@nimiplatform/nimi-coding 0.2.8 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -90
- package/CONTRIBUTING.md +5 -34
- package/README.md +47 -350
- package/README.zh-CN.md +33 -287
- package/cli/commands/start.mjs +48 -688
- package/cli/commands/validate-spec-audit.mjs +1 -5
- package/cli/commands/validate-spec-governance.mjs +20 -0
- package/cli/constants.mjs +9 -417
- package/cli/help.mjs +28 -145
- package/cli/index.mjs +5 -33
- package/cli/lib/blueprint-audit.mjs +5 -12
- package/cli/lib/bootstrap.mjs +0 -9
- package/cli/lib/contracts.mjs +0 -163
- package/cli/lib/doctor.mjs +155 -10
- package/cli/lib/entrypoints.mjs +63 -167
- package/cli/lib/internal/contracts-loaders.mjs +0 -85
- package/cli/lib/internal/contracts-parse.mjs +84 -520
- package/cli/lib/internal/governance/ai/check-agents-freshness.mjs +13 -8
- package/cli/lib/internal/surface-taxonomy-validators.mjs +316 -66
- package/cli/lib/internal/validators-shared.mjs +0 -16
- package/cli/lib/internal/validators-spec-helpers.mjs +7 -140
- package/cli/lib/internal/validators-spec.mjs +103 -342
- package/cli/lib/shared.mjs +1 -42
- package/cli/lib/validators.mjs +0 -48
- package/cli/seeds/seed-policy.yaml +0 -3
- package/config/bootstrap.yaml +4 -4
- package/config/spec-generation-inputs.yaml +6 -12
- package/contracts/domain-admission.schema.yaml +3 -3
- package/contracts/migration-inventory.schema.yaml +12 -75
- package/contracts/negative-fixtures.yaml +19 -99
- package/contracts/placement-contract.schema.yaml +49 -78
- package/contracts/projection-edge.schema.yaml +37 -121
- package/contracts/shared-enums.yaml +4 -8
- package/contracts/spec-generation-inputs.schema.yaml +15 -112
- package/contracts/spec-layout.schema.yaml +32 -0
- package/contracts/surface-taxonomy.schema.yaml +43 -94
- package/contracts/table-family.schema.yaml +1 -1
- package/contracts/tracked-output-admission.schema.yaml +13 -66
- package/methodology/core.yaml +33 -25
- package/methodology/four-closure-policy.yaml +18 -26
- package/methodology/role-separation-policy.yaml +21 -27
- package/methodology/spec-reconstruction.yaml +17 -34
- package/package.json +2 -4
- package/spec/_meta/spec-tree-model.yaml +5 -101
- package/spec/product-scope.yaml +25 -57
- package/adapters/README.md +0 -25
- package/adapters/claude/README.md +0 -89
- package/adapters/claude/profile.yaml +0 -70
- package/adapters/codex/README.md +0 -53
- package/adapters/codex/profile.yaml +0 -78
- package/adapters/oh-my-codex/README.md +0 -184
- package/adapters/oh-my-codex/profile.yaml +0 -46
- package/cli/commands/admit-high-risk-decision.mjs +0 -108
- package/cli/commands/audit-sweep.mjs +0 -364
- package/cli/commands/closeout.mjs +0 -186
- package/cli/commands/decide-high-risk-execution.mjs +0 -124
- package/cli/commands/handoff.mjs +0 -123
- package/cli/commands/ingest-high-risk-execution.mjs +0 -95
- package/cli/commands/review-high-risk-execution.mjs +0 -95
- package/cli/commands/sweep-design.mjs +0 -295
- package/cli/commands/sweep.mjs +0 -22
- package/cli/commands/topic-formatters.mjs +0 -382
- package/cli/commands/topic-goal.mjs +0 -33
- package/cli/commands/topic-options-shared.mjs +0 -27
- package/cli/commands/topic-options-workflow.mjs +0 -767
- package/cli/commands/topic-options.mjs +0 -626
- package/cli/commands/topic-runner.mjs +0 -169
- package/cli/commands/topic.mjs +0 -795
- package/cli/commands/validate-acceptance.mjs +0 -5
- package/cli/commands/validate-execution-packet.mjs +0 -5
- package/cli/commands/validate-orchestration-state.mjs +0 -5
- package/cli/commands/validate-prompt.mjs +0 -5
- package/cli/commands/validate-worker-output.mjs +0 -5
- package/cli/lib/adapter-profiles.mjs +0 -403
- package/cli/lib/audit-execution.mjs +0 -52
- package/cli/lib/audit-sweep-runtime/admissions.mjs +0 -508
- package/cli/lib/audit-sweep-runtime/audit-validity.mjs +0 -356
- package/cli/lib/audit-sweep-runtime/chunks.mjs +0 -697
- package/cli/lib/audit-sweep-runtime/claude-auditor.mjs +0 -658
- package/cli/lib/audit-sweep-runtime/closeout.mjs +0 -144
- package/cli/lib/audit-sweep-runtime/codex-auditor-evidence.mjs +0 -654
- package/cli/lib/audit-sweep-runtime/codex-auditor.mjs +0 -527
- package/cli/lib/audit-sweep-runtime/common.mjs +0 -341
- package/cli/lib/audit-sweep-runtime/coverage-quality.mjs +0 -172
- package/cli/lib/audit-sweep-runtime/evidence-assignment.mjs +0 -155
- package/cli/lib/audit-sweep-runtime/format.mjs +0 -57
- package/cli/lib/audit-sweep-runtime/ingest.mjs +0 -486
- package/cli/lib/audit-sweep-runtime/inventory-spec-chunks.mjs +0 -425
- package/cli/lib/audit-sweep-runtime/inventory.mjs +0 -798
- package/cli/lib/audit-sweep-runtime/ledger.mjs +0 -315
- package/cli/lib/audit-sweep-runtime/p0p1-profile.mjs +0 -101
- package/cli/lib/audit-sweep-runtime/remediation.mjs +0 -349
- package/cli/lib/audit-sweep-runtime/rerun.mjs +0 -129
- package/cli/lib/audit-sweep-runtime/risk-budget.mjs +0 -300
- package/cli/lib/audit-sweep-runtime/status.mjs +0 -62
- package/cli/lib/audit-sweep-runtime/validators-ledger.mjs +0 -215
- package/cli/lib/audit-sweep-runtime/validators.mjs +0 -797
