@evolith/core-domain 1.0.1 → 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (501) hide show
  1. package/dist/domain/services/default-workflow-definition.js +4 -1
  2. package/dist/domain/services/default-workflow-definition.js.map +1 -1
  3. package/dist/gates/decision/gate-decision.js.map +1 -1
  4. package/package.json +1 -2
  5. package/rulesets/README.es.md +0 -170
  6. package/rulesets/README.md +0 -170
  7. package/rulesets/acl/README.es.md +0 -41
  8. package/rulesets/acl/README.md +0 -41
  9. package/rulesets/acl/anti-corruption-layer.rules.es.json +0 -99
  10. package/rulesets/acl/anti-corruption-layer.rules.json +0 -99
  11. package/rulesets/adr/ADR_COVERAGE.es.md +0 -133
  12. package/rulesets/adr/ADR_COVERAGE.md +0 -133
  13. package/rulesets/adr/README.es.md +0 -17
  14. package/rulesets/adr/README.md +0 -17
  15. package/rulesets/adr/adr-0002-hexagonal-architecture.rules.json +0 -103
  16. package/rulesets/adr/adr-0005-cicd-quality-gates.rules.json +0 -102
  17. package/rulesets/adr/adr-0010-multi-tenancy.rules.json +0 -129
  18. package/rulesets/adr/adr-0018-testing-pyramid.rules.json +0 -115
  19. package/rulesets/adr/adr-0032-protocol-selection.rules.json +0 -134
  20. package/rulesets/adr/adr-0040-multi-runtime.rules.json +0 -131
  21. package/rulesets/adr/adr-0050-gitflow-branching.rules.json +0 -176
  22. package/rulesets/adr/generated/adr-0001-monorepo-orchestration-principle.rules.json +0 -29
  23. package/rulesets/adr/generated/adr-0006-microservices-transition-via-sidecar-pattern.rules.json +0 -29
  24. package/rulesets/adr/generated/adr-0009-strict-dependency-pinning-and-automated-vulnerability-manage.rules.json +0 -29
  25. package/rulesets/adr/generated/adr-0011-fault-tolerance-and-resiliency-patterns.rules.json +0 -29
  26. package/rulesets/adr/generated/adr-0013-cloud-infrastructure-topology-and-disaster-recovery-dr.rules.json +0 -28
  27. package/rulesets/adr/generated/adr-0014-multi-layer-distributed-caching-strategy.rules.json +0 -29
  28. package/rulesets/adr/generated/adr-0015-event-driven-architecture-eda-for-intra-domain-communication.rules.json +0 -29
  29. package/rulesets/adr/generated/adr-0016-immutable-business-audit-trail-and-change-tracking.rules.json +0 -29
  30. package/rulesets/adr/generated/adr-0017-feature-flagging-strategy-for-progressive-delivery.rules.json +0 -28
  31. package/rulesets/adr/generated/adr-0019-tactical-design-patterns-for-future-proofing.rules.json +0 -29
  32. package/rulesets/adr/generated/adr-0020-identity-provider-abstraction-strategy.rules.json +0 -28
  33. package/rulesets/adr/generated/adr-0024-centralized-configuration-feature-platform.rules.json +0 -28
  34. package/rulesets/adr/generated/adr-0025-feature-flag-provider-abstraction-strategy.rules.json +0 -29
  35. package/rulesets/adr/generated/adr-0028-self-hosted-open-source-hybrid-infrastructure.rules.json +0 -29
  36. package/rulesets/adr/generated/adr-0030-two-tier-distributed-gateway-model.rules.json +0 -28
  37. package/rulesets/adr/generated/adr-0031-schema-per-bounded-context-and-domain-event-catalog.rules.json +0 -29
  38. package/rulesets/adr/generated/adr-0033-transactional-outbox-pattern-for-async-messaging.rules.json +0 -28
  39. package/rulesets/adr/generated/adr-0034-cqrs-pattern-application-matrix.rules.json +0 -29
  40. package/rulesets/adr/generated/adr-0035-distributed-saga-pattern-implementation-strategy.rules.json +0 -29
  41. package/rulesets/adr/generated/adr-0036-message-bus-delivery-flow-control-strategy.rules.json +0 -29
  42. package/rulesets/adr/generated/adr-0037-enterprise-performance-concurrency-chaos-verification-strate.rules.json +0 -28
  43. package/rulesets/adr/generated/adr-0039-deployment-topology-abstraction-environment-switcher.rules.json +0 -29
  44. package/rulesets/adr/generated/adr-0041-dual-engine-policy-evaluation-native-opa.rules.json +0 -28
  45. package/rulesets/adr/generated/adr-0044-configurable-security-persistence-strategy-agnosticism-vs-na.rules.json +0 -29
  46. package/rulesets/adr/generated/adr-0045-microservice-extraction-readiness-criteria.rules.json +0 -29
  47. package/rulesets/adr/generated/adr-0046-unified-traceability-via-w3c-tracecontext.rules.json +0 -29
  48. package/rulesets/adr/generated/adr-0047-progressive-architecture-evolution-framework-modular-monolit.rules.json +0 -29
  49. package/rulesets/adr/generated/adr-0048-enterprise-taxonomy-standardization-and-reference-layout.rules.json +0 -28
  50. package/rulesets/adr/generated/adr-0049-naming-semantics-clean-code-policy-e2e-and-global.rules.json +0 -29
  51. package/rulesets/adr/generated/adr-0051-enterprise-database-engine-selection-strategy.rules.json +0 -29
  52. package/rulesets/adr/generated/adr-0052-unit-testing-isolation-strategy-mocks-vs-stubs.rules.json +0 -29
  53. package/rulesets/adr/generated/adr-0053-integration-and-e2e-testing-strategy.rules.json +0 -29
  54. package/rulesets/adr/generated/adr-0054-database-design-and-normalization-standards.rules.json +0 -29
  55. package/rulesets/adr/generated/adr-0055-microfrontends-architecture-strategy.rules.json +0 -28
  56. package/rulesets/adr/generated/adr-0056-enterprise-naming-design-conventions-multi-language-multi-pl.rules.json +0 -29
  57. package/rulesets/adr/generated/adr-0057-architecture-intelligence-catalog.rules.json +0 -27
  58. package/rulesets/adr/generated/adr-0058-ai-consumable-architecture-knowledge.rules.json +0 -27
  59. package/rulesets/adr/generated/adr-0067-modular-monolith-persistence-boundaries.rules.json +0 -28
  60. package/rulesets/adr/generated/adr-0068-documentation-release-gitflow.rules.json +0 -29
  61. package/rulesets/adr/generated/adr-0069-ai-agent-context-protocol-integration.rules.json +0 -28
  62. package/rulesets/adr/generated/adr-0070-lean-root-repository-taxonomy.rules.json +0 -29
  63. package/rulesets/adr/generated/adr-0071-domain-layer-base-class-and-inheritance-strategy.rules.json +0 -29
  64. package/rulesets/adr/generated/adr-0072-utc-date-storage-browser-timezone-detection-and-language-res.rules.json +0 -29
  65. package/rulesets/adr/generated/adr-0073-unified-cli-mcp-output-contract-and-gate-evidence-schema.rules.json +0 -29
  66. package/rulesets/adr/generated/adr-0074-evolith-core-api-native-exposure-layer.rules.json +0 -29
  67. package/rulesets/adr/generated/adr-0075-core-api-authentication-strategy.rules.json +0 -28
  68. package/rulesets/adr/generated/adr-0076-domain-oriented-microservice-architecture-doma.rules.json +0 -28
  69. package/rulesets/adr/generated/adr-0077-masstransit-v9-commercial-pivot-stay-on-v8-monitor-opentrans.rules.json +0 -28
  70. package/rulesets/adr/generated/adr-0078-domain-financial-separation-governance.rules.json +0 -29
  71. package/rulesets/adr/generated/adr-0079-multi-topology-reference-corpus-and-topology-manifest-contra.rules.json +0 -29
  72. package/rulesets/adr/generated/adr-0080-remote-repository-reference-contract.rules.json +0 -29
  73. package/rulesets/adr/generated/adr-0081-agentic-ai-sandbox-isolation-boundary.rules.json +0 -29
  74. package/rulesets/adr/generated/adr-0082-agentic-ai-prompt-context-and-tool-trust-boundary.rules.json +0 -28
  75. package/rulesets/adr/generated/adr-0083-agentic-ai-action-authorization-and-audit.rules.json +0 -29
  76. package/rulesets/adr/generated/adr-0084-data-mesh-and-data-as-a-product.rules.json +0 -29
  77. package/rulesets/adr/generated/adr-0085-agnostic-opa-wasm-distribution-architecture.rules.json +0 -28
  78. package/rulesets/adr/generated/adr-0086-agentic-ai-telemetry-cost-control-standard.rules.json +0 -27
  79. package/rulesets/adr/generated/adr-0087-attribute-based-access-control-abac-for-agentic-tool-executi.rules.json +0 -29
  80. package/rulesets/adr/generated/adr-0088-sovereign-identity-for-agentic-ai.rules.json +0 -29
  81. package/rulesets/adr/generated/adr-0089-event-driven-agentic-workflow-pattern.rules.json +0 -28
  82. package/rulesets/adr/generated/adr-0090-rag-knowledge-governance-standard.rules.json +0 -29
  83. package/rulesets/adr/generated/adr-0091-workload-identity-token-rotation-standard.rules.json +0 -29
  84. package/rulesets/adr/generated/adr-0092-agent-infinite-loop-prevention-and-circuit-breaker-rules.rules.json +0 -29
