universal-dev-standards 5.6.0 → 5.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (98) hide show
  1. package/bundled/ai/standards/agent-communication-protocol.ai.yaml +8 -9
  2. package/bundled/ai/standards/agent-dispatch.ai.yaml +8 -9
  3. package/bundled/ai/standards/branch-completion.ai.yaml +8 -10
  4. package/bundled/ai/standards/capability-declaration.ai.yaml +4 -4
  5. package/bundled/ai/standards/change-batching-standards.ai.yaml +8 -10
  6. package/bundled/ai/standards/circuit-breaker.ai.yaml +7 -7
  7. package/bundled/ai/standards/disaster-recovery-drill.ai.yaml +1 -1
  8. package/bundled/ai/standards/dual-phase-output.ai.yaml +3 -3
  9. package/bundled/ai/standards/execution-history.ai.yaml +8 -10
  10. package/bundled/ai/standards/failure-source-taxonomy.ai.yaml +8 -10
  11. package/bundled/ai/standards/git-worktree.ai.yaml +1 -1
  12. package/bundled/ai/standards/governance-layer.ai.yaml +114 -0
  13. package/bundled/ai/standards/mock-boundary.ai.yaml +1 -1
  14. package/bundled/ai/standards/model-selection.ai.yaml +1 -1
  15. package/bundled/ai/standards/packaging-standards.ai.yaml +8 -8
  16. package/bundled/ai/standards/pipeline-integration-standards.ai.yaml +8 -9
  17. package/bundled/ai/standards/pipeline-security-gates.ai.yaml +4 -0
  18. package/bundled/ai/standards/recovery-recipe-registry.ai.yaml +6 -10
  19. package/bundled/ai/standards/security-decision.ai.yaml +3 -3
  20. package/bundled/ai/standards/server-ops-security.ai.yaml +1 -1
  21. package/bundled/ai/standards/standard-admission-criteria.ai.yaml +1 -1
  22. package/bundled/ai/standards/standard-lifecycle-management.ai.yaml +1 -1
  23. package/bundled/ai/standards/supply-chain-attestation.ai.yaml +1 -1
  24. package/bundled/ai/standards/token-budget.ai.yaml +3 -3
  25. package/bundled/ai/standards/workflow-enforcement.ai.yaml +8 -11
  26. package/bundled/ai/standards/workflow-state-protocol.ai.yaml +8 -10
  27. package/bundled/core/adversarial-test.md +1 -1
  28. package/bundled/core/agent-behavior-discipline.md +4 -4
  29. package/bundled/core/agent-communication-protocol.md +5 -5
  30. package/bundled/core/circuit-breaker.md +4 -4
  31. package/bundled/core/container-security.md +8 -8
  32. package/bundled/core/disaster-recovery-drill.md +3 -3
  33. package/bundled/core/dual-phase-output.md +1 -1
  34. package/bundled/core/failure-source-taxonomy.md +3 -3
  35. package/bundled/core/git-worktree.md +1 -1
  36. package/bundled/core/governance-layer.md +151 -0
  37. package/bundled/core/llm-output-validation.md +2 -2
  38. package/bundled/core/mock-boundary.md +1 -1
  39. package/bundled/core/packaging-standards.md +14 -14
  40. package/bundled/core/policy-as-code-testing.md +9 -9
  41. package/bundled/core/recovery-recipe-registry.md +2 -2
  42. package/bundled/core/release-quality-manifest.md +2 -2
  43. package/bundled/core/sast-advanced.md +5 -5
  44. package/bundled/core/secure-op.md +5 -5
  45. package/bundled/core/security-decision.md +1 -1
  46. package/bundled/core/server-ops-security.md +15 -15
  47. package/bundled/core/smoke-test.md +1 -1
  48. package/bundled/core/standard-admission-criteria.md +1 -1
  49. package/bundled/core/standard-lifecycle-management.md +1 -1
  50. package/bundled/core/supply-chain-attestation.md +4 -4
  51. package/bundled/core/token-budget.md +3 -3
  52. package/bundled/locales/zh-CN/CHANGELOG.md +51 -4
  53. package/bundled/locales/zh-CN/README.md +11 -27
  54. package/bundled/locales/zh-CN/core/agent-communication-protocol.md +5 -5
  55. package/bundled/locales/zh-CN/core/circuit-breaker.md +1 -1
  56. package/bundled/locales/zh-CN/core/git-worktree.md +1 -1
  57. package/bundled/locales/zh-CN/core/packaging-standards.md +14 -14
  58. package/bundled/locales/zh-CN/core/recovery-recipe-registry.md +6 -9
