@schneiderjoseph/devia 0.1.0

package/rules/accessibility/A11Y-006.md

@@ -0,0 +1,42 @@
+---
+id: A11Y-006
+title: Visible focus
+severity: MUST
+status: active
+priority: P0
+domain: accessibility
+source:
+  - WCAG-2.2
+applies_to:
+  - button
+  - link
+  - input
+success_criteria:
+  - "2.4.7"
+  - "2.4.13"
+requirement: >
+  Keyboard-operable controls MUST show a visible focus indicator (:focus-visible or equivalent).
+validation:
+  automated: true
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-006 — Visible focus
+
+**Requirement:** Keyboard-operable controls MUST show a visible focus indicator (:focus-visible or equivalent).
+
+**Bad:** outline: none with no replacement.
+
+**Good:** High-contrast focus ring meeting guidance.
+
+## Validation
+
+- Automated checks / lint / a11y tooling where applicable
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `documented-only`

package/rules/accessibility/A11Y-007.md

@@ -0,0 +1,39 @@
+---
+id: A11Y-007
+title: Focus restoration
+severity: MUST
+status: active
+priority: P1
+domain: accessibility
+source:
+  - WAI-ARIA-APG
+applies_to:
+  - dialog
+  - drawer
+success_criteria:
+  []
+requirement: >
+  When a dialog/drawer closes, focus MUST return to a sensible origin control.
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-007 — Focus restoration
+
+**Requirement:** When a dialog/drawer closes, focus MUST return to a sensible origin control.
+
+**Bad:** Focus dumped on body.
+
+**Good:** Restore to opener.
+
+## Validation
+
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/accessibility/A11Y-008.md

@@ -0,0 +1,40 @@
+---
+id: A11Y-008
+title: Text contrast AA
+severity: MUST
+status: active
+priority: P0
+domain: accessibility
+source:
+  - WCAG-2.2
+applies_to:
+  - typography
+  - color
+success_criteria:
+  - "1.4.3"
+requirement: >
+  Normal text MUST meet WCAG AA contrast (4.5:1); large text 3:1.
+validation:
+  automated: true
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-008 — Text contrast AA
+
+**Requirement:** Normal text MUST meet WCAG AA contrast (4.5:1); large text 3:1.
+
+**Bad:** Light gray on white body text.
+
+**Good:** Token pairs verified with contrast tool.
+
+## Validation
+
+- Automated checks / lint / a11y tooling where applicable
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `documented-only`

package/rules/accessibility/A11Y-009.md

@@ -0,0 +1,41 @@
+---
+id: A11Y-009
+title: UI component contrast
+severity: MUST
+status: active
+priority: P1
+domain: accessibility
+source:
+  - WCAG-2.2
+applies_to:
+  - input
+  - button
+  - icons
+success_criteria:
+  - "1.4.11"
+requirement: >
+  Meaningful non-text UI MUST meet 3:1 against adjacent colors where required.
+validation:
+  automated: true
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-009 — UI component contrast
+
+**Requirement:** Meaningful non-text UI MUST meet 3:1 against adjacent colors where required.
+
+**Bad:** Pale input border invisible against background.
+
+**Good:** Border/token meets 3:1.
+
+## Validation
+
+- Automated checks / lint / a11y tooling where applicable
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/accessibility/A11Y-010.md

@@ -0,0 +1,40 @@
+---
+id: A11Y-010
+title: Target size
+severity: MUST
+status: active
+priority: P1
+domain: accessibility
+source:
+  - WCAG-2.2
+applies_to:
+  - button
+  - link
+  - touch
+success_criteria:
+  - "2.5.8"
+requirement: >
+  Pointer targets MUST meet WCAG 2.5.8 (24×24 CSS px minimum); prefer 44×44 for primary touch UIs.
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-010 — Target size
+
+**Requirement:** Pointer targets MUST meet WCAG 2.5.8 (24×24 CSS px minimum); prefer 44×44 for primary touch UIs.
+
+**Bad:** 16×16 icon hit area.
+
+**Good:** Adequate padding/hit slop.
+
+## Validation
+
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/accessibility/A11Y-011.md

@@ -0,0 +1,39 @@
+---
+id: A11Y-011
+title: Reflow without loss of use
+severity: MUST
+status: active
+priority: P1
+domain: accessibility
+source:
+  - WCAG-2.2
+applies_to:
+  - web
+  - responsive
+success_criteria:
+  - "1.4.10"
+requirement: >
+  Content MUST reflow without loss of information or functionality at 320 CSS px width (except exempt content).
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-011 — Reflow without loss of use
+
+**Requirement:** Content MUST reflow without loss of information or functionality at 320 CSS px width (except exempt content).
+
+**Bad:** Broken layout forcing x-scroll for login.
+
+**Good:** Stacked layout / responsive shell.
+
+## Validation
+
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/accessibility/A11Y-012.md

