yarramate 1.32.0 → 1.34.0

package/catalogues/core-enrichment.yaml

@@ -830,6 +830,216 @@ questions:
       Add an owner reference to an accountable actor (evidence such as
       CODEOWNERS may propose it; a human confirms accountability).
 
+  - id: responsible-missing
+    wave: business
+    since: "1.33"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/core@0.1#businessService
+        - yarramate/core@0.1#applicationService
+        - yarramate/core@0.1#applicationComponent
+        - yarramate/core@0.1#capability
+    trigger:
+      - condition: missing-linkage
+        kinds:
+          - yarramate/policy@0.2#responsible
+        direction: incoming
+        counterpartKinds:
+          - yarramate/core@0.1#businessActor
+          - yarramate/core@0.1#businessRole
+          - yarramate/core@0.1#businessCollaboration
+          - yarramate/core@0.1#stakeholder
+    question: >-
+      Who is responsible for {subject.name}?
+    askPlain: >-
+      Who actually builds, runs or delivers "{subject.name}" day to day?
+    materiality: >-
+      Accountability says whose desk a failure lands on; responsibility says
+      whose hands are on it. A subject with nobody responsible has nobody to
+      hand the work to, and a RACI row with no R is a gap the matrix reports.
+    authority: either
+    resolution: >-
+      Add a `responsible` relationship from the actor, role or collaboration
+      that does the work to the subject (a support contract or CODEOWNERS may
+      propose it; a person confirms it).
+  - id: role-idle
+    wave: business
+    since: "1.33"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/core@0.1#businessActor
+        - yarramate/core@0.1#businessRole
+        - yarramate/core@0.1#businessCollaboration
+    trigger:
+      - condition: missing-reference
+        predicate: yarramate/ownership/owner
+        direction: incoming
+      - condition: missing-relationship
+        kinds:
+          - yarramate/policy@0.2#responsible
+          - yarramate/policy@0.2#consulted
+          - yarramate/policy@0.2#informed
+        direction: outgoing
+      - condition: missing-relationship
+        kinds:
+          - yarramate/core@0.1#serving
+        direction: incoming
+    question: >-
+      What does {subject.name} answer for?
+    askPlain: >-
+      "{subject.name}" is in the model but owns nothing, is responsible for
+      nothing, and is neither consulted nor informed about anything. What is
+      their part, or should they go?
+    materiality: >-
+      A person with no letter is either missing the edges a delivery depends
+      on or a name that outlived its role. A served actor is a consumer, not
+      a responsibility holder, and is not asked.
+    authority: human
+    resolution: >-
+      Give the person a letter (an owner claim on what they answer for, or a
+      responsible, consulted or informed relationship) or retire the subject.
+  - id: risk-threatens-nothing
+    wave: motivation
+    since: "1.34"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/policy@0.3#risk
+      statuses:
+        - planned
+        - current
+    trigger:
+      - condition: missing-linkage
+        kinds:
+          - yarramate/core@0.1#influence
+        direction: outgoing
+        counterpartKinds:
+          - yarramate/core@0.1#goal
+          - yarramate/core@0.1#requirement
+          - yarramate/core@0.1#constraint
+    question: >-
+      What does {subject.name} threaten?
+    askPlain: >-
+      If "{subject.name}" comes true, which goal, requirement or constraint
+      takes the hit?
+    materiality: >-
+      A risk that threatens nothing named cannot be prioritised or retired:
+      its severity has nothing to be measured against, and nobody can say
+      when it has passed.
+    authority: either
+    resolution: >-
+      Add an `influence` relationship from the risk to the goal, requirement
+      or constraint it threatens.
+  - id: risk-unmitigated
+    wave: motivation
+    since: "1.34"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/policy@0.3#risk
+      statuses:
+        - current
+    trigger:
+      - condition: missing-linkage
+        kinds:
+          - yarramate/core@0.1#influence
+          - yarramate/core@0.1#association
+        direction: incoming
+        counterpartKinds:
+          - yarramate/core@0.1#workPackage
+          - yarramate/core@0.1#deliverable
+          - yarramate/core@0.1#constraint
+          - yarramate/core@0.1#courseOfAction
+    question: >-
+      What mitigates {subject.name}?
+    askPlain: >-
+      "{subject.name}" is live. What work, deliverable, rule or decision is in
+      place to reduce it?
+    materiality: >-
+      A live risk with no mitigation is a bet the engagement is making without
+      saying so; the log exists to make that visible.
+    authority: either
+    resolution: >-
+      Add an `influence` relationship from the work package, deliverable,
+      constraint or decision that mitigates it to the risk, or retire the risk.
+  - id: risk-unowned
+    wave: motivation
+    since: "1.34"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/policy@0.3#risk
+      statuses:
+        - planned
+        - current
+    trigger:
+      - condition: missing-claim
+        predicate: yarramate/ownership/owner
+    question: >-
+      Who owns {subject.name}?
+    askPlain: >-
+      Whose name is on "{subject.name}": who reviews it and decides when it
+      has passed?
+    materiality: >-
+      The risk owner is who a review date is asked of; without one,
+      risk-reviewed has no authority to sign it.
+    authority: either
+    resolution: >-
+      Add an owner reference to the actor or role that carries the risk.
+  - id: assumption-unconfirmed
+    wave: motivation
+    since: "1.34"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/policy@0.3#assumption
+      statuses:
+        - planned
+        - current
+    trigger:
+      - condition: missing-attestation
+        topic: assumption-confirmed
+    question: >-
+      Has anyone confirmed {subject.name}?
+    askPlain: >-
+      "{subject.name}" is being built on. Has the person who can confirm it
+      said so, and when?
+    materiality: >-
+      An unconfirmed assumption is a risk wearing a calmer name; the
+      confirmation, with its date, is what turns it into a fact the delivery
+      can rest on.
+    authority: human
+    resolution: >-
+      Record an `assumption-confirmed` attestation by the role or actor that
+      can confirm it, dated; or retire the assumption.
+  - id: assumption-bears-on-nothing
+    wave: motivation
+    since: "1.34"
+    scope: subject
+    subjects:
+      kinds:
+        - yarramate/policy@0.3#assumption
+      statuses:
+        - planned
+        - current
+    trigger:
+      - condition: missing-relationship
+        kinds:
+          - yarramate/core@0.1#association
+        direction: outgoing
+    question: >-
+      What does {subject.name} bear on?
+    askPlain: >-
+      If "{subject.name}" turned out false, what in this design would change?
+    materiality: >-
+      An assumption that bears on nothing named is either decorative or
+      missing its edges, and the log cannot say which.
+    authority: either
+    resolution: >-
+      Add an `association` relationship from the assumption to the goal,
+      requirement, constraint or subject it bears on, or retire it.
   - id: actor-unassigned
     wave: business
     since: "0.1"

