aiwg 2026.9.3 → 2026.9.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/agentic/code/plugins/agent-loop/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/agent-persistence/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/agentic-installer/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/aiwg-dev/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/aiwg-evals/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/aiwg-evals/README.md +8 -0
- package/agentic/code/plugins/auto-memory/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/browser-control/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/color-palette/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/compound-memory/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/compound-memory/docs/operator-guide.md +5 -0
- package/agentic/code/plugins/context-curator/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/daemon/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/daemon/agents/concierge.md +2 -2
- package/agentic/code/plugins/doc-intelligence/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/droid-bridge/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/forensics/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/guided-implementation/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/guided-implementation/docs/overview.md +1 -1
- package/agentic/code/plugins/hooks/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/knowledge-base/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/line-memory/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/llm-wiki/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/marketing/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/media-curator/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/nlp-prod/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/ops/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/ops/agents/ops-runbook-executor.md +5 -3
- package/agentic/code/plugins/ops/skills/ops-audit-trail.md +10 -6
- package/agentic/code/plugins/prose-integration/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/research/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/research/skills/research-provenance/SKILL.md +5 -0
- package/agentic/code/plugins/rlm/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/sdlc/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/sdlc/agents/api-designer.md +2 -1
- package/agentic/code/plugins/sdlc/skills/check-traceability/SKILL.md +5 -0
- package/agentic/code/plugins/sdlc/skills/flow-discovery-track/SKILL.md +17 -4
- package/agentic/code/plugins/sdlc/skills/sdlc-quickref/SKILL.md +2 -0
- package/agentic/code/plugins/sdlc/tools/security/threat-assessment.mjs +3 -2
- package/agentic/code/plugins/security-engineering/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/semantic-memory/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/semantic-memory/skills/memory-ingest/SKILL.md +5 -0
- package/agentic/code/plugins/skill-factory/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/star-prompt/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/testing-quality/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/testing-quality/docs/quickstart.md +2 -2
- package/agentic/code/plugins/twelve-factor/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/twelve-factor/templates/audit-report.md +1 -1
- package/agentic/code/plugins/uat-mcp/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/utils/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/utils/skills/aiwg-guide/SKILL.md +6 -6
- package/agentic/code/plugins/utils/skills/aiwg-language-map/SKILL.md +44 -0
- package/agentic/code/plugins/utils/skills/context-firewall/SKILL.md +59 -0
- package/agentic/code/plugins/utils/skills/steward-prep-delivery/find-duplicates.sh +25 -4
- package/agentic/code/plugins/utils/skills/steward-quickref/SKILL.md +1 -0
- package/agentic/code/plugins/validation-complete/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/verbalized-sampling/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/voice/.claude-plugin/plugin.json +1 -1
- package/agentic/code/plugins/voice/skills/manifest.json +5 -0
- package/agentic/code/plugins/voice/skills/output-mode-guide/SKILL.md +43 -0
- package/agentic/code/plugins/writing/.claude-plugin/plugin.json +1 -1
- package/dist/src/cli/handlers/use.js +37 -0
- package/docs/releases/v2026.9.4-announcement.md +47 -0
- package/package.json +1 -1
- package/prebuilt/fortemi-core/framework/aiwg-fortemi-index-v2.json +1 -1
- package/prebuilt/fortemi-core/framework/manifest.json +2 -2
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "agent-persistence",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Human-in-the-loop (HITL) gate definitions for agent operations. Provides reusable YAML gates for destructive-action authorization, false-positive override, and recovery escalation. Loaded by agent loops and orchestrators that need bounded human checkpoints.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "agentic-installer",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Structured YAML manifests for reproducible, agent-driven software installation across platforms. Scripts are the primary artifact; agentic instructions handle adaptation and recovery.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "aiwg-dev",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Developer tooling for building AIWG itself and AIWG addons/frameworks. Not for end users — install explicitly with `aiwg use aiwg-dev`.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -15,6 +15,14 @@ AIWG Evals provides:
|
|
|
15
15
|
2. **Workflow Scenarios**: Test multi-agent orchestration
|
|
16
16
|
3. **Archetype Detection**: Identify failure pattern susceptibility
|
|
17
17
|
4. **Quality Reports**: Track agent health over time
|
|
18
|
+
5. **Integrity-Gated Evidence**: Distinguish smoke diagnostics from verified
|
|
19
|
+
evals with uncertainty, paired baselines, compromise labels, and
|
|
20
|
+
PROMOTE/HOLD/ROLLBACK decisions
|
|
21
|
+
|
|
22
|
+
> A dimension score is a smoke diagnostic unless the report includes
|
|
23
|
+
> `sample_n`, uncertainty, `integrity_state`, and `trusted_score_source`.
