28 -0
  115. package/rulesets/adr/generated/adr-nodejs-0022-contextual-authentication-and-pluggable-output-projections.rules.json +28 -0
  116. package/rulesets/adr/generated/adr-nodejs-0023-centralized-authorization-core-strategy.rules.json +28 -0
  117. package/rulesets/adr/generated/adr-nodejs-0026-adaptive-mfa-and-passwordless-platform.rules.json +28 -0
  118. package/rulesets/adr/generated/adr-nodejs-0027-dual-protocol-api-strategy-rest-grpc.rules.json +28 -0
  119. package/rulesets/adr/generated/adr-nodejs-0029-adoption-of-tactical-ddd-primitives-library.rules.json +29 -0
  120. package/rulesets/adr/generated/adr-nodejs-0038-enterprise-error-handling-result-pattern-strategy.rules.json +29 -0
  121. package/rulesets/adr/generated/adr-nodejs-0043-data-access-and-orm-strategy-for-node-js.rules.json +29 -0
  122. package/rulesets/adr/generated/adr-nodejs-0044-frontend-clean-architecture-layer-boundaries-react.rules.json +29 -0
  123. package/rulesets/adr/generated/adr-nodejs-0045-frontend-state-management-zustand-tanstack-query-dual-strate.rules.json +29 -0
  124. package/rulesets/adr/generated/adr-nodejs-0046-prohibition-of-raw-technical-identifiers-in-user-interfaces.rules.json +29 -0
  125. package/rulesets/adr/generated/adr-nodejs-0047-actionable-user-error-contract-and-correlated-diagnostics.rules.json +29 -0
  126. package/rulesets/adr/generated/adr-nodejs-0048-feature-flag-system-scope-and-structured-criteria-model.rules.json +29 -0
  127. package/rulesets/adr/generated/adr-nodejs-0074-monorepo-orchestration-with-nx.rules.json +29 -0
  128. package/rulesets/adr/generated/adr-nodejs-0075-application-gateway-bff-with-nestjs.rules.json +29 -0
  129. package/rulesets/architecture/README.es.md +21 -0
  130. package/rulesets/architecture/README.md +21 -0
  131. package/rulesets/architecture/opa/progressive-axis.rego +50 -0
  132. package/rulesets/cli/README.es.md +17 -0
  133. package/rulesets/cli/README.md +17 -0
  134. package/rulesets/cli/core-parity.rules.json +61 -0
  135. package/rulesets/cli/release-readiness.rules.json +77 -0
  136. package/rulesets/compliance-baseline/README.es.md +26 -0
  137. package/rulesets/compliance-baseline/README.md +26 -0
  138. package/rulesets/compliance-baseline/compliance-baseline.rules.json +81 -0
  139. package/rulesets/contracts/README.es.md +19 -0
  140. package/rulesets/contracts/README.md +19 -0
  141. package/rulesets/contracts/evolith-machine-contracts.json +29 -0
  142. package/rulesets/contracts/fixtures/gate-evidence.success.json +10 -0
  143. package/rulesets/contracts/fixtures/output-envelope.success.json +23 -0
  144. package/rulesets/cross-cutting/README.es.md +14 -0
  145. package/rulesets/cross-cutting/README.md +14 -0
  146. package/rulesets/cross-cutting/compliance-baseline.rules.json +81 -0
  147. package/rulesets/cross-cutting/definition-of-done.rules.json +135 -0
  148. package/rulesets/cross-cutting/engineering-manifesto.rules.json +145 -0
  149. package/rulesets/cross-cutting/repository-taxonomy.rules.json +172 -0
  150. package/rulesets/definition-of-done/README.es.md +26 -0
  151. package/rulesets/definition-of-done/README.md +26 -0
  152. package/rulesets/definition-of-done/definition-of-done.rules.json +135 -0
  153. package/rulesets/engineering-manifesto/README.es.md +26 -0
  154. package/rulesets/engineering-manifesto/README.md +26 -0
  155. package/rulesets/engineering-manifesto/engineering-manifesto.rules.json +145 -0
  156. package/rulesets/evidence/README.es.md +12 -0
  157. package/rulesets/evidence/README.md +12 -0
  158. package/rulesets/evidence/evidence-manifest.rules.json +48 -0
  159. package/rulesets/executive-scorecards/executive-scorecards.rules.es.json +213 -0
  160. package/rulesets/executive-scorecards/executive-scorecards.rules.json +213 -0
  161. package/rulesets/governance/README.es.md +13 -0
  162. package/rulesets/governance/README.md +13 -0
  163. package/rulesets/governance/abac-mcp-access.rules.es.json +41 -0
  164. package/rulesets/governance/abac-mcp-access.rules.json +41 -0
  165. package/rulesets/governance/executive-scorecards.rules.es.json +213 -0
  166. package/rulesets/governance/executive-scorecards.rules.json +213 -0
  167. package/rulesets/governance/inheritance.rules.json +115 -0
  168. package/rulesets/governance/knowledge-intake.rules.json +18 -0
  169. package/rulesets/governance/open-core-boundary.rules.es.json +148 -0
  170. package/rulesets/governance/open-core-boundary.rules.json +148 -0
  171. package/rulesets/governance/satellite-contracts.rules.json +183 -0
  172. package/rulesets/infrastructure/helm-enforcement.rules.json +21 -0
  173. package/rulesets/infrastructure/opa/helm-enforcement.rego +25 -0
  174. package/rulesets/infrastructure/opa/helm-enforcement.test.rego +31 -0
  175. package/rulesets/infrastructure/opa/opa-sidecar-bundle.rego +115 -0
  176. package/rulesets/infrastructure/opa/opa-sidecar-bundle.test.rego +66 -0
  177. package/rulesets/infrastructure/opa-sidecar-bundle.rules.json +18 -0
  178. package/rulesets/mcp/README.es.md +12 -0
  179. package/rulesets/mcp/README.md +12 -0
  180. package/rulesets/mcp/protocol-compliance.rules.json +57 -0
  181. package/rulesets/observability/README.es.md +12 -0
  182. package/rulesets/observability/README.md +12 -0
  183. package/rulesets/observability/telemetry-evidence.rules.json +48 -0
  184. package/rulesets/opa/README.es.md +22 -0
  185. package/rulesets/opa/README.md +22 -0
  186. package/rulesets/opa/abac-mcp-tool-access.rego +122 -0
  187. package/rulesets/opa/abac-mcp-tool-access.test.rego +33 -0
  188. package/rulesets/opa/anti-corruption-layer.rego +39 -0
  189. package/rulesets/opa/anti-corruption-layer.test.rego +118 -0
  190. package/rulesets/opa/ci-cd.rego +41 -0
  191. package/rulesets/opa/ci-cd.test.rego +23 -0
  192. package/rulesets/opa/cicd-quality-gates.rego +29 -0
  193. package/rulesets/opa/cicd-quality-gates.test.rego +54 -0
  194. package/rulesets/opa/cli-core-parity.rego +17 -0
  195. package/rulesets/opa/cli-core-parity.test.rego +39 -0
  196. package/rulesets/opa/cli-readiness.rego +32 -0
  197. package/rulesets/opa/cli-readiness.test.rego +23 -0
  198. package/rulesets/opa/cli-release-readiness.rego +21 -0