package/dist/adapters/mcp-cli.js

@@ -148,8 +148,8 @@ const runExport = (input, tool, root) => {
             stderr: '',
         };
     }
-    // A text kind under `out`: markdown and graph are one file, rtm and
-    // briefs a directory, as the CLI lays them out.
+    // A text kind under `out`: markdown and graph are one file, rtm,
+    // responsibility, governance and briefs a directory, as the CLI lays them out.
     if (kind === 'markdown' || kind === 'graph') {
         mkdirSync(dirname(target), { recursive: true });
         writeFileSync(target, outcome.text, 'utf8');
@@ -172,6 +172,32 @@ const runExport = (input, tool, root) => {
             stderr: '',
         };
     }
+    if (kind === 'governance') {
+        const result = outcome.result;
+        mkdirSync(target, { recursive: true });
+        writeFileSync(join(target, 'GOVERNANCE.md'), outcome.text, 'utf8');
+        if (result !== undefined) {
+            writeFileSync(join(target, 'governance.json'), `${JSON.stringify(result.log, null, 2)}\n`, 'utf8');
+        }
+        return {
+            exitCode: 0,
+            stdout: `Wrote GOVERNANCE.md and governance.json to ${out}\n`,
+            stderr: '',
+        };
+    }
+    if (kind === 'responsibility') {
+        const result = outcome.result;
+        mkdirSync(target, { recursive: true });
+        writeFileSync(join(target, 'RESPONSIBILITY.md'), outcome.text, 'utf8');
+        if (result !== undefined) {
+            writeFileSync(join(target, 'responsibility.json'), `${JSON.stringify(result.matrix, null, 2)}\n`, 'utf8');
+        }
+        return {
+            exitCode: 0,
+            stdout: `Wrote RESPONSIBILITY.md and responsibility.json to ${out}\n`,
+            stderr: '',
+        };
+    }
     if (kind === 'briefs') {
         const result = outcome.result;
         mkdirSync(target, { recursive: true });