- package/cli/lib/audit-sweep.mjs +0 -19
- package/cli/lib/authority-convergence.mjs +0 -720
- package/cli/lib/closeout.mjs +0 -732
- package/cli/lib/codex-sdk-runner.mjs +0 -76
- package/cli/lib/external-execution.mjs +0 -101
- package/cli/lib/handoff.mjs +0 -812
- package/cli/lib/high-risk-admission.mjs +0 -512
- package/cli/lib/high-risk-decision.mjs +0 -353
- package/cli/lib/high-risk-ingest.mjs +0 -321
- package/cli/lib/high-risk-review.mjs +0 -267
- package/cli/lib/internal/contracts-parse-high-risk.mjs +0 -131
- package/cli/lib/internal/contracts-validators.mjs +0 -399
- package/cli/lib/internal/doctor-bootstrap-surface.mjs +0 -406
- package/cli/lib/internal/doctor-delegated-surface.mjs +0 -256
- package/cli/lib/internal/doctor-finalize.mjs +0 -383
- package/cli/lib/internal/doctor-format.mjs +0 -286
- package/cli/lib/internal/doctor-inspectors.mjs +0 -327
- package/cli/lib/internal/doctor-state.mjs +0 -205
- package/cli/lib/internal/validators-artifacts.mjs +0 -515
- package/cli/lib/sweep-design-runtime/common.mjs +0 -246
- package/cli/lib/sweep-design-runtime/engine.mjs +0 -733
- package/cli/lib/sweep-design-runtime/fix-topic.mjs +0 -414
- package/cli/lib/sweep-design-runtime/lifecycle.mjs +0 -54
- package/cli/lib/sweep-design-runtime/results.mjs +0 -324
- package/cli/lib/sweep-design.mjs +0 -8
- package/cli/lib/topic-artifacts.mjs +0 -186
- package/cli/lib/topic-authority-coverage.mjs +0 -73
- package/cli/lib/topic-closeout.mjs +0 -560
- package/cli/lib/topic-common.mjs +0 -404
- package/cli/lib/topic-decisions.mjs +0 -332
- package/cli/lib/topic-draft-packets.mjs +0 -167
- package/cli/lib/topic-execution.mjs +0 -533
- package/cli/lib/topic-goal.mjs +0 -440
- package/cli/lib/topic-ledger.mjs +0 -281
- package/cli/lib/topic-lifecycle-artifacts.mjs +0 -173
- package/cli/lib/topic-root-validation.mjs +0 -288
- package/cli/lib/topic-runner-commands.mjs +0 -174
- package/cli/lib/topic-runner-deferral.mjs +0 -532
- package/cli/lib/topic-runner-stale-gates.mjs +0 -114
- package/cli/lib/topic-runner-validation.mjs +0 -138
- package/cli/lib/topic-runner.mjs +0 -727
- package/cli/lib/topic-scaffold.mjs +0 -252
- package/cli/lib/topic-waves.mjs +0 -403
- package/cli/lib/topic.mjs +0 -81
- package/config/audit-execution-artifacts.yaml +0 -20
- package/config/external-execution-artifacts.yaml +0 -16
- package/config/host-adapter.yaml +0 -30
- package/config/host-profile.yaml +0 -29
- package/config/installer-evidence.yaml +0 -31
- package/config/skill-installer.yaml +0 -23
- package/config/skill-manifest.yaml +0 -48
- package/config/skills.yaml +0 -30
- package/contracts/acceptance.schema.yaml +0 -16
- package/contracts/admission-checklist.schema.yaml +0 -15
- package/contracts/audit-chunk.schema.yaml +0 -123
- package/contracts/audit-closeout.schema.yaml +0 -51
- package/contracts/audit-finding.schema.yaml +0 -61
- package/contracts/audit-ledger.schema.yaml +0 -138
- package/contracts/audit-plan.schema.yaml +0 -138
- package/contracts/audit-remediation-map.schema.yaml +0 -52
- package/contracts/audit-rerun.schema.yaml +0 -31
- package/contracts/audit-sweep-result.yaml +0 -53
- package/contracts/authority-convergence-audit.schema.yaml +0 -19
- package/contracts/closeout.schema.yaml +0 -25
- package/contracts/decision-review.schema.yaml +0 -16
- package/contracts/doc-spec-audit-result.yaml +0 -19
- package/contracts/execution-packet.schema.yaml +0 -49
- package/contracts/external-host-compatibility.yaml +0 -22
- package/contracts/forbidden-shortcuts.catalog.yaml +0 -23
- package/contracts/high-risk-admission.schema.yaml +0 -23
- package/contracts/high-risk-execution-result.yaml +0 -20
- package/contracts/orchestration-state.schema.yaml +0 -41
- package/contracts/overflow-continuation.schema.yaml +0 -12
- package/contracts/packet.schema.yaml +0 -30
- package/contracts/pending-note.schema.yaml +0 -17
- package/contracts/prompt.schema.yaml +0 -12
- package/contracts/remediation.schema.yaml +0 -16
- package/contracts/result.schema.yaml +0 -24
- package/contracts/spec-reconstruction-result.yaml +0 -41
- package/contracts/sweep-design-result.yaml +0 -349
- package/contracts/topic-goal.schema.yaml +0 -87
- package/contracts/topic-run-ledger.schema.yaml +0 -72
- package/contracts/topic-step-decision.schema.yaml +0 -45
- package/contracts/topic.schema.yaml +0 -65
- package/contracts/true-close.schema.yaml +0 -15
- package/contracts/wave.schema.yaml +0 -29
- package/contracts/worker-output.schema.yaml +0 -15
- package/contracts/workflow-consumer.schema.yaml +0 -110
- package/methodology/audit-sweep-p0p1-recall.yaml +0 -45
- package/methodology/authority-convergence-policy.yaml +0 -42
- package/methodology/overflow-continuation-policy.yaml +0 -14
- package/methodology/skill-exchange-projection.yaml +0 -114
- package/methodology/skill-handoff.yaml +0 -34
- package/methodology/skill-installer-result.yaml +0 -27
- package/methodology/skill-installer-summary-projection.yaml +0 -181
- package/methodology/skill-runtime.yaml +0 -23
- package/methodology/spec-target-truth-profile.yaml +0 -46