  199. package/rulesets/opa/cli-release-readiness.test.rego +46 -0
  200. package/rulesets/opa/compliance-baseline.rego +95 -0
  201. package/rulesets/opa/compliance-baseline.test.rego +89 -0
  202. package/rulesets/opa/dod.rego +42 -0
  203. package/rulesets/opa/dod.test.rego +250 -0
  204. package/rulesets/opa/engineering-manifesto.rego +78 -0
  205. package/rulesets/opa/engineering-manifesto.test.rego +133 -0
  206. package/rulesets/opa/evidence.rego +64 -0
  207. package/rulesets/opa/evidence.test.rego +23 -0
  208. package/rulesets/opa/executive-scorecards.rego +41 -0
  209. package/rulesets/opa/executive-scorecards.test.rego +60 -0
  210. package/rulesets/opa/gitflow-branching.rego +41 -0
  211. package/rulesets/opa/gitflow-branching.test.rego +60 -0
  212. package/rulesets/opa/governance.rego +39 -0
  213. package/rulesets/opa/governance.test.rego +23 -0
  214. package/rulesets/opa/hexagonal-architecture.rego +33 -0
  215. package/rulesets/opa/hexagonal-architecture.test.rego +57 -0
  216. package/rulesets/opa/infrastructure/helm-enforcement.rego +33 -0
  217. package/rulesets/opa/infrastructure/opa-sidecar-bundle.rego +42 -0
  218. package/rulesets/opa/knowledge-intake.rego +98 -0
  219. package/rulesets/opa/knowledge-intake.test.rego +50 -0
  220. package/rulesets/opa/main.rego +147 -0
  221. package/rulesets/opa/main_test.rego +149 -0
  222. package/rulesets/opa/mcp.rego +61 -0
  223. package/rulesets/opa/mcp.test.rego +27 -0
  224. package/rulesets/opa/multi-runtime.rego +33 -0
  225. package/rulesets/opa/multi-runtime.test.rego +53 -0
  226. package/rulesets/opa/multi-tenancy.rego +33 -0
  227. package/rulesets/opa/multi-tenancy.test.rego +53 -0
  228. package/rulesets/opa/open-core-boundary.rego +33 -0
  229. package/rulesets/opa/open-core-boundary.test.rego +60 -0
  230. package/rulesets/opa/protocol-selection.rego +29 -0
  231. package/rulesets/opa/protocol-selection.test.rego +46 -0
  232. package/rulesets/opa/rbac/gate-role-enforcement.rego +112 -0
  233. package/rulesets/opa/repository-taxonomy.rego +98 -0
  234. package/rulesets/opa/repository-taxonomy.test.rego +91 -0
  235. package/rulesets/opa/satellite-contracts.rego +42 -0
  236. package/rulesets/opa/satellite-contracts.test.rego +70 -0
  237. package/rulesets/opa/schemas/abac-mcp-tool-access.input.schema.json +21 -0
  238. package/rulesets/opa/schemas/anti-corruption-layer.input.schema.json +25 -0
  239. package/rulesets/opa/schemas/ci-cd.input.schema.json +27 -0
  240. package/rulesets/opa/schemas/cicd-quality-gates.input.schema.json +33 -0
  241. package/rulesets/opa/schemas/cli-core-parity.input.schema.json +30 -0
  242. package/rulesets/opa/schemas/cli-readiness.input.schema.json +28 -0
  243. package/rulesets/opa/schemas/cli-release-readiness.input.schema.json +26 -0
  244. package/rulesets/opa/schemas/compliance-baseline.input.schema.json +25 -0
  245. package/rulesets/opa/schemas/dod.input.schema.json +38 -0
  246. package/rulesets/opa/schemas/engineering-manifesto.input.schema.json +24 -0
  247. package/rulesets/opa/schemas/evidence.input.schema.json +35 -0
  248. package/rulesets/opa/schemas/executive-scorecards.input.schema.json +36 -0
  249. package/rulesets/opa/schemas/gitflow-branching.input.schema.json +36 -0
  250. package/rulesets/opa/schemas/governance.input.schema.json +19 -0
  251. package/rulesets/opa/schemas/hexagonal-architecture.input.schema.json +46 -0
  252. package/rulesets/opa/schemas/knowledge-intake.input.schema.json +57 -0
  253. package/rulesets/opa/schemas/mcp.input.schema.json +38 -0
  254. package/rulesets/opa/schemas/multi-runtime.input.schema.json +27 -0
  255. package/rulesets/opa/schemas/multi-tenancy.input.schema.json +27 -0
  256. package/rulesets/opa/schemas/open-core-boundary.input.schema.json +36 -0
  257. package/rulesets/opa/schemas/protocol-selection.input.schema.json +26 -0
  258. package/rulesets/opa/schemas/repository-taxonomy.input.schema.json +18 -0
  259. package/rulesets/opa/schemas/satellite-contracts.input.schema.json +38 -0
  260. package/rulesets/opa/schemas/taxonomy.input.schema.json +27 -0
  261. package/rulesets/opa/schemas/testing-pyramid.input.schema.json +42 -0
  262. package/rulesets/opa/schemas/version-pinning.input.schema.json +39 -0
  263. package/rulesets/opa/sdlc/coverage.rego +49 -0
  264. package/rulesets/opa/sdlc/coverage.test.rego +29 -0
  265. package/rulesets/opa/sdlc/pyramid-distribution.rego +31 -0
  266. package/rulesets/opa/sdlc/pyramid-distribution.test.rego +33 -0
  267. package/rulesets/opa/taxonomy.rego +51 -0
  268. package/rulesets/opa/taxonomy.test.rego +28 -0
  269. package/rulesets/opa/telemetry-evidence.rego +102 -0
  270. package/rulesets/opa/testing-pyramid.rego +49 -0
  271. package/rulesets/opa/testing-pyramid.test.rego +81 -0
  272. package/rulesets/opa/version-pinning.rego +99 -0
  273. package/rulesets/opa/version-pinning.test.rego +28 -0
  274. package/rulesets/phase-gates/README.es.md +28 -0
  275. package/rulesets/phase-gates/README.md +28 -0
  276. package/rulesets/phase-gates/phase-gates.rules.json +297 -0
  277. package/rulesets/quality-thresholds/README.es.md +28 -0
  278. package/rulesets/quality-thresholds/README.md +28 -0
  279. package/rulesets/quality-thresholds/quality-thresholds.rules.json +96 -0
  280. package/rulesets/repository-taxonomy/README.es.md +26 -0
  281. package/rulesets/repository-taxonomy/README.md +26 -0
  282. package/rulesets/repository-taxonomy/repository-taxonomy.rules.json +172 -0
  283. package/rulesets/satellite-contracts/README.es.md +27 -0
  284. package/rulesets/satellite-contracts/README.md +27 -0
  285. package/rulesets/satellite-contracts/satellite-contracts.rules.json +183 -0
  286. package/rulesets/schema/README.es.md +39 -0
  287. package/rulesets/schema/README.md +39 -0
  288. package/rulesets/schema/adr.schema.json +138 -0
  289. package/rulesets/schema/agile-backlog.schema.json +91 -0
  290. package/rulesets/schema/ballpark-estimation.schema.json +109 -0
  291. package/rulesets/schema/build-vs-compose.schema.json +98 -0
  292. package/rulesets/schema/cli-impact-analysis.schema.json +114 -0
  293. package/rulesets/schema/discovery-canvas.schema.json +92 -0
  294. package/rulesets/schema/evolith-user-story.schema.json +105 -0