package/dist/brief.js

@@ -1,5 +1,5 @@
 import { conceptKinds } from './profile.js';
-import { RELATIONSHIP_READING, humanizeKind } from './relationship-reading.js';
+import { EXTENSION_READING, RELATIONSHIP_READING, contextualReading, humanizeKind } from './relationship-reading.js';
 const coreKindNames = new Map(conceptKinds.map(({ id, name }) => [id, name]));
 const motivationKindIds = new Set(conceptKinds
     .filter(({ layer }) => layer === 'motivation')
@@ -66,6 +66,9 @@ const relationshipPhrase = (coreKind, fallbackKind, mode, content) => {
     if (coreKind === 'flow') {
         return content === undefined ? 'flows to' : `sends ${content} to`;
     }
+    const extension = EXTENSION_READING[fallbackKind];
+    if (extension !== undefined)
+        return extension;
     const reading = coreKind === undefined ? undefined : RELATIONSHIP_READING[coreKind];
     return reading ?? humanizeKind(fallbackKind);
 };
@@ -107,8 +110,18 @@ workspaceClaims) {
         if (claim === undefined || !('ref' in claim.object))
             continue;
         const description = claimValue(result.claims, subject.id, 'yarramate/relationship/description');
+        const coreKind = coreLocalKind(claim.predicate, profileContext?.relationshipKindLineages);
+        // A reading the endpoints decide (ADR 0160) speaks before the kind's own.
+        const endpointLineage = (id) => {
+            const kind = claimValue(result.claims, id, 'yarramate/concept/kind');
+            return kind === undefined ? undefined : profileContext?.conceptKindLineages.get(kind);
+        };
+        const contextual = coreKind === undefined
+            ? undefined
+            : contextualReading(endpointLineage(claim.subject), endpointLineage(claim.object.ref), coreKind);
         const entry = {
-            phrase: relationshipPhrase(coreLocalKind(claim.predicate, profileContext?.relationshipKindLineages), claim.predicate, claimValue(result.claims, subject.id, 'yarramate/access/mode'), claimValue(result.claims, subject.id, 'yarramate/flow/content')),
+            phrase: contextual ??
+                relationshipPhrase(coreKind, claim.predicate, claimValue(result.claims, subject.id, 'yarramate/access/mode'), claimValue(result.claims, subject.id, 'yarramate/flow/content')),
             target: claim.object.ref,
             ...(description === undefined ? {} : { description }),
         };