- package/methodology/topic-lifecycle-report.yaml +0 -144
- package/methodology/topic-lifecycle.yaml +0 -37
- package/methodology/topic-naming-ontology.yaml +0 -21
- package/methodology/topic-ontology.yaml +0 -38
- package/methodology/topic-validation-policy.yaml +0 -9
- package/methodology/wave-dag-policy.yaml +0 -14
- package/spec/_meta/command-gating-matrix.yaml +0 -143
- package/spec/_meta/generate-drift-migration-checklist.yaml +0 -137
- package/spec/_meta/governance-routing-cutover-checklist.yaml +0 -35
- package/spec/_meta/phase2-impacted-surface-matrix.yaml +0 -44
- package/spec/_meta/spec-authority-cutover-readiness.yaml +0 -102
- package/spec/bootstrap-state.yaml +0 -99
|
@@ -1,65 +0,0 @@
|
|
|
1
|
-
id: nimicoding.topic.v1
|
|
2
|
-
kind: topic
|
|
3
|
-
required:
|
|
4
|
-
- topic_id
|
|
5
|
-
- state
|
|
6
|
-
- created_at
|
|
7
|
-
- last_transition_at
|
|
8
|
-
- last_transition_reason
|
|
9
|
-
- title
|
|
10
|
-
- mode
|
|
11
|
-
- posture
|
|
12
|
-
- design_policy
|
|
13
|
-
- parallel_truth
|
|
14
|
-
- layering
|
|
15
|
-
- risk
|
|
16
|
-
- applicability
|
|
17
|
-
- entry_justification
|
|
18
|
-
- execution_mode
|
|
19
|
-
- selected_next_target
|
|
20
|
-
- current_true_close_status
|
|
21
|
-
- forbidden_shortcuts
|
|
22
|
-
state_enum:
|
|
23
|
-
- proposal
|
|
24
|
-
- ongoing
|
|
25
|
-
- pending
|
|
26
|
-
- closed
|
|
27
|
-
mode_enum:
|
|
28
|
-
- greenfield
|
|
29
|
-
- landed
|
|
30
|
-
- superseding
|
|
31
|
-
posture_enum:
|
|
32
|
-
- no_legacy_hard_cut
|
|
33
|
-
- backward_compat
|
|
34
|
-
design_policy_enum:
|
|
35
|
-
- complete_contract_first
|
|
36
|
-
- mvp_incremental
|
|
37
|
-
parallel_truth_enum:
|
|
38
|
-
- forbidden
|
|
39
|
-
- admitted
|
|
40
|
-
layering_enum:
|
|
41
|
-
- ontology
|
|
42
|
-
- time_phased
|
|
43
|
-
risk_enum:
|
|
44
|
-
- high
|
|
45
|
-
- low
|
|
46
|
-
applicability_enum:
|
|
47
|
-
- authority_bearing
|
|
48
|
-
- high_risk_refactor
|
|
49
|
-
- multi_wave_iteration
|
|
50
|
-
- complex_remediation
|
|
51
|
-
execution_mode_enum:
|
|
52
|
-
- inline_manager_worker
|
|
53
|
-
- manager_worker_auditor
|
|
54
|
-
true_close_status_enum:
|
|
55
|
-
- not_started
|
|
56
|
-
- pending
|
|
57
|
-
- true_closed
|
|
58
|
-
- revoked
|
|
59
|
-
- superseded
|
|
60
|
-
rules:
|
|
61
|
-
- topic_id must remain date-first and sortable
|
|
62
|
-
- state records coarse lifecycle root posture, not every fine-grained machine state
|
|
63
|
-
- low-risk topics are exceptional and require explicit entry_justification
|
|
64
|
-
- topic must not exist without a selected_next_target once active execution is admitted
|
|
65
|
-
- forbidden_shortcuts must use package-owned catalog keys or declared topic-local extensions
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
id: nimicoding.true-close.v1
|
|
2
|
-
kind: true-close
|
|
3
|
-
required:
|
|
4
|
-
- topic_id
|
|
5
|
-
- status
|
|
6
|
-
- audit_ref
|
|
7
|
-
- judgement_ref
|
|
8
|
-
status_enum:
|
|
9
|
-
- pending
|
|
10
|
-
- passed
|
|
11
|
-
- revoked
|
|
12
|
-
- superseded
|
|
13
|
-
rules:
|
|
14
|
-
- passed true close may later become revoked
|
|
15
|
-
- revoked true close must point at the follow-up audit or remediation lineage
|
|
@@ -1,29 +0,0 @@
|
|
|
1
|
-
id: nimicoding.wave.v1
|
|
2
|
-
kind: wave
|
|
3
|
-
required:
|
|
4
|
-
- wave_id
|
|
5
|
-
- slug
|
|
6
|
-
- state
|
|
7
|
-
- primary_closure_goal
|
|
8
|
-
- deps
|
|
9
|
-
- owner_domain
|
|
10
|
-
- parallelizable_after
|
|
11
|
-
- selected
|
|
12
|
-
state_enum:
|
|
13
|
-
- candidate
|
|
14
|
-
- preflight_draft
|
|
15
|
-
- preflight_admitted
|
|
16
|
-
- implementation_admitted
|
|
17
|
-
- implementation_active
|
|
18
|
-
- needs_revision
|
|
19
|
-
- overflowed
|
|
20
|
-
- continuation_packet_open
|
|
21
|
-
- closed
|
|
22
|
-
- retired
|
|
23
|
-
- superseded
|
|
24
|
-
rules:
|
|
25
|
-
- deps must reference only existing wave ids inside the same topic
|
|
26
|
-
- selected true is allowed for at most one active wave in a topic
|
|
27
|
-
- retired or superseded waves must not remain dispatchable
|
|
28
|
-
- overflowed is a lifecycle state and must not be normalized to closed without explicit continuation or trim judgement
|
|
29
|
-
- continuation_packet_open means overflow continuation has been explicitly admitted and linked to a frozen continuation packet
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
id: nimi-coding.worker-output.v1
|
|
2
|
-
kind: worker-output
|
|
3
|
-
required_blocks:
|
|
4
|
-
- Findings
|
|
5
|
-
- Implementation summary
|
|
6
|
-
- Files changed
|
|
7
|
-
- Checks run
|
|
8
|
-
- Remaining gaps / risks
|
|
9
|
-
- Runner Signal
|
|
10
|
-
optional_blocks:
|
|
11
|
-
- Chosen decision
|
|
12
|
-
- Authority / spec impact
|
|
13
|
-
- Guard behavior decision
|
|
14
|
-
- Next implementation step
|
|
15
|
-
- Remaining blockers
|
|
@@ -1,110 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
contract:
|
|
3
|
-
id: nimicoding.workflow-consumer.v1
|
|
4
|
-
owner: nimi-coding
|
|
5
|
-
purpose: Require workflow tools to consume surface classes natively.