  295. package/rulesets/schema/evolith-yaml.schema.json +191 -0
  296. package/rulesets/schema/functional-story.schema.json +111 -0
  297. package/rulesets/schema/gate-evidence.schema.json +85 -0
  298. package/rulesets/schema/integration-evidence.schema.json +47 -0
  299. package/rulesets/schema/knowledge-intake.schema.json +67 -0
  300. package/rulesets/schema/knowledge-projection.schema.json +24 -0
  301. package/rulesets/schema/maturity-evidence.schema.json +59 -0
  302. package/rulesets/schema/observability-validation.schema.json +85 -0
  303. package/rulesets/schema/on-call-handoff.schema.json +91 -0
  304. package/rulesets/schema/output-envelope.schema.json +102 -0
  305. package/rulesets/schema/prd.schema.json +117 -0
  306. package/rulesets/schema/release-notes.schema.json +138 -0
  307. package/rulesets/schema/rollback-rehearsal.schema.json +73 -0
  308. package/rulesets/schema/ruleset-sdlc.schema.json +59 -0
  309. package/rulesets/schema/ruleset-standard.schema.json +73 -0
  310. package/rulesets/schema/security-scan-report.schema.json +79 -0
  311. package/rulesets/schema/source-registry.schema.json +51 -0
  312. package/rulesets/schema/technical-feasibility.schema.json +66 -0
  313. package/rulesets/schema/technical-story.schema.json +112 -0
  314. package/rulesets/schema/test-summary-report.schema.json +158 -0
  315. package/rulesets/schema/topology-composition.schema.json +43 -0
  316. package/rulesets/schema/topology-manifest.schema.json +421 -0
  317. package/rulesets/sdlc/README.es.md +12 -0
  318. package/rulesets/sdlc/README.md +12 -0
  319. package/rulesets/sdlc/default-workflow.yaml +73 -0
  320. package/rulesets/sdlc/dependency-pinning.rules.json +183 -0
  321. package/rulesets/sdlc/phase-gates.rules.json +297 -0
  322. package/rulesets/sdlc/quality-thresholds.rules.json +96 -0
  323. package/rulesets/topologies/README.es.md +42 -0
  324. package/rulesets/topologies/README.md +42 -0
  325. package/rulesets/topologies/agentic-ai/README.es.md +142 -0
  326. package/rulesets/topologies/agentic-ai/README.md +142 -0
  327. package/rulesets/topologies/agentic-ai/adoption.es.md +37 -0
  328. package/rulesets/topologies/agentic-ai/adoption.md +37 -0
  329. package/rulesets/topologies/agentic-ai/agent.config.schema.json +100 -0
  330. package/rulesets/topologies/agentic-ai/agentic-ai.rego +46 -0
  331. package/rulesets/topologies/agentic-ai/agentic-ai.rules.json +109 -0
  332. package/rulesets/topologies/agentic-ai/agentic-ai.test.rego +68 -0
  333. package/rulesets/topologies/agentic-ai/agentic-ai.wasm +0 -0
  334. package/rulesets/topologies/agentic-ai/cli/cli-flows.es.md +35 -0
  335. package/rulesets/topologies/agentic-ai/cli/cli-flows.md +45 -0
  336. package/rulesets/topologies/agentic-ai/evidence.es.md +25 -0
  337. package/rulesets/topologies/agentic-ai/evidence.md +25 -0
  338. package/rulesets/topologies/agentic-ai/evolution.es.md +26 -0
  339. package/rulesets/topologies/agentic-ai/evolution.md +26 -0
  340. package/rulesets/topologies/agentic-ai/fixtures/invalid-agent.config.json +48 -0
  341. package/rulesets/topologies/agentic-ai/fixtures/valid-agent.config.json +48 -0
  342. package/rulesets/topologies/agentic-ai/maturity.es.md +33 -0
  343. package/rulesets/topologies/agentic-ai/maturity.md +33 -0
  344. package/rulesets/topologies/agentic-ai/mcp/mcp-manifest.json +100 -0
  345. package/rulesets/topologies/agentic-ai/openapi/openapi.yaml +187 -0
  346. package/rulesets/topologies/agentic-ai/operations.es.md +32 -0
  347. package/rulesets/topologies/agentic-ai/operations.md +32 -0
  348. package/rulesets/topologies/agentic-ai/parity-fixtures/compliant.json +18 -0
  349. package/rulesets/topologies/agentic-ai/parity-fixtures/violation.json +22 -0
  350. package/rulesets/topologies/agentic-ai/patterns.es.md +32 -0
  351. package/rulesets/topologies/agentic-ai/patterns.md +32 -0
  352. package/rulesets/topologies/agentic-ai/resilience.es.md +26 -0
  353. package/rulesets/topologies/agentic-ai/resilience.md +26 -0
  354. package/rulesets/topologies/agentic-ai/runbooks.es.md +48 -0
  355. package/rulesets/topologies/agentic-ai/runbooks.md +48 -0
  356. package/rulesets/topologies/agentic-ai/security.es.md +26 -0
  357. package/rulesets/topologies/agentic-ai/security.md +26 -0
  358. package/rulesets/topologies/agentic-ai/topology.manifest.json +127 -0
  359. package/rulesets/topologies/data-mesh/README.es.md +69 -0
  360. package/rulesets/topologies/data-mesh/README.md +69 -0
  361. package/rulesets/topologies/data-mesh/adoption.es.md +95 -0
  362. package/rulesets/topologies/data-mesh/adoption.md +95 -0
  363. package/rulesets/topologies/data-mesh/cli/cli-flows.es.md +41 -0
  364. package/rulesets/topologies/data-mesh/cli/cli-flows.md +53 -0
  365. package/rulesets/topologies/data-mesh/data-mesh.rego +11 -0
  366. package/rulesets/topologies/data-mesh/data-mesh.rules.json +100 -0
  367. package/rulesets/topologies/data-mesh/data-mesh.test.rego +107 -0
  368. package/rulesets/topologies/data-mesh/data-mesh.wasm +0 -0
  369. package/rulesets/topologies/data-mesh/evidence.es.md +111 -0
  370. package/rulesets/topologies/data-mesh/evidence.md +111 -0
  371. package/rulesets/topologies/data-mesh/evolution.es.md +67 -0
  372. package/rulesets/topologies/data-mesh/evolution.md +67 -0
  373. package/rulesets/topologies/data-mesh/fixtures/invalid.topology.config.json +12 -0
  374. package/rulesets/topologies/data-mesh/fixtures/valid.topology.config.json +12 -0
  375. package/rulesets/topologies/data-mesh/maturity.es.md +36 -0
  376. package/rulesets/topologies/data-mesh/maturity.md +36 -0
  377. package/rulesets/topologies/data-mesh/mcp/mcp-manifest.json +68 -0
  378. package/rulesets/topologies/data-mesh/openapi/openapi.yaml +186 -0
  379. package/rulesets/topologies/data-mesh/operations.es.md +63 -0
  380. package/rulesets/topologies/data-mesh/operations.md +63 -0
  381. package/rulesets/topologies/data-mesh/parity-fixtures/compliant.json +18 -0
  382. package/rulesets/topologies/data-mesh/parity-fixtures/violation.json +21 -0
  383. package/rulesets/topologies/data-mesh/patterns.es.md +67 -0
  384. package/rulesets/topologies/data-mesh/patterns.md +67 -0