  59. package/bundled/locales/zh-CN/core/standard-admission-criteria.md +1 -1
  60. package/bundled/locales/zh-CN/core/standard-lifecycle-management.md +1 -1
  61. package/bundled/locales/zh-CN/core/token-budget.md +1 -1
  62. package/bundled/locales/zh-TW/CHANGELOG.md +51 -4
  63. package/bundled/locales/zh-TW/README.md +11 -27
  64. package/bundled/locales/zh-TW/core/agent-communication-protocol.md +5 -5
  65. package/bundled/locales/zh-TW/core/capability-declaration.md +4 -4
  66. package/bundled/locales/zh-TW/core/circuit-breaker.md +7 -7
  67. package/bundled/locales/zh-TW/core/dual-phase-output.md +3 -3
  68. package/bundled/locales/zh-TW/core/failure-source-taxonomy.md +7 -9
  69. package/bundled/locales/zh-TW/core/governance-layer.md +159 -0
  70. package/bundled/locales/zh-TW/core/packaging-standards.md +14 -14
  71. package/bundled/locales/zh-TW/core/recovery-recipe-registry.md +6 -9
  72. package/bundled/locales/zh-TW/core/security-decision.md +3 -3
  73. package/bundled/locales/zh-TW/core/standard-admission-criteria.md +1 -1
  74. package/bundled/locales/zh-TW/core/standard-lifecycle-management.md +1 -1
  75. package/bundled/locales/zh-TW/core/token-budget.md +3 -3
  76. package/bundled/skills/README.md +23 -0
  77. package/bundled/skills/atdd-assistant/SKILL.md +4 -5
  78. package/bundled/skills/bdd-assistant/SKILL.md +4 -5
  79. package/bundled/skills/checkin-assistant/SKILL.md +4 -6
  80. package/bundled/skills/code-review-assistant/SKILL.md +4 -5
  81. package/bundled/skills/commands/observability.md +42 -0
  82. package/bundled/skills/commands/runbook.md +44 -0
  83. package/bundled/skills/commands/slo.md +45 -0
  84. package/bundled/skills/journey-test-assistant/SKILL.md +1 -1
  85. package/bundled/skills/orchestrate/SKILL.md +1 -1
  86. package/bundled/skills/plan/SKILL.md +1 -1
  87. package/bundled/skills/pr-automation-assistant/SKILL.md +4 -5
  88. package/bundled/skills/push/SKILL.md +1 -1
  89. package/bundled/skills/spec-driven-dev/SKILL.md +4 -5
  90. package/bundled/skills/sweep/SKILL.md +3 -3
  91. package/bundled/skills/tdd-assistant/SKILL.md +4 -5
  92. package/package.json +1 -1
  93. package/src/commands/flow.js +7 -5
  94. package/src/commands/start.js +7 -6
  95. package/src/commands/sweep.js +7 -6
  96. package/src/commands/workflow.js +7 -6
  97. package/src/core/agent-communication-protocol.js +10 -3
  98. package/standards-registry.json +50 -50
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "version": "5.6.0",
3
+ "version": "5.7.0",
4
4
  "lastUpdated": "2026-04-16",
5
5
  "description": "Standards registry for universal-dev-standards with integrated skills and AI-optimized formats",
6
6
  "formats": {
@@ -58,14 +58,14 @@
58
58
  "standards": {
59
59
  "name": "universal-dev-standards",
60
60
  "url": "https://github.com/AsiaOstrich/universal-dev-standards",
61
- "version": "5.6.0"
61
+ "version": "5.7.0"
62
62
  },
63
63
  "skills": {
64
64
  "name": "universal-dev-standards",
65
65
  "url": "https://github.com/AsiaOstrich/universal-dev-standards",
66
66
  "localPath": "skills",
67
67
  "rawUrl": "https://raw.githubusercontent.com/AsiaOstrich/universal-dev-standards/main/skills",
68
- "version": "5.6.0",
68
+ "version": "5.7.0",
69
69
  "note": "Skills are now included in the main repository under skills/"
70
70
  }
71
71
  },
@@ -680,6 +680,17 @@
680
680
  }
681
681
  },
682
682
  "standards": [
683
+ {
684
+ "id": "governance-layer",
685
+ "name": "Governance Layer Standard",
686
+ "nameZh": "治理層標準",
687
+ "source": {
688
+ "human": "core/governance-layer.md",
689
+ "ai": "ai/standards/governance-layer.ai.yaml"
690
+ },
691
+ "category": "core",
692
+ "description": "Standard #0: Vision/Mission/Goals three-layer governance schema with KPI mandatory fields, red lines format, and evaluator integration. Evaluated before all other standards."