package/dist/cli-support.d.ts

@@ -7,7 +7,7 @@ export interface CliResult {
 export declare const isMainModule: (moduleUrl: string, entrypoint: string | undefined) => boolean;
 export declare const packageVersion: string;
 export declare const versionResult: (binary: string) => CliResult;
-export declare const usage = "Usage:\n  yarramate init <directory> [--no-pointer]\n  yarramate design <workspace.yaml> [--subject <subject-id>] [--catalogue <catalogue.yaml>] [--facilitate] [--json]\n  yarramate apply <operations.yaml> <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> \"<free text>\" | <subject-id> ... | <projection.yaml> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate ask <workspace.yaml> --subjects [--kind <term>] [--status <status>] [--json]\n  yarramate ask <workspace.yaml> --kinds [--json]\n  yarramate ask <workspace.yaml> --advise \"<topic>\" [--budget <tokens>] [--neighbours <n>] [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --where \"<free text>\" | <subject-id> ... [--json]\n  yarramate ask <workspace.yaml> --next [--json]\n  yarramate ask <workspace.yaml> --open [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --compare <from-state> <to-state> [--json]\n  yarramate ask <workspace.yaml> --changed <git-range> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate check <source.yaml> [source.yaml ...] [--json] [--strict]\n  yarramate reconcile <workspace.yaml> [--json | --text]\n  yarramate export graph <workspace.yaml> [--out <file>]\n  yarramate export markdown <projection.yaml> <workspace.yaml> [--out <file>]\n  yarramate export markdown --changed <git-range> <workspace.yaml> [--out <file>]\n  yarramate export briefs <projection.yaml> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export briefs --changed <git-range> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export rtm <workspace.yaml> --out <directory>\n  yarramate export xlsx <projection.yaml> <workspace.yaml> --out <file>\n  yarramate import xlsx <workbook.xlsx> <workspace.yaml> [--json]\n  yarramate export likec4 <likec4-project.yaml> <output-dir> <workspace.yaml> [--changed <git-range>]\n";
+export declare const usage = "Usage:\n  yarramate init <directory> [--no-pointer]\n  yarramate design <workspace.yaml> [--subject <subject-id>] [--catalogue <catalogue.yaml>] [--facilitate] [--json]\n  yarramate apply <operations.yaml> <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> \"<free text>\" | <subject-id> ... | <projection.yaml> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate ask <workspace.yaml> --subjects [--kind <term>] [--status <status>] [--json]\n  yarramate ask <workspace.yaml> --kinds [--json]\n  yarramate ask <workspace.yaml> --advise \"<topic>\" [--budget <tokens>] [--neighbours <n>] [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --where \"<free text>\" | <subject-id> ... [--json]\n  yarramate ask <workspace.yaml> --next [--json]\n  yarramate ask <workspace.yaml> --open [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --compare <from-state> <to-state> [--json]\n  yarramate ask <workspace.yaml> --changed <git-range> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate check <source.yaml> [source.yaml ...] [--json] [--strict]\n  yarramate reconcile <workspace.yaml> [--json | --text]\n  yarramate export graph <workspace.yaml> [--out <file>]\n  yarramate export markdown <projection.yaml> <workspace.yaml> [--out <file>]\n  yarramate export markdown --changed <git-range> <workspace.yaml> [--out <file>]\n  yarramate export briefs <projection.yaml> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export briefs --changed <git-range> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export rtm <workspace.yaml> --out <directory>\n  yarramate export responsibility <projection.yaml> <workspace.yaml> --out <directory>\n  yarramate export governance <workspace.yaml> --out <directory>\n  yarramate export xlsx <projection.yaml> <workspace.yaml> --out <file>\n  yarramate import xlsx <workbook.xlsx> <workspace.yaml> [--json]\n  yarramate export likec4 <likec4-project.yaml> <output-dir> <workspace.yaml> [--changed <git-range>]\n";
 export declare const diagnosticJson: (diagnostics: unknown) => string;
 export declare const checkResultJson: (ok: boolean, diagnostics: unknown, counted?: {
     readonly documents: number;