  385. package/rulesets/topologies/data-mesh/resilience.es.md +64 -0
  386. package/rulesets/topologies/data-mesh/resilience.md +64 -0
  387. package/rulesets/topologies/data-mesh/runbooks.es.md +147 -0
  388. package/rulesets/topologies/data-mesh/runbooks.md +147 -0
  389. package/rulesets/topologies/data-mesh/security.es.md +66 -0
  390. package/rulesets/topologies/data-mesh/security.md +66 -0
  391. package/rulesets/topologies/data-mesh/topology.config.schema.json +30 -0
  392. package/rulesets/topologies/data-mesh/topology.manifest.json +107 -0
  393. package/rulesets/topologies/edge-computing/README.es.md +81 -0
  394. package/rulesets/topologies/edge-computing/README.md +81 -0
  395. package/rulesets/topologies/edge-computing/adoption.es.md +268 -0
  396. package/rulesets/topologies/edge-computing/adoption.md +268 -0
  397. package/rulesets/topologies/edge-computing/cli/cli-flows.es.md +41 -0
  398. package/rulesets/topologies/edge-computing/cli/cli-flows.md +53 -0
  399. package/rulesets/topologies/edge-computing/edge-computing.rego +41 -0
  400. package/rulesets/topologies/edge-computing/edge-computing.rules.json +50 -0
  401. package/rulesets/topologies/edge-computing/edge-computing.test.rego +33 -0
  402. package/rulesets/topologies/edge-computing/edge-computing.wasm +0 -0
  403. package/rulesets/topologies/edge-computing/evidence.es.md +263 -0
  404. package/rulesets/topologies/edge-computing/evidence.md +263 -0
  405. package/rulesets/topologies/edge-computing/evolution.es.md +257 -0
  406. package/rulesets/topologies/edge-computing/evolution.md +257 -0
  407. package/rulesets/topologies/edge-computing/fixtures/invalid.topology.config.json +6 -0
  408. package/rulesets/topologies/edge-computing/fixtures/valid.topology.config.json +6 -0
  409. package/rulesets/topologies/edge-computing/maturity.es.md +36 -0
  410. package/rulesets/topologies/edge-computing/maturity.md +36 -0
  411. package/rulesets/topologies/edge-computing/mcp/mcp-manifest.json +72 -0
  412. package/rulesets/topologies/edge-computing/openapi/openapi.yaml +187 -0
  413. package/rulesets/topologies/edge-computing/operations.es.md +148 -0
  414. package/rulesets/topologies/edge-computing/operations.md +148 -0
  415. package/rulesets/topologies/edge-computing/parity-fixtures/compliant.json +12 -0
  416. package/rulesets/topologies/edge-computing/parity-fixtures/violation.json +13 -0
  417. package/rulesets/topologies/edge-computing/patterns.es.md +291 -0
  418. package/rulesets/topologies/edge-computing/patterns.md +290 -0
  419. package/rulesets/topologies/edge-computing/resilience.es.md +232 -0
  420. package/rulesets/topologies/edge-computing/resilience.md +229 -0
  421. package/rulesets/topologies/edge-computing/runbooks.es.md +405 -0
  422. package/rulesets/topologies/edge-computing/runbooks.md +405 -0
  423. package/rulesets/topologies/edge-computing/security.es.md +218 -0
  424. package/rulesets/topologies/edge-computing/security.md +218 -0
  425. package/rulesets/topologies/edge-computing/topology.config.schema.json +13 -0
  426. package/rulesets/topologies/edge-computing/topology.manifest.json +113 -0
  427. package/rulesets/topologies/event-driven/README.es.md +71 -0
  428. package/rulesets/topologies/event-driven/README.md +71 -0
  429. package/rulesets/topologies/event-driven/adoption.es.md +67 -0
  430. package/rulesets/topologies/event-driven/adoption.md +67 -0
  431. package/rulesets/topologies/event-driven/cli/cli-flows.es.md +41 -0
  432. package/rulesets/topologies/event-driven/cli/cli-flows.md +53 -0
  433. package/rulesets/topologies/event-driven/event-driven.rego +11 -0
  434. package/rulesets/topologies/event-driven/event-driven.rules.json +100 -0
  435. package/rulesets/topologies/event-driven/event-driven.test.rego +107 -0
  436. package/rulesets/topologies/event-driven/event-driven.wasm +0 -0
  437. package/rulesets/topologies/event-driven/evidence.es.md +69 -0
  438. package/rulesets/topologies/event-driven/evidence.md +69 -0
  439. package/rulesets/topologies/event-driven/evolution.es.md +59 -0
  440. package/rulesets/topologies/event-driven/evolution.md +59 -0
  441. package/rulesets/topologies/event-driven/fixtures/invalid.topology.config.json +12 -0
  442. package/rulesets/topologies/event-driven/fixtures/valid.topology.config.json +12 -0
  443. package/rulesets/topologies/event-driven/maturity.es.md +36 -0
  444. package/rulesets/topologies/event-driven/maturity.md +36 -0
  445. package/rulesets/topologies/event-driven/mcp/mcp-manifest.json +68 -0
  446. package/rulesets/topologies/event-driven/openapi/openapi.yaml +186 -0
  447. package/rulesets/topologies/event-driven/operations.es.md +67 -0
  448. package/rulesets/topologies/event-driven/operations.md +67 -0
  449. package/rulesets/topologies/event-driven/parity-fixtures/compliant.json +18 -0
  450. package/rulesets/topologies/event-driven/parity-fixtures/violation.json +21 -0
  451. package/rulesets/topologies/event-driven/patterns.es.md +68 -0
  452. package/rulesets/topologies/event-driven/patterns.md +68 -0
  453. package/rulesets/topologies/event-driven/resilience.es.md +65 -0
  454. package/rulesets/topologies/event-driven/resilience.md +65 -0
  455. package/rulesets/topologies/event-driven/runbooks.es.md +79 -0
  456. package/rulesets/topologies/event-driven/runbooks.md +79 -0
  457. package/rulesets/topologies/event-driven/security.es.md +59 -0
  458. package/rulesets/topologies/event-driven/security.md +59 -0
  459. package/rulesets/topologies/event-driven/topology.config.schema.json +30 -0
  460. package/rulesets/topologies/event-driven/topology.manifest.json +109 -0
  461. package/rulesets/topologies/progressive-axis/distributed-modules/distributed-modules.rules.es.json +111 -0
  462. package/rulesets/topologies/progressive-axis/distributed-modules/distributed-modules.rules.json +111 -0
  463. package/rulesets/topologies/progressive-axis/microservices/microservices.rules.es.json +106 -0
  464. package/rulesets/topologies/progressive-axis/microservices/microservices.rules.json +106 -0
  465. package/rulesets/topologies/progressive-axis/modular-monolith/modular-monolith.rules.es.json +148 -0
  466. package/rulesets/topologies/progressive-axis/modular-monolith/modular-monolith.rules.json +148 -0