|
|
24
|
+
> Detected `test_edit`, `scorer_edit`, `fixture_edit`, `metric_leakage`, or
|
|
25
|
+
> `unknown` compromise labels prevent promotion regardless of score.
|
|
18
26
|
|
|
19
27
|
## Installation
|
|
20
28
|
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "browser-control",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Drive a real, user-installed Chromium-derived browser from an AIWG agent. Wraps @playwright/mcp with a setup wizard, health-check doctor, allow-list enforcement, and an opinionated agent persona that respects authorization and audit boundaries.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "color-palette",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Color palette selection and review tooling with color theory fundamentals, current trend research, and accessibility analysis.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,5 +1,10 @@
|
|
|
1
1
|
# Compound Memory operator guide
|
|
2
2
|
|
|
3
|
+
Compound Memory remains independently supported. Dataset Intelligence may
|
|
4
|
+
register source/run evidence, but does not replace promotion, review, bounded
|
|
5
|
+
context, or maintenance semantics. See the [dataset migration
|
|
6
|
+
guide](../dataset-intelligence/migration-guide.md).
|
|
7
|
+
|
|
3
8
|
## Activate
|
|
4
9
|
|
|
5
10
|
```bash
|
|
@@ -112,8 +112,8 @@ Never expose file paths in the confirmation response.
|
|
|
112
112
|
|
|
113
113
|
## References
|
|
114
114
|
|
|
115
|
-
- @$AIWG_ROOT/
|
|
116
|
-
- @$AIWG_ROOT/
|
|
115
|
+
- @$AIWG_ROOT/${CLAUDE_PLUGIN_ROOT}/behaviors/concierge.behavior.md — Behavior definition (full teach mode spec)
|
|
116
|
+
- @$AIWG_ROOT/${CLAUDE_PLUGIN_ROOT}/rules/daemon-interaction.md — Interaction rules
|
|
117
117
|
- @$AIWG_ROOT/docs/daemon-guide.md — Daemon architecture
|
|
118
118
|
- @$AIWG_ROOT/agentic/code/addons/prose-integration/skills/prose-run/SKILL.md — OpenProse runner for teach mode delegation
|
|
119
119
|
- @$AIWG_ROOT/agentic/code/addons/prose-integration/skills/prose-detect/SKILL.md — OpenProse detection
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "forensics",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Digital forensics and incident response framework with 14 specialized agents covering target profiling, evidence acquisition, log/memory/container/cloud analysis, IOC extraction, and reporting.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -47,7 +47,7 @@ Task: Implement JWT token validation
|
|
|
47
47
|
|
|
48
48
|
Attempts:
|
|
49
49
|
- Iter 1: Test failed — undefined token variable
|
|
50
|
-
- Iter 2: Test failed — token missing userId field
|
|
50
|
+
- Iter 2: Test failed — token missing userId field
|
|
51
51
|
- Iter 3: Test failed — userId format mismatch (string vs number)
|
|
52
52
|
|
|
53
53
|
Pattern detected: userId type inconsistency between implementation and test
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "knowledge-base",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Knowledge-base / wiki framework with skills for ingestion, query, and lint. Build a structured, citable corpus with cross-references and concept pages.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "llm-wiki",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "LLM-maintained markdown wiki that compounds as sources are ingested. Thin topology declaration on the semantic memory kernel — ships schema profiles and page templates, no custom mechanics.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "media-curator",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Media archive management framework with 7 specialized agents for source discovery, acquisition (yt-dlp / Internet Archive / Bandcamp), quality assessment, metadata tagging, and provenance tracking.