@evolith/core-domain 1.0.0 → 1.0.1

package/rulesets/acl/anti-corruption-layer.rules.json

@@ -0,0 +1,99 @@
+{
+  "$schema": "../schema/ruleset-standard.schema.json",
+  "$id": "https://evolith.dev/rulesets/acl/anti-corruption-layer.rules.json",
+  "title": "Anti-Corruption Layer (ACL) Rules",
+  "description": "Rules governing integration with external systems (Jira, Trello, Linear, GitHub, Confluence). ACLs normalize and validate external data against Core artifacts, preventing external chaos from contaminating Evolith governance.",
+  "version": "1.0.0",
+  "effectiveDate": "2026-06-06",
+  "scope": "all",
+  "category": "anti-corruption",
+  "principles": [
+    {
+      "id": "ACL-01",
+      "principle": "Schema Validation Before Ingestion",
+      "statement": "All external data ingested into a satellite product MUST be validated against Evolith Core schemas before entering the governance model. Unvalidated data MUST be rejected.",
+      "rationale": "Without schema validation, external systems can introduce non-compliant entities that violate Core definitions. ACL acts as the gatekeeper.",
+      "severity": "MUST",
+      "validationQuery": "ACL implementation validates incoming payloads against Core JSON schemas (evolith-yaml.schema.json, artifact schemas). Invalid payloads return error and are logged.",
+      "blocking": true,
+      "references": [
+        "reference/governance/standards/vision/evolith-product-vision-master.md#32-anticorruption-layers-acls"
+      ]
+    },
+    {
+      "id": "ACL-02",
+      "principle": "Transformation Traceability",
+      "statement": "Every transformation applied to external data MUST preserve traceability to the original external source entity. Audit trail MUST be maintained.",
+      "rationale": "When data is normalized, the original source must remain traceable for debugging, compliance, and impact analysis. Transformations without traceability create invisible data mutations.",
+      "severity": "MUST",
+      "validationQuery": "ACL transformation logs record: externalSourceId, externalSystem, transformationType, transformedToEntityId, timestamp. Logs retained per data retention policy.",
+      "blocking": true,
+      "references": [
+        "reference/governance/standards/vision/evolith-product-vision-master.md#32-anticorruption-layers-acls"
+      ]
+    },
+    {
+      "id": "ACL-03",
+      "principle": "Reject Non-Compliant Data",
+      "statement": "Non-compliant data MUST be rejected, not normalized or silently adapted. ACL implementations MUST NOT perform silent data transformation to make external data fit Core schemas.",
+      "rationale": "Silent normalization hides governance gaps and creates technical debt. Rejection forces upstream systems to fix data quality at the source.",
+      "severity": "MUST",
+      "validationQuery": "ACL rejects non-compliant payloads with explicit error message identifying: field, expected format, actual value, external system origin. Rejection events are counted in governance metrics.",
+      "blocking": true,
+      "references": [
+        "reference/governance/standards/vision/evolith-product-vision-master.md#32-anticorruption-layers-acls"
+      ]
+    },
+    {
+      "id": "ACL-04",
+      "principle": "ACL Version Synchronization with Core",
+      "statement": "ACL implementations MUST be versioned alongside Evolith Core evolution. When Core schemas change, all ACL implementations MUST update before or at the same release.",
+      "rationale": "Version drift between ACL and Core creates incompatibility where external data appears valid but fails governance rules. ACL and Core must evolve in lock-step.",
+      "severity": "MUST",
+      "validationQuery": "ACL implementation declares coreCompatibilityVersion in its metadata. Validator checks ACL version is compatible with Core pinned version in evolith.yaml.",
+      "blocking": true,
+      "references": [
+        "reference/governance/standards/vision/evolith-product-vision-master.md#32-anticorruption-layers-acls"
+      ]
+    },
+    {
+      "id": "ACL-05",
+      "principle": "Explicit Contract Required",
+      "statement": "Integration with external systems MUST use explicit contracts (API specs, webhook payloads, export schemas) documented and reviewed against Core definitions before implementation.",
+      "rationale": "Ad-hoc integrations without contracts create implicit dependencies that break silently when external systems change.",
+      "severity": "SHOULD",
+      "validationQuery": "ACL integration documentation includes: externalSystem, contractVersion, mappedCoreEntities, transformationMatrix. Contract reviewed by Architecture Board if touching multiple bounded contexts.",
+      "blocking": false,
+      "references": [
+        "reference/governance/standards/vision/evolith-product-vision-master.md#32-anticorruption-layers-acls"
+      ]
+    },
+    {
+      "id": "ACL-06",
+      "principle": "Isolate External Dependencies",
+      "statement": "ACL implementations MUST be isolated from domain logic. ACL code lives in Infrastructure/Adapters layer, never in Domain entities or application services.",
+      "rationale": "Domain purity requires zero external system references. ACL is the translation layer that keeps the Domain clean.",
+      "severity": "MUST",
+      "validationQuery": "Code analysis shows no imports from Jira, Trello, Linear, or similar external SDKs in Domain layer. ACL implementations are in /adapters or /infrastructure folders only.",
+      "blocking": true,
+      "references": [
+        "rulesets/adr/adr-0002-hexagonal-architecture.rules.json",
+        "reference/architecture/adrs/core/0002-hexagonal-architecture.md"
+      ]
+    }
+  ],
+  "governance": {
+    "complianceVerification": "ACL rules verified by impact-analysis-synchronizer.mjs during pre-commit when ACL directory or external integration files change.",
+    "exceptionProcess": "Architecture Board exception required for any ACL that performs silent normalization (violates ACL-03). Exception documents business justification and data quality remediation plan.",
+    "metrics": [
+      "acl.rejected.count — rejected payload count per external system",
+      "acl.transformed.count — successful transformations per entity type",
+      "acl.version.drift — Core vs ACL version delta",
+      "acl.integration.count — number of active external integrations"
+    ]
+  },
+  "bilingual": {
+    "en": "Anti-Corruption Layer (ACL) Rules",
+    "es": "Reglas de Capa Anti-Corrupción (ACL)"
+  }
+}

package/rulesets/adr/ADR_COVERAGE.es.md

@@ -0,0 +1,133 @@
+# Cobertura ADR → Ruleset
+
+Índice generado automáticamente que mapea cada ADR a su ruleset ejecutable o advisory. **No editar a mano** — regenerar con `node .harness/scripts/generate-adr-coverage.mjs`.
+
+## Totales
+
+| | |
+|---|---|
+| ADRs totales | 115 |
+| Artesanales (handcrafted) | 7 |
+| Generados ejecutables (executable) | 79 |
+| Generados advisory | 29 |
+| Cobertura | **100.0%** |
+
+**Enforcement**: `handcrafted` = ruleset artesanal; `executable` = reglas verificables por máquina (lint/CI/análisis estático); `advisory` = decisión de diseño, requiere atestación manual.