  467. package/rulesets/topologies/serverless/README.es.md +74 -0
  468. package/rulesets/topologies/serverless/README.md +74 -0
  469. package/rulesets/topologies/serverless/adoption.es.md +50 -0
  470. package/rulesets/topologies/serverless/adoption.md +50 -0
  471. package/rulesets/topologies/serverless/cli/cli-flows.es.md +41 -0
  472. package/rulesets/topologies/serverless/cli/cli-flows.md +53 -0
  473. package/rulesets/topologies/serverless/evidence.es.md +66 -0
  474. package/rulesets/topologies/serverless/evidence.md +66 -0
  475. package/rulesets/topologies/serverless/evolution.es.md +36 -0
  476. package/rulesets/topologies/serverless/evolution.md +36 -0
  477. package/rulesets/topologies/serverless/fixtures/invalid.topology.config.json +6 -0
  478. package/rulesets/topologies/serverless/fixtures/valid.topology.config.json +6 -0
  479. package/rulesets/topologies/serverless/maturity.es.md +36 -0
  480. package/rulesets/topologies/serverless/maturity.md +36 -0
  481. package/rulesets/topologies/serverless/mcp/mcp-manifest.json +72 -0
  482. package/rulesets/topologies/serverless/openapi/openapi.yaml +186 -0
  483. package/rulesets/topologies/serverless/operations.es.md +36 -0
  484. package/rulesets/topologies/serverless/operations.md +36 -0
  485. package/rulesets/topologies/serverless/parity-fixtures/compliant.json +13 -0
  486. package/rulesets/topologies/serverless/parity-fixtures/violation.json +15 -0
  487. package/rulesets/topologies/serverless/patterns.es.md +36 -0
  488. package/rulesets/topologies/serverless/patterns.md +36 -0
  489. package/rulesets/topologies/serverless/resilience.es.md +36 -0
  490. package/rulesets/topologies/serverless/resilience.md +36 -0
  491. package/rulesets/topologies/serverless/runbooks.es.md +68 -0
  492. package/rulesets/topologies/serverless/runbooks.md +68 -0
  493. package/rulesets/topologies/serverless/security.es.md +36 -0
  494. package/rulesets/topologies/serverless/security.md +36 -0
  495. package/rulesets/topologies/serverless/serverless.rego +32 -0
  496. package/rulesets/topologies/serverless/serverless.rules.json +33 -0
  497. package/rulesets/topologies/serverless/serverless.test.rego +28 -0
  498. package/rulesets/topologies/serverless/serverless.wasm +0 -0
  499. package/rulesets/topologies/serverless/topology.config.schema.json +28 -0
  500. package/rulesets/topologies/serverless/topology.manifest.json +114 -0
@@ -0,0 +1,46 @@
1
+ package evolith.cli_release_readiness_test
2
+
3
+ import data.evolith.cli_release_readiness
4
+
5
+ compliant_input := {"satellite": {"releaseReadiness": {
6
+ "buildPasses": true,
7
+ "testsPass": true,
8
+ "lockFilePresent": true,
9
+ "mcpSmokePasses": true,
10
+ "readmeExists": true,
11
+ }}}
12
+
13
+ test_compliant_release_readiness_has_no_violations {
14
+ violations := cli_release_readiness.violations with input as compliant_input
15
+ count(violations) == 0
16
+ }
17
+
18
+ test_build_failure_is_rejected {
19
+ i := json.patch(compliant_input, [{"op": "replace", "path": "/satellite/releaseReadiness/buildPasses", "value": false}])
20
+ violations := cli_release_readiness.violations with input as i
21
+ violations[_].id == "CLI-RR-01"
22
+ }
23
+
24
+ test_tests_failure_is_rejected {
25
+ i := json.patch(compliant_input, [{"op": "replace", "path": "/satellite/releaseReadiness/testsPass", "value": false}])
26
+ violations := cli_release_readiness.violations with input as i
27
+ violations[_].id == "CLI-RR-02"
28
+ }
29
+
30
+ test_missing_lock_file_is_rejected {
31
+ i := json.patch(compliant_input, [{"op": "replace", "path": "/satellite/releaseReadiness/lockFilePresent", "value": false}])
32
+ violations := cli_release_readiness.violations with input as i
33
+ violations[_].id == "CLI-RR-03"
34
+ }
35
+
36
+ test_mcp_smoke_failure_is_rejected {
37
+ i := json.patch(compliant_input, [{"op": "replace", "path": "/satellite/releaseReadiness/mcpSmokePasses", "value": false}])
38
+ violations := cli_release_readiness.violations with input as i
39
+ violations[_].id == "CLI-RR-04"
40
+ }
41
+
42
+ test_missing_readme_is_rejected {
43
+ i := json.patch(compliant_input, [{"op": "replace", "path": "/satellite/releaseReadiness/readmeExists", "value": false}])
44
+ violations := cli_release_readiness.violations with input as i
45
+ violations[_].id == "CLI-RR-05"
46
+ }
@@ -0,0 +1,95 @@
1
+ package evolith.compliance_baseline
2
+
3
+ # ---------------------------------------------------------------------------
4
+ # Native counterpart: rulesets/compliance-baseline/compliance-baseline.rules.json
5
+ # CB-VAL-*: format validation (evolith.yaml structure)
6
+ # CB-01..05: semantic validation (implementation evidence per pillar)
7
+ # Dual-Engine Parity: R-25
8
+ # ---------------------------------------------------------------------------
9
+
10
+ required_pillars := {"agnosticBaseline", "referenceBlueprint", "engineeringManifesto", "definitionOfDone", "repositoryTaxonomy"}
11
+
12
+ # ---------------------------------------------------------------------------
13
+ # CB-VAL: Format validation — evolith.yaml compliance section structure
14
+ # ---------------------------------------------------------------------------
15
+
16
+ violations[{"id": "CB-VAL-01", "message": msg}] {
17
+ missing := required_pillars - {p | p := object.keys(input.spec.compliance)[_]}
18
+ count(missing) > 0
19
+ msg := sprintf("Missing compliance pillars: %v", [concat(", ", missing)])
20
+ }
21
+
22
+ violations[{"id": "CB-VAL-02", "message": msg}] {
23
+ pillar := required_pillars[_]
24
+ val := input.spec.compliance[pillar]
25
+ not is_string(val)
26
+ msg := sprintf("Pillar '%s' reference must be a non-empty string", [pillar])
27
+ }
28
+
29
+ violations[{"id": "CB-VAL-02", "message": msg}] {
30
+ pillar := required_pillars[_]
31
+ val := input.spec.compliance[pillar]
32
+ is_string(val)
33
+ count(val) == 0
34
+ msg := sprintf("Pillar '%s' reference must be a non-empty string", [pillar])
35
+ }
36
+
37
+ # ---------------------------------------------------------------------------
38
+ # CB-01: Agnostic Baseline — technology selection validated
39
+ # Checks that agnosticBaseline pillar is declared in evolith.yaml compliance.