@@ -0,0 +1,39 @@
+---
+id: A11Y-012
+title: Respect reduced motion
+severity: MUST
+status: active
+priority: P1
+domain: accessibility
+source:
+  - WCAG-2.2
+applies_to:
+  - motion
+success_criteria:
+  - "2.3.3"
+requirement: >
+  Non-essential motion MUST respect prefers-reduced-motion.
+validation:
+  automated: true
+  manual: true
+exceptions: documented-only
+---
+
+# A11Y-012 — Respect reduced motion
+
+**Requirement:** Non-essential motion MUST respect prefers-reduced-motion.
+
+**Bad:** Large parallax with no reduce path.
+
+**Good:** Instant state change or minimal opacity fade when reduced.
+
+## Validation
+
+- Automated checks / lint / a11y tooling where applicable
+- Design or engineering review
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/agent/AGT-001.md

@@ -0,0 +1,42 @@
+---
+id: AGT-001
+title: Read the memory before writing code
+severity: MUST
+status: active
+domain: agent
+priority: P0
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  Before the first edit, an agent MUST read `.devia/AGENTS.md`, `.devia/10_NEVER_ALWAYS.md`, `.devia/00_OVERVIEW.md`, and the memory file covering the surface it is about to touch.
+validation:
+  automated: false
+  manual: true
+exceptions: none
+---
+
+# AGT-001 — Read the memory before writing code
+
+**Requirement:** Before the first edit, an agent MUST read `.devia/AGENTS.md`, `.devia/10_NEVER_ALWAYS.md`, `.devia/00_OVERVIEW.md`, and the memory file covering the surface it is about to touch.
+
+**Bad:** Editing a payment handler without reading what the project already decided about payments.
+
+**Good:** Memory read first; the change follows the recorded decision or challenges it explicitly.
+
+## Validation
+
+- The compliance output names the memory files read
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `none`
+
+## See also
+
+- [MEMORY.md](../../MEMORY.md)

package/rules/agent/AGT-002.md

@@ -0,0 +1,39 @@
+---
+id: AGT-002
+title: No memory, no code — initialise first
+severity: MUST
+status: active
+domain: agent
+priority: P0
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  If `.devia/` does not exist, the agent MUST run `devia init` and fill `00_OVERVIEW.md` from the actual repository before making any other change.
+validation:
+  automated: true
+  manual: true
+exceptions: none
+---
+
+# AGT-002 — No memory, no code — initialise first
+
+**Requirement:** If `.devia/` does not exist, the agent MUST run `devia init` and fill `00_OVERVIEW.md` from the actual repository before making any other change.
+
+**Bad:** Starting a feature in an unknown repository and inferring the architecture from three files.
+
+**Good:** `devia init`, overview filled from the real stack, then the feature.
+
+## Validation
+
+- `.devia/` exists
+- `00_OVERVIEW.md` has no unfilled placeholder
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `none`

package/rules/agent/AGT-003.md

@@ -0,0 +1,38 @@
+---
+id: AGT-003
+title: Make the smallest change that satisfies the request
+severity: MUST
+status: active
+domain: agent
+priority: P1
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  An agent MUST NOT widen the scope of a task with opportunistic refactors, renames, formatting sweeps or dependency upgrades. Improvements it notices are recorded, not smuggled in.
+validation:
+  automated: true
+  manual: true
+exceptions: documented-only
+---
+
+# AGT-003 — Make the smallest change that satisfies the request
+
+**Requirement:** An agent MUST NOT widen the scope of a task with opportunistic refactors, renames, formatting sweeps or dependency upgrades. Improvements it notices are recorded, not smuggled in.
+
+**Bad:** A one-line bug fix arriving with a 400-file reformat.
+
+**Good:** The fix alone; the formatting proposal noted separately.
+
+## Validation
+
+- The diff contains only what the request implies
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/agent/AGT-004.md

@@ -0,0 +1,39 @@
+---
+id: AGT-004
+title: Never invent an interface or a rule
+severity: MUST NOT
+status: active
+domain: agent
+priority: P0
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  An agent MUST NOT invent endpoints, fields, configuration keys, business thresholds or third-party behaviour. Unknowns are looked up, asked about, or recorded in `.devia/11_GAPS.md` — never guessed into the code.
+validation:
+  automated: false
+  manual: true
+exceptions: none
+---
+
+# AGT-004 — Never invent an interface or a rule
+
+**Requirement:** An agent MUST NOT invent endpoints, fields, configuration keys, business thresholds or third-party behaviour. Unknowns are looked up, asked about, or recorded in `.devia/11_GAPS.md` — never guessed into the code.
+
+**Bad:** Calling `POST /v1/refunds` because that is the usual shape, without checking that it exists.
+
+**Good:** The endpoint list is read; the missing capability becomes a gap line or a question.
+
+## Validation
+
+- Every external call in the diff exists in the contract
+- Assumptions are listed
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `none`

