guardian-framework 0.1.0

package/templates/pi/scripts/languages/rust/validate-operations.sh

@@ -0,0 +1,154 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-operations.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Operations Validation (Rust)"
+echo "============================================"
+echo ""
+
+if [ ! -f "Cargo.toml" ]; then
+    warn "No Cargo.toml found (skipping Rust operations validation)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    echo -e "${GREEN}No Rust project detected, nothing to validate.${NC}"
+    exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Structured logging
+# ---------------------------------------------------------------------------
+echo "--- Structured Logging ---"
+HAS_LOGGING=0
+if grep -qE '^\s*(tracing|slog)\s*=' Cargo.toml 2>/dev/null; then
+    HAS_LOGGING=1
+    pass "Structured logging detected"
+elif grep -qE '^\s*log\s*=' Cargo.toml 2>/dev/null; then
+    HAS_LOGGING=1
+    warn "Basic log crate detected (consider upgrading to tracing or slog for structured logging)"
+fi
+if [ "$HAS_LOGGING" -eq 0 ]; then
+    warn "No logging crate found in Cargo.toml (tracing, slog, or log)"
+fi
+
+# ---------------------------------------------------------------------------
+# Health checks
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Health Checks ---"
+HEALTH_FOUND=0
+if grep -rqE '"/health"|"/healthz"' --include="*.rs" src/ 2>/dev/null; then
+    HEALTH_FOUND=1
+    pass "Health check endpoints detected (/health or /healthz)"
+fi
+if [ "$HEALTH_FOUND" -eq 0 ]; then
+    warn "No health check endpoints found (consider adding /health or /healthz)"
+fi
+
+# ---------------------------------------------------------------------------
+# Graceful shutdown
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Graceful Shutdown ---"
+SHUTDOWN_FOUND=0
+if grep -rqE 'tokio::signal|ctrlc|impl\s+Drop' --include="*.rs" src/ 2>/dev/null; then
+    SHUTDOWN_FOUND=1
+    pass "Graceful shutdown mechanism detected"
+fi
+if [ "$SHUTDOWN_FOUND" -eq 0 ]; then
+    warn "No graceful shutdown mechanism found (tokio::signal, ctrlc, or Drop)"
+fi
+
+# ---------------------------------------------------------------------------
+# Metrics
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Metrics ---"
+if grep -qE '^\s*(prometheus|metrics|opentelemetry)\s*=' Cargo.toml 2>/dev/null; then
+    pass "Metrics library detected"
+else
+    warn "No metrics library found in Cargo.toml (prometheus, metrics, or opentelemetry)"
+fi
+
+# ---------------------------------------------------------------------------
+# Error handling
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Error Handling ---"
+if grep -qE '^\s*(thiserror|anyhow|eyre)\s*=' Cargo.toml 2>/dev/null; then
+    pass "Error handling library detected"
+else
+    warn "No error handling library found in Cargo.toml (thiserror, anyhow, or eyre)"
+fi
+
+# ---------------------------------------------------------------------------
+# Configuration
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Configuration ---"
+CONFIG_FOUND=0
+if grep -qE '^\s*(config|dotenvy)\s*=' Cargo.toml 2>/dev/null; then
+    CONFIG_FOUND=1
+    pass "Configuration library detected"
+fi
+if [ "$CONFIG_FOUND" -eq 0 ]; then
+    # Check for std::env usage with defaults
+    if grep -rqE 'std::env::var' --include="*.rs" src/ 2>/dev/null; then
+        warn "Environment variables used without config library (consider config or dotenvy)"
+    else
+        warn "No configuration management detected"
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Async runtime
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Async Runtime ---"
+if grep -qE '^\s*(tokio|async-std)\s*=' Cargo.toml 2>/dev/null; then
+    pass "Async runtime detected"
+else
+    warn "No async runtime found in Cargo.toml (tokio or async-std)"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Operations validation completed.${NC}"
+exit 0