package/dist/cli-support.js

@@ -22,7 +22,7 @@ export const versionResult = (binary) => ({
     stdout: `${binary} ${packageVersion}\n`,
     stderr: '',
 });
-export const usage = 'Usage:\n  yarramate init <directory> [--no-pointer]\n  yarramate design <workspace.yaml> [--subject <subject-id>] [--catalogue <catalogue.yaml>] [--facilitate] [--json]\n  yarramate apply <operations.yaml> <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> "<free text>" | <subject-id> ... | <projection.yaml> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate ask <workspace.yaml> --subjects [--kind <term>] [--status <status>] [--json]\n  yarramate ask <workspace.yaml> --kinds [--json]\n  yarramate ask <workspace.yaml> --advise "<topic>" [--budget <tokens>] [--neighbours <n>] [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --where "<free text>" | <subject-id> ... [--json]\n  yarramate ask <workspace.yaml> --next [--json]\n  yarramate ask <workspace.yaml> --open [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --compare <from-state> <to-state> [--json]\n  yarramate ask <workspace.yaml> --changed <git-range> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate check <source.yaml> [source.yaml ...] [--json] [--strict]\n  yarramate reconcile <workspace.yaml> [--json | --text]\n  yarramate export graph <workspace.yaml> [--out <file>]\n  yarramate export markdown <projection.yaml> <workspace.yaml> [--out <file>]\n  yarramate export markdown --changed <git-range> <workspace.yaml> [--out <file>]\n  yarramate export briefs <projection.yaml> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export briefs --changed <git-range> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export rtm <workspace.yaml> --out <directory>\n  yarramate export xlsx <projection.yaml> <workspace.yaml> --out <file>\n  yarramate import xlsx <workbook.xlsx> <workspace.yaml> [--json]\n  yarramate export likec4 <likec4-project.yaml> <output-dir> <workspace.yaml> [--changed <git-range>]\n';
+export const usage = 'Usage:\n  yarramate init <directory> [--no-pointer]\n  yarramate design <workspace.yaml> [--subject <subject-id>] [--catalogue <catalogue.yaml>] [--facilitate] [--json]\n  yarramate apply <operations.yaml> <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> [--json]\n  yarramate ask <workspace.yaml> "<free text>" | <subject-id> ... | <projection.yaml> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate ask <workspace.yaml> --subjects [--kind <term>] [--status <status>] [--json]\n  yarramate ask <workspace.yaml> --kinds [--json]\n  yarramate ask <workspace.yaml> --advise "<topic>" [--budget <tokens>] [--neighbours <n>] [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --where "<free text>" | <subject-id> ... [--json]\n  yarramate ask <workspace.yaml> --next [--json]\n  yarramate ask <workspace.yaml> --open [--catalogue <catalogue.yaml>] [--json]\n  yarramate ask <workspace.yaml> --compare <from-state> <to-state> [--json]\n  yarramate ask <workspace.yaml> --changed <git-range> [--budget <tokens>] [--neighbours <n>] [--json]\n  yarramate check <source.yaml> [source.yaml ...] [--json] [--strict]\n  yarramate reconcile <workspace.yaml> [--json | --text]\n  yarramate export graph <workspace.yaml> [--out <file>]\n  yarramate export markdown <projection.yaml> <workspace.yaml> [--out <file>]\n  yarramate export markdown --changed <git-range> <workspace.yaml> [--out <file>]\n  yarramate export briefs <projection.yaml> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export briefs --changed <git-range> <workspace.yaml> --out <directory> [--budget <tokens>]\n  yarramate export rtm <workspace.yaml> --out <directory>\n  yarramate export responsibility <projection.yaml> <workspace.yaml> --out <directory>\n  yarramate export governance <workspace.yaml> --out <directory>\n  yarramate export xlsx <projection.yaml> <workspace.yaml> --out <file>\n  yarramate import xlsx <workbook.xlsx> <workspace.yaml> [--json]\n  yarramate export likec4 <likec4-project.yaml> <output-dir> <workspace.yaml> [--changed <git-range>]\n';
 export const diagnosticJson = (diagnostics) => `${JSON.stringify({
     format: 'yarramate/diagnostic-result/v1',
     diagnostics,