+
+| ADR ID | Track | Título | Status | Enforcement | Ruleset |
+|---|---|---|---|---|---|
+| ADR-0001 | ai-augmented | Harness Engineering for AI-Augmented Development | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0001-harness-engineering-for-ai-augmented-development.rules.json` |
+| ADR-0002 | ai-augmented | MCP Integration Protocol for Agent Tool Invocation | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0002-mcp-integration-protocol-for-agent-tool-invocation.rules.json` |
+| ADR-0003 | ai-augmented | Model Selection Governance for AI-Augmented Workflows | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0003-model-selection-governance-for-ai-augmented-workflows.rules.json` |
+| ADR-0004 | ai-augmented | AGENTS.md as Mandatory Repository Artifact | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0004-agents-md-as-mandatory-repository-artifact.rules.json` |
+| ADR-0005 | ai-augmented | Human-in-the-Loop Policy for Autonomous Agent Operations | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0005-human-in-the-loop-policy-for-autonomous-agent-operations.rules.json` |
+| ADR-0042 | android | Canonical Android Native Mobile Architecture | Approved | executable | `rulesets/adr/generated/adr-android-0042-canonical-android-native-mobile-architecture.rules.json` |
+| ADR-0001 | core | Monorepo Orchestration Principle | Approved | executable | `rulesets/adr/generated/adr-0001-monorepo-orchestration-principle.rules.json` |
+| ADR-0005 | core | Automated SAST Quality Gates in CI/CD | Approved | handcrafted | `rulesets/adr/adr-0005-cicd-quality-gates.rules.json` |
+| ADR-0006 | core | Microservices Transition via Sidecar Pattern | Approved - Backlog (Phase 3 Milestone) | executable | `rulesets/adr/generated/adr-0006-microservices-transition-via-sidecar-pattern.rules.json` |
+| ADR-0009 | core | Strict Dependency Pinning and Automated Vulnerability Management | Approved | executable | `rulesets/adr/generated/adr-0009-strict-dependency-pinning-and-automated-vulnerability-manage.rules.json` |
+| ADR-0010 | core | Multi-Tenancy Architecture Strategy for SaaS Evolution | Approved | handcrafted | `rulesets/adr/adr-0010-multi-tenancy.rules.json` |
+| ADR-0011 | core | Fault Tolerance and Resiliency Patterns | Approved | executable | `rulesets/adr/generated/adr-0011-fault-tolerance-and-resiliency-patterns.rules.json` |
+| ADR-0013 | core | Cloud Infrastructure Topology and Disaster Recovery (DR) | Approved | advisory | `rulesets/adr/generated/adr-0013-cloud-infrastructure-topology-and-disaster-recovery-dr.rules.json` |
+| ADR-0014 | core | Multi-Layer Distributed Caching Strategy | Approved | executable | `rulesets/adr/generated/adr-0014-multi-layer-distributed-caching-strategy.rules.json` |
+| ADR-0015 | core | Event-Driven Architecture (EDA) for Intra-Domain Communication | Approved | executable | `rulesets/adr/generated/adr-0015-event-driven-architecture-eda-for-intra-domain-communication.rules.json` |
+| ADR-0016 | core | Immutable Business Audit Trail and Change Tracking | Approved | executable | `rulesets/adr/generated/adr-0016-immutable-business-audit-trail-and-change-tracking.rules.json` |
+| ADR-0017 | core | Feature Flagging Strategy for Progressive Delivery | Approved | advisory | `rulesets/adr/generated/adr-0017-feature-flagging-strategy-for-progressive-delivery.rules.json` |
+| ADR-0018 | core | Testing Pyramid and Automated Quality Gates | Approved | handcrafted | `rulesets/adr/adr-0018-testing-pyramid.rules.json` |
+| ADR-0019 | core | Tactical Design Patterns for Future-Proofing | Approved | executable | `rulesets/adr/generated/adr-0019-tactical-design-patterns-for-future-proofing.rules.json` |
+| ADR-0020 | core | Identity Provider Abstraction Strategy | Approved | advisory | `rulesets/adr/generated/adr-0020-identity-provider-abstraction-strategy.rules.json` |
+| ADR-0024 | core | Centralized Configuration & Feature Platform | Approved | advisory | `rulesets/adr/generated/adr-0024-centralized-configuration-feature-platform.rules.json` |
+| ADR-0025 | core | Feature Flag Provider Abstraction Strategy | Approved | executable | `rulesets/adr/generated/adr-0025-feature-flag-provider-abstraction-strategy.rules.json` |
+| ADR-0028 | core | Self-Hosted, Open-Source Hybrid Infrastructure | Approved | executable | `rulesets/adr/generated/adr-0028-self-hosted-open-source-hybrid-infrastructure.rules.json` |
+| ADR-0030 | core | Two-Tier Distributed Gateway Model | Approved | advisory | `rulesets/adr/generated/adr-0030-two-tier-distributed-gateway-model.rules.json` |
+| ADR-0031 | core | Schema-per-Bounded-Context and Domain Event Catalog | Approved | executable | `rulesets/adr/generated/adr-0031-schema-per-bounded-context-and-domain-event-catalog.rules.json` |
+| ADR-0032 | core | API Protocol Selection Matrix (REST vs gRPC vs GraphQL) | Approved | handcrafted | `rulesets/adr/adr-0032-protocol-selection.rules.json` |
+| ADR-0033 | core | Transactional Outbox Pattern for Async Messaging | Proposed (Approved via Maturity Roadmap) | advisory | `rulesets/adr/generated/adr-0033-transactional-outbox-pattern-for-async-messaging.rules.json` |
+| ADR-0034 | core | CQRS Pattern Application Matrix | Approved | executable | `rulesets/adr/generated/adr-0034-cqrs-pattern-application-matrix.rules.json` |
+| ADR-0035 | core | Distributed Saga Pattern Implementation Strategy | Approved | executable | `rulesets/adr/generated/adr-0035-distributed-saga-pattern-implementation-strategy.rules.json` |
+| ADR-0036 | core | Message Bus Delivery & Flow Control Strategy | Approved | executable | `rulesets/adr/generated/adr-0036-message-bus-delivery-flow-control-strategy.rules.json` |
+| ADR-0037 | core | Enterprise Performance, Concurrency & Chaos Verification Strategy | Approved | advisory | `rulesets/adr/generated/adr-0037-enterprise-performance-concurrency-chaos-verification-strate.rules.json` |
+| ADR-0039 | core | Deployment Topology Abstraction & Environment Switcher | Approved | executable | `rulesets/adr/generated/adr-0039-deployment-topology-abstraction-environment-switcher.rules.json` |
+| ADR-0040 | core | Multi-Runtime Selection Matrix & Inter-Runtime Contracts | Approved | handcrafted | `rulesets/adr/adr-0040-multi-runtime.rules.json` |
+| ADR-0041 | core | Dual-Engine Policy Evaluation (Native + OPA) | Accepted | executable | `rulesets/adr/generated/adr-0041-dual-engine-policy-evaluation-native-opa.rules.json` |
+| ADR-0044 | core | Configurable Security Persistence Strategy (Agnosticism vs. Native RLS) | Proposed | executable | `rulesets/adr/generated/adr-0044-configurable-security-persistence-strategy-agnosticism-vs-na.rules.json` |
+| ADR-0045 | core | Microservice Extraction Readiness Criteria | Approved | executable | `rulesets/adr/generated/adr-0045-microservice-extraction-readiness-criteria.rules.json` |
+| ADR-0046 | core | Unified Traceability via W3C TraceContext | Approved | executable | `rulesets/adr/generated/adr-0046-unified-traceability-via-w3c-tracecontext.rules.json` |
+| ADR-0047 | core | Progressive Architecture Evolution Framework: Modular Monolith → Microservices | Approved | executable | `rulesets/adr/generated/adr-0047-progressive-architecture-evolution-framework-modular-monolit.rules.json` |
+| ADR-0048 | core | Enterprise Taxonomy Standardization and Reference Layout | Accepted | executable | `rulesets/adr/generated/adr-0048-enterprise-taxonomy-standardization-and-reference-layout.rules.json` |
+| ADR-0049 | core | Naming Semantics & Clean Code Policy (E2E and Global) | Accepted | executable | `rulesets/adr/generated/adr-0049-naming-semantics-clean-code-policy-e2e-and-global.rules.json` |