  85. package/rulesets/adr/generated/adr-0093-concurrency-control-and-resource-locking-standard-for-mcp-to.rules.json +0 -29
  86. package/rulesets/adr/generated/adr-0094-multi-agent-handoff-and-task-delegation-standards.rules.json +0 -29
  87. package/rulesets/adr/generated/adr-0095-serverless-architecture-governance.rules.json +0 -29
  88. package/rulesets/adr/generated/adr-0096-edge-computing-architecture-governance.rules.json +0 -29
  89. package/rulesets/adr/generated/adr-0097-knowledge-lifecycle-governance-standard.rules.json +0 -29
  90. package/rulesets/adr/generated/adr-0098-rest-uri-versioning-and-deprecation-policy.rules.json +0 -29
  91. package/rulesets/adr/generated/adr-0099-opa-bundle-distribution-via-s3-minio.rules.json +0 -27
  92. package/rulesets/adr/generated/adr-ai-augmented-0001-harness-engineering-for-ai-augmented-development.rules.json +0 -29
  93. package/rulesets/adr/generated/adr-ai-augmented-0002-mcp-integration-protocol-for-agent-tool-invocation.rules.json +0 -29
  94. package/rulesets/adr/generated/adr-ai-augmented-0003-model-selection-governance-for-ai-augmented-workflows.rules.json +0 -29
  95. package/rulesets/adr/generated/adr-ai-augmented-0004-agents-md-as-mandatory-repository-artifact.rules.json +0 -29
  96. package/rulesets/adr/generated/adr-ai-augmented-0005-human-in-the-loop-policy-for-autonomous-agent-operations.rules.json +0 -29
  97. package/rulesets/adr/generated/adr-android-0042-canonical-android-native-mobile-architecture.rules.json +0 -29
  98. package/rulesets/adr/generated/adr-dotnet-0041-canonical-net-c-backend-architecture.rules.json +0 -29
  99. package/rulesets/adr/generated/adr-dotnet-0060-net-multi-tenancy-dual-layer-strategy-ef-core-sql-server.rules.json +0 -29
  100. package/rulesets/adr/generated/adr-dotnet-0061-transactional-event-lifecycle-in-ef-core.rules.json +0 -28
  101. package/rulesets/adr/generated/adr-dotnet-0062-net-immutable-audit-trail-via-ddl-triggers-delta-capture.rules.json +0 -29
  102. package/rulesets/adr/generated/adr-dotnet-0063-b2b-request-idempotency-middleware-in-asp-net-core.rules.json +0 -28
  103. package/rulesets/adr/generated/adr-dotnet-0064-net-request-scope-observability-context-propagation.rules.json +0 -29
  104. package/rulesets/adr/generated/adr-dotnet-0065-net-pii-safe-structured-logging-pipeline-serilog.rules.json +0 -29
  105. package/rulesets/adr/generated/adr-dotnet-0066-net-lightweight-http-idempotency-via-imemorycache-idistribut.rules.json +0 -28
  106. package/rulesets/adr/generated/adr-dotnet-0069-net-grpc-service-setup-protobuf-contracts.rules.json +0 -29
  107. package/rulesets/adr/generated/adr-dotnet-0070-net-api-endpoint-strategy.rules.json +0 -29
  108. package/rulesets/adr/generated/adr-dotnet-0071-net-data-access-strategy-ef-core-as-default-orm-dapper-for-o.rules.json +0 -27
  109. package/rulesets/adr/generated/adr-dotnet-0072-net-aop-cross-cutting-concern-strategy-dispatchproxy-over-pi.rules.json +0 -29
  110. package/rulesets/adr/generated/adr-nodejs-0003-strict-typescript-standards.rules.json +0 -29
  111. package/rulesets/adr/generated/adr-nodejs-0004-frontend-offline-resilience.rules.json +0 -28
  112. package/rulesets/adr/generated/adr-nodejs-0007-observability-with-opentelemetry-loki-and-jaeger.rules.json +0 -29
  113. package/rulesets/adr/generated/adr-nodejs-0008-progressive-multi-module-evolution-with-api-gateway-and-bff-.rules.json +0 -28
  114. package/rulesets/adr/generated/adr-nodejs-0012-advanced-authorization-rbac-abac-strategy.rules.json +0 -28
  115. package/rulesets/adr/generated/adr-nodejs-0021-high-performance-authentication-graph-compilation.rules.json +0 -28
  116. package/rulesets/adr/generated/adr-nodejs-0022-contextual-authentication-and-pluggable-output-projections.rules.json +0 -28
  117. package/rulesets/adr/generated/adr-nodejs-0023-centralized-authorization-core-strategy.rules.json +0 -28
  118. package/rulesets/adr/generated/adr-nodejs-0026-adaptive-mfa-and-passwordless-platform.rules.json +0 -28
  119. package/rulesets/adr/generated/adr-nodejs-0027-dual-protocol-api-strategy-rest-grpc.rules.json +0 -28
  120. package/rulesets/adr/generated/adr-nodejs-0029-adoption-of-tactical-ddd-primitives-library.rules.json +0 -29
  121. package/rulesets/adr/generated/adr-nodejs-0038-enterprise-error-handling-result-pattern-strategy.rules.json +0 -29
  122. package/rulesets/adr/generated/adr-nodejs-0043-data-access-and-orm-strategy-for-node-js.rules.json +0 -29
  123. package/rulesets/adr/generated/adr-nodejs-0044-frontend-clean-architecture-layer-boundaries-react.rules.json +0 -29
  124. package/rulesets/adr/generated/adr-nodejs-0045-frontend-state-management-zustand-tanstack-query-dual-strate.rules.json +0 -29
  125. package/rulesets/adr/generated/adr-nodejs-0046-prohibition-of-raw-technical-identifiers-in-user-interfaces.rules.json +0 -29
  126. package/rulesets/adr/generated/adr-nodejs-0047-actionable-user-error-contract-and-correlated-diagnostics.rules.json +0 -29
  127. package/rulesets/adr/generated/adr-nodejs-0048-feature-flag-system-scope-and-structured-criteria-model.rules.json +0 -29
  128. package/rulesets/adr/generated/adr-nodejs-0074-monorepo-orchestration-with-nx.rules.json +0 -29
  129. package/rulesets/adr/generated/adr-nodejs-0075-application-gateway-bff-with-nestjs.rules.json +0 -29
  130. package/rulesets/architecture/README.es.md +0 -21
  131. package/rulesets/architecture/README.md +0 -21
  132. package/rulesets/architecture/opa/progressive-axis.rego +0 -50
  133. package/rulesets/cli/README.es.md +0 -17
  134. package/rulesets/cli/README.md +0 -17
  135. package/rulesets/cli/core-parity.rules.json +0 -61
  136. package/rulesets/cli/release-readiness.rules.json +0 -77
  137. package/rulesets/compliance-baseline/README.es.md +0 -26
  138. package/rulesets/compliance-baseline/README.md +0 -26
  139. package/rulesets/compliance-baseline/compliance-baseline.rules.json +0 -81
  140. package/rulesets/contracts/README.es.md +0 -19
  141. package/rulesets/contracts/README.md +0 -19
  142. package/rulesets/contracts/evolith-machine-contracts.json +0 -29
  143. package/rulesets/contracts/fixtures/gate-evidence.success.json +0 -10
  144. package/rulesets/contracts/fixtures/output-envelope.success.json +0 -23
  145. package/rulesets/cross-cutting/README.es.md +0 -14
  146. package/rulesets/cross-cutting/README.md +0 -14
  147. package/rulesets/cross-cutting/compliance-baseline.rules.json +0 -81
  148. package/rulesets/cross-cutting/definition-of-done.rules.json +0 -135
  149. package/rulesets/cross-cutting/engineering-manifesto.rules.json +0 -145
  150. package/rulesets/cross-cutting/repository-taxonomy.rules.json +0 -172
  151. package/rulesets/definition-of-done/README.es.md +0 -26
  152. package/rulesets/definition-of-done/README.md +0 -26
  153. package/rulesets/definition-of-done/definition-of-done.rules.json +0 -135
  154. package/rulesets/engineering-manifesto/README.es.md +0 -26
  155. package/rulesets/engineering-manifesto/README.md +0 -26
  156. package/rulesets/engineering-manifesto/engineering-manifesto.rules.json +0 -145
  157. package/rulesets/evidence/README.es.md +0 -12
  158. package/rulesets/evidence/README.md +0 -12
  159. package/rulesets/evidence/evidence-manifest.rules.json +0 -48
  160. package/rulesets/executive-scorecards/executive-scorecards.rules.es.json +0 -213
  161. package/rulesets/executive-scorecards/executive-scorecards.rules.json +0 -213
  162. package/rulesets/governance/README.es.md +0 -13
  163. package/rulesets/governance/README.md +0 -13
  164. package/rulesets/governance/abac-mcp-access.rules.es.json +0 -41
  165. package/rulesets/governance/abac-mcp-access.rules.json +0 -41
  166. package/rulesets/governance/executive-scorecards.rules.es.json +0 -213
  167. package/rulesets/governance/executive-scorecards.rules.json +0 -213
  168. package/rulesets/governance/inheritance.rules.json +0 -115
  169. package/rulesets/governance/knowledge-intake.rules.json +0 -18
  170. package/rulesets/governance/open-core-boundary.rules.es.json +0 -148
  171. package/rulesets/governance/open-core-boundary.rules.json +0 -148