|
|
6
|
-
required_top_level_fields:
|
|
7
|
-
- version
|
|
8
|
-
- workflow_consumers
|
|
9
|
-
- semantic_constraints
|
|
10
|
-
workflow_consumer_required_fields:
|
|
11
|
-
- workflow_id
|
|
12
|
-
- package_entrypoint
|
|
13
|
-
- required_inputs
|
|
14
|
-
- required_surface_classes
|
|
15
|
-
- forbidden_surface_classes
|
|
16
|
-
- forbidden_authority_input_classes
|
|
17
|
-
- required_gates
|
|
18
|
-
- output_class
|
|
19
|
-
- fail_closed_cases
|
|
20
|
-
workflow_consumers:
|
|
21
|
-
- workflow_id: topic_runner
|
|
22
|
-
package_entrypoint: nimicoding topic-runner
|
|
23
|
-
required_inputs:
|
|
24
|
-
- placement_report
|
|
25
|
-
- selected_wave
|
|
26
|
-
- packet_ref
|
|
27
|
-
- topic_lifecycle_state
|
|
28
|
-
required_surface_classes:
|
|
29
|
-
- product_authority
|
|
30
|
-
- methodology_authority
|
|
31
|
-
- host_projection_anchor
|
|
32
|
-
forbidden_surface_classes:
|
|
33
|
-
- unclassified
|
|
34
|
-
- derived_view
|
|
35
|
-
- audit_evidence_state
|
|
36
|
-
forbidden_authority_input_classes:
|
|
37
|
-
- lifecycle_progress_state
|
|
38
|
-
required_gates:
|
|
39
|
-
- block_unclassified_authority_changes
|
|
40
|
-
- block_forbidden_root_class_combinations
|
|
41
|
-
- require_human_confirmation_for_product_semantic_fork
|
|
42
|
-
output_class: lifecycle_progress_state
|
|
43
|
-
fail_closed_cases:
|
|
44
|
-
- placement_report_missing
|
|
45
|
-
- authority_update_without_post_update_review
|
|
46
|
-
- workflow_id: audit_sweep
|
|
47
|
-
package_entrypoint: nimicoding sweep audit
|
|
48
|
-
required_inputs:
|
|
49
|
-
- authority_inventory
|
|
50
|
-
- evidence_inventory
|
|
51
|
-
required_surface_classes:
|
|
52
|
-
- product_authority
|
|
53
|
-
- product_authority_table
|
|
54
|
-
- support_registry
|
|
55
|
-
forbidden_surface_classes:
|
|
56
|
-
- derived_view
|
|
57
|
-
- lifecycle_progress_state
|
|
58
|
-
forbidden_authority_input_classes: []
|
|
59
|
-
required_gates:
|
|
60
|
-
- authority_and_evidence_coverage_separated
|
|
61
|
-
- raw_outputs_local_only
|
|
62
|
-
output_class: audit_evidence_state
|
|
63
|
-
fail_closed_cases:
|
|
64
|
-
- audit_summary_promoted_to_product_truth
|
|
65
|
-
- workflow_id: spec_generation
|
|
66
|
-
package_entrypoint: nimicoding generate-spec-derived-docs
|
|
67
|
-
required_inputs:
|
|
68
|
-
- class_filtered_generation_inputs
|
|
69
|
-
- placement_report
|
|
70
|
-
required_surface_classes:
|
|
71
|
-
- product_authority
|
|
72
|
-
- product_authority_table
|
|
73
|
-
- thin_guidance
|
|
74
|
-
- methodology_authority
|
|
75
|
-
- host_projection_anchor
|
|
76
|
-
forbidden_surface_classes:
|
|
77
|
-
- audit_evidence_state
|
|
78
|
-
- lifecycle_progress_state
|
|
79
|
-
- spec_generation_state
|
|
80
|
-
- derived_view
|
|
81
|
-
forbidden_authority_input_classes: []
|
|
82
|
-
required_gates:
|
|
83
|
-
- validate_placement_before_render
|
|
84
|
-
- reject_blanket_docs_roots
|
|
85
|
-
- generation_audit_local_state
|
|
86
|
-
output_class: derived_view
|
|
87
|
-
fail_closed_cases:
|
|
88
|
-
- generated_view_used_as_authority
|
|
89
|
-
- workflow_id: closeout
|
|
90
|
-
package_entrypoint: nimicoding topic closeout
|
|
91
|
-
required_inputs:
|
|
92
|
-
- placement_report
|
|
93
|
-
- validation_report
|
|
94
|
-
- result_ref
|
|
95
|
-
required_surface_classes:
|
|
96
|
-
- lifecycle_progress_state
|
|
97
|
-
forbidden_surface_classes:
|
|
98
|
-
- unclassified
|
|
99
|
-
forbidden_authority_input_classes: []
|
|
100
|
-
required_gates:
|
|
101
|
-
- placement_report_pass_required
|
|
102
|
-
- no_unresolved_block_disposition
|
|
103
|
-
output_class: lifecycle_progress_state
|
|
104
|
-
fail_closed_cases:
|
|
105
|
-
- closeout_claims_drift_resistance_with_placement_violations
|
|
106
|
-
semantic_constraints:
|
|
107
|
-
- workflow_must_not_infer_authority_from_path_shape_only
|
|
108
|
-
- workflow_outputs_must_have_declared_surface_class
|
|
109
|
-
- workflow_must_fail_closed_when_placement_report_is_missing
|
|
110
|
-
- workflow_must_not_promote_audit_or_lifecycle_state_to_product_authority
|
|
@@ -1,45 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
methodology:
|
|
3
|
-
id: audit_sweep_p0p1_recall
|
|
4
|
-
owner: nimicoding/audit-sweep
|
|
5
|
-
purpose: Increase critical/high finding recall without turning every sweep into
|
|
6
|
-
an unbounded full audit.