693
+ },
683
694
  {
684
695
  "id": "anti-sycophancy-prompting",
685
696
  "name": "Anti-Sycophancy Prompting Standards",
@@ -807,7 +818,7 @@
807
818
  },
808
819
  "category": "reference",
809
820
  "skillName": null,
810
- "description": "Recipe-based packaging framework for user projects using UDS/DevAP toolchain"
821
+ "description": "Recipe-based packaging framework for user projects using a UDS-aware toolchain"
811
822
  },
812
823
  {
813
824
  "id": "api-design-standards",
@@ -1010,9 +1021,9 @@
1010
1021
  "deprecated": true,
1011
1022
  "deprecatedSince": "5.4.0",
1012
1023
  "removalVersion": "6.0.0",
1013
- "canonicalOwner": "devap",
1014
- "canonicalPath": "dev-autopilot/standards/flow/workflow-state-protocol.ai.yaml",
1015
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Workflow state persistence protocol — see dev-autopilot/standards/flow/workflow-state-protocol.ai.yaml"
1024
+ "canonicalOwner": "adoption-layer",
1025
+ "canonicalPath": "",
1026
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Workflow state persistence protocol — runtime is now adoption-layer responsibility."
1016
1027
  },
1017
1028
  {
1018
1029
  "id": "workflow-enforcement",
@@ -1027,9 +1038,9 @@
1027
1038
  "deprecated": true,
1028
1039
  "deprecatedSince": "5.4.0",
1029
1040
  "removalVersion": "6.0.0",
1030
- "canonicalOwner": "devap",
1031
- "canonicalPath": "dev-autopilot/standards/flow/workflow-enforcement.ai.yaml",
1032
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Machine-enforceable workflow gates — see dev-autopilot/standards/flow/workflow-enforcement.ai.yaml"
1041
+ "canonicalOwner": "adoption-layer",
1042
+ "canonicalPath": "",
1043
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Machine-enforceable workflow gates — runtime is now adoption-layer responsibility."
1033
1044
  },
1034
1045
  {
1035
1046
  "id": "testing",
@@ -1451,9 +1462,9 @@
1451
1462
  "deprecated": true,
1452
1463
  "deprecatedSince": "5.4.0",
1453
1464
  "removalVersion": "6.0.0",
1454
- "canonicalOwner": "devap",
1455
- "canonicalPath": "dev-autopilot/standards/orchestration/execution-history.ai.yaml",
1456
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Execution history L1/L2/L3 protocol — see dev-autopilot/standards/orchestration/execution-history.ai.yaml"
1465
+ "canonicalOwner": "adoption-layer",
1466
+ "canonicalPath": "",
1467
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Execution history L1/L2/L3 protocol — runtime is now adoption-layer responsibility."
1457
1468
  },
1458
1469
  {
1459
1470
  "id": "project-context-memory",
@@ -1643,9 +1654,9 @@
1643
1654
  "deprecated": true,
1644
1655
  "deprecatedSince": "5.4.0",
1645
1656
  "removalVersion": "6.0.0",
1646
- "canonicalOwner": "devap",
1647
- "canonicalPath": "dev-autopilot/standards/flow/pipeline-integration-standards.ai.yaml",
1648
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Pipeline 6-stage model — see dev-autopilot/standards/flow/pipeline-integration-standards.ai.yaml"
1657
+ "canonicalOwner": "adoption-layer",
1658
+ "canonicalPath": "",
1659
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Pipeline 6-stage model — runtime is now adoption-layer responsibility."