40
+ # Deep content validation (approved package list) is performed by the CLI.
41
+ # ---------------------------------------------------------------------------
42
+
43
+ violations[{"id": "CB-01", "message": "Technology selection must be validated against Agnostic Baseline. Declare spec.compliance.agnosticBaseline in evolith.yaml pointing to the authoritative tech stack document."}] {
44
+ not input.spec.compliance.agnosticBaseline
45
+ }
46
+
47
+ # ---------------------------------------------------------------------------
48
+ # CB-02: Reference Blueprint — architecture traceable to Blueprint
49
+ # ---------------------------------------------------------------------------
50
+
51
+ violations[{"id": "CB-02", "message": "Product architecture must be traceable to the Reference Blueprint. Declare spec.compliance.referenceBlueprint in evolith.yaml."}] {
52
+ not input.spec.compliance.referenceBlueprint
53
+ }
54
+
55
+ # ---------------------------------------------------------------------------
56
+ # CB-03: Engineering Manifesto — principles enforced via linting
57
+ # Also checks that the satellite has at least one linting workflow configured.
58
+ # ---------------------------------------------------------------------------
59
+
60
+ violations[{"id": "CB-03", "message": "Engineering Manifesto principles must be enforced. Declare spec.compliance.engineeringManifesto in evolith.yaml."}] {
61
+ not input.spec.compliance.engineeringManifesto
62
+ }
63
+
64
+ violations[{"id": "CB-03", "message": "Engineering Manifesto requires linting enforcement. No CI workflow containing 'lint' detected in satellite .github/workflows/."}] {
65
+ input.spec.compliance.engineeringManifesto
66
+ not any_workflow_has_lint
67
+ }
68
+
69
+ any_workflow_has_lint if {
70
+ wf := input.satellite.workflows[_]
71
+ contains(wf, "lint")
72
+ }
73
+
74
+ # ---------------------------------------------------------------------------
75
+ # CB-04: Definition of Done — satisfied before story closure
76
+ # ---------------------------------------------------------------------------
77
+
78
+ violations[{"id": "CB-04", "message": "Definition of Done must be satisfied before story closure. Declare spec.compliance.definitionOfDone in evolith.yaml."}] {
79
+ not input.spec.compliance.definitionOfDone
80
+ }
81
+
82
+ # ---------------------------------------------------------------------------
83
+ # CB-05: Repository Taxonomy — structure follows Taxonomy rules
84
+ # Checks that satellite has the minimum required top-level directories.
85
+ # ---------------------------------------------------------------------------
86
+
87
+ violations[{"id": "CB-05", "message": "Repository structure must follow Taxonomy rules. Declare spec.compliance.repositoryTaxonomy in evolith.yaml."}] {
88
+ not input.spec.compliance.repositoryTaxonomy
89
+ }
90
+
91
+ violations[{"id": "CB-05", "message": "Repository Taxonomy requires 'src' directory. Satellite is missing expected top-level directory."}] {
92
+ input.spec.compliance.repositoryTaxonomy
93
+ satellite_dirs := {d | d := input.satellite.directories[_]}
94
+ not satellite_dirs["src"]
95
+ }
@@ -0,0 +1,89 @@
1
+ package evolith.compliance_baseline_test
2
+
3
+ import data.evolith.compliance_baseline
4
+
5
+ test_compliant_baseline_has_no_violations {
6
+ violations := compliance_baseline.violations with input as {
7
+ "spec": {
8
+ "compliance": {
9
+ "agnosticBaseline": "reference/agnostic-baseline.md",
10
+ "referenceBlueprint": "reference/blueprint.md",
11
+ "engineeringManifesto": "reference/engineering-manifesto.md",
12
+ "definitionOfDone": "reference/dod.md",
13
+ "repositoryTaxonomy": "reference/taxonomy.md"
14
+ }
15
+ }
16
+ }
17
+ count(violations) == 0
18
+ }
19
+
20
+ test_missing_pillar_is_violation {
21
+ violations := compliance_baseline.violations with input as {
22
+ "spec": {
23
+ "compliance": {
24
+ "agnosticBaseline": "reference/agnostic-baseline.md",
25
+ "referenceBlueprint": "reference/blueprint.md",
26
+ "engineeringManifesto": "reference/engineering-manifesto.md",
27
+ "definitionOfDone": "reference/dod.md"
28
+ }
29
+ }
30
+ }
31
+ violations[_].id == "CB-VAL-01"
32
+ }
33
+
34
+ test_empty_pillar_reference_is_violation {
35
+ violations := compliance_baseline.violations with input as {
36
+ "spec": {
37
+ "compliance": {
38
+ "agnosticBaseline": "reference/agnostic-baseline.md",
39
+ "referenceBlueprint": "",
40
+ "engineeringManifesto": "reference/engineering-manifesto.md",
41
+ "definitionOfDone": "reference/dod.md",
42
+ "repositoryTaxonomy": "reference/taxonomy.md"
43
+ }
44
+ }
45
+ }
46
+ violations[_].id == "CB-VAL-02"
47
+ }
48
+
49
+ test_non_string_pillar_reference_is_violation {
50
+ violations := compliance_baseline.violations with input as {
51
+ "spec": {
52
+ "compliance": {
53
+ "agnosticBaseline": "reference/agnostic-baseline.md",
54
+ "referenceBlueprint": 123,
55
+ "engineeringManifesto": "reference/engineering-manifesto.md",
56
+ "definitionOfDone": "reference/dod.md",
57
+ "repositoryTaxonomy": "reference/taxonomy.md"
58
+ }
59
+ }
60
+ }
61
+ violations[_].id == "CB-VAL-02"
62
+ }
63
+
64
+ test_multiple_missing_pillars {
65
+ violations := compliance_baseline.violations with input as {
66
+ "spec": {
67
+ "compliance": {
68
+ "agnosticBaseline": "ref.md"
69
+ }
70
+ }
71
+ }
72
+ count(violations) >= 1
73
+ violations[_].id == "CB-VAL-01"
74
+ }
75
+
76
+ test_all_empty_references {
77
+ violations := compliance_baseline.violations with input as {
78
+ "spec": {
79
+ "compliance": {
80
+ "agnosticBaseline": "",
81
+ "referenceBlueprint": "",
82
+ "engineeringManifesto": "",
83
+ "definitionOfDone": "",
84
+ "repositoryTaxonomy": ""
85
+ }
86
+ }
87
+ }
88
+ count(violations) == 5
89
+ }
@@ -0,0 +1,42 @@
1
+ package evolith.dod
2
+
3
+ violations[{"id": "DOD-01", "message": "Code review count must be >= 1"}] {
