aiwg 2026.9.3 → 2026.9.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/agentic/code/plugins/agent-loop/.claude-plugin/plugin.json +1 -1
  2. package/agentic/code/plugins/agent-persistence/.claude-plugin/plugin.json +1 -1
  3. package/agentic/code/plugins/agentic-installer/.claude-plugin/plugin.json +1 -1
  4. package/agentic/code/plugins/aiwg-dev/.claude-plugin/plugin.json +1 -1
  5. package/agentic/code/plugins/aiwg-evals/.claude-plugin/plugin.json +1 -1
  6. package/agentic/code/plugins/aiwg-evals/README.md +8 -0
  7. package/agentic/code/plugins/auto-memory/.claude-plugin/plugin.json +1 -1
  8. package/agentic/code/plugins/browser-control/.claude-plugin/plugin.json +1 -1
  9. package/agentic/code/plugins/color-palette/.claude-plugin/plugin.json +1 -1
  10. package/agentic/code/plugins/compound-memory/.claude-plugin/plugin.json +1 -1
  11. package/agentic/code/plugins/compound-memory/docs/operator-guide.md +5 -0
  12. package/agentic/code/plugins/context-curator/.claude-plugin/plugin.json +1 -1
  13. package/agentic/code/plugins/daemon/.claude-plugin/plugin.json +1 -1
  14. package/agentic/code/plugins/daemon/agents/concierge.md +2 -2
  15. package/agentic/code/plugins/doc-intelligence/.claude-plugin/plugin.json +1 -1
  16. package/agentic/code/plugins/droid-bridge/.claude-plugin/plugin.json +1 -1
  17. package/agentic/code/plugins/forensics/.claude-plugin/plugin.json +1 -1
  18. package/agentic/code/plugins/guided-implementation/.claude-plugin/plugin.json +1 -1
  19. package/agentic/code/plugins/guided-implementation/docs/overview.md +1 -1
  20. package/agentic/code/plugins/hooks/.claude-plugin/plugin.json +1 -1
  21. package/agentic/code/plugins/knowledge-base/.claude-plugin/plugin.json +1 -1
  22. package/agentic/code/plugins/line-memory/.claude-plugin/plugin.json +1 -1
  23. package/agentic/code/plugins/llm-wiki/.claude-plugin/plugin.json +1 -1
  24. package/agentic/code/plugins/marketing/.claude-plugin/plugin.json +1 -1
  25. package/agentic/code/plugins/media-curator/.claude-plugin/plugin.json +1 -1
  26. package/agentic/code/plugins/nlp-prod/.claude-plugin/plugin.json +1 -1
  27. package/agentic/code/plugins/ops/.claude-plugin/plugin.json +1 -1
  28. package/agentic/code/plugins/ops/agents/ops-runbook-executor.md +5 -3
  29. package/agentic/code/plugins/ops/skills/ops-audit-trail.md +10 -6
  30. package/agentic/code/plugins/prose-integration/.claude-plugin/plugin.json +1 -1
  31. package/agentic/code/plugins/research/.claude-plugin/plugin.json +1 -1
  32. package/agentic/code/plugins/research/skills/research-provenance/SKILL.md +5 -0
  33. package/agentic/code/plugins/rlm/.claude-plugin/plugin.json +1 -1
  34. package/agentic/code/plugins/sdlc/.claude-plugin/plugin.json +1 -1
  35. package/agentic/code/plugins/sdlc/agents/api-designer.md +2 -1
  36. package/agentic/code/plugins/sdlc/skills/check-traceability/SKILL.md +5 -0
  37. package/agentic/code/plugins/sdlc/skills/flow-discovery-track/SKILL.md +17 -4
  38. package/agentic/code/plugins/sdlc/skills/sdlc-quickref/SKILL.md +2 -0
  39. package/agentic/code/plugins/sdlc/tools/security/threat-assessment.mjs +3 -2
  40. package/agentic/code/plugins/security-engineering/.claude-plugin/plugin.json +1 -1
  41. package/agentic/code/plugins/semantic-memory/.claude-plugin/plugin.json +1 -1
  42. package/agentic/code/plugins/semantic-memory/skills/memory-ingest/SKILL.md +5 -0
  43. package/agentic/code/plugins/skill-factory/.claude-plugin/plugin.json +1 -1
  44. package/agentic/code/plugins/star-prompt/.claude-plugin/plugin.json +1 -1
  45. package/agentic/code/plugins/testing-quality/.claude-plugin/plugin.json +1 -1
  46. package/agentic/code/plugins/testing-quality/docs/quickstart.md +2 -2