package/templates/pi/scripts/languages/rust/validate-security.sh

@@ -0,0 +1,153 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-security.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Security Validation (Rust)"
+echo "============================================"
+echo ""
+
+if [ ! -f "Cargo.toml" ]; then
+    warn "No Cargo.toml found (skipping Rust security validation)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    echo -e "${GREEN}No Rust project detected, nothing to validate.${NC}"
+    exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Hardcoded secrets
+# ---------------------------------------------------------------------------
+echo "--- Hardcoded Secrets ---"
+# Search for long literal strings assigned to variables in non-test files
+SECRETS_FOUND=$(grep -rnE '=\s*"[A-Za-z0-9+/=_\-]{20,}"' --include="*.rs" src/ 2>/dev/null \
+    | grep -v '_test\.rs' \
+    | grep -v '#\[cfg(test)\]' \
+    | grep -v 'mod tests' \
+    | wc -l | tr -d ' ')
+if [ "$SECRETS_FOUND" -gt 0 ]; then
+    fail "Possible hardcoded secrets found ($SECRETS_FOUND occurrences)"
+else
+    pass "No hardcoded secrets detected"
+fi
+
+# ---------------------------------------------------------------------------
+# SQL injection
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- SQL Injection ---"
+SQL_INJECT=0
+if grep -qE 'sqlx' Cargo.toml 2>/dev/null; then
+    # Check for unsafe query patterns: format! inside query! or query()
+    SQL_INJECT=$(grep -rE 'query\s*\(\s*(format!|format_args!)' src/ --include="*.rs" 2>/dev/null | wc -l | tr -d ' ')
+fi
+if [ "$SQL_INJECT" -gt 0 ]; then
+    fail "Potential SQL injection patterns found ($SQL_INJECT occurrences — avoid format! inside query)"
+else
+    pass "No SQL injection patterns detected"
+fi
+
+# ---------------------------------------------------------------------------
+# Dependency audit
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Dependency Audit ---"
+if command -v cargo &>/dev/null && cargo audit --version &>/dev/null; then
+    AUDIT_OUT=$(cargo audit 2>&1 || true)
+    if echo "$AUDIT_OUT" | grep -qE "No advisabilities found|No known vulnerabilities"; then
+        pass "No known vulnerabilities (cargo audit)"
+    else
+        warn "cargo audit reported findings (review manually)"
+    fi
+elif command -v cargo &>/dev/null && cargo deny --version &>/dev/null; then
+    if cargo deny check 2>/dev/null; then
+        pass "No known vulnerabilities (cargo deny)"
+    else
+        warn "cargo deny reported issues (review manually)"
+    fi
+else
+    warn "No Rust audit tools available (cargo audit / cargo deny)"
+fi
+
+# ---------------------------------------------------------------------------
+# Unsafe code
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Unsafe Code ---"
+UNSAFE_BLOCKS=$(grep -rE 'unsafe\s*\{' --include="*.rs" src/ 2>/dev/null | wc -l | tr -d ' ')
+if [ "$UNSAFE_BLOCKS" -gt 0 ]; then
+    warn "Unsafe code blocks found ($UNSAFE_BLOCKS occurrences — recommend manual audit)"
+else
+    pass "No unsafe code blocks detected"
+fi
+
+# ---------------------------------------------------------------------------
+# Panic-prone patterns
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Panic-Prone Patterns ---"
+PANIC_CALLS=$(grep -rE '\.unwrap\(\)|\.expect\(' --include="*.rs" src/ 2>/dev/null \
+    | grep -v '#\[cfg(test)\]' \
+    | grep -v 'mod tests' \
+    | grep -v '_test\.rs' \
+    | wc -l | tr -d ' ')
+if [ "$PANIC_CALLS" -gt 0 ]; then
+    warn "Panic-prone patterns found ($PANIC_CALLS .unwrap()/.expect() calls in non-test code)"
+else
+    pass "No panic-prone patterns in production code"
+fi
+
+# ---------------------------------------------------------------------------
+# Cryptographic practices
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Cryptographic Practices ---"
+if grep -qE '^(ring|rustls)\s*=' Cargo.toml 2>/dev/null; then
+    pass "Modern crypto libraries detected (ring/rustls)"
+elif grep -qE '^openssl\s*=' Cargo.toml 2>/dev/null; then
+    warn "OpenSSL detected (prefer ring or rustls for new projects)"
+else
+    pass "No cryptographic library dependencies found"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Security validation completed.${NC}"
+exit 0