|
|
7
|
-
activation_criteria:
|
|
8
|
-
- p0p1
|
|
9
|
-
- p0-p1
|
|
10
|
-
- p0
|
|
11
|
-
- p1
|
|
12
|
-
- critical-high
|
|
13
|
-
- critical_high
|
|
14
|
-
strategy:
|
|
15
|
-
mode: p0_p1_triage_then_deep
|
|
16
|
-
stages:
|
|
17
|
-
- triage every selected chunk against priority P0/P1 defect classes
|
|
18
|
-
- deep-audit only candidate P0/P1 signals, high-risk owner domains, or
|
|
19
|
-
calibration expected-defect chunks
|
|
20
|
-
- cluster duplicate symptoms under one canonical root-cause finding
|
|
21
|
-
- pause discovery when risk budget gates require remediation or admission
|
|
22
|
-
severity_mapping:
|
|
23
|
-
p0: critical
|
|
24
|
-
p1: high
|
|
25
|
-
priority_defect_classes:
|
|
26
|
-
- fail_open_or_pseudo_success
|
|
27
|
-
- authority_boundary_bypass
|
|
28
|
-
- unadmitted_truth_or_evidence_source
|
|
29
|
-
- partial_coverage_misrepresented_as_complete
|
|
30
|
-
- state_divergence_or_lost_update
|
|
31
|
-
- security_or_permission_bypass
|
|
32
|
-
- destructive_action_without_gate
|
|
33
|
-
- package_boundary_violation
|
|
34
|
-
no_p0p1_finding_requirement:
|
|
35
|
-
required: true
|
|
36
|
-
reasoning_field: coverage.p0p1_negative_reasoning
|
|
37
|
-
evidence_refs_field: coverage.p0p1_evidence_refs
|
|
38
|
-
evidence_refs_must_include_implementation: true
|
|
39
|
-
summary: If no critical/high finding is emitted, the auditor must explain why
|
|
40
|
-
applicable priority defect classes did not produce a P0/P1 issue and cite
|
|
41
|
-
implementation evidence.
|
|
42
|
-
non_goals:
|
|
43
|
-
- exhaustive proof that no issue exists
|
|
44
|
-
- new finding output format
|
|
45
|
-
- treating calibration fixture metadata as product findings
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
authority_convergence_policy:
|
|
3
|
-
gate_id: pre_implementation_authority_convergence
|
|
4
|
-
purpose: >
|
|
5
|
-
Require an independent auditor pass after authority/spec changes and before
|
|
6
|
-
implementation dispatch, without making any concrete AI host runtime part of
|
|
7
|
-
nimicoding semantic truth.
|
|
8
|
-
trigger_packet_kinds:
|
|
9
|
-
- authority
|
|
10
|
-
- spec
|
|
11
|
-
- redesign
|
|
12
|
-
- preflight
|
|
13
|
-
trigger_ref_prefixes:
|
|
14
|
-
- .nimi/spec/
|
|
15
|
-
trigger_topic_fields:
|
|
16
|
-
work_type:
|
|
17
|
-
- redesign
|
|
18
|
-
required_result:
|
|
19
|
-
result_kind: audit
|
|
20
|
-
pass_verdict: PASS
|
|
21
|
-
post_update_review:
|
|
22
|
-
trigger_packet_kinds:
|
|
23
|
-
- authority
|
|
24
|
-
- spec
|
|
25
|
-
- redesign
|
|
26
|
-
trigger_ref_prefixes:
|
|
27
|
-
- .nimi/spec/
|
|
28
|
-
required_result:
|
|
29
|
-
result_kind: judgement
|
|
30
|
-
pass_verdict: PASS
|
|
31
|
-
blocked_verdicts:
|
|
32
|
-
- NEEDS_REVISION
|
|
33
|
-
- FAIL
|
|
34
|
-
dispatch:
|
|
35
|
-
pre_implementation_role: auditor
|
|
36
|
-
implementation_role: worker
|
|
37
|
-
hard_constraints:
|
|
38
|
-
- auditor_output_is_candidate_evidence_only
|
|
39
|
-
- manager_records_audit_result_before_implementation_dispatch
|
|
40
|
-
- unresolved_blocking_findings_fail_closed
|
|
41
|
-
- deferred_items_must_be_explicitly_non_blocking
|
|
42
|
-
- concrete_subagent_mechanics_belong_to_adapter_profiles_not_methodology_semantics
|
|
@@ -1,14 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
overflow_continuation_policy:
|
|
3
|
-
principles:
|
|
4
|
-
- overflow_is_not_pass
|
|
5
|
-
- overflow_is_not_automatic_rollback
|
|
6
|
-
- continuation_requires_same_owner_domain
|
|
7
|
-
allowed_when:
|
|
8
|
-
- direction_is_still_correct
|
|
9
|
-
- scope_has_not_crossed_into_a_new_owner_domain
|
|
10
|
-
- current_state_is_acceptable_but_packet_boundary_was_too_thin
|
|
11
|
-
reject_when:
|
|
12
|
-
- shadow_truth_was_introduced
|
|
13
|
-
- fallback_or_alias_was_needed
|
|
14
|
-
- packet_crossed_into_a_new_owner_domain
|
|
@@ -1,114 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
projection_contract:
|
|
3
|
-
id: delegated_skill_exchange_projection
|
|
4
|
-
owner: package_bootstrap_truth
|
|
5
|
-
locality: package_truth
|
|
6
|
-
truth_mode: fail_closed
|
|
7
|
-
exchange_surfaces:
|
|
8
|
-
- handoff
|
|
9
|
-
- closeout
|
|
10
|
-
- decision
|
|
11
|
-
- ingest
|
|
12
|
-
- review
|
|
13
|
-
output_modes:
|
|
14
|
-
- human_readable
|
|