  47. package/agentic/code/plugins/twelve-factor/.claude-plugin/plugin.json +1 -1
  48. package/agentic/code/plugins/twelve-factor/templates/audit-report.md +1 -1
  49. package/agentic/code/plugins/uat-mcp/.claude-plugin/plugin.json +1 -1
  50. package/agentic/code/plugins/utils/.claude-plugin/plugin.json +1 -1
  51. package/agentic/code/plugins/utils/skills/aiwg-guide/SKILL.md +6 -6
  52. package/agentic/code/plugins/utils/skills/aiwg-language-map/SKILL.md +44 -0
  53. package/agentic/code/plugins/utils/skills/context-firewall/SKILL.md +59 -0
  54. package/agentic/code/plugins/utils/skills/steward-prep-delivery/find-duplicates.sh +25 -4
  55. package/agentic/code/plugins/utils/skills/steward-quickref/SKILL.md +1 -0
  56. package/agentic/code/plugins/validation-complete/.claude-plugin/plugin.json +1 -1
  57. package/agentic/code/plugins/verbalized-sampling/.claude-plugin/plugin.json +1 -1
  58. package/agentic/code/plugins/voice/.claude-plugin/plugin.json +1 -1
  59. package/agentic/code/plugins/voice/skills/manifest.json +5 -0
  60. package/agentic/code/plugins/voice/skills/output-mode-guide/SKILL.md +43 -0
  61. package/agentic/code/plugins/writing/.claude-plugin/plugin.json +1 -1
  62. package/dist/src/cli/handlers/use.js +37 -0
  63. package/docs/releases/v2026.9.4-announcement.md +47 -0
  64. package/package.json +1 -1
  65. package/prebuilt/fortemi-core/framework/aiwg-fortemi-index-v2.json +1 -1
  66. package/prebuilt/fortemi-core/framework/manifest.json +2 -2
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-loop",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Iterative AI coding loops with automatic recovery - iteration beats perfection",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-persistence",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Human-in-the-loop (HITL) gate definitions for agent operations. Provides reusable YAML gates for destructive-action authorization, false-positive override, and recovery escalation. Loaded by agent loops and orchestrators that need bounded human checkpoints.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agentic-installer",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Structured YAML manifests for reproducible, agent-driven software installation across platforms. Scripts are the primary artifact; agentic instructions handle adaptation and recovery.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "aiwg-dev",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Developer tooling for building AIWG itself and AIWG addons/frameworks. Not for end users — install explicitly with `aiwg use aiwg-dev`.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "aiwg-evals",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Automated evaluation framework for agent quality, based on KAMI benchmark methodology and ReAct patterns",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -15,6 +15,14 @@ AIWG Evals provides:
15
15
  2. **Workflow Scenarios**: Test multi-agent orchestration
16
16
  3. **Archetype Detection**: Identify failure pattern susceptibility
17
17
  4. **Quality Reports**: Track agent health over time
18
+ 5. **Integrity-Gated Evidence**: Distinguish smoke diagnostics from verified
19
+ evals with uncertainty, paired baselines, compromise labels, and
20
+ PROMOTE/HOLD/ROLLBACK decisions
21
+
22
+ > A dimension score is a smoke diagnostic unless the report includes
23
+ > `sample_n`, uncertainty, `integrity_state`, and `trusted_score_source`.
24
+ > Detected `test_edit`, `scorer_edit`, `fixture_edit`, `metric_leakage`, or
25
+ > `unknown` compromise labels prevent promotion regardless of score.
18
26
 