package/templates/pi/scripts/languages/rust/validate-tests.sh

@@ -0,0 +1,150 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-tests.sh — Rust
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0
+ERRORS=()
+WARNINGS=()
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Test Validation (Rust)"
+echo "============================================"
+echo ""
+
+if [ ! -f "Cargo.toml" ]; then
+    warn "No Cargo.toml found (skipping Rust test validation)"
+    echo ""
+    echo "============================================"
+    echo "  Summary"
+    echo "============================================"
+    echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+    echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+    echo ""
+    echo -e "${GREEN}No Rust project detected, nothing to validate.${NC}"
+    exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# Unit tests
+# ---------------------------------------------------------------------------
+echo "--- Unit Tests ---"
+if cargo test --lib --quiet 2>/dev/null; then
+    pass "Library unit tests passed"
+else
+    LIB_SOURCES=$(find src -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$LIB_SOURCES" -eq 0 ]; then
+        pass "No library source files (skipped)"
+    else
+        fail "Library unit tests failed"
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Integration tests
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Integration Tests ---"
+if [ -d "tests" ]; then
+    # Try named integration test first, then all tests in tests/
+    if [ -f "tests/integration.rs" ] || ls tests/*integration* 1>/dev/null 2>&1; then
+        if cargo test --test integration --quiet 2>/dev/null; then
+            pass "Integration tests passed"
+        else
+            fail "Integration tests failed"
+        fi
+    else
+        # Run all integration test files
+        TEST_COUNT=$(find tests -name "*.rs" 2>/dev/null | wc -l | tr -d ' ')
+        if [ "$TEST_COUNT" -gt 0 ]; then
+            if cargo test --test '*' --quiet 2>/dev/null; then
+                pass "Integration tests passed"
+            else
+                fail "Integration tests failed"
+            fi
+        else
+            pass "Integration test files found but empty or skipped"
+        fi
+    fi
+else
+    pass "No tests/ directory (no integration tests to run)"
+fi
+
+# ---------------------------------------------------------------------------
+# Doctests
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Doctests ---"
+if cargo test --doc --quiet 2>/dev/null; then
+    pass "Doctests passed"
+else
+    DOCS=$(grep -rl '//!\|///' src/ 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$DOCS" -eq 0 ]; then
+        pass "No doc comments found (no doctests to run)"
+    else
+        warn "Doctests failed (may have compile errors in doc examples)"
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Coverage
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Coverage ---"
+if command -v cargo &>/dev/null && cargo tarpaulin --version &>/dev/null; then
+    TARP_OUT=$(cargo tarpaulin --out Html 2>&1 || true)
+    COVERAGE_PCT=$(echo "$TARP_OUT" | grep -oE '[0-9]+(\.[0-9]+)?%' | head -1 | tr -d '%' || echo "")
+    if [ -n "$COVERAGE_PCT" ]; then
+        # Compare coverage against 80% threshold using awk
+        MEETS_THRESHOLD=$(echo "$COVERAGE_PCT" | awk '{print ($1 >= 80) ? "yes" : "no"}')
+        if [ "$MEETS_THRESHOLD" = "yes" ]; then
+            pass "Code coverage: ${COVERAGE_PCT}% (≥ 80%)"
+        else
+            fail "Code coverage: ${COVERAGE_PCT}% (< 80%)"
+        fi
+    else
+        warn "Could not extract coverage percentage from tarpaulin output"
+    fi
+elif command -v grcov &>/dev/null; then
+    # Use grcov as fallback
+    GRCOV_OUT=$(grcov . --binary-path ./target/debug/ -s . -t html --branch --ignore-not-existing 2>&1 || true)
+    if echo "$GRCOV_OUT" | grep -q "error\|Error"; then
+        warn "grcov encountered errors during coverage analysis"
+    else
+        pass "grcov coverage report generated"
+    fi
+else
+    warn "No coverage tools available (cargo-tarpaulin / grcov), skipping coverage check"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}All test validations passed.${NC}"
+exit 0