+| ADR-0050 | core | Gitflow Branching Strategy Standardization | Accepted | handcrafted | `rulesets/adr/adr-0050-gitflow-branching.rules.json` |
+| ADR-0051 | core | Enterprise Database Engine Selection Strategy | Approved | executable | `rulesets/adr/generated/adr-0051-enterprise-database-engine-selection-strategy.rules.json` |
+| ADR-0052 | core | Unit Testing Isolation Strategy (Mocks vs Stubs) | Approved | executable | `rulesets/adr/generated/adr-0052-unit-testing-isolation-strategy-mocks-vs-stubs.rules.json` |
+| ADR-0053 | core | Integration and E2E Testing Strategy | Approved | executable | `rulesets/adr/generated/adr-0053-integration-and-e2e-testing-strategy.rules.json` |
+| ADR-0054 | core | Database Design and Normalization Standards | Approved | executable | `rulesets/adr/generated/adr-0054-database-design-and-normalization-standards.rules.json` |
+| ADR-0055 | core | Microfrontends Architecture Strategy | Proposed (Phase 3 Readiness) | executable | `rulesets/adr/generated/adr-0055-microfrontends-architecture-strategy.rules.json` |
+| ADR-0056 | core | Enterprise Naming & Design Conventions - Multi-Language, Multi-Platform | Accepted — extends and expands the scope of ADR-0049 (Naming Semantics & Clean Code Policy) to all layers of the enterprise ecosystem (code, API, database, events, data warehouse, DDD tactical patterns). | executable | `rulesets/adr/generated/adr-0056-enterprise-naming-design-conventions-multi-language-multi-pl.rules.json` |
+| ADR-0057 | core | Architecture Intelligence Catalog | Accepted | advisory | `rulesets/adr/generated/adr-0057-architecture-intelligence-catalog.rules.json` |
+| ADR-0058 | core | AI-Consumable Architecture Knowledge | Accepted | advisory | `rulesets/adr/generated/adr-0058-ai-consumable-architecture-knowledge.rules.json` |
+| ADR-0067 | core | Modular Monolith Persistence Boundaries | Accepted | executable | `rulesets/adr/generated/adr-0067-modular-monolith-persistence-boundaries.rules.json` |
+| ADR-0068 | core | Documentation Release GitFlow | Proposed | executable | `rulesets/adr/generated/adr-0068-documentation-release-gitflow.rules.json` |
+| ADR-0069 | core | AI Agent Context Protocol Integration | Approved | advisory | `rulesets/adr/generated/adr-0069-ai-agent-context-protocol-integration.rules.json` |
+| ADR-0070 | core | Lean Root Repository Taxonomy | Accepted | executable | `rulesets/adr/generated/adr-0070-lean-root-repository-taxonomy.rules.json` |
+| ADR-0071 | core | Domain Layer Base Class and Inheritance Strategy | Accepted | executable | `rulesets/adr/generated/adr-0071-domain-layer-base-class-and-inheritance-strategy.rules.json` |
+| ADR-0072 | core | UTC Date Storage, Browser Timezone Detection, and Language Resolution | Accepted | executable | `rulesets/adr/generated/adr-0072-utc-date-storage-browser-timezone-detection-and-language-res.rules.json` |
+| ADR-0073 | core | Unified CLI/MCP Output Contract and Gate Evidence Schema | Approved — Evolith Architecture Board, 2026-06-10. Closes GT-01. | executable | `rulesets/adr/generated/adr-0073-unified-cli-mcp-output-contract-and-gate-evidence-schema.rules.json` |
+| ADR-0074 | core | Evolith Core API Native Exposure Layer | Approved — Evolith Architecture Board, 2026-06-13. | executable | `rulesets/adr/generated/adr-0074-evolith-core-api-native-exposure-layer.rules.json` |
+| ADR-0075 | core | Core API Authentication Strategy | Superseded by ADR-0080 | advisory | `rulesets/adr/generated/adr-0075-core-api-authentication-strategy.rules.json` |
+| ADR-0076 | core | Domain-Oriented Microservice Architecture (DOMA) | Approved — Evolith Architecture Board, 2026-06-14. | advisory | `rulesets/adr/generated/adr-0076-domain-oriented-microservice-architecture-doma.rules.json` |
+| ADR-0077 | core | MassTransit v9 Commercial Pivot — Stay on v8, Monitor OpenTransit | Approved — Evolith Architecture Board, 2026-06-15. | advisory | `rulesets/adr/generated/adr-0077-masstransit-v9-commercial-pivot-stay-on-v8-monitor-opentrans.rules.json` |
+| ADR-0078 | core | Domain Financial Separation Governance | Accepted | executable | `rulesets/adr/generated/adr-0078-domain-financial-separation-governance.rules.json` |
+| ADR-0079 | core | Multi-Topology Reference Corpus and Topology Manifest Contract | Approved — Evolith Architecture Board, 2026-06-18. | executable | `rulesets/adr/generated/adr-0079-multi-topology-reference-corpus-and-topology-manifest-contra.rules.json` |
+| ADR-0080 | core | Remote Repository Reference Contract | Approved — Evolith Architecture Board, 2026-06-19. | executable | `rulesets/adr/generated/adr-0080-remote-repository-reference-contract.rules.json` |
+| ADR-0081 | core | Agentic AI Sandbox Isolation Boundary | Accepted | executable | `rulesets/adr/generated/adr-0081-agentic-ai-sandbox-isolation-boundary.rules.json` |
+| ADR-0082 | core | Agentic AI Prompt, Context, and Tool Trust Boundary | Accepted | advisory | `rulesets/adr/generated/adr-0082-agentic-ai-prompt-context-and-tool-trust-boundary.rules.json` |
+| ADR-0083 | core | Agentic AI Action Authorization and Audit | Accepted | executable | `rulesets/adr/generated/adr-0083-agentic-ai-action-authorization-and-audit.rules.json` |
+| ADR-0084 | core | Data Mesh and Data as a Product | Accepted | executable | `rulesets/adr/generated/adr-0084-data-mesh-and-data-as-a-product.rules.json` |
+| ADR-0085 | core | Agnostic OPA Wasm Distribution Architecture | Accepted | executable | `rulesets/adr/generated/adr-0085-agnostic-opa-wasm-distribution-architecture.rules.json` |
+| ADR-0086 | core | Agentic AI Telemetry & Cost Control Standard | Accepted | advisory | `rulesets/adr/generated/adr-0086-agentic-ai-telemetry-cost-control-standard.rules.json` |
+| ADR-0087 | core | Attribute-Based Access Control (ABAC) for Agentic Tool Execution | Accepted | executable | `rulesets/adr/generated/adr-0087-attribute-based-access-control-abac-for-agentic-tool-executi.rules.json` |
+| ADR-0088 | core | Sovereign Identity for Agentic AI | Accepted | executable | `rulesets/adr/generated/adr-0088-sovereign-identity-for-agentic-ai.rules.json` |
+| ADR-0089 | core | Event-Driven Agentic Workflow Pattern | Accepted | advisory | `rulesets/adr/generated/adr-0089-event-driven-agentic-workflow-pattern.rules.json` |
+| ADR-0090 | core | RAG Knowledge Governance Standard | Accepted | executable | `rulesets/adr/generated/adr-0090-rag-knowledge-governance-standard.rules.json` |
+| ADR-0091 | core | Workload Identity Token Rotation Standard | Accepted | executable | `rulesets/adr/generated/adr-0091-workload-identity-token-rotation-standard.rules.json` |
+| ADR-0092 | core | Agent Infinite Loop Prevention and Circuit Breaker Rules | Accepted | executable | `rulesets/adr/generated/adr-0092-agent-infinite-loop-prevention-and-circuit-breaker-rules.rules.json` |
+| ADR-0093 | core | Concurrency Control and Resource Locking Standard for MCP Tools | Accepted | executable | `rulesets/adr/generated/adr-0093-concurrency-control-and-resource-locking-standard-for-mcp-to.rules.json` |
+| ADR-0094 | core | Multi-Agent Handoff and Task Delegation Standards | Accepted | executable | `rulesets/adr/generated/adr-0094-multi-agent-handoff-and-task-delegation-standards.rules.json` |
+| ADR-0095 | core | Serverless Architecture Governance | Accepted | executable | `rulesets/adr/generated/adr-0095-serverless-architecture-governance.rules.json` |
+| ADR-0096 | core | Edge Computing Architecture Governance | Accepted | executable | `rulesets/adr/generated/adr-0096-edge-computing-architecture-governance.rules.json` |
