pi-aia-asf 0.9.2 → 0.10.0

package/CHANGELOG.md

@@ -7,11 +7,80 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.10.0] - 2026-10-07
+
+### Added
+
+- (describe changes for 0.10.0)
+
+
+### Added
+
+- **06b Rule 19 — test selection for the inner loop (P25)**. Rule 10's
+  "full test suite green (not a subset)" is a **gate**, and it stays exactly
+  where it is: the run before a commit is always the full suite. What Rule 19
+  relaxes is only the **intermediate red-green-refactor runs inside a single
+  change** — the runs on code you are still editing. The rule is the user's
+  own: **run a partial, impact-area subset only when certain that is
+  warranted; if not certain, or the blast radius *might* be larger, always run
+  full. Default is full** — so the burden of proof sits on the subset, and the
+  cheap direction to be wrong in is also the safe one.
+- **"Certain" is evidence, not a feeling.** A subset run must be preceded by a
+  stated **impact statement** — changed files, tests selected, and *why nothing
+  else can be reached*. Restating the file list does not qualify; no statement
+  means not certain, which means full. On top of that, a **mechanical
+  disqualifier list** removes judgment wherever "might be bigger" is the
+  honest answer: shared/global state, dependencies and lockfile, build/test/CI
+  config or the harness itself, schema/migrations/shared fixtures, public
+  contracts and shared types, cross-module refactor/rename/move/delete — and
+  **any changed file with no entry in the test-impact map**, so a project that
+  has not built a map always runs full. The relaxation only ever applies where
+  the mapping is known, never where it is guessed.
+- **Deliberately not built**: the drafted coin toss and `iteration % N`
+  counter are gone. An LLM cannot roll a dice — asked to flip one it picks the
+  answer that skips the slow run — and an undefined iteration boundary means
+  the trigger silently never fires. A subset streak also cannot survive a
+  commit, because every commit is full-gated. Below a measured ~90s full-suite
+  runtime the assessment is skipped entirely and the suite is just run.
+- **Wired in**: `06b-testing-qa.md` Rule 10's checkbox now says in place that
+  the gate never moves; `06-implementation.md` test-first steps 3 and 4 name
+  the loop/gate split; `SKILL.md` gains two anti-patterns (a subset run with no
+  impact statement, and a subset run passed off as the Rule 10 checkbox) and
+  the index count moves to 19 rules. Covered by
+  `test/test-test-selection.mjs` (26 assertions), which includes a regression
+  guard that **fails if the coin-toss or iteration-counter design ever returns**.
+
 ## [0.9.2] - 2026-10-04
 
 ### Added
 
-- (describe changes for 0.9.2)
+- **`references/06i-completeness.md` — the completeness standard (P24, mandatory)**.
+  Newer models increasingly ship work that *looks* finished: a function whose body is
+  a placeholder, a screen populated with invented records, a report citing a limit
+  nobody checked. Green tests do not catch it — the tests get written against the
+  stub, so the fake looks verified. The reference states the core rule (**ship the
+  real thing, or say out loud what is not real**), the banned patterns (`TODO` /
+  `not implemented` / `coming soon` on a user-reachable path, fake or seed data the
+  user reads as their own, invented facts stated as checked, silently deferred scope,
+  built-but-never-wired, mocks in production paths, config nothing sets), the
+  exceptions that must be **declared, never silent** (the user asked for a scaffold,
+  an approved deferral, a fake at a test seam), how to prove it is real (exercise each
+  part through the entry point the user will use and name that action in the delivery
+  report), and a completeness DoD.
+- **Wired in, not bolted on**: Phase 6 gains a mandatory read block and discipline
+  rule 11; Phase 7 gains the completeness DoD check; the anti-pattern list gains six
+  entries (stub wearing a name, fake data the user reads as their own, invented facts
+  stated as fact, quietly deferred scope, stub presented as complete because its own
+  tests pass, unexplained deliberate stub); the reference index marks 06i as always
+  read. Proportionality holds — small work reads only the core rule and the DoD.
+
+### Requires
+
+- The enforcement side lives in **pi-vigilant 0.6.2**, which scans the files a
+  session changed for stub / fabricated-data / fact-hole markers at final
+  verification and puts the `file:line` evidence in front of the agent. The rule and
+  the check are the same proposal: the agent must finish the work or state the
+  discrepancy.
 
 
 ## [0.9.1] - 2026-10-03

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-aia-asf",
-  "version": "0.9.2",
+  "version": "0.10.0",
   "description": "Ai Applied Agentic Software Factory — codifies the full software development flow: intake, research, spec capture, adversarial analysis, planning with approval gates, test-first implementation, and release. Requires pi-vigilant, pi-smart-web-search, pi-smart-fetch, and pi-aia-browser.",
   "keywords": [
     "pi-package",

package/skills/aia-asf/SKILL.md

@@ -324,6 +324,8 @@ conflicts). Record the review + triage in the delivery report.
 - ❌ Shipping a delivery summary without the report fields: spec status + evidence, test results, skipped checks, not-tested register (06b Rule 17)
 - ❌ Letting an escaped defect teach nothing — ask which gate should have caught it and close the gap (06b Rule 18)
 - ❌ Self-modifying the ASF's own rules during a task run — standards change only via the review process (P22)
+- ❌ Running a subset of tests inside the loop without a stated impact statement, or when uncertain whether the blast radius is larger — default is full (06b Rule 19)
+- ❌ Treating a subset run as satisfying the Rule 10 full-suite checkbox — the commit/DoD gate is always a real full run (06b Rule 19)
 