package/dist/compiler.js

@@ -3,7 +3,7 @@ import { conceptKinds, relationshipPolicies, } from './profile.js';
 import { isCoreConceptKindId, matrixEndpointAspects, permittedRelationshipKinds as tablePermittedKinds, } from './relationship-matrix.js';
 import { closestCandidate, describeSchemaViolation, } from './source-document.js';
 import { ATTESTATION_PREDICATE_PREFIX, attestationClaimValue } from './graph-claims.js';
-import { shippedPolicyIdentity, shippedPolicySource, } from './shipped-profile.js';
+import { shippedProfileOf } from './shipped-profile.js';
 import { validateDocument, validateProfile, validatePattern } from './schema-validation.js';
 const coreProfile = 'yarramate/core@0.1';
 /**
@@ -371,58 +371,78 @@ function compileWorkspaceResolved(parsed) {
         const identity = `${value.id}@${value.version}`;
         pendingProfiles.push({ input, value, identity, positionFor });
     }
-    const alreadyDeclaresPolicy = pendingProfiles.some(({ identity }) => identity === shippedPolicyIdentity);
-    if (!alreadyDeclaresPolicy) {
-        // This probe runs BEFORE the document gate that rejects a source whose
-        // schema check failed, so it has to hold its own precondition: a source
-        // that composes to anything but a mapping - an empty file, a comment-only
-        // one, a bare scalar - selects no profile at all. It used to read
-        // `.profile` through an `as` cast, which is what hid the null from the
-        // typechecker, and an empty document crashed the whole compile with a
-        // `TypeError` instead of the `YM201 must be object` its schema already
-        // produces. Every other consumer of a parsed entry checks its diagnostics
-        // first (the profile walk above, the pattern walk below); this one could
-        // not, because it runs before that gate exists, so it narrows instead.
-        const selected = documentInputs.some(({ entry }) => {
-            const value = entry.value;
-            return (typeof value === 'object' &&
-                value !== null &&
-                value.profile ===
-                    shippedPolicyIdentity);
-        });
-        const extended = pendingProfiles.some(({ value }) => value.extends === shippedPolicyIdentity);
-        if (selected || extended) {
-            const input = {
-                path: 'yarramate:profile:yarramate/policy@0.1',
-                source: shippedPolicySource,
-            };
-            const { entry, fresh } = parseWorkspaceSource(input);
-            const value = entry.value;
-            if (entry.schemaDiagnostics.length > 0) {
-                profileDiagnostics.push(...entry.schemaDiagnostics);
-            }
-            else if (!validateProfile(value)) {
-                for (const error of validateProfile.errors ?? []) {
-                    profileDiagnostics.push({
-                        severity: 'error',
-                        code: 'YM201',
-                        message: `Profile schema violation: ${describeSchemaViolation(error)}`,
-                        path: input.path,
-                        pointer: error.instancePath || '/',
-                        line: 1,
-                        column: 1,
-                    });
-                }
-            }
-            else {
-                pendingProfiles.push({
-                    input,
-                    value,
-                    identity: shippedPolicyIdentity,
-                    positionFor: positionReader(input.source, entry.positions, fresh),
+    // The shipped optional profiles (ADR 0095; policy@0.2 per ADR 0159). Each
+    // is injected when a document selects it or a profile extends it, and a
+    // shipped profile's own parent follows it in, so `extends:
+    // yarramate/policy@0.2` brings 0.1 along. A workspace file that declares
+    // the same identity wins; the shipped copy is not added beside it.
+    //
+    // This probe runs BEFORE the document gate that rejects a source whose
+    // schema check failed, so it has to hold its own precondition: a source
+    // that composes to anything but a mapping - an empty file, a comment-only
+    // one, a bare scalar - selects no profile at all. It used to read
+    // `.profile` through an `as` cast, which is what hid the null from the
+    // typechecker, and an empty document crashed the whole compile with a
+    // `TypeError` instead of the `YM201 must be object` its schema already
+    // produces. Every other consumer of a parsed entry checks its diagnostics
+    // first (the profile walk above, the pattern walk below); this one could
+    // not, because it runs before that gate exists, so it narrows instead.
+    const declaredIdentities = new Set(pendingProfiles.map(({ identity }) => identity));
+    const requestedIdentities = new Set();
+    for (const { entry } of documentInputs) {
+        const value = entry.value;
+        if (typeof value !== 'object' || value === null)
+            continue;
+        const profile = value.profile;
+        if (typeof profile === 'string')
+            requestedIdentities.add(profile);
+    }
+    for (const { value } of pendingProfiles)
+        requestedIdentities.add(value.extends);
+    const wantedShipped = [];
+    const want = (identity) => {
+        if (declaredIdentities.has(identity) || wantedShipped.includes(identity))
+            return;
+        const shipped = shippedProfileOf(identity);
+        if (shipped === undefined)
+            return;
+        wantedShipped.push(identity);
+        want(shipped.extends);
+    };
+    for (const identity of requestedIdentities)
+        want(identity);
+    for (const identity of wantedShipped) {
+        const shipped = shippedProfileOf(identity);
+        const input = {
+            path: `yarramate:profile:${identity}`,
+            source: shipped.source,
+        };
+        const { entry, fresh } = parseWorkspaceSource(input);
+        const value = entry.value;
+        if (entry.schemaDiagnostics.length > 0) {
+            profileDiagnostics.push(...entry.schemaDiagnostics);
+        }
+        else if (!validateProfile(value)) {
+            for (const error of validateProfile.errors ?? []) {
+                profileDiagnostics.push({
+                    severity: 'error',
+                    code: 'YM201',
+                    message: `Profile schema violation: ${describeSchemaViolation(error)}`,
+                    path: input.path,
+                    pointer: error.instancePath || '/',
+                    line: 1,
+                    column: 1,
                 });
             }
         }
+        else {
+            pendingProfiles.push({
+                input,
+                value,
+                identity,
+                positionFor: positionReader(input.source, entry.positions, fresh),
+            });
+        }
     }
     let unresolvedProfiles = pendingProfiles.sort((left, right) => left.identity.localeCompare(right.identity) ||
         left.input.path.localeCompare(right.input.path));