+| ADR-0097 | core | Knowledge Lifecycle Governance Standard | Accepted | executable | `rulesets/adr/generated/adr-0097-knowledge-lifecycle-governance-standard.rules.json` |
+| ADR-0098 | core | REST URI Versioning and Deprecation Policy | Accepted | executable | `rulesets/adr/generated/adr-0098-rest-uri-versioning-and-deprecation-policy.rules.json` |
+| ADR-0099 | core | OPA Bundle Distribution via S3 (MinIO) | Superseded by ADR 0085 | advisory | `rulesets/adr/generated/adr-0099-opa-bundle-distribution-via-s3-minio.rules.json` |
+| ADR-0041 | dotnet | Canonical .NET (C#) Backend Architecture | Approved | executable | `rulesets/adr/generated/adr-dotnet-0041-canonical-net-c-backend-architecture.rules.json` |
+| ADR-0060 | dotnet | .NET Multi-Tenancy Dual-Layer Strategy (EF Core & SQL Server) | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0060-net-multi-tenancy-dual-layer-strategy-ef-core-sql-server.rules.json` |
+| ADR-0061 | dotnet | Transactional Event Lifecycle in EF Core | Proposed | advisory | `rulesets/adr/generated/adr-dotnet-0061-transactional-event-lifecycle-in-ef-core.rules.json` |
+| ADR-0062 | dotnet | .NET Immutable Audit Trail via DDL Triggers & Delta Capture | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0062-net-immutable-audit-trail-via-ddl-triggers-delta-capture.rules.json` |
+| ADR-0063 | dotnet | B2B Request Idempotency Middleware in ASP.NET Core | Proposed | advisory | `rulesets/adr/generated/adr-dotnet-0063-b2b-request-idempotency-middleware-in-asp-net-core.rules.json` |
+| ADR-0064 | dotnet | .NET Request-Scope Observability Context Propagation | Accepted | executable | `rulesets/adr/generated/adr-dotnet-0064-net-request-scope-observability-context-propagation.rules.json` |
+| ADR-0065 | dotnet | .NET PII-Safe Structured Logging Pipeline (Serilog) | Accepted | executable | `rulesets/adr/generated/adr-dotnet-0065-net-pii-safe-structured-logging-pipeline-serilog.rules.json` |
+| ADR-0066 | dotnet | .NET Lightweight HTTP Idempotency via IMemoryCache / IDistributedCache | Accepted | advisory | `rulesets/adr/generated/adr-dotnet-0066-net-lightweight-http-idempotency-via-imemorycache-idistribut.rules.json` |
+| ADR-0069 | dotnet | .NET gRPC Service Setup & Protobuf Contracts | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0069-net-grpc-service-setup-protobuf-contracts.rules.json` |
+| ADR-0070 | dotnet | .NET API Endpoint Strategy | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0070-net-api-endpoint-strategy.rules.json` |
+| ADR-0071 | dotnet | .NET Data Access Strategy — EF Core as Default ORM, Dapper for Optimized Reads | \| Field \| Value \| | advisory | `rulesets/adr/generated/adr-dotnet-0071-net-data-access-strategy-ef-core-as-default-orm-dapper-for-o.rules.json` |
+| ADR-0072 | dotnet | .NET AOP Cross-Cutting Concern Strategy — DispatchProxy over Pipeline Behaviors | Accepted | executable | `rulesets/adr/generated/adr-dotnet-0072-net-aop-cross-cutting-concern-strategy-dispatchproxy-over-pi.rules.json` |
+| ADR-0002 | nodejs | Clean Hexagonal Architecture with NestJS | Approved | handcrafted | `rulesets/adr/adr-0002-hexagonal-architecture.rules.json` |
+| ADR-0003 | nodejs | Strict TypeScript Standards | Approved | executable | `rulesets/adr/generated/adr-nodejs-0003-strict-typescript-standards.rules.json` |
+| ADR-0004 | nodejs | Frontend Offline Resilience | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0004-frontend-offline-resilience.rules.json` |
+| ADR-0007 | nodejs | Observability with OpenTelemetry, Loki, and Jaeger | Approved | executable | `rulesets/adr/generated/adr-nodejs-0007-observability-with-opentelemetry-loki-and-jaeger.rules.json` |
+| ADR-0008 | nodejs | Progressive Multi-Module Evolution with API Gateway and BFF Patterns | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0008-progressive-multi-module-evolution-with-api-gateway-and-bff-.rules.json` |
+| ADR-0012 | nodejs | Advanced Authorization (RBAC/ABAC) Strategy | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0012-advanced-authorization-rbac-abac-strategy.rules.json` |
+| ADR-0021 | nodejs | High-Performance Authentication Graph Compilation | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0021-high-performance-authentication-graph-compilation.rules.json` |
+| ADR-0022 | nodejs | Contextual Authentication and Pluggable Output Projections | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0022-contextual-authentication-and-pluggable-output-projections.rules.json` |
+| ADR-0023 | nodejs | Centralized Authorization Core Strategy | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0023-centralized-authorization-core-strategy.rules.json` |
+| ADR-0026 | nodejs | Adaptive MFA and Passwordless Platform | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0026-adaptive-mfa-and-passwordless-platform.rules.json` |
+| ADR-0027 | nodejs | Dual-Protocol API Strategy (REST & gRPC) | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0027-dual-protocol-api-strategy-rest-grpc.rules.json` |
+| ADR-0029 | nodejs | Adoption of Tactical DDD Primitives Library | Approved | executable | `rulesets/adr/generated/adr-nodejs-0029-adoption-of-tactical-ddd-primitives-library.rules.json` |
+| ADR-0038 | nodejs | Enterprise Error Handling & Result Pattern Strategy | Approved | executable | `rulesets/adr/generated/adr-nodejs-0038-enterprise-error-handling-result-pattern-strategy.rules.json` |
+| ADR-0043 | nodejs | Data Access and ORM Strategy for Node.js | Approved | executable | `rulesets/adr/generated/adr-nodejs-0043-data-access-and-orm-strategy-for-node-js.rules.json` |
+| ADR-0044 | nodejs | Frontend Clean Architecture Layer Boundaries (React) | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0044-frontend-clean-architecture-layer-boundaries-react.rules.json` |
+| ADR-0045 | nodejs | Frontend State Management — Zustand + TanStack Query Dual Strategy | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0045-frontend-state-management-zustand-tanstack-query-dual-strate.rules.json` |
+| ADR-0046 | nodejs | Prohibition of Raw Technical Identifiers in User Interfaces | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0046-prohibition-of-raw-technical-identifiers-in-user-interfaces.rules.json` |
+| ADR-0047 | nodejs | Actionable User Error Contract and Correlated Diagnostics | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0047-actionable-user-error-contract-and-correlated-diagnostics.rules.json` |
+| ADR-0048 | nodejs | Feature Flag System Scope and Structured Criteria Model | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0048-feature-flag-system-scope-and-structured-criteria-model.rules.json` |
+| ADR-0074 | nodejs | Monorepo Orchestration with Nx | Approved | executable | `rulesets/adr/generated/adr-nodejs-0074-monorepo-orchestration-with-nx.rules.json` |
+| ADR-0075 | nodejs | Application Gateway (BFF) with NestJS | Approved | executable | `rulesets/adr/generated/adr-nodejs-0075-application-gateway-bff-with-nestjs.rules.json` |

package/rulesets/adr/ADR_COVERAGE.md

@@ -0,0 +1,133 @@
+# ADR → Ruleset Coverage
+
+Auto-generated index mapping every ADR to its executable or advisory ruleset. **Do not edit by hand** — regenerate with `node .harness/scripts/generate-adr-coverage.mjs`.
+
+## Totals
+
+| | |
+|---|---|
+| Total ADRs | 115 |
+| Handcrafted | 7 |
+| Generated executable | 79 |
+| Generated advisory | 29 |
+| Coverage | **100.0%** |
+
+**Enforcement**: `handcrafted` = artisanal ruleset; `executable` = machine-verifiable rules (lint/CI/static analysis); `advisory` = design decision, manual attestation required.