  172. package/rulesets/governance/satellite-contracts.rules.json +0 -183
  173. package/rulesets/infrastructure/helm-enforcement.rules.json +0 -21
  174. package/rulesets/infrastructure/opa/helm-enforcement.rego +0 -25
  175. package/rulesets/infrastructure/opa/helm-enforcement.test.rego +0 -31
  176. package/rulesets/infrastructure/opa/opa-sidecar-bundle.rego +0 -115
  177. package/rulesets/infrastructure/opa/opa-sidecar-bundle.test.rego +0 -66
  178. package/rulesets/infrastructure/opa-sidecar-bundle.rules.json +0 -18
  179. package/rulesets/mcp/README.es.md +0 -12
  180. package/rulesets/mcp/README.md +0 -12
  181. package/rulesets/mcp/protocol-compliance.rules.json +0 -57
  182. package/rulesets/observability/README.es.md +0 -12
  183. package/rulesets/observability/README.md +0 -12
  184. package/rulesets/observability/telemetry-evidence.rules.json +0 -48
  185. package/rulesets/opa/README.es.md +0 -22
  186. package/rulesets/opa/README.md +0 -22
  187. package/rulesets/opa/abac-mcp-tool-access.rego +0 -122
  188. package/rulesets/opa/abac-mcp-tool-access.test.rego +0 -33
  189. package/rulesets/opa/anti-corruption-layer.rego +0 -39
  190. package/rulesets/opa/anti-corruption-layer.test.rego +0 -118
  191. package/rulesets/opa/ci-cd.rego +0 -41
  192. package/rulesets/opa/ci-cd.test.rego +0 -23
  193. package/rulesets/opa/cicd-quality-gates.rego +0 -29
  194. package/rulesets/opa/cicd-quality-gates.test.rego +0 -54
  195. package/rulesets/opa/cli-core-parity.rego +0 -17
  196. package/rulesets/opa/cli-core-parity.test.rego +0 -39
  197. package/rulesets/opa/cli-readiness.rego +0 -32
  198. package/rulesets/opa/cli-readiness.test.rego +0 -23
  199. package/rulesets/opa/cli-release-readiness.rego +0 -21
  200. package/rulesets/opa/cli-release-readiness.test.rego +0 -46
  201. package/rulesets/opa/compliance-baseline.rego +0 -95
  202. package/rulesets/opa/compliance-baseline.test.rego +0 -89
  203. package/rulesets/opa/dod.rego +0 -42
  204. package/rulesets/opa/dod.test.rego +0 -250
  205. package/rulesets/opa/engineering-manifesto.rego +0 -78
  206. package/rulesets/opa/engineering-manifesto.test.rego +0 -133
  207. package/rulesets/opa/evidence.rego +0 -64
  208. package/rulesets/opa/evidence.test.rego +0 -23
  209. package/rulesets/opa/executive-scorecards.rego +0 -41
  210. package/rulesets/opa/executive-scorecards.test.rego +0 -60
  211. package/rulesets/opa/gitflow-branching.rego +0 -41
  212. package/rulesets/opa/gitflow-branching.test.rego +0 -60
  213. package/rulesets/opa/governance.rego +0 -39
  214. package/rulesets/opa/governance.test.rego +0 -23
  215. package/rulesets/opa/hexagonal-architecture.rego +0 -33
  216. package/rulesets/opa/hexagonal-architecture.test.rego +0 -57
  217. package/rulesets/opa/infrastructure/helm-enforcement.rego +0 -33
  218. package/rulesets/opa/infrastructure/opa-sidecar-bundle.rego +0 -42
  219. package/rulesets/opa/knowledge-intake.rego +0 -98
  220. package/rulesets/opa/knowledge-intake.test.rego +0 -50
  221. package/rulesets/opa/main.rego +0 -147
  222. package/rulesets/opa/main_test.rego +0 -149
  223. package/rulesets/opa/mcp.rego +0 -61
  224. package/rulesets/opa/mcp.test.rego +0 -27
  225. package/rulesets/opa/multi-runtime.rego +0 -33
  226. package/rulesets/opa/multi-runtime.test.rego +0 -53
  227. package/rulesets/opa/multi-tenancy.rego +0 -33
  228. package/rulesets/opa/multi-tenancy.test.rego +0 -53
  229. package/rulesets/opa/open-core-boundary.rego +0 -33
  230. package/rulesets/opa/open-core-boundary.test.rego +0 -60
  231. package/rulesets/opa/protocol-selection.rego +0 -29
  232. package/rulesets/opa/protocol-selection.test.rego +0 -46
  233. package/rulesets/opa/rbac/gate-role-enforcement.rego +0 -112
  234. package/rulesets/opa/repository-taxonomy.rego +0 -98
  235. package/rulesets/opa/repository-taxonomy.test.rego +0 -91
  236. package/rulesets/opa/satellite-contracts.rego +0 -42
  237. package/rulesets/opa/satellite-contracts.test.rego +0 -70
  238. package/rulesets/opa/schemas/abac-mcp-tool-access.input.schema.json +0 -21
  239. package/rulesets/opa/schemas/anti-corruption-layer.input.schema.json +0 -25
  240. package/rulesets/opa/schemas/ci-cd.input.schema.json +0 -27
  241. package/rulesets/opa/schemas/cicd-quality-gates.input.schema.json +0 -33
  242. package/rulesets/opa/schemas/cli-core-parity.input.schema.json +0 -30
  243. package/rulesets/opa/schemas/cli-readiness.input.schema.json +0 -28
  244. package/rulesets/opa/schemas/cli-release-readiness.input.schema.json +0 -26
  245. package/rulesets/opa/schemas/compliance-baseline.input.schema.json +0 -25
  246. package/rulesets/opa/schemas/dod.input.schema.json +0 -38
  247. package/rulesets/opa/schemas/engineering-manifesto.input.schema.json +0 -24
  248. package/rulesets/opa/schemas/evidence.input.schema.json +0 -35
  249. package/rulesets/opa/schemas/executive-scorecards.input.schema.json +0 -36
  250. package/rulesets/opa/schemas/gitflow-branching.input.schema.json +0 -36
  251. package/rulesets/opa/schemas/governance.input.schema.json +0 -19
  252. package/rulesets/opa/schemas/hexagonal-architecture.input.schema.json +0 -46
  253. package/rulesets/opa/schemas/knowledge-intake.input.schema.json +0 -57
  254. package/rulesets/opa/schemas/mcp.input.schema.json +0 -38
  255. package/rulesets/opa/schemas/multi-runtime.input.schema.json +0 -27
  256. package/rulesets/opa/schemas/multi-tenancy.input.schema.json +0 -27
  257. package/rulesets/opa/schemas/open-core-boundary.input.schema.json +0 -36
  258. package/rulesets/opa/schemas/protocol-selection.input.schema.json +0 -26
  259. package/rulesets/opa/schemas/repository-taxonomy.input.schema.json +0 -18
  260. package/rulesets/opa/schemas/satellite-contracts.input.schema.json +0 -38
  261. package/rulesets/opa/schemas/taxonomy.input.schema.json +0 -27
  262. package/rulesets/opa/schemas/testing-pyramid.input.schema.json +0 -42
  263. package/rulesets/opa/schemas/version-pinning.input.schema.json +0 -39
  264. package/rulesets/opa/sdlc/coverage.rego +0 -49
  265. package/rulesets/opa/sdlc/coverage.test.rego +0 -29
  266. package/rulesets/opa/sdlc/pyramid-distribution.rego +0 -31
  267. package/rulesets/opa/sdlc/pyramid-distribution.test.rego +0 -33
  268. package/rulesets/opa/taxonomy.rego +0 -51
  269. package/rulesets/opa/taxonomy.test.rego +0 -28
  270. package/rulesets/opa/telemetry-evidence.rego +0 -102
  271. package/rulesets/opa/testing-pyramid.rego +0 -49
  272. package/rulesets/opa/testing-pyramid.test.rego +0 -81
  273. package/rulesets/opa/version-pinning.rego +0 -99
  274. package/rulesets/opa/version-pinning.test.rego +0 -28
  275. package/rulesets/phase-gates/README.es.md +0 -28
  276. package/rulesets/phase-gates/README.md +0 -28
  277. package/rulesets/phase-gates/phase-gates.rules.json +0 -297
  278. package/rulesets/quality-thresholds/README.es.md +0 -28
  279. package/rulesets/quality-thresholds/README.md +0 -28
  280. package/rulesets/quality-thresholds/quality-thresholds.rules.json +0 -96
  281. package/rulesets/repository-taxonomy/README.es.md +0 -26
  282. package/rulesets/repository-taxonomy/README.md +0 -26
  283. package/rulesets/repository-taxonomy/repository-taxonomy.rules.json +0 -172
  284. package/rulesets/satellite-contracts/README.es.md +0 -27
  285. package/rulesets/satellite-contracts/README.md +0 -27
  286. package/rulesets/satellite-contracts/satellite-contracts.rules.json +0 -183
  287. package/rulesets/schema/README.es.md +0 -39
  288. package/rulesets/schema/README.md +0 -39
  289. package/rulesets/schema/adr.schema.json +0 -138
  290. package/rulesets/schema/agile-backlog.schema.json +0 -91
  291. package/rulesets/schema/ballpark-estimation.schema.json +0 -109
  292. package/rulesets/schema/build-vs-compose.schema.json +0 -98
  293. package/rulesets/schema/cli-impact-analysis.schema.json +0 -114
  294. package/rulesets/schema/discovery-canvas.schema.json +0 -92
  295. package/rulesets/schema/evolith-user-story.schema.json +0 -105
  296. package/rulesets/schema/evolith-yaml.schema.json +0 -191
  297. package/rulesets/schema/functional-story.schema.json +0 -111
  298. package/rulesets/schema/gate-evidence.schema.json +0 -85