 ## Reference index (read on demand — never load all)
 
@@ -338,7 +340,7 @@ reads at most 06b + 06c; large work reads the ones its phase calls for.
 | `04-adversarial.md` | adversarial checklist (spec/architecture/security lenses) | Phase 4 (large) |
 | `05-plan.md` | PLAN.md template + ADRs + quality scenarios + ATAM-lite + views | Phase 5 (large) |
 | `06-implementation.md` | coding discipline, M4/M5, drift self-correction (P20) | Phase 6 |
-| `06b-testing-qa.md` | **mandatory** testing & QA standard (18 rules + DoD) | before writing tests (always) |
+| `06b-testing-qa.md` | **mandatory** testing & QA standard (19 rules + DoD) | before writing tests (always) |
 | `06c-code-quality.md` | **mandatory** modularity standard (9 rules, deep modules, smells) | before structuring code |
 | `06d-delegation.md` | intercom & subagents + independent reviewer gate (P19) | before delegating; Phase 7 review (large) |
 | `06e-code-health.md` | Code Health Gate (+ depth, supply-chain, secrets metrics) | Gate 8 (large) |

package/skills/aia-asf/references/06-implementation.md

@@ -15,8 +15,11 @@
 
 1. Write the failing test for the next behavior
 2. Implement the minimum to pass
-3. Run the suite; refactor; re-run
-4. Only commit green
+3. Run the suite; refactor; re-run — steps 3's intermediate runs (not the
+   commit-gate run) may use a selected subset per **06b Rule 19**, and only
+   when certain the subset is warranted; default is full
+4. Only commit green — the pre-commit run is always the FULL suite (06b
+   Rule 10), never a subset, regardless of what ran in step 3
 
 For web interfaces, browser tests via pi-aia-browser are part of the test suite, not an afterthought.
 

package/skills/aia-asf/references/06b-testing-qa.md

@@ -139,7 +139,7 @@ never arrives, the wiring is dead — that is a failed test.
 ## Rule 10 — Definition of done (all must hold)
 
 - [ ] Typecheck/build passes
-- [ ] Full test suite green (not a subset)
+- [ ] Full test suite green (not a subset) — **the gate never moves: this checkbox always means a full run, even when Rule 19 permitted subset runs earlier in the loop that led here**
 - [ ] Regression test added for every bug fixed this cycle
 - [ ] Triggers **and** non-triggers tested for conditional behavior
 - [ ] Shipped artifact inspected (`npm pack` file list) and installed clean-room
@@ -325,3 +325,57 @@ production incident), the fix is not the end — the **loop** is:
 > **Real failure:** a package shipped with a broken `files` allowlist; the
 > fix landed but the *gap* ("no test inspects the packaged artifact") was not
 > closed until Rule 1 was added. The loop is what prevents the next one.
+
+## Rule 19 — Test selection for the inner loop (P25; the DoD gate never moves)
+
+Rule 10's full-suite checkbox is a **gate**, not a loop constraint. The gate
+never relaxes. What this rule relaxes is the **intermediate** runs inside one
+change's own red-green-refactor cycle (06-implementation "Test-first" steps
+1-3) — the runs that happen *before* the commit-gate run, on code you are
+still editing.
+
+**The rule, in the user's own words: run a partial (impact-area) subset only
+when certain that this is warranted; if not certain, or if the blast radius
+might be greater than the impact area, always run full. Default is full.**
+
+- **Burden of proof is on the subset, not on the full run.** Silence,
+  uncertainty, or "probably fine" all mean full. A subset run requires an
+  affirmative, checkable case.
+- **A subset run requires a stated impact statement** in the transcript,
+  before the run: the changed files, the tests selected because of them, and
+  *why nothing else can be reached*. A file list alone is not an impact
+  statement — restating the diff is not an argument for why the blast radius
+  stops there. No statement, or a statement that does not argue the
+  boundary → **not certain → full.**
+- **Certainty is impossible by definition (no judgment call — always full)**
+  when the changed footprint includes any of:
+  - shared/global state, a singleton, a cache, env/config, a feature flag
+  - `package.json`, the lockfile, or any dependency
+  - build, test, lint, or CI config, or the test harness itself
+  - a DB schema, a migration, or a shared fixture
+  - a public API/contract, CLI args, or a wire/shared type
+  - a cross-module refactor, a rename, a file move, or a deletion
+  - **any changed file with no entry in the project's test-impact map** — a
+    project that has not built a map always runs full; the relaxation only
+    ever applies where the mapping is known, never where it is guessed.
+- **The ~90s-and-under guard**: if the full suite's own measured runtime is
+  small enough that an assessment costs more than just running it, skip the
+  assessment and run full — state the measured number once rather than
+  re-litigating it every iteration.
+- **Reporting stays honest (Rule 11/17) no matter which path was taken.** A
+  subset run is reported as a subset run — "ran N/M suites (impact-area: X);
+  full suite not run this iteration" — never as "suite green". The Rule 10
+  checkbox is only ever satisfied by an actual full run, shown in this cycle,
+  regardless of how many subset runs preceded it.
+- **Never an escape from a failing test.** Selection decides *which* suites
+  run; it never decides whether a failing test counts. A failing test is
+  fixed or deleted (Rule 16), never excluded from the run that would have
+  caught it.
+- **If a defect escapes that a full run would have caught**, that is Rule 18:
+  the fix must say so, and the certainty bar for that class of change tightens
+  (added to the "certainty is impossible" list above if it recurs).
+
+This does not change Rule 10, Rule 11, or the commit-gate workflow: a project
+that commits after every green run already runs full before every commit, so
+Rule 19 only ever saves the intermediate runs inside a single change — it
+never reduces what runs before anything is committed.