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "nlp-prod",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Tools, skills, and CLI extensions for designing and productionizing LLM inference pipelines. Pattern-guided, slim by default, eval-first.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "ops",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Operational infrastructure framework with 12 specialized agents covering incident response, runbook execution, fleet inventory, certificate lifecycle, and disaster recovery planning.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -18,7 +18,7 @@ Execute operational runbooks with structured verification, safety enforcement, a
|
|
|
18
18
|
- Verify expected output at each step before proceeding
|
|
19
19
|
- Gate destructive operations (require explicit human approval)
|
|
20
20
|
- Detect interactive commands and flag for human execution
|
|
21
|
-
- Generate
|
|
21
|
+
- Generate governed minimum-sufficient evidence for commands, outcomes, bounded output excerpts, and file changes
|
|
22
22
|
- Rollback on failure if rollback procedure is documented
|
|
23
23
|
- Post progress updates to issue thread if issue context is provided
|
|
24
24
|
|
|
@@ -28,11 +28,13 @@ Execute operational runbooks with structured verification, safety enforcement, a
|
|
|
28
28
|
- ALWAYS assess blast radius before destructive operations
|
|
29
29
|
- IF a step fails, check troubleshooting section before retrying
|
|
30
30
|
- LIMIT retries to 3 per step — escalate after that
|
|
31
|
-
- RECORD
|
|
31
|
+
- RECORD each command/result with bounded redacted excerpts and digests; full raw capture requires an explicit reason and short-lived raw tier
|
|
32
|
+
- ALWAYS invoke the ops evidence boundary before an audit/artifact write, agent response containing collected output, or issue/PR/comment submission
|
|
33
|
+
- NEVER submit a denied payload; use the separately gated sanitized summary when the boundary returns one
|
|
32
34
|
- NEVER apply one host's runbook to a different host without explicit confirmation
|
|
33
35
|
|
|
34
36
|
## Output Format
|
|
35
|
-
After execution,
|
|
37
|
+
After execution, prepare the audit trail through `aiwg ops evidence prepare` (or the `aiwg/governance` API), then produce:
|
|
36
38
|
| Step | Command | Expected | Actual | Status |
|
|
37
39
|
|------|---------|----------|--------|--------|
|
|
38
40
|
| 1 | {cmd} | {expected} | {actual} | PASS/FAIL |
|
|
@@ -1,26 +1,30 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: ops-audit-trail
|
|
3
|
-
description: Track
|
|
3
|
+
description: Track minimum sufficient, governed evidence for operational procedures
|
|
4
4
|
trigger: During and after runbook execution or operational changes
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Ops Audit Trail
|
|
8
8
|
|
|
9
9
|
## Purpose
|
|
10
|
-
Maintain a
|
|
10
|
+
Maintain a useful audit trail of operational actions without turning runtime output into an indefinite disclosure surface. Durable records contain minimum sufficient, redacted evidence; full raw capture is exceptional and short-lived.
|
|
11
11
|
|
|
12
12
|
## Behavior
|
|
13
|
-
1. Record each command
|
|
14
|
-
2. Record
|
|
13
|
+
1. Record each command identity/digest, timestamp, result, and the minimum host/user context needed for correlation
|
|
14
|
+
2. Record status plus bounded stdout/stderr excerpts and digests by default
|
|
15
15
|
3. Track files created, modified, or deleted
|
|
16
16
|
4. Track backups created and their locations
|
|
17
17
|
5. Note any manual/human steps performed
|
|
18
|
-
6.