1649
1660
  },
1650
1661
  {
1651
1662
  "id": "acceptance-criteria-traceability",
@@ -1672,9 +1683,9 @@
1672
1683
  "deprecated": true,
1673
1684
  "deprecatedSince": "5.4.0",
1674
1685
  "removalVersion": "6.0.0",
1675
- "canonicalOwner": "devap",
1676
- "canonicalPath": "dev-autopilot/standards/flow/change-batching-standards.ai.yaml",
1677
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Change batching state machine — see dev-autopilot/standards/flow/change-batching-standards.ai.yaml"
1686
+ "canonicalOwner": "adoption-layer",
1687
+ "canonicalPath": "",
1688
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Change batching state machine — runtime is now adoption-layer responsibility."
1678
1689
  },
1679
1690
  {
1680
1691
  "id": "migration-template",
@@ -1711,9 +1722,9 @@
1711
1722
  "deprecated": true,
1712
1723
  "deprecatedSince": "5.4.0",
1713
1724
  "removalVersion": "6.0.0",
1714
- "canonicalOwner": "devap",
1715
- "canonicalPath": "dev-autopilot/standards/orchestration/agent-dispatch.ai.yaml",
1716
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Agent dispatch protocol — see dev-autopilot/standards/orchestration/agent-dispatch.ai.yaml"
1725
+ "canonicalOwner": "adoption-layer",
1726
+ "canonicalPath": "",
1727
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Agent dispatch protocol — runtime is now adoption-layer responsibility."
1717
1728
  },
1718
1729
  {
1719
1730
  "id": "agent-communication-protocol",
@@ -1728,9 +1739,9 @@
1728
1739
  "deprecated": true,
1729
1740
  "deprecatedSince": "5.4.0",
1730
1741
  "removalVersion": "6.0.0",
1731
- "canonicalOwner": "devap",
1732
- "canonicalPath": "dev-autopilot/standards/orchestration/agent-communication-protocol.ai.yaml",
1733
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Agent envelope/handoff protocol — see dev-autopilot/standards/orchestration/agent-communication-protocol.ai.yaml"
1742
+ "canonicalOwner": "adoption-layer",
1743
+ "canonicalPath": "",
1744
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Agent envelope/handoff protocol — runtime is now adoption-layer responsibility."
1734
1745
  },
1735
1746
  {
1736
1747
  "id": "model-selection",
@@ -1769,9 +1780,9 @@
1769
1780
  "deprecated": true,
1770
1781
  "deprecatedSince": "5.4.0",
1771
1782
  "removalVersion": "6.0.0",
1772
- "canonicalOwner": "devap",
1773
- "canonicalPath": "dev-autopilot/standards/flow/branch-completion.ai.yaml",
1774
- "description": "DEPRECATED: Migrated to DevAP per DEC-049. Branch completion workflow — see dev-autopilot/standards/flow/branch-completion.ai.yaml"
1783
+ "canonicalOwner": "adoption-layer",
1784
+ "canonicalPath": "",
1785
+ "description": "DEPRECATED: Runtime relocated to adoption layer (DEC-049 superseded 2026-05-07). Branch completion workflow — runtime is now adoption-layer responsibility."
1775
1786
  },
1776
1787
  {
1777
1788
  "id": "verification-evidence",
@@ -2460,8 +2471,7 @@
2460
2471
  },
2461
2472
  "category": "security",
2462
2473
  "description": "CodeQL semantic code analysis + secret scanning + Biome security rules. Complements dependency auditing with deep static analysis detecting injection vulnerabilities."
2463
- }
2464
- ,
2474
+ },
2465
2475
  {
2466
2476
  "id": "prompt-regression",
2467
2477
  "name": "Prompt Regression Standards",
@@ -2472,8 +2482,7 @@
2472
2482
  },
2473
2483
  "category": "testing",
2474
2484
  "description": "Golden SHA-256 checksum tests for AI agent prompt files. Detects unintended prompt changes in CI; requires documented acknowledgment when checksums are updated."