19
27
  ## Installation
20
28
 
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "auto-memory",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Automatic memory seed templates for AIWG projects",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "browser-control",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Drive a real, user-installed Chromium-derived browser from an AIWG agent. Wraps @playwright/mcp with a setup wizard, health-check doctor, allow-list enforcement, and an opinionated agent persona that respects authorization and audit boundaries.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "color-palette",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Color palette selection and review tooling with color theory fundamentals, current trend research, and accessibility analysis.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "compound-memory",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Governed orchestration across AIWG line memory, semantic memory, and llm-wiki.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,5 +1,10 @@
1
1
  # Compound Memory operator guide
2
2
 
3
+ Compound Memory remains independently supported. Dataset Intelligence may
4
+ register source/run evidence, but does not replace promotion, review, bounded
5
+ context, or maintenance semantics. See the [dataset migration
6
+ guide](../dataset-intelligence/migration-guide.md).
7
+
3
8
  ## Activate
4
9
 
5
10
  ```bash
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "context-curator",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Context curation and distractor filtering for production-grade agent reliability",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "daemon",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Persistent daemon session capabilities: Concierge front-end, session memory, scheduler integration",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -112,8 +112,8 @@ Never expose file paths in the confirmation response.
112
112
 
113
113
  ## References
114
114
 
115
- - @$AIWG_ROOT/agentic/code/addons/daemon/behaviors/concierge.behavior.md — Behavior definition (full teach mode spec)
116
- - @$AIWG_ROOT/agentic/code/addons/daemon/rules/daemon-interaction.md — Interaction rules
115
+ - @$AIWG_ROOT/${CLAUDE_PLUGIN_ROOT}/behaviors/concierge.behavior.md — Behavior definition (full teach mode spec)
116
+ - @$AIWG_ROOT/${CLAUDE_PLUGIN_ROOT}/rules/daemon-interaction.md — Interaction rules
117
117
  - @$AIWG_ROOT/docs/daemon-guide.md — Daemon architecture
118
118
  - @$AIWG_ROOT/agentic/code/addons/prose-integration/skills/prose-run/SKILL.md — OpenProse runner for teach mode delegation
119
119
  - @$AIWG_ROOT/agentic/code/addons/prose-integration/skills/prose-detect/SKILL.md — OpenProse detection
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "doc-intelligence",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Documentation intelligence addon for scraping, extraction, analysis, and generated-docs auditing.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "droid-bridge",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "MCP server bridging Claude Code to Factory Droid for batch operations and automated fixes",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "forensics",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Digital forensics and incident response framework with 14 specialized agents covering target profiling, evidence acquisition, log/memory/container/cloud analysis, IOC extraction, and reporting.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "guided-implementation",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Bounded iteration control for autonomous issue-to-code implementation",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -47,7 +47,7 @@ Task: Implement JWT token validation
47
47
 
48
48
  Attempts:
49
49
  - Iter 1: Test failed — undefined token variable
50
- - Iter 2: Test failed — token missing userId field
50
+ - Iter 2: Test failed — token missing userId field
51
51
  - Iter 3: Test failed — userId format mismatch (string vs number)
52
52
 
53
53
  Pattern detected: userId type inconsistency between implementation and test
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "hooks",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Claude Code hooks for workflow tracing and observability.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "knowledge-base",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Knowledge-base / wiki framework with skills for ingestion, query, and lint. Build a structured, citable corpus with cross-references and concept pages.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "line-memory",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Bounded, plain-text project memory with least-recently-used retention.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "llm-wiki",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "LLM-maintained markdown wiki that compounds as sources are ingested. Thin topology declaration on the semantic memory kernel — ships schema profiles and page templates, no custom mechanics.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "marketing",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Marketing automation framework with 37 specialized agents for campaign management.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "media-curator",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Media archive management framework with 7 specialized agents for source discovery, acquisition (yt-dlp / Internet Archive / Bandcamp), quality assessment, metadata tagging, and provenance tracking.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nlp-prod",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Tools, skills, and CLI extensions for designing and productionizing LLM inference pipelines. Pattern-guided, slim by default, eval-first.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ops",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Operational infrastructure framework with 12 specialized agents covering incident response, runbook execution, fleet inventory, certificate lifecycle, and disaster recovery planning.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -18,7 +18,7 @@ Execute operational runbooks with structured verification, safety enforcement, a
18
18
  - Verify expected output at each step before proceeding
19
19
  - Gate destructive operations (require explicit human approval)
20
20
  - Detect interactive commands and flag for human execution
21
- - Generate audit trail of all commands run, outputs received, and files modified
21
+ - Generate governed minimum-sufficient evidence for commands, outcomes, bounded output excerpts, and file changes
22
22
  - Rollback on failure if rollback procedure is documented
23
23
  - Post progress updates to issue thread if issue context is provided
24
24
 
@@ -28,11 +28,13 @@ Execute operational runbooks with structured verification, safety enforcement, a
28
28
  - ALWAYS assess blast radius before destructive operations
29
29