|
|
18
|
+
6. Classify the artifact and invoke the mandatory evidence boundary before every write
|
|
19
|
+
7. Attach creation time, policy ID/version, disposition deadline, evidence tier, and lifecycle action
|
|
20
|
+
8. Produce a structured audit trail document and payload-free boundary audit record
|
|
19
21
|
|
|
20
22
|
## Output
|
|
21
23
|
Structured audit trail saved to `.aiwg/ops/audit/` with:
|
|
22
24
|
- Session ID and timestamp range
|
|
23
25
|
- Host and user context
|
|
24
|
-
-
|
|
26
|
+
- Command/result log with bounded redacted excerpts, counts, and correlation digests
|
|
25
27
|
- File change manifest
|
|
26
28
|
- Backup inventory
|
|
29
|
+
|
|
30
|
+
Full raw output requires a recorded reason and the `raw` evidence tier. It MUST use a short-lived restricted policy and MUST NOT be posted to an issue/comment or another immutable sink. All writes to `.aiwg/ops/audit/` go through `prepareEvidenceForSink`/`publishEvidence` (or `aiwg ops evidence prepare`) before persistence.
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "research",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Research workflow framework with 9 specialized agents for discovery, acquisition, synthesis, citation management, GRADE quality assessment, and OAIS-compliant archival.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -10,6 +10,11 @@ commandHint:
|
|
|
10
10
|
|
|
11
11
|
# Research Provenance Command
|
|
12
12
|
|
|
13
|
+
This workflow remains active. Its records can be projected to the Dataset
|
|
14
|
+
Intelligence ledger, but arbitrary entity/activity attributes require a
|
|
15
|
+
governed extension. See the [dataset migration
|
|
16
|
+
guide](../../../addons/dataset-intelligence/docs/migration-guide.md).
|
|
17
|
+
|
|
13
18
|
Query W3C PROV-compliant provenance chains to trace artifact derivations and relationships.
|
|
14
19
|
|
|
15
20
|
## Instructions
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "rlm",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "RLM-inspired recursive context decomposition for processing arbitrarily large codebases and document corpora through programmatic sub-agent delegation",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -18,13 +18,14 @@ Architecture Designer, and Implementers to ensure interface clarity and evolutio
|
|
|
18
18
|
## Responsibilities
|
|
19
19
|
|
|
20
20
|
- Author interface and data contract cards
|
|
21
|
+
- Invoke schema intake for every persistent or exchanged structured data element; produce a canonical cataloged schema by default
|
|
21
22
|
- Define error models, versioning, and compatibility policy
|
|
22
23
|
- Review performance, security, and observability for interfaces
|
|
23
24
|
- Coordinate with Test Engineer on integration tests
|
|
24
25
|
|
|
25
26
|
## Deliverables
|
|
26
27
|
|
|
27
|
-
- Interface contracts and
|
|
28
|
+
- Interface contracts, data contract cards, canonical schemas, fixtures, and catalog metadata
|
|
28
29
|
- Versioning and deprecation notes
|
|
29
30
|
- Integration test specs
|
|
30
31
|
|
|
@@ -14,6 +14,11 @@ commandHint:
|
|
|
14
14
|
|
|
15
15
|
# Check Traceability
|
|
16
16
|
|
|
17
|
+
This verification workflow remains active. Dataset Intelligence can project
|
|
18
|
+
links into its ledger, but a mention is not verified traceability and a
|
|
19
|
+
verified link without a run identity remains inferred. See the [dataset
|
|
20
|
+
migration guide](../../../addons/dataset-intelligence/docs/migration-guide.md).