4
+ input.story.reviewCount < 1
5
+ }
6
+
7
+ violations[{"id": "DOD-02", "message": "Test coverage must be >= 80%"}] {
8
+ input.story.coveragePercent < 80
9
+ }
10
+
11
+ violations[{"id": "DOD-03", "message": "Acceptance criteria must be verified"}] {
12
+ not input.story.acceptanceCriteriaVerified
13
+ }
14
+
15
+ violations[{"id": "DOD-04", "message": "Documentation must be updated"}] {
16
+ not input.story.documentationUpdated
17
+ }
18
+
19
+ violations[{"id": "DOD-05", "message": "Observability instrumentation must be added"}] {
20
+ not input.story.observabilityAdded
21
+ }
22
+
23
+ violations[{"id": "DOD-06", "message": "Security gates must pass"}] {
24
+ not input.story.securityGatesPassed
25
+ }
26
+
27
+ violations[{"id": "DOD-07", "message": "ADR must be created when architectural decision is made"}] {
28
+ input.story.architecturalDecisionMade
29
+ not input.story.adrCreated
30
+ }
31
+
32
+ violations[{"id": "DOD-08", "message": "Integration tests must be passing"}] {
33
+ not input.story.integrationTestsPassing
34
+ }
35
+
36
+ violations[{"id": "DOD-09", "message": "Linting must pass"}] {
37
+ not input.story.lintPassing
38
+ }
39
+
40
+ violations[{"id": "DOD-10", "message": "CI pipeline must be green"}] {
41
+ not input.story.ciGreen
42
+ }
@@ -0,0 +1,250 @@
1
+ package evolith.dod_test
2
+
3
+ import data.evolith.dod
4
+
5
+ test_compliant_story_has_no_violations {
6
+ violations := dod.violations with input as {
7
+ "story": {
8
+ "reviewCount": 2,
9
+ "coveragePercent": 90,
10
+ "acceptanceCriteriaVerified": true,
11
+ "documentationUpdated": true,
12
+ "observabilityAdded": true,
13
+ "securityGatesPassed": true,
14
+ "architecturalDecisionMade": false,
15
+ "adrCreated": false,
16
+ "integrationTestsPassing": true,
17
+ "lintPassing": true,
18
+ "ciGreen": true
19
+ }
20
+ }
21
+ count(violations) == 0
22
+ }
23
+
24
+ test_missing_code_review_is_violation {
25
+ violations := dod.violations with input as {
26
+ "story": {
27
+ "reviewCount": 0,
28
+ "coveragePercent": 90,
29
+ "acceptanceCriteriaVerified": true,
30
+ "documentationUpdated": true,
31
+ "observabilityAdded": true,
32
+ "securityGatesPassed": true,
33
+ "architecturalDecisionMade": false,
34
+ "adrCreated": false,
35
+ "integrationTestsPassing": true,
36
+ "lintPassing": true,
37
+ "ciGreen": true
38
+ }
39
+ }
40
+ violations[_].id == "DOD-01"
41
+ }
42
+
43
+ test_low_coverage_is_violation {
44
+ violations := dod.violations with input as {
45
+ "story": {
46
+ "reviewCount": 1,
47
+ "coveragePercent": 60,
48
+ "acceptanceCriteriaVerified": true,
49
+ "documentationUpdated": true,
50
+ "observabilityAdded": true,
51
+ "securityGatesPassed": true,
52
+ "architecturalDecisionMade": false,
53
+ "adrCreated": false,
54
+ "integrationTestsPassing": true,
55
+ "lintPassing": true,
56
+ "ciGreen": true
57
+ }
58
+ }
59
+ violations[_].id == "DOD-02"
60
+ }
61
+
62
+ test_acceptance_criteria_not_verified_is_violation {
63
+ violations := dod.violations with input as {
64
+ "story": {
65
+ "reviewCount": 1,
66
+ "coveragePercent": 85,
67
+ "acceptanceCriteriaVerified": false,
68
+ "documentationUpdated": true,
69
+ "observabilityAdded": true,
70
+ "securityGatesPassed": true,
71
+ "architecturalDecisionMade": false,
72
+ "adrCreated": false,
73
+ "integrationTestsPassing": true,
74
+ "lintPassing": true,
75
+ "ciGreen": true
76
+ }
77
+ }
78
+ violations[_].id == "DOD-03"
79
+ }
80
+
81
+ test_documentation_not_updated_is_violation {
82
+ violations := dod.violations with input as {
83
+ "story": {
84
+ "reviewCount": 1,
85
+ "coveragePercent": 85,
86
+ "acceptanceCriteriaVerified": true,
87
+ "documentationUpdated": false,
88
+ "observabilityAdded": true,
89
+ "securityGatesPassed": true,
90
+ "architecturalDecisionMade": false,
91
+ "adrCreated": false,
92
+ "integrationTestsPassing": true,
93
+ "lintPassing": true,
94
+ "ciGreen": true
95
+ }
96
+ }
97
+ violations[_].id == "DOD-04"
98
+ }
99
+
100
+ test_observability_not_added_is_violation {
101
+ violations := dod.violations with input as {
102
+ "story": {
103
+ "reviewCount": 1,
104
+ "coveragePercent": 85,
105
+ "acceptanceCriteriaVerified": true,
106
+ "documentationUpdated": true,
107
+ "observabilityAdded": false,
108
+ "securityGatesPassed": true,
109
+ "architecturalDecisionMade": false,
110
+ "adrCreated": false,
111
+ "integrationTestsPassing": true,
112
+ "lintPassing": true,
113
+ "ciGreen": true
114
+ }
115
+ }
116
+ violations[_].id == "DOD-05"
117
+ }
118
+
119
+ test_security_gates_not_passed_is_violation {
120
+ violations := dod.violations with input as {
121
+ "story": {
122
+ "reviewCount": 1,
123
+ "coveragePercent": 85,
124
+ "acceptanceCriteriaVerified": true,
125
+ "documentationUpdated": true,
126
+ "observabilityAdded": true,
127
+ "securityGatesPassed": false,
128
+ "architecturalDecisionMade": false,
129
+ "adrCreated": false,
130
+ "integrationTestsPassing": true,
131
+ "lintPassing": true,
132
+ "ciGreen": true
133
+ }
134
+ }
135
+ violations[_].id == "DOD-06"
136
+ }
137
+
138
+ test_architectural_decision_without_adr_is_violation {
139
+ violations := dod.violations with input as {
140
+ "story": {
141
+ "reviewCount": 1,
142
+ "coveragePercent": 85,
143
+ "acceptanceCriteriaVerified": true,
144
+ "documentationUpdated": true,
145
+ "observabilityAdded": true,
146
+ "securityGatesPassed": true,
147
+ "architecturalDecisionMade": true,
148
+ "adrCreated": false,
149
+ "integrationTestsPassing": true,
150
+ "lintPassing": true,
151
+ "ciGreen": true
152
+ }
153
+ }
154
+ violations[_].id == "DOD-07"
155
+ }
156
+
157
+ test_architectural_decision_with_adr_is_not_violation {
158
+ violations := dod.violations with input as {
159
+ "story": {
160
+ "reviewCount": 1,
161
+ "coveragePercent": 85,
162
+ "acceptanceCriteriaVerified": true,
163
+ "documentationUpdated": true,