  - IF a step fails, check troubleshooting section before retrying
30
30
  - LIMIT retries to 3 per step — escalate after that
31
- - RECORD every command executed and its output in the audit trail
31
+ - RECORD each command/result with bounded redacted excerpts and digests; full raw capture requires an explicit reason and short-lived raw tier
32
+ - ALWAYS invoke the ops evidence boundary before an audit/artifact write, agent response containing collected output, or issue/PR/comment submission
33
+ - NEVER submit a denied payload; use the separately gated sanitized summary when the boundary returns one
32
34
  - NEVER apply one host's runbook to a different host without explicit confirmation
33
35
 
34
36
  ## Output Format
35
- After execution, produce an audit trail:
37
+ After execution, prepare the audit trail through `aiwg ops evidence prepare` (or the `aiwg/governance` API), then produce:
36
38
  | Step | Command | Expected | Actual | Status |
37
39
  |------|---------|----------|--------|--------|
38
40
  | 1 | {cmd} | {expected} | {actual} | PASS/FAIL |
@@ -1,26 +1,30 @@
1
1
  ---
2
2
  name: ops-audit-trail
3
- description: Track all files modified, backups created, commands executed, and outputs received during operational procedures
3
+ description: Track minimum sufficient, governed evidence for operational procedures
4
4
  trigger: During and after runbook execution or operational changes
5
5
  ---
6
6
 
7
7
  # Ops Audit Trail
8
8
 
9
9
  ## Purpose
10
- Maintain a complete audit trail of all operational actions for accountability, debugging, and compliance. Every command, file change, and backup is recorded.
10
+ Maintain a useful audit trail of operational actions without turning runtime output into an indefinite disclosure surface. Durable records contain minimum sufficient, redacted evidence; full raw capture is exceptional and short-lived.
11
11
 
12
12
  ## Behavior
13
- 1. Record each command executed with timestamp, user, and host
14
- 2. Record command output (stdout and stderr)
13
+ 1. Record each command identity/digest, timestamp, result, and the minimum host/user context needed for correlation
14
+ 2. Record status plus bounded stdout/stderr excerpts and digests by default
15
15
  3. Track files created, modified, or deleted
16
16
  4. Track backups created and their locations
17
17
  5. Note any manual/human steps performed
18
- 6. Produce structured audit trail document
18
+ 6. Classify the artifact and invoke the mandatory evidence boundary before every write
19
+ 7. Attach creation time, policy ID/version, disposition deadline, evidence tier, and lifecycle action
20
+ 8. Produce a structured audit trail document and payload-free boundary audit record
19
21
 
20
22
  ## Output
21
23
  Structured audit trail saved to `.aiwg/ops/audit/` with:
22
24
  - Session ID and timestamp range
23
25
  - Host and user context
24
- - Complete command log with outputs
26
+ - Command/result log with bounded redacted excerpts, counts, and correlation digests
25
27
  - File change manifest
26
28
  - Backup inventory
29
+
30
+ Full raw output requires a recorded reason and the `raw` evidence tier. It MUST use a short-lived restricted policy and MUST NOT be posted to an issue/comment or another immutable sink. All writes to `.aiwg/ops/audit/` go through `prepareEvidenceForSink`/`publishEvidence` (or `aiwg ops evidence prepare`) before persistence.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "prose-integration",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Tools for reading, parsing, validating, and executing OpenProse programs from AIWG workflows",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "research",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Research workflow framework with 9 specialized agents for discovery, acquisition, synthesis, citation management, GRADE quality assessment, and OAIS-compliant archival.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -10,6 +10,11 @@ commandHint:
10
10
 
11
11
  # Research Provenance Command
12
12
 
13
+ This workflow remains active. Its records can be projected to the Dataset
14
+ Intelligence ledger, but arbitrary entity/activity attributes require a
15
+ governed extension. See the [dataset migration
16
+ guide](../../../addons/dataset-intelligence/docs/migration-guide.md).
17
+
13
18
  Query W3C PROV-compliant provenance chains to trace artifact derivations and relationships.
14
19
 
15
20
  ## Instructions
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "rlm",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "RLM-inspired recursive context decomposition for processing arbitrarily large codebases and document corpora through programmatic sub-agent delegation",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sdlc",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Complete SDLC framework with 180+ specialized agents for software development lifecycle management.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -18,13 +18,14 @@ Architecture Designer, and Implementers to ensure interface clarity and evolutio
18
18
  ## Responsibilities
19
19
 
20
20
  - Author interface and data contract cards
21
+ - Invoke schema intake for every persistent or exchanged structured data element; produce a canonical cataloged schema by default
21
22
  - Define error models, versioning, and compatibility policy
22
23
  - Review performance, security, and observability for interfaces
23
24
  - Coordinate with Test Engineer on integration tests
24
25
 
25
26
  ## Deliverables
26
27
 
27
- - Interface contracts and data contracts
28
+ - Interface contracts, data contract cards, canonical schemas, fixtures, and catalog metadata
28
29
  - Versioning and deprecation notes
29
30
  - Integration test specs
30
31
 
@@ -14,6 +14,11 @@ commandHint:
14
14
 
15
15
  # Check Traceability
16
16
 
17
+ This verification workflow remains active. Dataset Intelligence can project
18
+ links into its ledger, but a mention is not verified traceability and a
19
+ verified link without a run identity remains inferred. See the [dataset
20
+ migration guide](../../../addons/dataset-intelligence/docs/migration-guide.md).
21
+
17
22
  ## Task
18
23
 
19
24
  Verify the full specification-to-code refinement chain and report coverage at each layer. The traceability chain has 5 layers:
@@ -385,6 +385,7 @@ Based on your answers, I'll adjust:
385
385
  Analyze requirements to identify:
386
386
  - New data entities needed
387
387
  - Existing entities to modify
388
+ - Configuration, events, messages, files, imports/exports, and structured user input
388
389
  - New API endpoints required
389
390
  - Integration points with external systems
390
391
 
@@ -392,13 +393,14 @@ Based on your answers, I'll adjust:
392
393
  - List of data contracts needed
393
394
  - List of interface specifications needed
394
395
  - Dependencies on existing contracts
396
+ - Every schema-bearing boundary and any explicit opt-out candidate
395
397
 
396
398
  Output: .aiwg/working/discovery/iteration-{N}/designs/inventory.md
397
399
  """
398
400
  )
399
401
  ```
400
402
 