  299. package/rulesets/schema/integration-evidence.schema.json +0 -47
  300. package/rulesets/schema/knowledge-intake.schema.json +0 -67
  301. package/rulesets/schema/knowledge-projection.schema.json +0 -24
  302. package/rulesets/schema/maturity-evidence.schema.json +0 -59
  303. package/rulesets/schema/observability-validation.schema.json +0 -85
  304. package/rulesets/schema/on-call-handoff.schema.json +0 -91
  305. package/rulesets/schema/output-envelope.schema.json +0 -102
  306. package/rulesets/schema/prd.schema.json +0 -117
  307. package/rulesets/schema/release-notes.schema.json +0 -138
  308. package/rulesets/schema/rollback-rehearsal.schema.json +0 -73
  309. package/rulesets/schema/ruleset-sdlc.schema.json +0 -59
  310. package/rulesets/schema/ruleset-standard.schema.json +0 -73
  311. package/rulesets/schema/security-scan-report.schema.json +0 -79
  312. package/rulesets/schema/source-registry.schema.json +0 -51
  313. package/rulesets/schema/technical-feasibility.schema.json +0 -66
  314. package/rulesets/schema/technical-story.schema.json +0 -112
  315. package/rulesets/schema/test-summary-report.schema.json +0 -158
  316. package/rulesets/schema/topology-composition.schema.json +0 -43
  317. package/rulesets/schema/topology-manifest.schema.json +0 -421
  318. package/rulesets/sdlc/README.es.md +0 -12
  319. package/rulesets/sdlc/README.md +0 -12
  320. package/rulesets/sdlc/default-workflow.yaml +0 -73
  321. package/rulesets/sdlc/dependency-pinning.rules.json +0 -183
  322. package/rulesets/sdlc/phase-gates.rules.json +0 -297
  323. package/rulesets/sdlc/quality-thresholds.rules.json +0 -96
  324. package/rulesets/topologies/README.es.md +0 -42
  325. package/rulesets/topologies/README.md +0 -42
  326. package/rulesets/topologies/agentic-ai/README.es.md +0 -142
  327. package/rulesets/topologies/agentic-ai/README.md +0 -142
  328. package/rulesets/topologies/agentic-ai/adoption.es.md +0 -37
  329. package/rulesets/topologies/agentic-ai/adoption.md +0 -37
  330. package/rulesets/topologies/agentic-ai/agent.config.schema.json +0 -100
  331. package/rulesets/topologies/agentic-ai/agentic-ai.rego +0 -46
  332. package/rulesets/topologies/agentic-ai/agentic-ai.rules.json +0 -109
  333. package/rulesets/topologies/agentic-ai/agentic-ai.test.rego +0 -68
  334. package/rulesets/topologies/agentic-ai/agentic-ai.wasm +0 -0
  335. package/rulesets/topologies/agentic-ai/cli/cli-flows.es.md +0 -35
  336. package/rulesets/topologies/agentic-ai/cli/cli-flows.md +0 -45
  337. package/rulesets/topologies/agentic-ai/evidence.es.md +0 -25
  338. package/rulesets/topologies/agentic-ai/evidence.md +0 -25
  339. package/rulesets/topologies/agentic-ai/evolution.es.md +0 -26
  340. package/rulesets/topologies/agentic-ai/evolution.md +0 -26
  341. package/rulesets/topologies/agentic-ai/fixtures/invalid-agent.config.json +0 -48
  342. package/rulesets/topologies/agentic-ai/fixtures/valid-agent.config.json +0 -48
  343. package/rulesets/topologies/agentic-ai/maturity.es.md +0 -33
  344. package/rulesets/topologies/agentic-ai/maturity.md +0 -33
  345. package/rulesets/topologies/agentic-ai/mcp/mcp-manifest.json +0 -100
  346. package/rulesets/topologies/agentic-ai/openapi/openapi.yaml +0 -187
  347. package/rulesets/topologies/agentic-ai/operations.es.md +0 -32
  348. package/rulesets/topologies/agentic-ai/operations.md +0 -32
  349. package/rulesets/topologies/agentic-ai/parity-fixtures/compliant.json +0 -18
  350. package/rulesets/topologies/agentic-ai/parity-fixtures/violation.json +0 -22
  351. package/rulesets/topologies/agentic-ai/patterns.es.md +0 -32
  352. package/rulesets/topologies/agentic-ai/patterns.md +0 -32
  353. package/rulesets/topologies/agentic-ai/resilience.es.md +0 -26
  354. package/rulesets/topologies/agentic-ai/resilience.md +0 -26
  355. package/rulesets/topologies/agentic-ai/runbooks.es.md +0 -48
  356. package/rulesets/topologies/agentic-ai/runbooks.md +0 -48
  357. package/rulesets/topologies/agentic-ai/security.es.md +0 -26
  358. package/rulesets/topologies/agentic-ai/security.md +0 -26
  359. package/rulesets/topologies/agentic-ai/topology.manifest.json +0 -127
  360. package/rulesets/topologies/data-mesh/README.es.md +0 -69
  361. package/rulesets/topologies/data-mesh/README.md +0 -69
  362. package/rulesets/topologies/data-mesh/adoption.es.md +0 -95
  363. package/rulesets/topologies/data-mesh/adoption.md +0 -95
  364. package/rulesets/topologies/data-mesh/cli/cli-flows.es.md +0 -41
  365. package/rulesets/topologies/data-mesh/cli/cli-flows.md +0 -53
  366. package/rulesets/topologies/data-mesh/data-mesh.rego +0 -11
  367. package/rulesets/topologies/data-mesh/data-mesh.rules.json +0 -100
  368. package/rulesets/topologies/data-mesh/data-mesh.test.rego +0 -107
  369. package/rulesets/topologies/data-mesh/data-mesh.wasm +0 -0
  370. package/rulesets/topologies/data-mesh/evidence.es.md +0 -111
  371. package/rulesets/topologies/data-mesh/evidence.md +0 -111
  372. package/rulesets/topologies/data-mesh/evolution.es.md +0 -67
  373. package/rulesets/topologies/data-mesh/evolution.md +0 -67
  374. package/rulesets/topologies/data-mesh/fixtures/invalid.topology.config.json +0 -12
  375. package/rulesets/topologies/data-mesh/fixtures/valid.topology.config.json +0 -12
  376. package/rulesets/topologies/data-mesh/maturity.es.md +0 -36
  377. package/rulesets/topologies/data-mesh/maturity.md +0 -36
  378. package/rulesets/topologies/data-mesh/mcp/mcp-manifest.json +0 -68
  379. package/rulesets/topologies/data-mesh/openapi/openapi.yaml +0 -186
  380. package/rulesets/topologies/data-mesh/operations.es.md +0 -63
  381. package/rulesets/topologies/data-mesh/operations.md +0 -63
  382. package/rulesets/topologies/data-mesh/parity-fixtures/compliant.json +0 -18
  383. package/rulesets/topologies/data-mesh/parity-fixtures/violation.json +0 -21
  384. package/rulesets/topologies/data-mesh/patterns.es.md +0 -67
  385. package/rulesets/topologies/data-mesh/patterns.md +0 -67
  386. package/rulesets/topologies/data-mesh/resilience.es.md +0 -64
  387. package/rulesets/topologies/data-mesh/resilience.md +0 -64
  388. package/rulesets/topologies/data-mesh/runbooks.es.md +0 -147
  389. package/rulesets/topologies/data-mesh/runbooks.md +0 -147
  390. package/rulesets/topologies/data-mesh/security.es.md +0 -66
  391. package/rulesets/topologies/data-mesh/security.md +0 -66
  392. package/rulesets/topologies/data-mesh/topology.config.schema.json +0 -30
  393. package/rulesets/topologies/data-mesh/topology.manifest.json +0 -107
  394. package/rulesets/topologies/edge-computing/README.es.md +0 -81
  395. package/rulesets/topologies/edge-computing/README.md +0 -81
  396. package/rulesets/topologies/edge-computing/adoption.es.md +0 -268
  397. package/rulesets/topologies/edge-computing/adoption.md +0 -268
  398. package/rulesets/topologies/edge-computing/cli/cli-flows.es.md +0 -41
  399. package/rulesets/topologies/edge-computing/cli/cli-flows.md +0 -53
  400. package/rulesets/topologies/edge-computing/edge-computing.rego +0 -41
  401. package/rulesets/topologies/edge-computing/edge-computing.rules.json +0 -50
  402. package/rulesets/topologies/edge-computing/edge-computing.test.rego +0 -33
  403. package/rulesets/topologies/edge-computing/edge-computing.wasm +0 -0
  404. package/rulesets/topologies/edge-computing/evidence.es.md +0 -263
  405. package/rulesets/topologies/edge-computing/evidence.md +0 -263
  406. package/rulesets/topologies/edge-computing/evolution.es.md +0 -257
  407. package/rulesets/topologies/edge-computing/evolution.md +0 -257
  408. package/rulesets/topologies/edge-computing/fixtures/invalid.topology.config.json +0 -6
  409. package/rulesets/topologies/edge-computing/fixtures/valid.topology.config.json +0 -6
  410. package/rulesets/topologies/edge-computing/maturity.es.md +0 -36
  411. package/rulesets/topologies/edge-computing/maturity.md +0 -36
  412. package/rulesets/topologies/edge-computing/mcp/mcp-manifest.json +0 -72
  413. package/rulesets/topologies/edge-computing/openapi/openapi.yaml +0 -187
  414. package/rulesets/topologies/edge-computing/operations.es.md +0 -148
  415. package/rulesets/topologies/edge-computing/operations.md +0 -148