package/templates/pi/scripts/languages/typescript/validate-architecture.sh

@@ -0,0 +1,157 @@
+#!/usr/bin/env bash
+# ============================================================================
+# validate-architecture.sh — TypeScript
+# ============================================================================
+set -euo pipefail
+
+PASS_COUNT=0; ERRORS=(); WARNINGS=()
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
+pass() { echo -e "${GREEN}✅ PASS${NC} $1"; PASS_COUNT=$((PASS_COUNT + 1)); }
+fail() { echo -e "${RED}❌ FAIL${NC} $1"; ERRORS+=("$1"); }
+warn() { echo -e "${YELLOW}⚠️  WARN${NC} $1"; WARNINGS+=("$1"); }
+
+echo "============================================"
+echo "  Architecture Validation (TypeScript)"
+echo "============================================"
+echo ""
+
+SRC_DIR="${1:-src}"
+
+# ---------------------------------------------------------------------------
+# Layer Structure
+# ---------------------------------------------------------------------------
+echo "--- Layer Structure ---"
+if [ -d "$SRC_DIR" ]; then
+    HAS_DOMAIN=$(find "$SRC_DIR" -type d -name "domain" 2>/dev/null | head -1)
+    HAS_APPLICATION=$(find "$SRC_DIR" -type d -name "application" 2>/dev/null | head -1)
+    HAS_INFRASTRUCTURE=$(find "$SRC_DIR" -type d -name "infrastructure" 2>/dev/null | head -1)
+    if [ -n "$HAS_DOMAIN" ] && [ -n "$HAS_APPLICATION" ] && [ -n "$HAS_INFRASTRUCTURE" ]; then
+        pass "All three layers present (domain, application, infrastructure)"
+    elif [ -n "$HAS_DOMAIN" ] && [ -n "$HAS_INFRASTRUCTURE" ]; then
+        pass "Domain and infrastructure layers present"
+    elif [ -n "$HAS_DOMAIN" ]; then
+        pass "Domain layer present (architecture incremental)"
+    else
+        pass "Source tree initialized (clean architecture not yet layered)"
+    fi
+else
+    warn "No src directory found, skipping layer checks"
+fi
+
+# ---------------------------------------------------------------------------
+# Canonical References
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Canonical References ---"
+if [ -d ".pi/architecture/modules" ]; then
+    MODULE_COUNT=$(find .pi/architecture/modules -name "*.md" 2>/dev/null | wc -l | tr -d ' ')
+    pass "Canonical architecture documents found ($MODULE_COUNT modules)"
+else
+    warn "No .pi/architecture/modules directory found"
+fi
+
+# ---------------------------------------------------------------------------
+# Domain Models
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Domain Models ---"
+if [ -d "$SRC_DIR/domain" ]; then
+    DOMAIN_MODELS=$(find "$SRC_DIR/domain" -name "*.ts" -o -name "*.tsx" 2>/dev/null | xargs grep -lE '\b(interface|type|class)\b' 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$DOMAIN_MODELS" -gt 0 ]; then
+        pass "Domain model definitions found ($DOMAIN_MODELS files with interface/type/class)"
+    else
+        warn "No interface/type/class definitions in domain layer"
+    fi
+else
+    warn "No domain directory found, skipping domain model check"
+fi
+
+# ---------------------------------------------------------------------------
+# Dependency Direction
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Dependency Direction ---"
+if [ -d "$SRC_DIR/domain" ]; then
+    DOMAIN_BAD_IMPORTS=0
+    for f in $(find "$SRC_DIR/domain" -name "*.ts" -o -name "*.tsx" 2>/dev/null); do
+        if grep -qE "from\s+['\"].*\/(infrastructure|api)\b" "$f" 2>/dev/null; then
+            DOMAIN_BAD_IMPORTS=$((DOMAIN_BAD_IMPORTS + 1))
+        fi
+    done
+    if [ "$DOMAIN_BAD_IMPORTS" -eq 0 ]; then
+        pass "Domain layer has no infrastructure or API imports (clean dependency direction)"
+    else
+        fail "Domain layer imports from infrastructure/API ($DOMAIN_BAD_IMPORTS files)"
+    fi
+else
+    pass "No domain directory, skipping dependency direction check"
+fi
+
+# ---------------------------------------------------------------------------
+# Error Handling
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Error Handling ---"
+if [ -d "$SRC_DIR" ]; then
+    ERROR_CLASSES=$(grep -rE "class\s+\w+Error.*extends\s+(Error|AppError)" "$SRC_DIR" 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$ERROR_CLASSES" -gt 0 ]; then
+        pass "Custom error classes defined ($ERROR_CLASSES found)"
+    else
+        warn "No custom error classes (extends Error) found"
+    fi
+else
+    warn "No source directory found, skipping error handling check"
+fi
+
+# ---------------------------------------------------------------------------
+# Interfaces / Contracts
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- Interfaces / Contracts ---"
+if [ -d "$SRC_DIR" ]; then
+    INTERFACE_COUNT=$(grep -rE "^\s*(export\s+)?interface\s+" "$SRC_DIR" --include="*.ts" --include="*.tsx" 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$INTERFACE_COUNT" -gt 0 ]; then
+        pass "Interface contracts defined ($INTERFACE_COUNT found)"
+    else
+        warn "No interface definitions found in source"
+    fi
+else
+    warn "No source directory found, skipping interface check"
+fi
+
+# ---------------------------------------------------------------------------
+# TypeScript Strict Mode
+# ---------------------------------------------------------------------------
+echo ""
+echo "--- TypeScript Strict Mode ---"
+if [ -f "tsconfig.json" ]; then
+    if grep -q '"strict"\s*:\s*true' tsconfig.json 2>/dev/null; then
+        pass "TypeScript strict mode enabled"
+    else
+        warn "TypeScript strict mode not enabled in tsconfig.json"
+    fi
+else
+    warn "No tsconfig.json found"
+fi
+
+# ---------------------------------------------------------------------------
+# Summary
+# ---------------------------------------------------------------------------
+echo ""
+echo "============================================"
+echo "  Summary"
+echo "============================================"
+echo -e "  Passed:   ${GREEN}${PASS_COUNT}${NC}"
+echo -e "  Failed:   ${RED}${#ERRORS[@]}${NC}"
+echo ""
+
+if [ ${#ERRORS[@]} -gt 0 ]; then
+    echo "FAILURES:"
+    for err in "${ERRORS[@]}"; do
+        echo "  - $err"
+    done
+    exit 1
+fi
+
+echo -e "${GREEN}Architecture validation passed.${NC}"
+exit 0