|
|
21
|
+
|
|
17
22
|
## Task
|
|
18
23
|
|
|
19
24
|
Verify the full specification-to-code refinement chain and report coverage at each layer. The traceability chain has 5 layers:
|
|
@@ -385,6 +385,7 @@ Based on your answers, I'll adjust:
|
|
|
385
385
|
Analyze requirements to identify:
|
|
386
386
|
- New data entities needed
|
|
387
387
|
- Existing entities to modify
|
|
388
|
+
- Configuration, events, messages, files, imports/exports, and structured user input
|
|
388
389
|
- New API endpoints required
|
|
389
390
|
- Integration points with external systems
|
|
390
391
|
|
|
@@ -392,13 +393,14 @@ Based on your answers, I'll adjust:
|
|
|
392
393
|
- List of data contracts needed
|
|
393
394
|
- List of interface specifications needed
|
|
394
395
|
- Dependencies on existing contracts
|
|
396
|
+
- Every schema-bearing boundary and any explicit opt-out candidate
|
|
395
397
|
|
|
396
398
|
Output: .aiwg/working/discovery/iteration-{N}/designs/inventory.md
|
|
397
399
|
"""
|
|
398
400
|
)
|
|
399
401
|
```
|
|
400
402
|
|
|
401
|
-
2. **Create Data Contract Cards** (parallel):
|
|
403
|
+
2. **Create Canonical Schemas and Data Contract Cards** (parallel):
|
|
402
404
|
```
|
|
403
405
|
# For each identified data entity:
|
|
404
406
|
Task(
|
|
@@ -408,6 +410,12 @@ Based on your answers, I'll adjust:
|
|
|
408
410
|
Entity: {entity-name}
|
|
409
411
|
Related use cases: {use-case-ids}
|
|
410
412
|
|
|
413
|
+
First invoke schema-intake from the schema-governance addon. Persistent,
|
|
414
|
+
exchanged, configured, queued, evented, imported/exported, or structured
|
|
415
|
+
user-authored data requires a governed schema by default. Do not ask the
|
|
416
|
+
user to know schema terminology. An opt-out requires an ephemeral internal
|
|
417
|
+
boundary, owner, rationale, and review date.
|
|
418
|
+
|
|
411
419
|
Use template: $AIWG_ROOT/agentic/code/frameworks/sdlc-complete/templates/analysis-design/data-contract-card.md
|
|
412
420
|
|
|
413
421
|
Define data contract:
|
|
@@ -417,11 +425,13 @@ Based on your answers, I'll adjust:
|
|
|
417
425
|
- Relationships to other entities
|
|
418
426
|
- Business rules
|
|
419
427
|
|
|
420
|
-
2. Schema Specification
|
|
428
|
+
2. Canonical Schema Specification
|
|
421
429
|
- Fields and data types
|
|
422
430
|
- Required vs. optional
|
|
423
431
|
- Validation rules
|
|
424
432
|
- Default values
|
|
433
|
+
- Stable catalog identity, version, owner, authority, consumers
|
|
434
|
+
- Valid and invalid executable fixtures
|
|
425
435
|
|
|
426
436
|
3. Example (JSON/YAML)
|
|
427
437
|
```json
|
|
@@ -438,7 +448,10 @@ Based on your answers, I'll adjust:
|
|
|
438
448
|
- Migration approach
|
|
439
449
|
- Backward compatibility
|
|
440
450
|
|
|
441
|
-
|
|
451
|
+
Outputs:
|
|
452
|
+
- .aiwg/working/discovery/iteration-{N}/designs/data-contract-{entity}.md
|
|
453
|
+
- Canonical schema under the project schema root
|
|
454
|
+
- Catalog/domain-manifest registration and fixtures
|
|
442
455
|
"""
|
|
443
456
|
)
|
|
444
457
|
```
|
|
@@ -999,4 +1012,4 @@ This orchestration succeeds when:
|
|
|
999
1012
|
- `flows/handoff-checklist-template.md` (DoR section)
|
|
1000
1013
|
|
|
1001
1014
|
**Discovery Best Practices**:
|
|
1002
|
-
- `docs/discovery-track-best-practices.md`
|
|
1015
|
+
- `docs/discovery-track-best-practices.md`
|
|
@@ -80,6 +80,8 @@ aiwg discover "architecture evolution" # → flow-architecture-evolution
|
|
|
80
80
|
aiwg discover "iteration dual track" # → flow-iteration-dual-track
|
|
81
81
|
aiwg discover "delivery track" # → flow-delivery-track
|
|
82
82
|
aiwg discover "discovery track" # → flow-discovery-track
|
|
83
|
+
aiwg discover "define data shape" # → schema-intake (schema-governance addon)
|
|
84
|
+
aiwg discover "change an existing schema" # → schema-evolve (schema-governance addon)
|
|
83
85
|
```
|
|
84
86
|
|
|
85
87
|
### Quality gates
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { createHash } from 'node:crypto';
|
|
2
2
|
|
|
3
3
|
export const THREAT_ASSESSMENT_SCHEMA_VERSION = '1';
|
|
4
|
-
export const THREAT_ASSESSMENT_ENGINE_VERSION = '1.0.