  416. package/rulesets/topologies/edge-computing/parity-fixtures/compliant.json +0 -12
  417. package/rulesets/topologies/edge-computing/parity-fixtures/violation.json +0 -13
  418. package/rulesets/topologies/edge-computing/patterns.es.md +0 -291
  419. package/rulesets/topologies/edge-computing/patterns.md +0 -290
  420. package/rulesets/topologies/edge-computing/resilience.es.md +0 -232
  421. package/rulesets/topologies/edge-computing/resilience.md +0 -229
  422. package/rulesets/topologies/edge-computing/runbooks.es.md +0 -405
  423. package/rulesets/topologies/edge-computing/runbooks.md +0 -405
  424. package/rulesets/topologies/edge-computing/security.es.md +0 -218
  425. package/rulesets/topologies/edge-computing/security.md +0 -218
  426. package/rulesets/topologies/edge-computing/topology.config.schema.json +0 -13
  427. package/rulesets/topologies/edge-computing/topology.manifest.json +0 -113
  428. package/rulesets/topologies/event-driven/README.es.md +0 -71
  429. package/rulesets/topologies/event-driven/README.md +0 -71
  430. package/rulesets/topologies/event-driven/adoption.es.md +0 -67
  431. package/rulesets/topologies/event-driven/adoption.md +0 -67
  432. package/rulesets/topologies/event-driven/cli/cli-flows.es.md +0 -41
  433. package/rulesets/topologies/event-driven/cli/cli-flows.md +0 -53
  434. package/rulesets/topologies/event-driven/event-driven.rego +0 -11
  435. package/rulesets/topologies/event-driven/event-driven.rules.json +0 -100
  436. package/rulesets/topologies/event-driven/event-driven.test.rego +0 -107
  437. package/rulesets/topologies/event-driven/event-driven.wasm +0 -0
  438. package/rulesets/topologies/event-driven/evidence.es.md +0 -69
  439. package/rulesets/topologies/event-driven/evidence.md +0 -69
  440. package/rulesets/topologies/event-driven/evolution.es.md +0 -59
  441. package/rulesets/topologies/event-driven/evolution.md +0 -59
  442. package/rulesets/topologies/event-driven/fixtures/invalid.topology.config.json +0 -12
  443. package/rulesets/topologies/event-driven/fixtures/valid.topology.config.json +0 -12
  444. package/rulesets/topologies/event-driven/maturity.es.md +0 -36
  445. package/rulesets/topologies/event-driven/maturity.md +0 -36
  446. package/rulesets/topologies/event-driven/mcp/mcp-manifest.json +0 -68
  447. package/rulesets/topologies/event-driven/openapi/openapi.yaml +0 -186
  448. package/rulesets/topologies/event-driven/operations.es.md +0 -67
  449. package/rulesets/topologies/event-driven/operations.md +0 -67
  450. package/rulesets/topologies/event-driven/parity-fixtures/compliant.json +0 -18
  451. package/rulesets/topologies/event-driven/parity-fixtures/violation.json +0 -21
  452. package/rulesets/topologies/event-driven/patterns.es.md +0 -68
  453. package/rulesets/topologies/event-driven/patterns.md +0 -68
  454. package/rulesets/topologies/event-driven/resilience.es.md +0 -65
  455. package/rulesets/topologies/event-driven/resilience.md +0 -65
  456. package/rulesets/topologies/event-driven/runbooks.es.md +0 -79
  457. package/rulesets/topologies/event-driven/runbooks.md +0 -79
  458. package/rulesets/topologies/event-driven/security.es.md +0 -59
  459. package/rulesets/topologies/event-driven/security.md +0 -59
  460. package/rulesets/topologies/event-driven/topology.config.schema.json +0 -30
  461. package/rulesets/topologies/event-driven/topology.manifest.json +0 -109
  462. package/rulesets/topologies/progressive-axis/distributed-modules/distributed-modules.rules.es.json +0 -111
  463. package/rulesets/topologies/progressive-axis/distributed-modules/distributed-modules.rules.json +0 -111
  464. package/rulesets/topologies/progressive-axis/microservices/microservices.rules.es.json +0 -106
  465. package/rulesets/topologies/progressive-axis/microservices/microservices.rules.json +0 -106
  466. package/rulesets/topologies/progressive-axis/modular-monolith/modular-monolith.rules.es.json +0 -148
  467. package/rulesets/topologies/progressive-axis/modular-monolith/modular-monolith.rules.json +0 -148
  468. package/rulesets/topologies/serverless/README.es.md +0 -74
  469. package/rulesets/topologies/serverless/README.md +0 -74
  470. package/rulesets/topologies/serverless/adoption.es.md +0 -50
  471. package/rulesets/topologies/serverless/adoption.md +0 -50
  472. package/rulesets/topologies/serverless/cli/cli-flows.es.md +0 -41
  473. package/rulesets/topologies/serverless/cli/cli-flows.md +0 -53
  474. package/rulesets/topologies/serverless/evidence.es.md +0 -66
  475. package/rulesets/topologies/serverless/evidence.md +0 -66
  476. package/rulesets/topologies/serverless/evolution.es.md +0 -36
  477. package/rulesets/topologies/serverless/evolution.md +0 -36
  478. package/rulesets/topologies/serverless/fixtures/invalid.topology.config.json +0 -6
  479. package/rulesets/topologies/serverless/fixtures/valid.topology.config.json +0 -6
  480. package/rulesets/topologies/serverless/maturity.es.md +0 -36
  481. package/rulesets/topologies/serverless/maturity.md +0 -36
  482. package/rulesets/topologies/serverless/mcp/mcp-manifest.json +0 -72
  483. package/rulesets/topologies/serverless/openapi/openapi.yaml +0 -186
  484. package/rulesets/topologies/serverless/operations.es.md +0 -36
  485. package/rulesets/topologies/serverless/operations.md +0 -36
  486. package/rulesets/topologies/serverless/parity-fixtures/compliant.json +0 -13
  487. package/rulesets/topologies/serverless/parity-fixtures/violation.json +0 -15
  488. package/rulesets/topologies/serverless/patterns.es.md +0 -36
  489. package/rulesets/topologies/serverless/patterns.md +0 -36
  490. package/rulesets/topologies/serverless/resilience.es.md +0 -36
  491. package/rulesets/topologies/serverless/resilience.md +0 -36
  492. package/rulesets/topologies/serverless/runbooks.es.md +0 -68
  493. package/rulesets/topologies/serverless/runbooks.md +0 -68
  494. package/rulesets/topologies/serverless/security.es.md +0 -36
  495. package/rulesets/topologies/serverless/security.md +0 -36
  496. package/rulesets/topologies/serverless/serverless.rego +0 -32
  497. package/rulesets/topologies/serverless/serverless.rules.json +0 -33
  498. package/rulesets/topologies/serverless/serverless.test.rego +0 -28
  499. package/rulesets/topologies/serverless/serverless.wasm +0 -0
  500. package/rulesets/topologies/serverless/topology.config.schema.json +0 -28
  501. package/rulesets/topologies/serverless/topology.manifest.json +0 -114
@@ -1,213 +0,0 @@
1
- {
2
- "$schema": "../schema/ruleset-standard.schema.json",
3
- "$id": "https://evolith.dev/rulesets/executive-scorecards/executive-scorecards.rules.json",
4
- "title": "Executive Scorecards Rules",
5
- "description": "Rules encoding DORA and SPACE metrics for executive visibility. These rules ensure Predictability, Adherencia (Architecture Drift Index), and Eficiencia across satellite products.",
6
- "version": "1.0.0",
7
- "effectiveDate": "2026-06-06",
8
- "scope": "satellite",
9
- "category": "executive-metrics",
10
- "principles": [
11
- {
12
- "id": "DORA-01",
13
- "principle": "Deployment Frequency",
14
- "statement": "Satellite products MUST measure and report deployment frequency. Target: at least once per week to production.",
15
- "rationale": "Evololith Product Vision §6: Deployment Frequency is a core DORA metric. High deployment frequency indicates healthy CD pipeline.",
16
- "severity": "MUST",
17
- "validationQuery": "CI/CD pipeline exports deployment frequency metric. Report shows deployments/week to production.",
18
- "blocking": false,
19
- "metrics": {
20
- "name": "Deployment Frequency",
21
- "unit": "deployments per week",
22
- "target": ">= 1",
23
- "measurement": "Count of production deployments in trailing 4 weeks / 4",
24
- "dashboardRequired": true
25
- },
26
- "references": [
27
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
28
- ]
29
- },
30
- {
31
- "id": "DORA-02",
32
- "principle": "Lead Time for Changes",
33
- "statement": "Satellite products MUST measure and report lead time from commit to production. Target: less than 7 days for medium changes.",
34