+
+| ADR ID | Track | Title | Status | Enforcement | Ruleset |
+|---|---|---|---|---|---|
+| ADR-0001 | ai-augmented | Harness Engineering for AI-Augmented Development | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0001-harness-engineering-for-ai-augmented-development.rules.json` |
+| ADR-0002 | ai-augmented | MCP Integration Protocol for Agent Tool Invocation | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0002-mcp-integration-protocol-for-agent-tool-invocation.rules.json` |
+| ADR-0003 | ai-augmented | Model Selection Governance for AI-Augmented Workflows | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0003-model-selection-governance-for-ai-augmented-workflows.rules.json` |
+| ADR-0004 | ai-augmented | AGENTS.md as Mandatory Repository Artifact | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0004-agents-md-as-mandatory-repository-artifact.rules.json` |
+| ADR-0005 | ai-augmented | Human-in-the-Loop Policy for Autonomous Agent Operations | Accepted | executable | `rulesets/adr/generated/adr-ai-augmented-0005-human-in-the-loop-policy-for-autonomous-agent-operations.rules.json` |
+| ADR-0042 | android | Canonical Android Native Mobile Architecture | Approved | executable | `rulesets/adr/generated/adr-android-0042-canonical-android-native-mobile-architecture.rules.json` |
+| ADR-0001 | core | Monorepo Orchestration Principle | Approved | executable | `rulesets/adr/generated/adr-0001-monorepo-orchestration-principle.rules.json` |
+| ADR-0005 | core | Automated SAST Quality Gates in CI/CD | Approved | handcrafted | `rulesets/adr/adr-0005-cicd-quality-gates.rules.json` |
+| ADR-0006 | core | Microservices Transition via Sidecar Pattern | Approved - Backlog (Phase 3 Milestone) | executable | `rulesets/adr/generated/adr-0006-microservices-transition-via-sidecar-pattern.rules.json` |
+| ADR-0009 | core | Strict Dependency Pinning and Automated Vulnerability Management | Approved | executable | `rulesets/adr/generated/adr-0009-strict-dependency-pinning-and-automated-vulnerability-manage.rules.json` |
+| ADR-0010 | core | Multi-Tenancy Architecture Strategy for SaaS Evolution | Approved | handcrafted | `rulesets/adr/adr-0010-multi-tenancy.rules.json` |
+| ADR-0011 | core | Fault Tolerance and Resiliency Patterns | Approved | executable | `rulesets/adr/generated/adr-0011-fault-tolerance-and-resiliency-patterns.rules.json` |
+| ADR-0013 | core | Cloud Infrastructure Topology and Disaster Recovery (DR) | Approved | advisory | `rulesets/adr/generated/adr-0013-cloud-infrastructure-topology-and-disaster-recovery-dr.rules.json` |
+| ADR-0014 | core | Multi-Layer Distributed Caching Strategy | Approved | executable | `rulesets/adr/generated/adr-0014-multi-layer-distributed-caching-strategy.rules.json` |
+| ADR-0015 | core | Event-Driven Architecture (EDA) for Intra-Domain Communication | Approved | executable | `rulesets/adr/generated/adr-0015-event-driven-architecture-eda-for-intra-domain-communication.rules.json` |
+| ADR-0016 | core | Immutable Business Audit Trail and Change Tracking | Approved | executable | `rulesets/adr/generated/adr-0016-immutable-business-audit-trail-and-change-tracking.rules.json` |
+| ADR-0017 | core | Feature Flagging Strategy for Progressive Delivery | Approved | advisory | `rulesets/adr/generated/adr-0017-feature-flagging-strategy-for-progressive-delivery.rules.json` |
+| ADR-0018 | core | Testing Pyramid and Automated Quality Gates | Approved | handcrafted | `rulesets/adr/adr-0018-testing-pyramid.rules.json` |
+| ADR-0019 | core | Tactical Design Patterns for Future-Proofing | Approved | executable | `rulesets/adr/generated/adr-0019-tactical-design-patterns-for-future-proofing.rules.json` |
+| ADR-0020 | core | Identity Provider Abstraction Strategy | Approved | advisory | `rulesets/adr/generated/adr-0020-identity-provider-abstraction-strategy.rules.json` |
+| ADR-0024 | core | Centralized Configuration & Feature Platform | Approved | advisory | `rulesets/adr/generated/adr-0024-centralized-configuration-feature-platform.rules.json` |
+| ADR-0025 | core | Feature Flag Provider Abstraction Strategy | Approved | executable | `rulesets/adr/generated/adr-0025-feature-flag-provider-abstraction-strategy.rules.json` |
+| ADR-0028 | core | Self-Hosted, Open-Source Hybrid Infrastructure | Approved | executable | `rulesets/adr/generated/adr-0028-self-hosted-open-source-hybrid-infrastructure.rules.json` |
+| ADR-0030 | core | Two-Tier Distributed Gateway Model | Approved | advisory | `rulesets/adr/generated/adr-0030-two-tier-distributed-gateway-model.rules.json` |
+| ADR-0031 | core | Schema-per-Bounded-Context and Domain Event Catalog | Approved | executable | `rulesets/adr/generated/adr-0031-schema-per-bounded-context-and-domain-event-catalog.rules.json` |
+| ADR-0032 | core | API Protocol Selection Matrix (REST vs gRPC vs GraphQL) | Approved | handcrafted | `rulesets/adr/adr-0032-protocol-selection.rules.json` |
+| ADR-0033 | core | Transactional Outbox Pattern for Async Messaging | Proposed (Approved via Maturity Roadmap) | advisory | `rulesets/adr/generated/adr-0033-transactional-outbox-pattern-for-async-messaging.rules.json` |
+| ADR-0034 | core | CQRS Pattern Application Matrix | Approved | executable | `rulesets/adr/generated/adr-0034-cqrs-pattern-application-matrix.rules.json` |
+| ADR-0035 | core | Distributed Saga Pattern Implementation Strategy | Approved | executable | `rulesets/adr/generated/adr-0035-distributed-saga-pattern-implementation-strategy.rules.json` |
+| ADR-0036 | core | Message Bus Delivery & Flow Control Strategy | Approved | executable | `rulesets/adr/generated/adr-0036-message-bus-delivery-flow-control-strategy.rules.json` |
+| ADR-0037 | core | Enterprise Performance, Concurrency & Chaos Verification Strategy | Approved | advisory | `rulesets/adr/generated/adr-0037-enterprise-performance-concurrency-chaos-verification-strate.rules.json` |
+| ADR-0039 | core | Deployment Topology Abstraction & Environment Switcher | Approved | executable | `rulesets/adr/generated/adr-0039-deployment-topology-abstraction-environment-switcher.rules.json` |
+| ADR-0040 | core | Multi-Runtime Selection Matrix & Inter-Runtime Contracts | Approved | handcrafted | `rulesets/adr/adr-0040-multi-runtime.rules.json` |
+| ADR-0041 | core | Dual-Engine Policy Evaluation (Native + OPA) | Accepted | executable | `rulesets/adr/generated/adr-0041-dual-engine-policy-evaluation-native-opa.rules.json` |
+| ADR-0044 | core | Configurable Security Persistence Strategy (Agnosticism vs. Native RLS) | Proposed | executable | `rulesets/adr/generated/adr-0044-configurable-security-persistence-strategy-agnosticism-vs-na.rules.json` |
+| ADR-0045 | core | Microservice Extraction Readiness Criteria | Approved | executable | `rulesets/adr/generated/adr-0045-microservice-extraction-readiness-criteria.rules.json` |
+| ADR-0046 | core | Unified Traceability via W3C TraceContext | Approved | executable | `rulesets/adr/generated/adr-0046-unified-traceability-via-w3c-tracecontext.rules.json` |
+| ADR-0047 | core | Progressive Architecture Evolution Framework: Modular Monolith → Microservices | Approved | executable | `rulesets/adr/generated/adr-0047-progressive-architecture-evolution-framework-modular-monolit.rules.json` |
+| ADR-0048 | core | Enterprise Taxonomy Standardization and Reference Layout | Accepted | executable | `rulesets/adr/generated/adr-0048-enterprise-taxonomy-standardization-and-reference-layout.rules.json` |
+| ADR-0049 | core | Naming Semantics & Clean Code Policy (E2E and Global) | Accepted | executable | `rulesets/adr/generated/adr-0049-naming-semantics-clean-code-policy-e2e-and-global.rules.json` |
+| ADR-0050 | core | Gitflow Branching Strategy Standardization | Accepted | handcrafted | `rulesets/adr/adr-0050-gitflow-branching.rules.json` |
+| ADR-0051 | core | Enterprise Database Engine Selection Strategy | Approved | executable | `rulesets/adr/generated/adr-0051-enterprise-database-engine-selection-strategy.rules.json` |