package/rules/agent/AGT-005.md

@@ -0,0 +1,38 @@
+---
+id: AGT-005
+title: Never claim done or production ready without evidence
+severity: MUST NOT
+status: active
+domain: agent
+priority: P0
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  An agent MUST NOT report completion, success, or production readiness on the basis of code that looks right. Completion claims MUST name the checks that ran and their result.
+validation:
+  automated: false
+  manual: true
+exceptions: none
+---
+
+# AGT-005 — Never claim done or production ready without evidence
+
+**Requirement:** An agent MUST NOT report completion, success, or production readiness on the basis of code that looks right. Completion claims MUST name the checks that ran and their result.
+
+**Bad:** 'All set, everything works' after an edit that was never executed.
+
+**Good:** 'Tests pass (18/18); the migration was not run; the UI was not opened.'
+
+## Validation
+
+- The completion claim names the checks that ran
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `none`

package/rules/agent/AGT-006.md

@@ -0,0 +1,38 @@
+---
+id: AGT-006
+title: Report what was not verified
+severity: MUST
+status: active
+domain: agent
+priority: P0
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  Every substantial report MUST include what was not run, not tested, or not looked at. For a non-trivial change this section is never empty.
+validation:
+  automated: false
+  manual: true
+exceptions: none
+---
+
+# AGT-006 — Report what was not verified
+
+**Requirement:** Every substantial report MUST include what was not run, not tested, or not looked at. For a non-trivial change this section is never empty.
+
+**Bad:** A report listing only successes, leaving the human to discover the untested path.
+
+**Good:** 'Not verified: the webhook path, because the provider sandbox is not configured here.'
+
+## Validation
+
+- The output contract's 'Not verified' section is present and substantive
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P0`
+- Exceptions: `none`

package/rules/agent/AGT-007.md

@@ -0,0 +1,38 @@
+---
+id: AGT-007
+title: Cite rule identifiers
+severity: MUST
+status: active
+domain: agent
+priority: P1
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  Compliance statements, reviews and refusals MUST cite the rule IDs they rest on, so a human can check the claim instead of trusting the tone.
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# AGT-007 — Cite rule identifiers
+
+**Requirement:** Compliance statements, reviews and refusals MUST cite the rule IDs they rest on, so a human can check the claim instead of trusting the tone.
+
+**Bad:** 'This is not accessible.'
+
+**Good:** 'Fails A11Y-006: the custom button removes the focus ring and adds nothing back.'
+
+## Validation
+
+- Rule IDs present in the compliance output
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/agent/AGT-008.md

@@ -0,0 +1,38 @@
+---
+id: AGT-008
+title: Read a file before editing it
+severity: MUST
+status: active
+domain: agent
+priority: P1
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  An agent MUST read the current content of a file before changing it, and MUST NOT overwrite work it has not seen.
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# AGT-008 — Read a file before editing it
+
+**Requirement:** An agent MUST read the current content of a file before changing it, and MUST NOT overwrite work it has not seen.
+
+**Bad:** Rewriting a config from a template and dropping three settings somebody added last week.
+
+**Good:** The file is read, the change is applied to what is actually there.
+
+## Validation
+
+- The edit is based on the current content
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/agent/AGT-009.md

@@ -0,0 +1,39 @@
+---
+id: AGT-009
+title: Only original work
+severity: MUST NOT
+status: active
+domain: agent
+priority: P1
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  Third-party documentation, schemas, code, images or copy MUST NOT be pasted into the repository as if it were ours. Sources are cited and linked; licences are respected.
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# AGT-009 — Only original work
+
+**Requirement:** Third-party documentation, schemas, code, images or copy MUST NOT be pasted into the repository as if it were ours. Sources are cited and linked; licences are respected.
+
+**Bad:** A vendor's integration guide copied wholesale into `docs/`.
+
+**Good:** A short summary in our words, with a link to the vendor page.
+
+## Validation
+
+- No verbatim third-party text in the diff
+- Sources linked
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`

package/rules/agent/AGT-010.md

@@ -0,0 +1,38 @@
+---
+id: AGT-010
+title: Ask or record instead of guessing
+severity: MUST
+status: active
+domain: agent
+priority: P1
+source:
+  - devia
+applies_to:
+  - agent
+success_criteria:
+  []
+requirement: >
+  When a decision is missing, the agent MUST either ask the human, or implement a declared, documented default and record the open question as a gap. Choosing silently is the failure mode this rule exists to stop.
+validation:
+  automated: false
+  manual: true
+exceptions: documented-only
+---
+
+# AGT-010 — Ask or record instead of guessing
+
+**Requirement:** When a decision is missing, the agent MUST either ask the human, or implement a declared, documented default and record the open question as a gap. Choosing silently is the failure mode this rule exists to stop.
+
+**Bad:** Picking a tax rounding rule quietly because something had to be written.
+
+**Good:** The rounding is declared in the gap line, implemented visibly, and flagged for a decision.
+
+## Validation
+
+- Undecided points appear in `.devia/11_GAPS.md`
+
+## Lifecycle
+
+- Status: `active`
+- Priority: `P1`
+- Exceptions: `documented-only`