- "rationale": "Evololith Product Vision §6: Lead Time measures how quickly changes flow from commit to production. Short lead time indicates efficient pipeline.",
35
- "severity": "MUST",
36
- "validationQuery": "CI/CD pipeline exports lead time metric. Report shows median days from first commit to production deployment.",
37
- "blocking": false,
38
- "metrics": {
39
- "name": "Lead Time for Changes",
40
- "unit": "days",
41
- "target": "<= 7",
42
- "measurement": "Median time from first commit of a change to production deployment",
43
- "dashboardRequired": true
44
- },
45
- "references": [
46
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
47
- ]
48
- },
49
- {
50
- "id": "DORA-03",
51
- "principle": "Change Failure Rate",
52
- "statement": "Satellite products MUST measure and report change failure rate. Target: less than 15% of deployments cause failures.",
53
- "rationale": "Evololith Product Vision §6: Change Failure Rate measures the percentage of deployments causing production failures.",
54
- "severity": "MUST",
55
- "validationQuery": "CI/CD pipeline exports change failure rate. Report shows % of deployments requiring rollback or hotfix.",
56
- "blocking": false,
57
- "metrics": {
58
- "name": "Change Failure Rate",
59
- "unit": "percentage",
60
- "target": "<= 15%",
61
- "measurement": "(Failed deployments / Total deployments) * 100 in trailing 4 weeks",
62
- "dashboardRequired": true
63
- },
64
- "references": [
65
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
66
- ]
67
- },
68
- {
69
- "id": "DORA-04",
70
- "principle": "Time to Restore",
71
- "statement": "Satellite products MUST measure and report MTTR (Mean Time To Restore). Target: less than 1 hour for critical failures.",
72
- "rationale": "Evolith Product Vision §6: Time to Restore measures how quickly the team recovers from failures. Low MTTR indicates effective incident response.",
73
- "severity": "MUST",
74
- "validationQuery": "Incident management system exports MTTR. Report shows median hours from failure detection to service restoration.",
75
- "blocking": false,
76
- "metrics": {
77
- "name": "Time to Restore",
78
- "unit": "hours",
79
- "target": "<= 1",
80
- "measurement": "Median time from failure detection to restoration for P1/P2 incidents",
81
- "dashboardRequired": true
82
- },
83
- "references": [
84
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
85
- ]
86
- },
87
- {
88
- "id": "SPACE-01",
89
- "principle": "Reliability (Observability)",
90
- "statement": "Satellite products MUST have observability infrastructure (traces, logs, metrics) operational in production.",
91
- "rationale": "Evololith Product Vision §6: Reliability ensures production systems are observable. Evolith ADR-0007 mandates OpenTelemetry.",
92
- "severity": "MUST",
93
- "validationQuery": "Production observability dashboard accessible. OpenTelemetry traces flowing. Error rate < 1%.",
94
- "blocking": true,
95
- "metrics": {
96
- "name": "Error Rate",
97
- "unit": "percentage",
98
- "target": "<= 1%",
99
- "measurement": "(Failed requests / Total requests) * 100 in trailing 24 hours",
100
- "dashboardRequired": true
101
- },
102
- "references": [
103
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards",
104
- "reference/architecture/adrs/nodejs/0007-observability-telemetry-loki-opentelemetry.md"
105
- ]
106
- },
107
- {
108
- "id": "SPACE-02",
109
- "principle": "Culture (Team Health)",
110
- "statement": "Satellite products SHOULD measure team health quarterly. Target: > 70% positive sentiment.",
111
- "rationale": "Evolith Product Vision §6: Culture measures team satisfaction and health. Teams that are healthy ship higher quality.",
112
- "severity": "SHOULD",
113
- "validationQuery": "Team health survey conducted quarterly. Results stored in product documentation. Trend tracked.",
114
- "blocking": false,
115
- "metrics": {
116
- "name": "Team Health Score",
117
- "unit": "percentage",
118
- "target": ">= 70%",
119
- "measurement": "% positive responses in quarterly team health survey",
120
- "dashboardRequired": false
121
- },
122
- "references": [
123
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
124
- ]
125
- },
126
- {
127
- "id": "SPACE-03",
128
- "principle": "Execution (Throughput)",
129
- "statement": "Satellite products MUST measure and report sprint throughput. Target: > 80% of committed work delivered.",
130
- "rationale": "Evolith Product Vision §6: Execution measures delivery effectiveness. Consistent throughput indicates predictable pipeline.",
131
- "severity": "SHOULD",
132
- "validationQuery": "Sprint metrics exported. Report shows % of story points delivered vs committed in trailing 4 sprints.",
133
- "blocking": false,
134
- "metrics": {
135
- "name": "Sprint Throughput",
136
- "unit": "percentage",
137
- "target": ">= 80%",
138
- "measurement": "(Delivered story points / Committed story points) * 100 in trailing 4 sprints",
139
- "dashboardRequired": true
140
- },
141
- "references": [
142
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
143
- ]
144
- },
145
- {
146
- "id": "SPACE-04",
147
- "principle": "Communication (Visibility)",
148
- "statement": "Satellite products MUST have current SDLC state visible to all stakeholders. Target: phase gate status updated within 24h.",
149
- "rationale": "Evolith Product Vision §6: Communication ensures stakeholders have real-time visibility into development state.",
150
- "severity": "SHOULD",
151
- "validationQuery": "Phase gate status board accessible. Updates made within 24h of state change. All stakeholders have access.",
152
- "blocking": false,
153
- "metrics": {
154
- "name": "Gate Status Freshness",
155
- "unit": "hours",
156
- "target": "<= 24",
157
- "measurement": "Max time between state change and status board update",
158
- "dashboardRequired": true
159
- },
160
- "references": [
161
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
162
- ]
163
- },
164
- {
165
- "id": "SPACE-05",
166
- "principle": "Sponsorship (Leadership Alignment)",
167
- "statement": "Satellite products MUST have executive sponsor assigned and actively engaged. Sponsor must review quarterly status.",
168
- "rationale": "Evolith Product Vision §6: Sponsorship ensures leadership alignment. Active sponsorship prevents strategic drift.",
169
- "severity": "MUST",
170
- "validationQuery": "evolith.yaml includes governance.executiveSponsor field. Quarterly review meeting documented.",
171
- "blocking": false,
172
- "metrics": {
173
- "name": "Executive Engagement",
174
- "unit": "reviews per quarter",
175
- "target": ">= 1",
176
- "measurement": "Count of executive sponsor reviews in trailing quarter",
177
- "dashboardRequired": false
178
- },
179
- "references": [
180
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
181
- ]
182
- },
183
- {
184
- "id": "DRIFT-01",
185
- "principle": "Architecture Drift Index",
186
- "statement": "Satellite products MUST measure and report Architecture Drift Index. Target: < 10% drift from Evolith Core standards.",
187
- "rationale": "Evolith Product Vision §6: Adherence measured via Architecture Drift Index. Drift > threshold indicates erosion of governance.",
188
- "severity": "MUST",
189
- "validationQuery": "Evolith CLI validate command run monthly. Report shows % of rules failed vs total applicable rules.",
190
- "blocking": false,
191
- "metrics": {
192
- "name": "Architecture Drift Index",
193
- "unit": "percentage",
194
- "target": "<= 10%",
195
- "measurement": "(Failed rules / Total applicable rules) * 100",
196
- "dashboardRequired": true
197
- },
198
- "references": [
199
- "reference/governance/standards/vision/evolith-product-vision-master.md#6-executive-vision-scorecards"
200
- ]
201
- }
202
- ],
203
- "governance": {
204
- "complianceVerification": "DORA+SPACE metrics verified quarterly during governance review. Evolith CLI validate command provides drift index.",
205
- "exceptionProcess": "Architecture Board review required when any metric exceeds target for 2+ consecutive quarters.",
206
- "dashboardRequirements": "Metrics marked dashboardRequired: true MUST be visible in Evolith Tracker or equivalent executive dashboard.",
207
- "reportingCadence": "DORA metrics reported monthly. SPACE metrics reported quarterly."