+| ADR-0052 | core | Unit Testing Isolation Strategy (Mocks vs Stubs) | Approved | executable | `rulesets/adr/generated/adr-0052-unit-testing-isolation-strategy-mocks-vs-stubs.rules.json` |
+| ADR-0053 | core | Integration and E2E Testing Strategy | Approved | executable | `rulesets/adr/generated/adr-0053-integration-and-e2e-testing-strategy.rules.json` |
+| ADR-0054 | core | Database Design and Normalization Standards | Approved | executable | `rulesets/adr/generated/adr-0054-database-design-and-normalization-standards.rules.json` |
+| ADR-0055 | core | Microfrontends Architecture Strategy | Proposed (Phase 3 Readiness) | executable | `rulesets/adr/generated/adr-0055-microfrontends-architecture-strategy.rules.json` |
+| ADR-0056 | core | Enterprise Naming & Design Conventions - Multi-Language, Multi-Platform | Accepted — extends and expands the scope of ADR-0049 (Naming Semantics & Clean Code Policy) to all layers of the enterprise ecosystem (code, API, database, events, data warehouse, DDD tactical patterns). | executable | `rulesets/adr/generated/adr-0056-enterprise-naming-design-conventions-multi-language-multi-pl.rules.json` |
+| ADR-0057 | core | Architecture Intelligence Catalog | Accepted | advisory | `rulesets/adr/generated/adr-0057-architecture-intelligence-catalog.rules.json` |
+| ADR-0058 | core | AI-Consumable Architecture Knowledge | Accepted | advisory | `rulesets/adr/generated/adr-0058-ai-consumable-architecture-knowledge.rules.json` |
+| ADR-0067 | core | Modular Monolith Persistence Boundaries | Accepted | executable | `rulesets/adr/generated/adr-0067-modular-monolith-persistence-boundaries.rules.json` |
+| ADR-0068 | core | Documentation Release GitFlow | Proposed | executable | `rulesets/adr/generated/adr-0068-documentation-release-gitflow.rules.json` |
+| ADR-0069 | core | AI Agent Context Protocol Integration | Approved | advisory | `rulesets/adr/generated/adr-0069-ai-agent-context-protocol-integration.rules.json` |
+| ADR-0070 | core | Lean Root Repository Taxonomy | Accepted | executable | `rulesets/adr/generated/adr-0070-lean-root-repository-taxonomy.rules.json` |
+| ADR-0071 | core | Domain Layer Base Class and Inheritance Strategy | Accepted | executable | `rulesets/adr/generated/adr-0071-domain-layer-base-class-and-inheritance-strategy.rules.json` |
+| ADR-0072 | core | UTC Date Storage, Browser Timezone Detection, and Language Resolution | Accepted | executable | `rulesets/adr/generated/adr-0072-utc-date-storage-browser-timezone-detection-and-language-res.rules.json` |
+| ADR-0073 | core | Unified CLI/MCP Output Contract and Gate Evidence Schema | Approved — Evolith Architecture Board, 2026-06-10. Closes GT-01. | executable | `rulesets/adr/generated/adr-0073-unified-cli-mcp-output-contract-and-gate-evidence-schema.rules.json` |
+| ADR-0074 | core | Evolith Core API Native Exposure Layer | Approved — Evolith Architecture Board, 2026-06-13. | executable | `rulesets/adr/generated/adr-0074-evolith-core-api-native-exposure-layer.rules.json` |
+| ADR-0075 | core | Core API Authentication Strategy | Superseded by ADR-0080 | advisory | `rulesets/adr/generated/adr-0075-core-api-authentication-strategy.rules.json` |
+| ADR-0076 | core | Domain-Oriented Microservice Architecture (DOMA) | Approved — Evolith Architecture Board, 2026-06-14. | advisory | `rulesets/adr/generated/adr-0076-domain-oriented-microservice-architecture-doma.rules.json` |
+| ADR-0077 | core | MassTransit v9 Commercial Pivot — Stay on v8, Monitor OpenTransit | Approved — Evolith Architecture Board, 2026-06-15. | advisory | `rulesets/adr/generated/adr-0077-masstransit-v9-commercial-pivot-stay-on-v8-monitor-opentrans.rules.json` |
+| ADR-0078 | core | Domain Financial Separation Governance | Accepted | executable | `rulesets/adr/generated/adr-0078-domain-financial-separation-governance.rules.json` |
+| ADR-0079 | core | Multi-Topology Reference Corpus and Topology Manifest Contract | Approved — Evolith Architecture Board, 2026-06-18. | executable | `rulesets/adr/generated/adr-0079-multi-topology-reference-corpus-and-topology-manifest-contra.rules.json` |
+| ADR-0080 | core | Remote Repository Reference Contract | Approved — Evolith Architecture Board, 2026-06-19. | executable | `rulesets/adr/generated/adr-0080-remote-repository-reference-contract.rules.json` |
+| ADR-0081 | core | Agentic AI Sandbox Isolation Boundary | Accepted | executable | `rulesets/adr/generated/adr-0081-agentic-ai-sandbox-isolation-boundary.rules.json` |
+| ADR-0082 | core | Agentic AI Prompt, Context, and Tool Trust Boundary | Accepted | advisory | `rulesets/adr/generated/adr-0082-agentic-ai-prompt-context-and-tool-trust-boundary.rules.json` |
+| ADR-0083 | core | Agentic AI Action Authorization and Audit | Accepted | executable | `rulesets/adr/generated/adr-0083-agentic-ai-action-authorization-and-audit.rules.json` |
+| ADR-0084 | core | Data Mesh and Data as a Product | Accepted | executable | `rulesets/adr/generated/adr-0084-data-mesh-and-data-as-a-product.rules.json` |
+| ADR-0085 | core | Agnostic OPA Wasm Distribution Architecture | Accepted | executable | `rulesets/adr/generated/adr-0085-agnostic-opa-wasm-distribution-architecture.rules.json` |
+| ADR-0086 | core | Agentic AI Telemetry & Cost Control Standard | Accepted | advisory | `rulesets/adr/generated/adr-0086-agentic-ai-telemetry-cost-control-standard.rules.json` |
+| ADR-0087 | core | Attribute-Based Access Control (ABAC) for Agentic Tool Execution | Accepted | executable | `rulesets/adr/generated/adr-0087-attribute-based-access-control-abac-for-agentic-tool-executi.rules.json` |
+| ADR-0088 | core | Sovereign Identity for Agentic AI | Accepted | executable | `rulesets/adr/generated/adr-0088-sovereign-identity-for-agentic-ai.rules.json` |
+| ADR-0089 | core | Event-Driven Agentic Workflow Pattern | Accepted | advisory | `rulesets/adr/generated/adr-0089-event-driven-agentic-workflow-pattern.rules.json` |
+| ADR-0090 | core | RAG Knowledge Governance Standard | Accepted | executable | `rulesets/adr/generated/adr-0090-rag-knowledge-governance-standard.rules.json` |
+| ADR-0091 | core | Workload Identity Token Rotation Standard | Accepted | executable | `rulesets/adr/generated/adr-0091-workload-identity-token-rotation-standard.rules.json` |
+| ADR-0092 | core | Agent Infinite Loop Prevention and Circuit Breaker Rules | Accepted | executable | `rulesets/adr/generated/adr-0092-agent-infinite-loop-prevention-and-circuit-breaker-rules.rules.json` |
+| ADR-0093 | core | Concurrency Control and Resource Locking Standard for MCP Tools | Accepted | executable | `rulesets/adr/generated/adr-0093-concurrency-control-and-resource-locking-standard-for-mcp-to.rules.json` |
+| ADR-0094 | core | Multi-Agent Handoff and Task Delegation Standards | Accepted | executable | `rulesets/adr/generated/adr-0094-multi-agent-handoff-and-task-delegation-standards.rules.json` |
+| ADR-0095 | core | Serverless Architecture Governance | Accepted | executable | `rulesets/adr/generated/adr-0095-serverless-architecture-governance.rules.json` |
+| ADR-0096 | core | Edge Computing Architecture Governance | Accepted | executable | `rulesets/adr/generated/adr-0096-edge-computing-architecture-governance.rules.json` |
+| ADR-0097 | core | Knowledge Lifecycle Governance Standard | Accepted | executable | `rulesets/adr/generated/adr-0097-knowledge-lifecycle-governance-standard.rules.json` |
+| ADR-0098 | core | REST URI Versioning and Deprecation Policy | Accepted | executable | `rulesets/adr/generated/adr-0098-rest-uri-versioning-and-deprecation-policy.rules.json` |
+| ADR-0099 | core | OPA Bundle Distribution via S3 (MinIO) | Superseded by ADR 0085 | advisory | `rulesets/adr/generated/adr-0099-opa-bundle-distribution-via-s3-minio.rules.json` |
+| ADR-0041 | dotnet | Canonical .NET (C#) Backend Architecture | Approved | executable | `rulesets/adr/generated/adr-dotnet-0041-canonical-net-c-backend-architecture.rules.json` |