401
- 2. **Create Data Contract Cards** (parallel):
403
+ 2. **Create Canonical Schemas and Data Contract Cards** (parallel):
402
404
  ```
403
405
  # For each identified data entity:
404
406
  Task(
@@ -408,6 +410,12 @@ Based on your answers, I'll adjust:
408
410
  Entity: {entity-name}
409
411
  Related use cases: {use-case-ids}
410
412
 
413
+ First invoke schema-intake from the schema-governance addon. Persistent,
414
+ exchanged, configured, queued, evented, imported/exported, or structured
415
+ user-authored data requires a governed schema by default. Do not ask the
416
+ user to know schema terminology. An opt-out requires an ephemeral internal
417
+ boundary, owner, rationale, and review date.
418
+
411
419
  Use template: $AIWG_ROOT/agentic/code/frameworks/sdlc-complete/templates/analysis-design/data-contract-card.md
412
420
 
413
421
  Define data contract:
@@ -417,11 +425,13 @@ Based on your answers, I'll adjust:
417
425
  - Relationships to other entities
418
426
  - Business rules
419
427
 
420
- 2. Schema Specification
428
+ 2. Canonical Schema Specification
421
429
  - Fields and data types
422
430
  - Required vs. optional
423
431
  - Validation rules
424
432
  - Default values
433
+ - Stable catalog identity, version, owner, authority, consumers
434
+ - Valid and invalid executable fixtures
425
435
 
426
436
  3. Example (JSON/YAML)
427
437
  ```json
@@ -438,7 +448,10 @@ Based on your answers, I'll adjust:
438
448
  - Migration approach
439
449
  - Backward compatibility
440
450
 
441
- Output: .aiwg/working/discovery/iteration-{N}/designs/data-contract-{entity}.md
451
+ Outputs:
452
+ - .aiwg/working/discovery/iteration-{N}/designs/data-contract-{entity}.md
453
+ - Canonical schema under the project schema root
454
+ - Catalog/domain-manifest registration and fixtures
442
455
  """
443
456
  )
444
457
  ```
@@ -999,4 +1012,4 @@ This orchestration succeeds when:
999
1012
  - `flows/handoff-checklist-template.md` (DoR section)
1000
1013
 
1001
1014
  **Discovery Best Practices**:
1002
- - `docs/discovery-track-best-practices.md`
1015
+ - `docs/discovery-track-best-practices.md`
@@ -80,6 +80,8 @@ aiwg discover "architecture evolution" # → flow-architecture-evolution
80
80
  aiwg discover "iteration dual track" # → flow-iteration-dual-track
81
81
  aiwg discover "delivery track" # → flow-delivery-track
82
82
  aiwg discover "discovery track" # → flow-discovery-track
83
+ aiwg discover "define data shape" # → schema-intake (schema-governance addon)
84
+ aiwg discover "change an existing schema" # → schema-evolve (schema-governance addon)
83
85
  ```
84
86
 