2475
- }
2476
- ,
2485
+ },
2477
2486
  {
2478
2487
  "id": "supply-chain-attestation",
2479
2488
  "name": "Supply Chain Attestation Standards",
@@ -2484,8 +2493,7 @@
2484
2493
  },
2485
2494
  "category": "security",
2486
2495
  "description": "CycloneDX SBOM generation, SLSA provenance (L1/L2), and cosign signing for verifiable software supply chain integrity from source to deployed artefact."
2487
- }
2488
- ,
2496
+ },
2489
2497
  {
2490
2498
  "id": "cost-budget-test",
2491
2499
  "name": "Cost Budget Test Standards",
@@ -2496,8 +2504,7 @@
2496
2504
  },
2497
2505
  "category": "testing",
2498
2506
  "description": "Unit tests for AI agent token budget zone classification boundaries (safe/warning/danger/blocking), pipeline cost thresholds, and runaway-loop prevention guards."
2499
- }
2500
- ,
2507
+ },
2501
2508
  {
2502
2509
  "id": "replay-test",
2503
2510
  "name": "Replay Test Standards",
@@ -2508,8 +2515,7 @@
2508
2515
  },
2509
2516
  "category": "testing",
2510
2517
  "description": "Golden fixture recording and deterministic replay for AI agent pipelines. Enables customer bug reproduction, verdict regression detection, and incident investigation without a live LLM."
2511
- }
2512
- ,
2518
+ },
2513
2519
  {
2514
2520
  "id": "smoke-test",
2515
2521
  "name": "Smoke Test Standards",
@@ -2520,8 +2526,7 @@
2520
2526
  },
2521
2527
  "category": "testing",
2522
2528
  "description": "Post-deployment sanity checks verifying critical paths (health endpoint, core API) complete in under 30 seconds with zero external dependencies."
2523
- }
2524
- ,
2529
+ },
2525
2530
  {
2526
2531
  "id": "property-based-testing",
2527
2532
  "name": "Property-Based Testing Standards",
@@ -2532,8 +2537,7 @@
2532
2537
  },
2533
2538
  "category": "testing",
2534
2539
  "description": "fast-check / Hypothesis property tests for pure functions: range clamping, determinism, monotonicity, round-trip. Complements example-based unit tests by generating hundreds of random inputs."
2535
- }
2536
- ,
2540
+ },
2537
2541
  {
2538
2542
  "id": "disaster-recovery-drill",
2539
2543
  "name": "Disaster Recovery Drill Standards",
@@ -2544,8 +2548,7 @@
2544
2548
  },
2545
2549
  "category": "operations",
2546
2550
  "description": "Quarterly DR drill protocol: RTO/RPO targets, backup restore verification, Game Day exercises, drill records retained 12 months."
2547
- }
2548
- ,
2551
+ },
2549
2552
  {
2550
2553
  "id": "flaky-test-management",
2551
2554
  "name": "Flaky Test Management Standards",
@@ -2556,8 +2559,7 @@
2556
2559
  },
2557
2560
  "category": "testing",
2558
2561
  "description": "Policies for detecting, quarantining (< 48h), and eliminating (< 30 days) flaky tests. Retry policy, root cause documentation, and quarantine annotation conventions."
2559
- }
2560
- ,
2562
+ },
2561
2563
  {
2562
2564
  "id": "data-migration-testing",
2563
2565
  "name": "Data Migration Testing Standards",
@@ -2568,8 +2570,7 @@
2568
2570
  },
2569
2571
  "category": "testing",
2570
2572
  "description": "Standards for database schema migration tests: up/down/idempotency/data-preservation coverage. Requires isolated in-memory DB per test, verifiable rollback path, and data integrity after ALTER/DROP."
2571
- }
2572
- ,
2573
+ },
2573
2574
  {
2574
2575
  "id": "chaos-injection-tests",
2575
2576
  "name": "Chaos Injection Test Standards",
@@ -2580,8 +2581,7 @@
2580
2581
  },
2581
2582
  "category": "testing",
2582
2583
  "description": "Executable chaos injection tests for AI agent systems: LLM timeout/rate-limit, DB disconnect rollback, policy-engine fail-closed, and inter-agent blast-radius containment tests."
2583
- }
2584
- ,
2584
+ },
2585
2585
  {
2586
2586
  "id": "release-quality-manifest",
2587
2587
  "name": "Release Quality Manifest Standards",