+| ADR-0060 | dotnet | .NET Multi-Tenancy Dual-Layer Strategy (EF Core & SQL Server) | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0060-net-multi-tenancy-dual-layer-strategy-ef-core-sql-server.rules.json` |
+| ADR-0061 | dotnet | Transactional Event Lifecycle in EF Core | Proposed | advisory | `rulesets/adr/generated/adr-dotnet-0061-transactional-event-lifecycle-in-ef-core.rules.json` |
+| ADR-0062 | dotnet | .NET Immutable Audit Trail via DDL Triggers & Delta Capture | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0062-net-immutable-audit-trail-via-ddl-triggers-delta-capture.rules.json` |
+| ADR-0063 | dotnet | B2B Request Idempotency Middleware in ASP.NET Core | Proposed | advisory | `rulesets/adr/generated/adr-dotnet-0063-b2b-request-idempotency-middleware-in-asp-net-core.rules.json` |
+| ADR-0064 | dotnet | .NET Request-Scope Observability Context Propagation | Accepted | executable | `rulesets/adr/generated/adr-dotnet-0064-net-request-scope-observability-context-propagation.rules.json` |
+| ADR-0065 | dotnet | .NET PII-Safe Structured Logging Pipeline (Serilog) | Accepted | executable | `rulesets/adr/generated/adr-dotnet-0065-net-pii-safe-structured-logging-pipeline-serilog.rules.json` |
+| ADR-0066 | dotnet | .NET Lightweight HTTP Idempotency via IMemoryCache / IDistributedCache | Accepted | advisory | `rulesets/adr/generated/adr-dotnet-0066-net-lightweight-http-idempotency-via-imemorycache-idistribut.rules.json` |
+| ADR-0069 | dotnet | .NET gRPC Service Setup & Protobuf Contracts | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0069-net-grpc-service-setup-protobuf-contracts.rules.json` |
+| ADR-0070 | dotnet | .NET API Endpoint Strategy | Proposed | executable | `rulesets/adr/generated/adr-dotnet-0070-net-api-endpoint-strategy.rules.json` |
+| ADR-0071 | dotnet | .NET Data Access Strategy — EF Core as Default ORM, Dapper for Optimized Reads | \| Field \| Value \| | advisory | `rulesets/adr/generated/adr-dotnet-0071-net-data-access-strategy-ef-core-as-default-orm-dapper-for-o.rules.json` |
+| ADR-0072 | dotnet | .NET AOP Cross-Cutting Concern Strategy — DispatchProxy over Pipeline Behaviors | Accepted | executable | `rulesets/adr/generated/adr-dotnet-0072-net-aop-cross-cutting-concern-strategy-dispatchproxy-over-pi.rules.json` |
+| ADR-0002 | nodejs | Clean Hexagonal Architecture with NestJS | Approved | handcrafted | `rulesets/adr/adr-0002-hexagonal-architecture.rules.json` |
+| ADR-0003 | nodejs | Strict TypeScript Standards | Approved | executable | `rulesets/adr/generated/adr-nodejs-0003-strict-typescript-standards.rules.json` |
+| ADR-0004 | nodejs | Frontend Offline Resilience | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0004-frontend-offline-resilience.rules.json` |
+| ADR-0007 | nodejs | Observability with OpenTelemetry, Loki, and Jaeger | Approved | executable | `rulesets/adr/generated/adr-nodejs-0007-observability-with-opentelemetry-loki-and-jaeger.rules.json` |
+| ADR-0008 | nodejs | Progressive Multi-Module Evolution with API Gateway and BFF Patterns | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0008-progressive-multi-module-evolution-with-api-gateway-and-bff-.rules.json` |
+| ADR-0012 | nodejs | Advanced Authorization (RBAC/ABAC) Strategy | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0012-advanced-authorization-rbac-abac-strategy.rules.json` |
+| ADR-0021 | nodejs | High-Performance Authentication Graph Compilation | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0021-high-performance-authentication-graph-compilation.rules.json` |
+| ADR-0022 | nodejs | Contextual Authentication and Pluggable Output Projections | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0022-contextual-authentication-and-pluggable-output-projections.rules.json` |
+| ADR-0023 | nodejs | Centralized Authorization Core Strategy | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0023-centralized-authorization-core-strategy.rules.json` |
+| ADR-0026 | nodejs | Adaptive MFA and Passwordless Platform | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0026-adaptive-mfa-and-passwordless-platform.rules.json` |
+| ADR-0027 | nodejs | Dual-Protocol API Strategy (REST & gRPC) | Approved | advisory | `rulesets/adr/generated/adr-nodejs-0027-dual-protocol-api-strategy-rest-grpc.rules.json` |
+| ADR-0029 | nodejs | Adoption of Tactical DDD Primitives Library | Approved | executable | `rulesets/adr/generated/adr-nodejs-0029-adoption-of-tactical-ddd-primitives-library.rules.json` |
+| ADR-0038 | nodejs | Enterprise Error Handling & Result Pattern Strategy | Approved | executable | `rulesets/adr/generated/adr-nodejs-0038-enterprise-error-handling-result-pattern-strategy.rules.json` |
+| ADR-0043 | nodejs | Data Access and ORM Strategy for Node.js | Approved | executable | `rulesets/adr/generated/adr-nodejs-0043-data-access-and-orm-strategy-for-node-js.rules.json` |
+| ADR-0044 | nodejs | Frontend Clean Architecture Layer Boundaries (React) | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0044-frontend-clean-architecture-layer-boundaries-react.rules.json` |
+| ADR-0045 | nodejs | Frontend State Management — Zustand + TanStack Query Dual Strategy | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0045-frontend-state-management-zustand-tanstack-query-dual-strate.rules.json` |
+| ADR-0046 | nodejs | Prohibition of Raw Technical Identifiers in User Interfaces | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0046-prohibition-of-raw-technical-identifiers-in-user-interfaces.rules.json` |
+| ADR-0047 | nodejs | Actionable User Error Contract and Correlated Diagnostics | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0047-actionable-user-error-contract-and-correlated-diagnostics.rules.json` |
+| ADR-0048 | nodejs | Feature Flag System Scope and Structured Criteria Model | Accepted | executable | `rulesets/adr/generated/adr-nodejs-0048-feature-flag-system-scope-and-structured-criteria-model.rules.json` |
+| ADR-0074 | nodejs | Monorepo Orchestration with Nx | Approved | executable | `rulesets/adr/generated/adr-nodejs-0074-monorepo-orchestration-with-nx.rules.json` |
+| ADR-0075 | nodejs | Application Gateway (BFF) with NestJS | Approved | executable | `rulesets/adr/generated/adr-nodejs-0075-application-gateway-bff-with-nestjs.rules.json` |

package/rulesets/adr/README.es.md

@@ -0,0 +1,17 @@
+# Índice de Reglas Codificadas desde ADRs
+
+Codificación machine-readable de ADRs críticos como reglas. Estas reglas se hacen cumplir automáticamente en los pipelines de CI/CD.
+
+| ADR | Archivo de Reglas | Descripción |
+|---|---|---|
+| **ADR-0002** — Arquitectura Hexagonal | [adr-0002-hexagonal-architecture.rules.json](./adr-0002-hexagonal-architecture.rules.json) | Ports & Adapters, aislamiento de capas, AOP solo en adapters |
+| **ADR-0005** — Quality Gates CI/CD | [adr-0005-cicd-quality-gates.rules.json](./adr-0005-cicd-quality-gates.rules.json) | CodeQL, escaneo de dependencias, detección de secretos, cumplimiento de SLA |
+| **ADR-0018** — Pirámide de Testing | [adr-0018-testing-pyramid.rules.json](./adr-0018-testing-pyramid.rules.json) | Distribución 70/20/10, umbrales por capa, cobertura >= 80% |
+| **ADR-0032** — Selección de Protocolos | [adr-0032-protocol-selection.rules.json](./adr-0032-protocol-selection.rules.json) | gRPC interno, REST externo, GraphQL en agregación BFF |
+| **ADR-0040** — Multi-Runtime | [adr-0040-multi-runtime.rules.json](./adr-0040-multi-runtime.rules.json) | Runtime por perfil de carga, gRPC síncrono, RabbitMQ asíncrono |
+| **ADR-0050** — GitFlow Branching | [adr-0050-gitflow-branching.rules.json](./adr-0050-gitflow-branching.rules.json) | Nombres de ramas, ramas protegidas, tags semver |
+| **ADR-0010** — Multi-Tenancy | [adr-0010-multi-tenancy.rules.json](./adr-0010-multi-tenancy.rules.json) | Filtrado de doble capa, propagación de contexto de tenant (condicional) |
+
+---
+
+Volver al [Rulesets Hub](../README.es.md)

package/rulesets/adr/README.md

@@ -0,0 +1,17 @@
+# ADR-Encoded Rules Index
+
+Machine-readable encoding of critical ADRs as rules. These rules are automatically enforced in CI/CD pipelines.