15
|
-
- json
|
|
16
|
-
- prompt
|
|
17
|
-
handoff_payload:
|
|
18
|
-
required_fields:
|
|
19
|
-
- contractVersion
|
|
20
|
-
- projectRoot
|
|
21
|
-
- runtimeOwner
|
|
22
|
-
- triggerMode
|
|
23
|
-
- handoffReady
|
|
24
|
-
- skill.id
|
|
25
|
-
- skill.required
|
|
26
|
-
- skill.source
|
|
27
|
-
- skill.purpose
|
|
28
|
-
- skill.resultContractRef
|
|
29
|
-
- skill.readiness.ok
|
|
30
|
-
- context.orderedPaths
|
|
31
|
-
- constraints
|
|
32
|
-
- expectedResults
|
|
33
|
-
- contracts.exchangeProjectionContractRef
|
|
34
|
-
optional_fields:
|
|
35
|
-
- doctor
|
|
36
|
-
- nextAction
|
|
37
|
-
closeout_payload:
|
|
38
|
-
required_fields:
|
|
39
|
-
- contractVersion
|
|
40
|
-
- projectRoot
|
|
41
|
-
- skill.id
|
|
42
|
-
- outcome
|
|
43
|
-
- verifiedAt
|
|
44
|
-
- localOnly
|
|
45
|
-
- artifactPath
|
|
46
|
-
- readiness.ok
|
|
47
|
-
- contracts.exchangeProjectionContractRef
|
|
48
|
-
optional_fields:
|
|
49
|
-
- doctor
|
|
50
|
-
- nextAction
|
|
51
|
-
- skill.expectedArtifactRoots
|
|
52
|
-
- summary
|
|
53
|
-
ingest_payload:
|
|
54
|
-
required_fields:
|
|
55
|
-
- contractVersion
|
|
56
|
-
- projectRoot
|
|
57
|
-
- sourceCloseoutRef
|
|
58
|
-
- skill.id
|
|
59
|
-
- localOnly
|
|
60
|
-
- artifactPath
|
|
61
|
-
- readiness.ok
|
|
62
|
-
- validations.executionPacket.ok
|
|
63
|
-
- validations.orchestrationState.ok
|
|
64
|
-
- validations.prompt.ok
|
|
65
|
-
- validations.workerOutput.ok
|
|
66
|
-
optional_fields:
|
|
67
|
-
- doctor
|
|
68
|
-
- nextAction
|
|
69
|
-
- artifactRoots
|
|
70
|
-
- summary
|
|
71
|
-
review_payload:
|
|
72
|
-
required_fields:
|
|
73
|
-
- contractVersion
|
|
74
|
-
- projectRoot
|
|
75
|
-
- sourceIngestRef
|
|
76
|
-
- skill.id
|
|
77
|
-
- localOnly
|
|
78
|
-
- artifactPath
|
|
79
|
-
- reviewStatus
|
|
80
|
-
- managerReviewOwner
|
|
81
|
-
- readiness.ok
|
|
82
|
-
- attachmentRefs.packet_ref
|
|
83
|
-
- attachmentRefs.worker_output_ref
|
|
84
|
-
optional_fields:
|
|
85
|
-
- doctor
|
|
86
|
-
- nextAction
|
|
87
|
-
- summary
|
|
88
|
-
- ingestValidations
|
|
89
|
-
decision_payload:
|
|
90
|
-
required_fields:
|
|
91
|
-
- contractVersion
|
|
92
|
-
- projectRoot
|
|
93
|
-
- sourceReviewRef
|
|
94
|
-
- skill.id
|
|
95
|
-
- localOnly
|
|
96
|
-
- artifactPath
|
|
97
|
-
- verifiedAt
|
|
98
|
-
- decisionStatus
|
|
99
|
-
- acceptanceRef
|
|
100
|
-
- acceptanceDisposition
|
|
101
|
-
- acceptanceValidation.ok
|
|
102
|
-
- readiness.ok
|
|
103
|
-
optional_fields:
|
|
104
|
-
- doctor
|
|
105
|
-
- nextAction
|
|
106
|
-
- summary
|
|
107
|
-
- attachmentRefs
|
|
108
|
-
hard_constraints:
|
|
109
|
-
- do_not_promote_projection_payloads_to_semantic_truth
|
|
110
|
-
- imported_closeout_summaries_must_match_current_project
|
|
111
|
-
- missing_required_projection_fields_must_fail_closed
|
|
112
|
-
- completed_projection_claims_must_match_declared_canonical_tree_state
|
|
113
|
-
- review_projection_must_not_decide_acceptance_disposition_or_finding_judgment
|
|
114
|
-
- decision_projection_must_remain_local_only_even_when_manager_owned
|
|
@@ -1,34 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
handoff:
|
|
3
|
-
runtime_owner: external_ai_host
|
|
4
|
-
runtime_contract_ref: .nimi/methodology/skill-runtime.yaml
|
|
5
|
-
host_profile_ref: .nimi/config/host-profile.yaml
|
|
6
|
-
host_compatibility_contract_ref: .nimi/contracts/external-host-compatibility.yaml
|
|
7
|
-
installer_ref: .nimi/config/skill-installer.yaml
|
|
8
|
-
installer_result_contract_ref: .nimi/methodology/skill-installer-result.yaml
|
|
9
|
-
installer_summary_projection_contract_ref: .nimi/methodology/skill-installer-summary-projection.yaml
|
|
10
|
-
exchange_projection_contract_ref: .nimi/methodology/skill-exchange-projection.yaml
|
|
11
|
-
reconstruction_guidance_ref: .nimi/methodology/spec-reconstruction.yaml
|
|
12
|
-
self_hosted_runtime: false
|
|
13
|
-
trigger_mode: explicit
|
|
14
|
-
required_context_order:
|
|
15
|
-
- .nimi/methodology
|
|
16
|
-
- .nimi/spec
|
|
17
|
-
- .nimi/contracts
|
|
18
|
-
- .nimi/config/skill-manifest.yaml
|
|
19
|
-
- .nimi/config/host-profile.yaml
|
|
20
|
-
- .nimi/config/host-adapter.yaml
|
|
21
|
-
- .nimi/config/external-execution-artifacts.yaml
|
|
22
|
-
- .nimi/config/skill-installer.yaml
|
|
23
|
-