package/dist/export-command.js

@@ -8,7 +8,7 @@ import { humanDiagnostics, usage, } from './cli-support.js';
 import { evaluateProjection, renderProjectionMarkdown } from './projection.js';
 import { createFileSystemStore } from './source-store.js';
 import { posixDirectoryOf } from './apply-command.js';
-import { briefsFromResult, exportBriefs, exportGraph, exportMarkdown, exportRtm, exportWorkbook, } from './tools/export.js';
+import { briefsFromResult, exportBriefs, exportGraph, exportMarkdown, exportGovernance, exportResponsibility, exportRtm, exportWorkbook, } from './tools/export.js';
 import { compileOf, readSource, } from './tools/workspace.js';
 import { loadWorkspaceManifest } from './workspace.js';
 // Every kind is derived in `tools/export.ts` (ADR 0156): this command
@@ -70,7 +70,16 @@ const parseExportOptions = (options) => {
 export function runExportCommand(options, cwd) {
     const [kind, ...rest] = options;
     if (kind === undefined ||
-        !['graph', 'markdown', 'briefs', 'rtm', 'likec4', 'xlsx'].includes(kind)) {
+        ![
+            'graph',
+            'markdown',
+            'briefs',
+            'rtm',
+            'responsibility',
+            'governance',
+            'likec4',
+            'xlsx',
+        ].includes(kind)) {
         return { exitCode: 2, stdout: '', stderr: usage };
     }
     const parsed = parseExportOptions(rest);
@@ -113,17 +122,20 @@ export function runExportCommand(options, cwd) {
         };
     }
     const usesChanged = parsed.changed !== undefined;
-    const expectedPositionals = kind === 'graph' || kind === 'rtm' || usesChanged ? 1 : 2;
+    const wholeWorkspace = kind === 'graph' || kind === 'rtm' || kind === 'governance';
+    const expectedPositionals = wholeWorkspace || usesChanged ? 1 : 2;
     const workspacePath = parsed.positionals[expectedPositionals - 1];
-    const projectionPath = kind === 'graph' || kind === 'rtm' || usesChanged
-        ? undefined
-        : parsed.positionals[0];
+    const projectionPath = wholeWorkspace || usesChanged ? undefined : parsed.positionals[0];
     if (parsed.positionals.length !== expectedPositionals ||
         workspacePath === undefined ||
         parsed.json ||
-        (usesChanged && (kind === 'graph' || kind === 'rtm')) ||
+        (usesChanged && (wholeWorkspace || kind === 'responsibility')) ||
         (parsed.budget !== undefined && kind !== 'briefs') ||
-        ((kind === 'briefs' || kind === 'rtm' || kind === 'xlsx') &&
+        ((kind === 'briefs' ||
+            kind === 'rtm' ||
+            kind === 'responsibility' ||
+            kind === 'governance' ||
+            kind === 'xlsx') &&
             parsed.out === undefined)) {
         return { exitCode: 2, stdout: '', stderr: usage };
     }
@@ -171,6 +183,34 @@ export function runExportCommand(options, cwd) {
                 stderr: '',
             };
         }
+        if (kind === 'governance') {
+            const exported = exportGovernance(tool);
+            if (!exported.ok)
+                return failedTool(exported);
+            const { markdown, log } = exported.result;
+            writeText(join(parsed.out, 'GOVERNANCE.md'), markdown);
+            writeText(join(parsed.out, 'governance.json'), `${JSON.stringify(log, null, 2)}\n`);
+            const gaps = log.summary.unowned + log.summary.unmitigated + log.summary.unconfirmed + log.summary.unreviewed;
+            return {
+                exitCode: 0,
+                stdout: `Wrote GOVERNANCE.md and governance.json (${log.summary.rows} row${log.summary.rows === 1 ? '' : 's'}, ${gaps} gap${gaps === 1 ? '' : 's'}) to ${parsed.out}\n`,
+                stderr: '',
+            };
+        }
+        if (kind === 'responsibility') {
+            const exported = exportResponsibility(tool, projectionPath);
+            if (!exported.ok)
+                return failedTool(exported);
+            const { markdown, matrix } = exported.result;
+            writeText(join(parsed.out, 'RESPONSIBILITY.md'), markdown);
+            writeText(join(parsed.out, 'responsibility.json'), `${JSON.stringify(matrix, null, 2)}\n`);
+            const gaps = matrix.summary.noAccountable + matrix.summary.noResponsible;
+            return {
+                exitCode: 0,
+                stdout: `Wrote RESPONSIBILITY.md and responsibility.json (${matrix.summary.rows} row${matrix.summary.rows === 1 ? '' : 's'}, ${gaps} gap${gaps === 1 ? '' : 's'}) to ${parsed.out}\n`,
+                stderr: '',
+            };
+        }
         if (kind === 'graph') {
             const exported = exportGraph(tool);
             if (!exported.ok)