+
+| ADR | Rule File | Description |
+|---|---|---|
+| **ADR-0002** — Hexagonal Architecture | [adr-0002-hexagonal-architecture.rules.json](./adr-0002-hexagonal-architecture.rules.json) | Ports & Adapters, layer isolation, AOP in adapters only |
+| **ADR-0005** — CI/CD Quality Gates | [adr-0005-cicd-quality-gates.rules.json](./adr-0005-cicd-quality-gates.rules.json) | CodeQL, dependency scan, secret detection, SLA compliance |
+| **ADR-0018** — Testing Pyramid | [adr-0018-testing-pyramid.rules.json](./adr-0018-testing-pyramid.rules.json) | 70/20/10 distribution, layer thresholds, coverage >= 80% |
+| **ADR-0032** — Protocol Selection | [adr-0032-protocol-selection.rules.json](./adr-0032-protocol-selection.rules.json) | gRPC internal, REST external, GraphQL BFF aggregate |
+| **ADR-0040** — Multi-Runtime | [adr-0040-multi-runtime.rules.json](./adr-0040-multi-runtime.rules.json) | Runtime by workload profile, gRPC sync, RabbitMQ async |
+| **ADR-0050** — GitFlow Branching | [adr-0050-gitflow-branching.rules.json](./adr-0050-gitflow-branching.rules.json) | Branch naming, protected branches, semver tags |
+| **ADR-0010** — Multi-Tenancy | [adr-0010-multi-tenancy.rules.json](./adr-0010-multi-tenancy.rules.json) | Dual-layer filtering, tenant context propagation (conditional) |
+
+---
+
+Back to [Rulesets Hub](../README.md)

package/rulesets/adr/adr-0002-hexagonal-architecture.rules.json

@@ -0,0 +1,103 @@
+{
+  "$schema": "../schema/ruleset-standard.schema.json",
+  "$id": "https://evolith.dev/rulesets/adr/adr-0002-hexagonal-architecture.rules.json",
+  "title": "ADR-0002 — Hexagonal Architecture (Ports & Adapters) Rules",
+  "description": "Machine-readable rules encoding ADR-0002 Clean Hexagonal Architecture. Mandatory structural pattern for all Evolith applications.",
+  "version": "1.0.0",
+  "adrId": "ADR-0002",
+  "adrTitle": "Clean Hexagonal Architecture with NestJS",
+  "status": "Approved",
+  "date": "2026-05-08",
+  "effectiveDate": "2026-05-08",
+  "rules": [
+    {
+      "id": "HXA-01",
+      "severity": "MUST",
+      "category": "layer-structure",
+      "title": "Core (Domain) has zero framework dependencies",
+      "description": "The Core/Domain layer MUST contain only pure TypeScript classes. Zero imports from NestJS, TypeORM, Express, or any external SDK. Contains entities, value objects, and port interfaces only.",
+      "rationale": "ADR-0002 §Decision: Core is pure TypeScript. Framework coupling prevents domain extraction and pure testing.",
+      "validationQuery": "Static analysis: Core layer files import no framework packages (nestjs, typeorm, express, mongoose).",
+      "blocking": true,
+      "layer": "Core"
+    },
+    {
+      "id": "HXA-02",
+      "severity": "MUST",
+      "category": "layer-structure",
+      "title": "Application layer imports Core only",
+      "description": "Application layer (Use Cases) may import Core classes and NestJS DI decorators only. No infrastructure imports (database adapters, external SDKs).",
+      "rationale": "ADR-0002 §Decision: Application orchestrates Core logic. Infrastructure belongs in adapters.",
+      "validationQuery": "Application layer files import only Core layer and @nestjs/common decorators.",
+      "blocking": true,
+      "layer": "Application"
+    },
+    {
+      "id": "HXA-03",
+      "severity": "MUST",
+      "category": "layer-structure",
+      "title": "Infrastructure (Adapters) implements Core ports",
+      "description": "Infrastructure layer contains concrete implementations of Core port interfaces (TypeOrmUserRepository, BcryptPasswordHasher). All framework and SDK imports live exclusively here.",
+      "rationale": "ADR-0002 §Decision: Infrastructure is the adapter layer. It implements the ports defined by Core.",
+      "validationQuery": "Infrastructure files implement interfaces defined in Core layer. No domain logic lives here.",
+      "blocking": true,
+      "layer": "Infrastructure"
+    },
+    {
+      "id": "HXA-04",
+      "severity": "MUST",
+      "category": "dependency-direction",
+      "title": "Dependency direction: Infrastructure → Application → Core",
+      "description": "Dependency direction is strictly enforced: Infrastructure depends on Application, Application depends on Core. Never the reverse.",
+      "rationale": "ADR-0002 §Decision: Dependency inversion is the core principle of hexagonal architecture.",
+      "validationQuery": "eslint-plugin-boundaries or equivalent static analysis enforces no backward imports.",
+      "blocking": true,
+      "layer": "All"
+    },
+    {
+      "id": "HXA-05",
+      "severity": "MUST NOT",
+      "category": "aop-isolation",
+      "title": "AOP concerns prohibited in Core/Application layers",
+      "description": "Cross-cutting concerns (Logging, Auditing, OTel, Caching, Transactions) MUST NOT hard-couple third-party decorators or SDKs inside Core or Application layers. Prohibited: @SentryCapture, @OpentelemetrySpan, @Cacheable on UseCase methods.",
+      "rationale": "ADR-0002 §4: AOP isolation rule. Framework decorators in domain pollute the domain with infrastructure concerns.",
+      "validationQuery": "Core/Application classes have no imports from Sentry, OpenTelemetry SDK, caching libraries, or transaction managers.",
+      "blocking": true,
+      "layer": "Core, Application"
+    },
+    {
+      "id": "HXA-06",
+      "severity": "MUST",
+      "category": "aop-isolation",
+      "title": "AOP implemented exclusively in Infrastructure layer",
+      "description": "Cross-cutting concerns MUST be encapsulated exclusively inside NestJS Interceptors, Middleware, or Decorator Wrappers residing in the Infrastructure/Adapter layer, wrapping pure UseCase execution from the outside.",
+      "rationale": "ADR-0002 §4: AOP in adapters preserves domain purity while enabling observability.",
+      "validationQuery": "AOP implementations (interceptors, middleware, decorators) exist only in Infrastructure layer.",
+      "blocking": false,
+      "layer": "Infrastructure"
+    },
+    {
+      "id": "HXA-07",
+      "severity": "MUST",
+      "category": "testing",
+      "title": "Core domain tests run without framework bootstrap",
+      "description": "Pure domain tests (entities, value objects, port interfaces) MUST run in milliseconds with no database or framework setup. Tests must not execute IO or container startups.",
+      "rationale": "ADR-0002 §Consequences: Pure domain tests are fast and framework-independent.",
+      "validationQuery": "Domain unit tests execute without TestBed or testcontainer initialization. Average execution time < 50ms per test file.",
+      "blocking": false,
+      "layer": "Core"
+    }
+  ],
+  "references": [
+    "reference/architecture/adrs/nodejs/0002-clean-architecture-nestjs.md",
+    "reference/architecture/adrs/nodejs/0003-strict-typescript-standards.md"
+  ],
+  "exitCriteria": {
+    "description": "All HXA rules are validated in CI via eslint-plugin-boundaries and import analysis.",
+    "validationTools": [
+      "eslint-plugin-boundaries",
+      "dependency-cruiser",
+      "custom AST rules"
+    ]
+  }
+}