85
87
  ### Quality gates
@@ -1,7 +1,7 @@
1
1
  import { createHash } from 'node:crypto';
2
2
 
3
3
  export const THREAT_ASSESSMENT_SCHEMA_VERSION = '1';
4
- export const THREAT_ASSESSMENT_ENGINE_VERSION = '1.0.0';
4
+ export const THREAT_ASSESSMENT_ENGINE_VERSION = '1.0.1';
5
5
 
6
6
  export const THREAT_SURFACES = [
7
7
  'issue-title',
@@ -89,7 +89,8 @@ const BUILTIN_RULES = [
89
89
  patterns: [
90
90
  '\\b(printenv|env\\s*\\||env\\s*$|process\\.env|os\\.environ)\\b',
91
91
  '\\.env\\b',
92
- '\\b(tokens?|api[_-]?keys?|secrets?|cookies?|document\\.cookie)\\b',
92
+ '\\b(api[_-]?keys?|secrets?|cookies?|document\\.cookie|credentials?|authentication material)\\b',
93
+ '\\b(?:api|access|auth(?:entication)?|bearer|session|refresh|oauth|jwt|signing|github|gitea|cloud)(?:[_-]?\\s*)tokens?\\b',
93
94
  '\\b(id_rsa|ssh keys?|gpg keys?|aws_access_key|cloud credentials?)\\b',
94
95
  ],
95
96
  },
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "security-engineering",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "semantic-memory",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Topology-agnostic semantic memory operations: ingest, lint, query-capture, and structured event logging. Consumers declare a memory topology in their manifest.json; kernel skills read that contract to parameterize behavior.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -13,6 +13,11 @@ triggers:
13
13
 
14
14
  # memory-ingest
15
15
 
16
+ This remains the canonical semantic synthesis workflow. Dataset Intelligence
17
+ can register its source and evidence, but raw dataset ingestion does not replace
18
+ summary, entity, contradiction, topology, or cross-reference behavior. See the
19
+ [dataset migration guide](../../../dataset-intelligence/docs/migration-guide.md).
20
+
16
21
  Ingest an external source into a consumer framework's semantic memory. Reads the consumer's `memory.topology` contract to know where pages live, then extracts, summarizes, integrates, and cross-references — all topology-agnostic.
17
22
 
18
23
  ## When to Use
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "skill-factory",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Build, enhance, validate, and package Claude skills end-to-end. Coordinates skill-builder, skill-enhancer, quality-checker, and skill-packager via the skill-architect agent.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "star-prompt",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Tasteful prompt to encourage users to star the repository after successful command completion",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "testing-quality",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Testing enforcement, quality metrics, and automation skills",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -93,8 +93,8 @@ Weak tests identified:
93
93
  src/auth/token.ts:validateExpiry()
94
94
  - Mutant survived: Changed > to >= on line 47
95
95
  - Tests should check boundary: token valid at exactly expiration time
96
-
97
- src/auth/token.ts:generateToken()
96
+
97
+ src/auth/token.ts:generateToken()
98
98
  - Mutant survived: Removed userId from payload on line 23
99
99
  - Tests should verify userId is present in generated token
100
100
  ```
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "twelve-factor",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Design-time and audit-time workflows for Twelve-Factor and modern 12+ Factor cloud-native application practices.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -51,4 +51,4 @@
51
51
 
52
52
  ## Open Questions
53
53
 
54
- -
54
+ -
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "uat-mcp",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Agent-executable acceptance testing via MCP connections — generate, execute, and report on UAT plans that validate MCP tool surfaces.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "utils",
3
- "version": "2026.9.3",
3
+ "version": "2026.9.4",
4
4
  "description": "Core AIWG utilities for context regeneration and workspace management.",
5
5
  "author": {
6
6
  "name": "AIWG Contributors",