- .nimi/methodology/skill-runtime.yaml
|
|
24
|
-
- .nimi/methodology/skill-installer-result.yaml
|
|
25
|
-
- .nimi/methodology/skill-installer-summary-projection.yaml
|
|
26
|
-
- .nimi/methodology/skill-handoff.yaml
|
|
27
|
-
hard_constraints:
|
|
28
|
-
- do_not_assume_runtime_installed
|
|
29
|
-
- do_not_mutate_project_sources_during_bootstrap_handoff
|
|
30
|
-
- unresolved_authority_must_fail_closed
|
|
31
|
-
expected_results:
|
|
32
|
-
- resolve_against_declared_host_profile
|
|
33
|
-
- update_.nimi/spec_truth
|
|
34
|
-
- produce_derived_human_projection_only_when_requested
|
|
@@ -1,27 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
result_contract:
|
|
3
|
-
id: delegated_skill_installer_result_contract
|
|
4
|
-
installer_ref: .nimi/config/skill-installer.yaml
|
|
5
|
-
operational_evidence_home_ref: .nimi/config/installer-evidence.yaml
|
|
6
|
-
summary_projection_contract_ref: .nimi/methodology/skill-installer-summary-projection.yaml
|
|
7
|
-
truth_mode: fail_closed
|
|
8
|
-
semantic_outcome_classes:
|
|
9
|
-
- requested
|
|
10
|
-
- verified_installed
|
|
11
|
-
- verified_unavailable
|
|
12
|
-
- failed
|
|
13
|
-
forbidden_outcomes:
|
|
14
|
-
- installed_without_verification
|
|
15
|
-
- synthetic_success
|
|
16
|
-
verification_requirements:
|
|
17
|
-
- declared_skill_identity_matches_result
|
|
18
|
-
- declared_source_or_version_matches_verified_outcome
|
|
19
|
-
- unresolved_installation_cannot_be_reported_as_installed
|
|
20
|
-
- projected_summary_must_satisfy_summary_projection_contract
|
|
21
|
-
- intermediate_projection_statuses_must_not_be_reported_as_final_result
|
|
22
|
-
operational_only_artifacts:
|
|
23
|
-
- raw_installer_logs
|
|
24
|
-
- package_manager_output
|
|
25
|
-
- temp_paths
|
|
26
|
-
- downloaded_payloads
|
|
27
|
-
- retry_counters
|
|
@@ -1,181 +0,0 @@
|
|
|
1
|
-
version: 1
|
|
2
|
-
summary_projection_contract:
|
|
3
|
-
id: delegated_skill_installer_summary_projection
|
|
4
|
-
lifecycle_owner: external_ai_host
|
|
5
|
-
lifecycle_mode: delegated
|
|
6
|
-
stage_model: collapsed_single_contract
|
|
7
|
-
evidence_home_ref: .nimi/config/installer-evidence.yaml
|
|
8
|
-
result_contract_ref: .nimi/methodology/skill-installer-result.yaml
|
|
9
|
-
truth_mode: fail_closed
|
|
10
|
-
source_summary_path: .nimi/local/installer-evidence/latest-summary.json
|
|
11
|
-
required_projected_fields:
|
|
12
|
-
- skill_id
|
|
13
|
-
- outcome_class
|
|
14
|
-
- verified_at
|
|
15
|
-
optional_projected_fields:
|
|
16
|
-
- requested_source
|
|
17
|
-
- requested_version
|
|
18
|
-
- verifier
|
|
19
|
-
- evidence_run_id
|
|
20
|
-
projection_requirements:
|
|
21
|
-
- local_verified_summary_must_exist_before_projection
|
|
22
|
-
- projected_skill_identity_must_match_declared_manifest
|
|
23
|
-
- projected_outcome_class_must_match_result_contract
|
|
24
|
-
- incomplete_or_ambiguous_summary_must_fail_closed
|
|
25
|
-
forbidden_projection_fields:
|
|
26
|
-
- raw_installer_logs
|
|
27
|
-
- package_manager_output
|
|
28
|
-
- temp_paths
|
|
29
|
-
- downloaded_payloads
|
|
30
|
-
- retry_counters
|
|
31
|
-
- prompts
|
|
32
|
-
lifecycle:
|
|
33
|
-
capture:
|
|
34
|
-
semantic_outcome_classes:
|
|
35
|
-
- verified_summary_ready
|
|
36
|
-
- capture_unavailable
|
|
37
|
-
- capture_failed
|
|
38
|
-
forbidden_outcomes:
|
|
39
|
-
- partial_summary_ready
|
|
40
|
-
- synthetic_verified_summary
|
|
41
|
-
required_fields:
|
|
42
|
-
- skill_id
|
|
43
|
-
- capture_outcome_class
|
|
44
|
-
- verified_at
|
|
45
|
-
optional_fields:
|
|
46
|
-
- requested_source
|
|
47
|
-
- requested_version
|
|
48
|
-
- verifier
|
|
49
|
-
- evidence_run_id
|
|
50
|
-
gate_requirements:
|
|
51
|
-
- complete_verified_summary_must_exist_before_projection
|
|
52
|
-
- capture_result_must_satisfy_summary_projection_contract
|
|
53
|
-
- capture_failure_must_not_imply_projection_success
|
|
54
|
-
operational_only_artifacts:
|
|
55
|
-
- capture_progress
|
|
56
|
-
- retry_counters
|
|
57
|
-
- prompts
|
|
58
|
-
- raw_installer_logs
|
|
59
|
-
- package_manager_output
|
|
60
|
-
- temp_paths
|
|
61
|
-
production:
|
|
62
|
-
semantic_outcome_classes:
|
|
63
|
-
- capture_result_declared
|
|
64
|
-
- production_unavailable
|
|
65
|
-
- production_failed
|
|
66
|
-
forbidden_outcomes:
|
|
67
|
-
- partial_capture_result_declared
|
|
68
|
-
- synthetic_capture_result
|
|
69
|
-
required_fields:
|
|
70
|
-
- skill_id
|
|
71
|
-
- production_outcome_class
|
|
72
|
-
- verified_at
|
|
73
|
-
optional_fields:
|
|
74
|
-
- requested_source
|
|
75
|
-
- requested_version
|
|
76
|
-
- verifier
|
|
77
|
-
- evidence_run_id
|
|
78
|
-
gate_requirements:
|
|
79
|
-
- complete_verified_summary_must_exist_before_capture_result_declaration
|
|
80
|
-
- declared_capture_result_must_satisfy_summary_projection_contract
|
|
81
|
-
- production_failure_must_not_imply_capture_result_success
|
|
82
|
-
operational_only_artifacts:
|
|
83
|
-
- production_progress
|
|
84
|
-
- retry_counters
|
|
85
|
-
- prompts
|
|
86
|
-
- raw_installer_logs
|
|
87
|
-
- package_manager_output
|
|
88
|
-
- temp_paths
|
|
89
|
-
status_declaration:
|
|
90
|
-
semantic_outcome_classes:
|
|
91
|
-
- status_declared
|
|
92
|
-
- status_unavailable
|
|
93
|
-
- status_failed
|
|
94
|
-
forbidden_outcomes:
|
|
95
|
-
- partial_status_declared
|
|
96
|
-
- synthetic_status
|
|
97
|
-
required_fields:
|
|
98
|
-
- skill_id
|
|
99
|
-
- status_outcome_class
|
|
100
|
-
- verified_at
|
|
101
|
-
optional_fields:
|
|
102
|
-
- requested_source
|
|
103
|
-
- requested_version
|
|
104
|
-
- verifier
|
|
105
|
-
- evidence_run_id
|
|
106
|
-
gate_requirements:
|
|
107
|
-
- complete_verified_state_must_exist_before_status_declaration
|
|
108
|
-
- declared_status_must_satisfy_capture_and_production_requirements
|
|
109
|
-
- status_declaration_failure_must_not_imply_semantic_success
|
|
110
|
-
operational_only_artifacts:
|
|
111
|
-
- writing_progress
|
|
112
|
-
- retry_counters
|
|
113
|
-
- prompts
|
|
114
|
-
- raw_installer_logs
|
|
115
|
-
- package_manager_output
|
|
116
|
-
- temp_paths
|
|
117
|
-
semantic_projection:
|
|
118
|
-
semantic_outcome_classes:
|
|
119
|
-
- result_ready_for_projection
|
|
120
|
-
- projection_unavailable
|
|
121
|
-
- projection_failed
|
|
122
|
-
forbidden_outcomes:
|
|
123
|
-
- partial_final_projection
|
|
124
|
-
- synthetic_final_result
|
|
125
|
-
required_fields:
|
|
126
|
-
- skill_id
|
|
127
|
-
- projection_outcome_class
|
|
128
|
-
- verified_at
|
|
129
|
-
optional_fields:
|
|
130
|
-
- requested_source
|
|
131
|
-
- requested_version
|
|
132
|
-
- verifier
|
|
133
|
-
- evidence_run_id
|
|
134
|
-
gate_requirements:
|
|
135
|
-
- complete_verified_state_must_exist_before_semantic_projection
|
|
136
|
-
- projected_final_result_must_satisfy_prior_projection_stages
|
|
137
|
-
- projection_failure_must_not_imply_installer_result_success
|
|
138
|
-
intermediate_only_statuses:
|
|
139
|
-
- status_declared
|
|
140
|
-
- capture_result_declared
|
|
141
|
-
operational_only_artifacts:
|
|
142
|
-
- projection_progress
|
|
143
|
-
- retry_counters
|
|
144
|
-
- prompts
|
|
145
|
-
- raw_installer_logs
|
|
146
|
-
- package_manager_output
|
|
147
|
-
- temp_paths
|
|
148
|
-
final_result_declaration:
|
|
149
|
-
semantic_outcome_classes:
|
|
150
|
-
- installer_result_declared
|
|
151
|
-
- final_result_unavailable
|
|
152
|
-
- final_result_failed
|
|
153
|
-
forbidden_outcomes:
|
|
154
|
-
- partial_installer_result_declared
|
|
155
|
-
- synthetic_installer_result
|
|
156
|
-
required_fields:
|
|
157
|
-
- skill_id
|
|
158
|
-
- final_result_outcome_class
|
|
159
|
-
- verified_at
|
|
160
|
-
optional_fields:
|
|
161
|
-
- installer_result_outcome_class
|
|
162
|
-
- requested_source
|
|
163
|
-
- requested_version
|
|
164
|
-
- verifier
|
|
165
|
-
- evidence_run_id
|
|
166
|
-
gate_requirements:
|
|
167
|
-
- complete_projected_verified_state_must_exist_before_final_result_declaration
|
|
168
|
-
- declared_final_result_must_satisfy_summary_projection_contract
|
|
169
|
-
- declared_final_result_outcome_class_must_satisfy_result_contract
|
|
170
|
-
- final_result_declaration_failure_must_not_imply_installer_result_success
|
|
171
|
-
intermediate_only_outputs:
|
|
172
|
-
- result_ready_for_projection
|
|
173
|
-
- projection_unavailable
|
|
174
|
-
- projection_failed
|
|
175
|
-
operational_only_artifacts:
|
|
176
|
-
- writing_progress
|
|
177
|
-
- retry_counters
|
|
178
|
-
- prompts
|
|
179
|
-
- raw_installer_logs
|
|
180
|
-
- package_manager_output
|
|
181
|
-
- temp_paths
|