208
- },
209
- "bilingual": {
210
- "en": "Executive Scorecards Rules",
211
- "es": "Reglas de Scorecards Ejecutivos"
212
- }
213
- }
@@ -1,13 +0,0 @@
1
- # Índice de Reglas de Gobernanza
2
-
3
- Reglas para la herencia federada y la validación de contratos de satélites.
4
-
5
- | Conjunto de Reglas | Archivo | Descripción |
6
- |---|---|---|
7
- | **Reglas de Herencia** | [inheritance.rules.json](./inheritance.rules.json) | Cómo los satélites heredan reglas de Evolith Core |
8
- | **Contratos de Satélites** | [satellite-contracts.rules.json](./satellite-contracts.rules.json) | Campos requeridos y opcionales de evolith.yaml |
9
- | **Ingesta de Conocimiento** | [knowledge-intake.rules.json](./knowledge-intake.rules.json) | Procedencia, revisión de Winston y evidencia de promoción para conocimiento externo |
10
-
11
- ---
12
-
13
- Volver al [Rulesets Hub](../README.es.md)
@@ -1,13 +0,0 @@
1
- # Governance Rules Index
2
-
3
- Rules for federated inheritance and satellite contract validation.
4
-
5
- | Rule Set | File | Description |
6
- |---|---|---|
7
- | **Inheritance Rules** | [inheritance.rules.json](./inheritance.rules.json) | How satellites inherit rules from Evolith Core |
8
- | **Satellite Contracts** | [satellite-contracts.rules.json](./satellite-contracts.rules.json) | Required and optional evolith.yaml fields |
9
- | **Knowledge Intake** | [knowledge-intake.rules.json](./knowledge-intake.rules.json) | Provenance, Winston review, and promotion evidence for external knowledge |
10
-
11
- ---
12
-
13
- Back to [Rulesets Hub](../README.md)
@@ -1,41 +0,0 @@
1
- {
2
- "$schema": "../schema/ruleset-standard.schema.json",
3
- "$id": "https://evolith.dev/rulesets/governance/abac-mcp-access.rules.json",
4
- "title": "Reglas de Control de Acceso ABAC para Herramientas MCP",
5
- "description": "Reglas de Control de Acceso Basado en Atributos para ejecución de herramientas MCP agénticas. Contraparte nativa TypeScript de abac-mcp-tool-access.rego. Implementa ADR-0087 Paridad Dual-Engine (R-25).",
6
- "version": "1.0.0",
7
- "effectiveDate": "2026-06-26",
8
- "scope": "satellite",
9
- "category": "security",
10
- "adrRef": "reference/architecture/adrs/core/0087-abac-agentic-tool-execution.md",
11
- "opaRef": "rulesets/opa/abac-mcp-tool-access.rego",
12
- "rules": [
13
- {
14
- "id": "ABAC-01",
15
- "severity": "MUST",
16
- "category": "control-de-acceso",
17
- "title": "El Acceso a Herramientas Requiere Autorización",
18
- "description": "Las llamadas a herramientas MCP DEBEN estar autorizadas. Una llamada es denegada cuando: (a) una regla explícita de denegación se activa (herramienta de deploy en producción para no-arquitecto), o (b) ninguna regla de permiso aplica (el usuario carece del rol requerido para la clasificación de la herramienta). Jerarquía de roles: read_only (viewer, auditor) → developer/qa → operator/sre → architect/admin.",
19
- "validationQuery": "Verificar que la política ABAC otorga allow y ningún deny se activa para la llamada, dados user.roles y environment.",
20
- "blocking": true
21
- },
22
- {
23
- "id": "ABAC-02",
24
- "severity": "MUST",
25
- "category": "control-de-acceso",
26
- "title": "El Contexto de Usuario Debe Contener Roles",
27
- "description": "El contexto de ejecución de herramientas MCP DEBE incluir al menos un rol en el array user.roles. Un array de roles vacío provoca que todas las llamadas sean denegadas — no existe estado de usuario autenticado sin rol.",
28
- "validationQuery": "Verificar que el array user.roles no está vacío antes de permitir cualquier ejecución de herramienta.",
29
- "blocking": true
30
- },
31
- {
32
- "id": "ABAC-03",
33
- "severity": "MUST",
34
- "category": "control-de-acceso",
35
- "title": "La Herramienta Debe Estar Clasificada en el Registro",
36
- "description": "La herramienta solicitada DEBE aparecer en uno de los tres conjuntos de clasificación: read_tools, write_tools o deploy_tools. Las herramientas no clasificadas son denegadas. La clasificación de herramientas se mantiene en el registro de política ABAC y se actualiza mediante revisión del Architecture Board.",
37
- "validationQuery": "Verificar que tool_name existe en el registro de clasificación read_tools, write_tools o deploy_tools.",
38
- "blocking": true
39
- }
40
- ]
41
- }
@@ -1,41 +0,0 @@
1
- {
2
- "$schema": "../schema/ruleset-standard.schema.json",
3
- "$id": "https://evolith.dev/rulesets/governance/abac-mcp-access.rules.json",
4
- "title": "ABAC MCP Tool Access Rules",
5
- "description": "Attribute-Based Access Control rules for agentic MCP tool execution. Native TypeScript counterpart to abac-mcp-tool-access.rego. Implements ADR-0087 Dual-Engine Parity (R-25).",
6
- "version": "1.0.0",
7
- "effectiveDate": "2026-06-26",
8
- "scope": "satellite",
9
- "category": "security",
10
- "adrRef": "reference/architecture/adrs/core/0087-abac-agentic-tool-execution.md",
11
- "opaRef": "rulesets/opa/abac-mcp-tool-access.rego",
12
- "rules": [
13
- {
14
- "id": "ABAC-01",
15
- "severity": "MUST",
16
- "category": "access-control",
17
- "title": "Tool Access Requires Authorization",
18
- "description": "MCP tool calls MUST be authorized. A tool call is denied when: (a) an explicit deny rule fires (deploy tool in production for non-architect), or (b) no allow rule matches (user lacks the required role for the tool classification). Role hierarchy: read_only (viewer, auditor) → developer/qa → operator/sre → architect/admin.",
19
- "validationQuery": "Verify ABAC policy grants allow and no deny fires for the tool call, given user.roles and environment.",
20
- "blocking": true
21
- },
22
- {
23
- "id": "ABAC-02",
24
- "severity": "MUST",
25
- "category": "access-control",
26
- "title": "User Context Must Carry Roles",
27
- "description": "The MCP tool execution context MUST include at least one role in the user.roles array. An empty roles array causes all tool calls to be denied — no authenticated-but-roleless state is permitted.",
28
- "validationQuery": "Verify user.roles array is non-empty before allowing any tool execution.",
29
- "blocking": true
30
- },
31
- {
32
- "id": "ABAC-03",
33
- "severity": "MUST",
34
- "category": "access-control",
35
- "title": "Tool Must Be Classified in the Tool Registry",
36
- "description": "The requested tool MUST appear in one of the three classification sets: read_tools, write_tools, or deploy_tools. Unclassified tools are denied. Tool classification is maintained in the ABAC policy registry and updated via Architecture Board review.",
37
- "validationQuery": "Verify tool_name exists in read_tools, write_tools, or deploy_tools classification registry.",
38
- "blocking": true
39
- }
40
- ]
41
- }
@@ -1,213 +0,0 @@
1
- {
2
- "$schema": "http://json-schema.org/draft-07/schema#",
3
- "$id": "https://evolith.dev/rulesets/governance/executive-scorecards.rules.json",
4
- "title": "Reglas de Scorecards Ejecutivos",
5
- "description": "Reglas que codifican métricas DORA y SPACE para visibilidad ejecutiva. Estas reglas aseguran Predictibilidad, Adherencia (Architecture Drift Index), y Eficiencia en productos satélite.",
6
- "version": "1.0.0",
7
- "effectiveDate": "2026-06-06",
8
- "scope": "satellite",
9
- "category": "executive-metrics",
10
- "principles": [
11
- {
12
- "id": "DORA-01",
13
- "principle": "Frecuencia de Despliegue",
14
- "statement": "Los productos satélite DEBEN medir y reportar frecuencia de despliegue. Objetivo: al menos una vez por semana a producción.",
15
- "rationale": "Evolith Product Vision §6: Frecuencia de Despliegue es una métrica DORA core. Alta frecuencia indica pipeline CD saludable.",
16
- "severity": "MUST",
17
- "validationQuery": "CI/CD pipeline exporta métrica de frecuencia de despliegue. Reporte muestra deployments/semana a producción.",
18
- "blocking": false,
19
- "metrics": {
20
- "name": "Deployment Frequency",
21
- "unit": "despliegues por semana",
22
- "target": ">= 1",
23
- "measurement": "Count de despliegues a producción en últimas 4 semanas / 4",
24
- "dashboardRequired": true
25
- },
26
- "references": [
27
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
28
- ]
29
- },
30
- {
31
- "id": "DORA-02",
32
- "principle": "Lead Time para Cambios",
33
- "statement": "Los productos satélite DEBEN medir y reportar lead time desde commit a producción. Objetivo: menos de 7 días para cambios medianos.",
34
- "rationale": "Evolith Product Vision §6: Lead Time mide qué tan rápido los cambios fluyen de commit a producción. Lead time corto indica pipeline eficiente.",
35
- "severity": "MUST",
36