164
+ "observabilityAdded": true,
165
+ "securityGatesPassed": true,
166
+ "architecturalDecisionMade": true,
167
+ "adrCreated": true,
168
+ "integrationTestsPassing": true,
169
+ "lintPassing": true,
170
+ "ciGreen": true
171
+ }
172
+ }
173
+ count(violations) == 0
174
+ }
175
+
176
+ test_integration_tests_not_passing_is_violation {
177
+ violations := dod.violations with input as {
178
+ "story": {
179
+ "reviewCount": 1,
180
+ "coveragePercent": 85,
181
+ "acceptanceCriteriaVerified": true,
182
+ "documentationUpdated": true,
183
+ "observabilityAdded": true,
184
+ "securityGatesPassed": true,
185
+ "architecturalDecisionMade": false,
186
+ "adrCreated": false,
187
+ "integrationTestsPassing": false,
188
+ "lintPassing": true,
189
+ "ciGreen": true
190
+ }
191
+ }
192
+ violations[_].id == "DOD-08"
193
+ }
194
+
195
+ test_lint_not_passing_is_violation {
196
+ violations := dod.violations with input as {
197
+ "story": {
198
+ "reviewCount": 1,
199
+ "coveragePercent": 85,
200
+ "acceptanceCriteriaVerified": true,
201
+ "documentationUpdated": true,
202
+ "observabilityAdded": true,
203
+ "securityGatesPassed": true,
204
+ "architecturalDecisionMade": false,
205
+ "adrCreated": false,
206
+ "integrationTestsPassing": true,
207
+ "lintPassing": false,
208
+ "ciGreen": true
209
+ }
210
+ }
211
+ violations[_].id == "DOD-09"
212
+ }
213
+
214
+ test_ci_not_green_is_violation {
215
+ violations := dod.violations with input as {
216
+ "story": {
217
+ "reviewCount": 1,
218
+ "coveragePercent": 85,
219
+ "acceptanceCriteriaVerified": true,
220
+ "documentationUpdated": true,
221
+ "observabilityAdded": true,
222
+ "securityGatesPassed": true,
223
+ "architecturalDecisionMade": false,
224
+ "adrCreated": false,
225
+ "integrationTestsPassing": true,
226
+ "lintPassing": true,
227
+ "ciGreen": false
228
+ }
229
+ }
230
+ violations[_].id == "DOD-10"
231
+ }
232
+
233
+ test_multiple_violations_detected {
234
+ violations := dod.violations with input as {
235
+ "story": {
236
+ "reviewCount": 0,
237
+ "coveragePercent": 50,
238
+ "acceptanceCriteriaVerified": false,
239
+ "documentationUpdated": false,
240
+ "observabilityAdded": false,
241
+ "securityGatesPassed": false,
242
+ "architecturalDecisionMade": false,
243
+ "adrCreated": false,
244
+ "integrationTestsPassing": false,
245
+ "lintPassing": false,
246
+ "ciGreen": false
247
+ }
248
+ }
249
+ count(violations) == 9
250
+ }
@@ -0,0 +1,78 @@
1
+ package evolith.engineering_manifesto
2
+
3
+ violations[{"id": "EM-S-01", "message": msg}] {
4
+ input.classLineCount > 200
5
+ msg := sprintf("Class exceeds 200 lines (%d lines found)", [input.classLineCount])
6
+ }
7
+
8
+ violations[{"id": "EM-S-03", "message": msg}] {
9
+ input.liskovViolations > 0
10
+ msg := sprintf("Liskov Substitution violations detected (%d found)", [input.liskovViolations])
11
+ }
12
+
13
+ violations[{"id": "EM-S-05", "message": "Domain layer must not import Infrastructure layer"}] {
14
+ input.domainImportsInfrastructure
15
+ }
16
+
17
+ violations[{"id": "EM-K-01", "message": msg}] {
18
+ input.maxCyclomaticComplexity > 15
19
+ msg := sprintf("Cyclomatic complexity exceeds 15 (found %d)", [input.maxCyclomaticComplexity])
20
+ }
21
+
22
+ violations[{"id": "AP-01", "message": msg}] {
23
+ input.classLineCount > 500
24
+ msg := sprintf("God class detected: %d lines exceeds 500-line threshold", [input.classLineCount])
25
+ }
26
+
27
+ violations[{"id": "AP-01", "message": msg}] {
28
+ input.classMethodCount > 20
29
+ msg := sprintf("God class detected: %d methods exceeds 20-method threshold", [input.classMethodCount])
30
+ }
31
+
32
+ violations[{"id": "AP-02", "message": "Circular dependency detected"}] {
33
+ input.circularDependencies
34
+ }
35
+
36
+ violations[{"id": "AP-03", "message": msg}] {
37
+ input.shotgunSurgerySignals > 0
38
+ msg := sprintf("Shotgun Surgery detected: one change requires modifying %d different classes (%d signals found)", [input.shotgunSurgeryClassCount, input.shotgunSurgerySignals])
39
+ }
40
+
41
+ violations[{"id": "AP-04", "message": msg}] {
42
+ input.spaghettiCodeSignals > 0
43
+ msg := sprintf("Spaghetti Code detected: complex nested control structures found (%d signals)", [input.spaghettiCodeSignals])
44
+ }
45
+
46
+ violations[{"id": "AP-05", "message": msg}] {
47
+ input.magicNumbersCount > 0
48
+ msg := sprintf("Magic numbers detected (%d found)", [input.magicNumbersCount])
49
+ }
50
+
51
+ violations[{"id": "EM-S-02", "message": "Open/Closed Principle violated — class modified directly for new behavior instead of extending via interface or inheritance"}] {
52
+ input.openClosedViolations > 0
53
+ }
54
+
55
+ violations[{"id": "EM-S-04", "message": msg}] {
56
+ input.interfaceSegregationViolations > 0
57
+ msg := sprintf("Interface Segregation violated: %d fat interfaces found with methods unused by implementing classes", [input.interfaceSegregationViolations])
58
+ }
59
+
60
+ violations[{"id": "EM-D-01", "message": msg}] {
61
+ input.duplicateCodeRatio > 5
62
+ msg := sprintf("DRY violation: duplicate code ratio is %v%% (threshold: 5%%)", [input.duplicateCodeRatio])
63
+ }
64
+
65
+ violations[{"id": "EM-D-02", "message": msg}] {
66
+ input.duplicateConfigCount > 0
67
+ msg := sprintf("Configuration duplication detected: %d configuration values hardcoded in multiple locations", [input.duplicateConfigCount])
68
+ }
69
+
70
+ violations[{"id": "EM-K-02", "message": msg}] {
71
+ input.prematureAbstractionSignals > 0
72
+ msg := sprintf("Premature abstraction detected: %d abstractions with only one concrete use", [input.prematureAbstractionSignals])
73
+ }
74
+
75
+ violations[{"id": "EM-Y-01", "message": msg}] {
76
+ input.yagniViolations > 0
77
+ msg := sprintf("YAGNI violation: %d unused features or abstractions implemented ahead of actual need", [input.yagniViolations])
78
+ }