package/dist/governance-kinds.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The governance concept kinds (#560, ADR 0160): `yarramate/policy@0.3#risk`
+ * and `#assumption`, each a subkind of core `assessment`. A decision is the
+ * adopter's trial kind under `courseOfAction` until the trial reports, so
+ * it is not here. Review dates are attestations on the shipped topics
+ * below. Pure, so the canvas projection, the log builder and the brief read
+ * one table.
+ */
+export declare const GOVERNANCE_PROFILE = "yarramate/policy@0.3";
+export type GovernanceType = 'risk' | 'assumption';
+export declare const GOVERNANCE_KINDS: Readonly<Record<GovernanceType, string>>;
+/**
+ * The attestation topic that records a review of each type: a risk owner
+ * or the client role attests `risk-reviewed` on a risk, and the client
+ * confirms an assumption with `assumption-confirmed`. How old is too old is
+ * the adopter's threshold, not the engine's.
+ */
+export declare const REVIEW_TOPICS: Readonly<Record<GovernanceType, string>>;
+/**
+ * Whether a concept kind is a risk or an assumption, read through its
+ * lineage (ancestor-first) so a profile's own subkind counts; null for
+ * every other kind.
+ */
+export declare const governanceTypeOf: (lineage: readonly string[] | undefined, kind: string) => GovernanceType | null;

package/dist/governance-kinds.js

@@ -0,0 +1,40 @@
+/**
+ * The governance concept kinds (#560, ADR 0160): `yarramate/policy@0.3#risk`
+ * and `#assumption`, each a subkind of core `assessment`. A decision is the
+ * adopter's trial kind under `courseOfAction` until the trial reports, so
+ * it is not here. Review dates are attestations on the shipped topics
+ * below. Pure, so the canvas projection, the log builder and the brief read
+ * one table.
+ */
+export const GOVERNANCE_PROFILE = 'yarramate/policy@0.3';
+export const GOVERNANCE_KINDS = {
+    risk: `${GOVERNANCE_PROFILE}#risk`,
+    assumption: `${GOVERNANCE_PROFILE}#assumption`,
+};
+/**
+ * The attestation topic that records a review of each type: a risk owner
+ * or the client role attests `risk-reviewed` on a risk, and the client
+ * confirms an assumption with `assumption-confirmed`. How old is too old is
+ * the adopter's threshold, not the engine's.
+ */
+export const REVIEW_TOPICS = {
+    risk: 'risk-reviewed',
+    assumption: 'assumption-confirmed',
+};
+const TYPE_BY_KIND = {
+    [GOVERNANCE_KINDS.risk]: 'risk',
+    [GOVERNANCE_KINDS.assumption]: 'assumption',
+};
+/**
+ * Whether a concept kind is a risk or an assumption, read through its
+ * lineage (ancestor-first) so a profile's own subkind counts; null for
+ * every other kind.
+ */
+export const governanceTypeOf = (lineage, kind) => {
+    for (const member of lineage ?? [kind]) {
+        const type = TYPE_BY_KIND[member];
+        if (type !== undefined)
+            return type;
+    }
+    return TYPE_BY_KIND[kind] ?? null;
+};