- "validationQuery": "CI/CD pipeline exporta métrica de lead time. Reporte muestra días mediana desde primer commit a despliegue a producción.",
37
- "blocking": false,
38
- "metrics": {
39
- "name": "Lead Time for Changes",
40
- "unit": "días",
41
- "target": "<= 7",
42
- "measurement": "Tiempo mediana desde primer commit de un cambio a despliegue a producción",
43
- "dashboardRequired": true
44
- },
45
- "references": [
46
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
47
- ]
48
- },
49
- {
50
- "id": "DORA-03",
51
- "principle": "Tasa de Fallo en Cambios",
52
- "statement": "Los productos satélite DEBEN medir y reportar tasa de fallo en cambios. Objetivo: menos de 15% de despliegues causan fallos.",
53
- "rationale": "Evolith Product Vision §6: Change Failure Rate mide el porcentaje de despliegues que causan fallos en producción.",
54
- "severity": "MUST",
55
- "validationQuery": "CI/CD pipeline exporta tasa de fallo en cambios. Reporte muestra % de despliegues que requieren rollback o hotfix.",
56
- "blocking": false,
57
- "metrics": {
58
- "name": "Change Failure Rate",
59
- "unit": "porcentaje",
60
- "target": "<= 15%",
61
- "measurement": "(Despliegues fallidos / Total despliegues) * 100 en últimas 4 semanas",
62
- "dashboardRequired": true
63
- },
64
- "references": [
65
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
66
- ]
67
- },
68
- {
69
- "id": "DORA-04",
70
- "principle": "Tiempo para Restaurar",
71
- "statement": "Los productos satélite DEBEN medir y reportar MTTR (Mean Time To Restore). Objetivo: menos de 1 hora para fallos críticos.",
72
- "rationale": "Evolith Product Vision §6: Time to Restore mide qué tan rápido el equipo se recupera de fallos. MTTR bajo indica respuesta a incidentes efectiva.",
73
- "severity": "MUST",
74
- "validationQuery": "Sistema de gestión de incidentes exporta MTTR. Reporte muestra horas mediana desde detección de fallo a restauración de servicio.",
75
- "blocking": false,
76
- "metrics": {
77
- "name": "Time to Restore",
78
- "unit": "horas",
79
- "target": "<= 1",
80
- "measurement": "Tiempo mediana desde detección de fallo a restauración para incidentes P1/P2",
81
- "dashboardRequired": true
82
- },
83
- "references": [
84
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
85
- ]
86
- },
87
- {
88
- "id": "SPACE-01",
89
- "principle": "Confiabilidad (Observabilidad)",
90
- "statement": "Los productos satélite DEBEN tener infraestructura de observabilidad (traces, logs, metrics) operativa en producción.",
91
- "rationale": "Evolith Product Vision §6: Confiabilidad asegura que los sistemas de producción sean observables. ADR-0007 de Evolith mandates OpenTelemetry.",
92
- "severity": "MUST",
93
- "validationQuery": "Dashboard de observabilidad de producción accesible. Traces OpenTelemetry fluyendo. Tasa de error < 1%.",
94
- "blocking": true,
95
- "metrics": {
96
- "name": "Error Rate",
97
- "unit": "porcentaje",
98
- "target": "<= 1%",
99
- "measurement": "(Requests fallidos / Total requests) * 100 en últimas 24 horas",
100
- "dashboardRequired": true
101
- },
102
- "references": [
103
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards",
104
- "reference/architecture/adrs/nodejs/0007-observability-telemetry-loki-opentelemetry.es.md"
105
- ]
106
- },
107
- {
108
- "id": "SPACE-02",
109
- "principle": "Cultura (Salud del Equipo)",
110
- "statement": "Los productos satélite DEBERÍAN medir salud del equipo trimestralmente. Objetivo: > 70% sentimiento positivo.",
111
- "rationale": "Evolith Product Vision §6: Cultura mide satisfacción y salud del equipo. Equipos saludables envían mayor calidad.",
112
- "severity": "SHOULD",
113
- "validationQuery": "Encuesta de salud de equipo conducida trimestralmente. Resultados almacenados en documentación del producto. Tendencia rastreada.",
114
- "blocking": false,
115
- "metrics": {
116
- "name": "Team Health Score",
117
- "unit": "porcentaje",
118
- "target": ">= 70%",
119
- "measurement": "% respuestas positivas en encuesta trimestral de salud de equipo",
120
- "dashboardRequired": false
121
- },
122
- "references": [
123
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
124
- ]
125
- },
126
- {
127
- "id": "SPACE-03",
128
- "principle": "Ejecución (Throughput)",
129
- "statement": "Los productos satélite DEBEN medir y reportar throughput de sprint. Objetivo: > 80% del trabajo comprometido entregado.",
130
- "rationale": "Evolith Product Vision §6: Ejecución mide efectividad de entrega. Throughput consistente indica pipeline predecible.",
131
- "severity": "SHOULD",
132
- "validationQuery": "Métricas de sprint exportadas. Reporte muestra % de story points entregados vs comprometidos en últimos 4 sprints.",
133
- "blocking": false,
134
- "metrics": {
135
- "name": "Sprint Throughput",
136
- "unit": "porcentaje",
137
- "target": ">= 80%",
138
- "measurement": "(Story points entregados / Story points comprometidos) * 100 en últimos 4 sprints",
139
- "dashboardRequired": true
140
- },
141
- "references": [
142
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
143
- ]
144
- },
145
- {
146
- "id": "SPACE-04",
147
- "principle": "Comunicación (Visibilidad)",
148
- "statement": "Los productos satélite DEBEN tener estado SDLC actual visible para todos los stakeholders. Objetivo: estado de phase gate actualizado dentro de 24h.",
149
- "rationale": "Evolith Product Vision §6: Comunicación asegura que los stakeholders tengan visibilidad en tiempo real del estado de desarrollo.",
150
- "severity": "SHOULD",
151
- "validationQuery": "Tablero de estado de phase gates accesible. Actualizaciones hechas dentro de 24h de cambio de estado. Todos los stakeholders tienen acceso.",
152
- "blocking": false,
153
- "metrics": {
154
- "name": "Gate Status Freshness",
155
- "unit": "horas",
156
- "target": "<= 24",
157
- "measurement": "Tiempo máximo entre cambio de estado y actualización del tablero de estado",
158
- "dashboardRequired": true
159
- },
160
- "references": [
161
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
162
- ]
163
- },
164
- {
165
- "id": "SPACE-05",
166
- "principle": "Patrocinio (Alineación de Liderazgo)",
167
- "statement": "Los productos satélite DEBEN tener sponsor ejecutivo asignado y activamente engajado. Sponsor debe revisar estado trimestralmente.",
168
- "rationale": "Evolith Product Vision §6: Patrocinio asegura alineación de liderazgo. Patrocinio activo previene drift estratégico.",
169
- "severity": "MUST",
170
- "validationQuery": "evolith.yaml incluye campo governance.executiveSponsor. Reunión de revisión trimestral documentada.",
171
- "blocking": false,
172
- "metrics": {
173
- "name": "Executive Engagement",
174
- "unit": "revisiones por trimestre",
175
- "target": ">= 1",
176
- "measurement": "Count de revisiones de sponsor ejecutivo en trimestre pasado",
177
- "dashboardRequired": false
178
- },
179
- "references": [
180
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
181
- ]
182
- },
183
- {
184
- "id": "DRIFT-01",
185
- "principle": "Architecture Drift Index",
186
- "statement": "Los productos satélite DEBEN medir y reportar Architecture Drift Index. Objetivo: < 10% drift de estándares Evolith Core.",
187
- "rationale": "Evolith Product Vision §6: Adherencia medida via Architecture Drift Index. Drift > umbral indica erosión de gobernanza.",
188
- "severity": "MUST",
189
- "validationQuery": "Comando evolith validate ejecutado mensualmente. Reporte muestra % de reglas fallidas vs total aplicables.",
190
- "blocking": false,
191
- "metrics": {
192
- "name": "Architecture Drift Index",
193
- "unit": "porcentaje",
194
- "target": "<= 10%",
195
- "measurement": "(Reglas fallidas / Total reglas aplicables) * 100",
196
- "dashboardRequired": true
197
- },
198
- "references": [
199
- "reference/governance/standards/vision/evolith-product-vision-master.es.md#6-executive-vision-scorecards"
200
- ]
201
- }
202
- ],
203
- "governance": {
204
- "complianceVerification": "Métricas DORA+SPACE verificadas trimestralmente durante revisión de gobernanza. Comando evolith validate proporciona drift index.",
205
- "exceptionProcess": "Revisión del Architecture Board requerida cuando cualquier métrica excede objetivo por 2+ trimestres consecutivos.",
206
- "dashboardRequirements": "Métricas marcadas dashboardRequired: true DEBEN ser visibles en Evolith Tracker o dashboard ejecutivo equivalente.",
207
- "reportingCadence": "Métricas DORA reportadas mensualmente. Métricas SPACE reportadas trimestralmente."
208
- },
209
- "bilingual": {
210
- "en": "Executive Scorecards Rules",
211
- "es": "Reglas de Scorecards Ejecutivos"
212
- }
213
- }