|
|
4
|
+
export const THREAT_ASSESSMENT_ENGINE_VERSION = '1.0.1';
|
|
5
5
|
|
|
6
6
|
export const THREAT_SURFACES = [
|
|
7
7
|
'issue-title',
|
|
@@ -89,7 +89,8 @@ const BUILTIN_RULES = [
|
|
|
89
89
|
patterns: [
|
|
90
90
|
'\\b(printenv|env\\s*\\||env\\s*$|process\\.env|os\\.environ)\\b',
|
|
91
91
|
'\\.env\\b',
|
|
92
|
-
'\\b(
|
|
92
|
+
'\\b(api[_-]?keys?|secrets?|cookies?|document\\.cookie|credentials?|authentication material)\\b',
|
|
93
|
+
'\\b(?:api|access|auth(?:entication)?|bearer|session|refresh|oauth|jwt|signing|github|gitea|cloud)(?:[_-]?\\s*)tokens?\\b',
|
|
93
94
|
'\\b(id_rsa|ssh keys?|gpg keys?|aws_access_key|cloud credentials?)\\b',
|
|
94
95
|
],
|
|
95
96
|
},
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "security-engineering",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Applied security framework for cryptographic primitive selection, chain-of-trust design, authentication factor analysis, supply-chain trust, and physical-threat modeling. Complements OWASP-style application audits.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "semantic-memory",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Topology-agnostic semantic memory operations: ingest, lint, query-capture, and structured event logging. Consumers declare a memory topology in their manifest.json; kernel skills read that contract to parameterize behavior.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -13,6 +13,11 @@ triggers:
|
|
|
13
13
|
|
|
14
14
|
# memory-ingest
|
|
15
15
|
|
|
16
|
+
This remains the canonical semantic synthesis workflow. Dataset Intelligence
|
|
17
|
+
can register its source and evidence, but raw dataset ingestion does not replace
|
|
18
|
+
summary, entity, contradiction, topology, or cross-reference behavior. See the
|
|
19
|
+
[dataset migration guide](../../../dataset-intelligence/docs/migration-guide.md).
|
|
20
|
+
|
|
16
21
|
Ingest an external source into a consumer framework's semantic memory. Reads the consumer's `memory.topology` contract to know where pages live, then extracts, summarizes, integrates, and cross-references — all topology-agnostic.
|
|
17
22
|
|
|
18
23
|
## When to Use
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "skill-factory",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Build, enhance, validate, and package Claude skills end-to-end. Coordinates skill-builder, skill-enhancer, quality-checker, and skill-packager via the skill-architect agent.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|
|
@@ -93,8 +93,8 @@ Weak tests identified:
|
|
|
93
93
|
src/auth/token.ts:validateExpiry()
|
|
94
94
|
- Mutant survived: Changed > to >= on line 47
|
|
95
95
|
- Tests should check boundary: token valid at exactly expiration time
|
|
96
|
-
|
|
97
|
-
src/auth/token.ts:generateToken()
|
|
96
|
+
|
|
97
|
+
src/auth/token.ts:generateToken()
|
|
98
98
|
- Mutant survived: Removed userId from payload on line 23
|
|
99
99
|
- Tests should verify userId is present in generated token
|
|
100
100
|
```
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "uat-mcp",
|
|
3
|
-
"version": "2026.9.
|
|
3
|
+
"version": "2026.9.4",
|
|
4
4
|
"description": "Agent-executable acceptance testing via MCP connections — generate, execute, and report on UAT plans that validate MCP tool surfaces.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "AIWG Contributors",
|