icdev 0.0.3__py3-none-any.whl

context/compliance/xai_requirements.json

@@ -0,0 +1,108 @@
+{
+  "framework_id": "xai",
+  "framework_name": "Observability & Explainable AI (Phase 46)",
+  "version": "1.0",
+  "description": "Requirements for observability, traceability, and explainable AI in ICDEV. Maps to NIST AI RMF MEASURE 2.5/2.7/2.8, DoD RAI Traceable principle, and ISO 42001.",
+  "requirements": [
+    {
+      "id": "XAI-001",
+      "title": "Tracing Active",
+      "description": "Distributed tracing must be active with OTel or SQLite backend. All agent operations must produce trace spans.",
+      "category": "tracing",
+      "severity": "critical",
+      "nist_800_53_controls": ["AU-2", "AU-3", "AU-12"],
+      "nist_ai_rmf": "MEASURE 4.1",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-002",
+      "title": "MCP Instrumentation Enabled",
+      "description": "All MCP server tool calls must produce trace spans with tool name, duration, and status attributes.",
+      "category": "tracing",
+      "severity": "high",
+      "nist_800_53_controls": ["AU-2", "AU-3"],
+      "nist_ai_rmf": "MEASURE 4.1",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-003",
+      "title": "A2A Distributed Tracing Active",
+      "description": "Cross-agent spans must be linked via W3C traceparent propagation in A2A JSON-RPC metadata.",
+      "category": "tracing",
+      "severity": "high",
+      "nist_800_53_controls": ["AU-2", "AU-14"],
+      "nist_ai_rmf": "MEASURE 2.5",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-004",
+      "title": "Provenance Graph Populated",
+      "description": "W3C PROV-AGENT provenance graph must contain entities and activities for project artifacts and operations.",
+      "category": "provenance",
+      "severity": "critical",
+      "nist_800_53_controls": ["AU-3", "AU-10", "SA-12"],
+      "nist_ai_rmf": "MEASURE 2.5",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-005",
+      "title": "Content Tracing Policy Documented",
+      "description": "Content tracing policy must be documented in observability_tracing_config.yaml specifying whether plaintext or hash-only recording is used.",
+      "category": "policy",
+      "severity": "medium",
+      "nist_800_53_controls": ["AU-11", "PL-4"],
+      "nist_ai_rmf": "MEASURE 2.8",
+      "dod_rai_principle": "Transparent"
+    },
+    {
+      "id": "XAI-006",
+      "title": "SHAP Analysis Recent",
+      "description": "AgentSHAP tool attribution analysis must have been run within the last 30 days for the project.",
+      "category": "explainability",
+      "severity": "high",
+      "nist_800_53_controls": ["AU-6", "CA-7"],
+      "nist_ai_rmf": "MEASURE 2.7",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-007",
+      "title": "Decision Rationale Recorded",
+      "description": "Architectural and operational decisions must have recorded rationale via decision_recorder.",
+      "category": "explainability",
+      "severity": "medium",
+      "nist_800_53_controls": ["AU-3", "AU-12"],
+      "nist_ai_rmf": "MEASURE 2.7",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-008",
+      "title": "Trace Retention Configured",
+      "description": "Trace retention policy must be configured (SQLite and/or MLflow retention days) in observability_tracing_config.yaml.",
+      "category": "policy",
+      "severity": "medium",
+      "nist_800_53_controls": ["AU-11", "SI-12"],
+      "nist_ai_rmf": "MEASURE 4.1",
+      "dod_rai_principle": "Responsible"
+    },
+    {
+      "id": "XAI-009",
+      "title": "AI Telemetry Active",
+      "description": "AI telemetry logging must be active with recent entries (within 7 days) for the project.",
+      "category": "monitoring",
+      "severity": "high",
+      "nist_800_53_controls": ["AU-2", "AU-6", "SI-4"],
+      "nist_ai_rmf": "MEASURE 4.1",
+      "dod_rai_principle": "Traceable"
+    },
+    {
+      "id": "XAI-010",
+      "title": "Agent Trust Scoring Active",
+      "description": "Agent trust scores must be computed and tracked for the project.",
+      "category": "trust",
+      "severity": "medium",
+      "nist_800_53_controls": ["CA-7", "IA-1"],
+      "nist_ai_rmf": "MEASURE 2.5",
+      "dod_rai_principle": "Governable"
+    }
+  ]
+}

context/dashboard/__init__.py

@@ -0,0 +1,6 @@
+# CUI // SP-CTI
+# Controlled by: Department of Defense
+# CUI Category: CTI
+# Distribution: D
+# POC: ICDEV System Administrator
+# Package marker for PyPI distribution

context/dashboard/nlq_examples.json

@@ -0,0 +1,50 @@
+[
+    {
+        "question": "Show all active projects",
+        "sql": "SELECT id, name, type, status, classification, impact_level, ato_status, created_at FROM projects WHERE status = 'active' ORDER BY created_at DESC"
+    },
+    {
+        "question": "List all CAT1 STIG findings",
+        "sql": "SELECT sf.id, sf.project_id, sf.stig_id, sf.finding_id, sf.title, sf.status, sf.assessed_at FROM stig_findings sf WHERE sf.severity = 'CAT1' AND sf.status = 'Open' ORDER BY sf.assessed_at DESC"
+    },
+    {
+        "question": "Show open POAM items by severity",
+        "sql": "SELECT severity, COUNT(*) as count FROM poam_items WHERE status = 'open' GROUP BY severity ORDER BY CASE severity WHEN 'critical' THEN 1 WHEN 'high' THEN 2 WHEN 'moderate' THEN 3 WHEN 'low' THEN 4 END"
+    },
+    {
+        "question": "What is the compliance coverage for each framework?",
+        "sql": "SELECT pfs.project_id, p.name as project_name, pfs.framework_id, pfs.coverage_pct, pfs.gate_status, pfs.last_assessed FROM project_framework_status pfs JOIN projects p ON pfs.project_id = p.id ORDER BY pfs.coverage_pct ASC"
+    },
+    {
+        "question": "Show recent audit trail entries",
+        "sql": "SELECT id, project_id, event_type, actor, action, classification, created_at FROM audit_trail ORDER BY created_at DESC LIMIT 50"
+    },
+    {
+        "question": "List agents and their status",
+        "sql": "SELECT id, name, description, url, status, last_heartbeat FROM agents ORDER BY name"
+    },
+    {
+        "question": "Show critical vulnerabilities",
+        "sql": "SELECT dv.cve_id, dv.severity, dv.cvss_score, dv.title, dv.status, di.package_name, di.current_version FROM dependency_vulnerabilities dv JOIN dependency_inventory di ON dv.dependency_id = di.id WHERE dv.severity = 'critical' AND dv.status = 'open' ORDER BY dv.cvss_score DESC"
+    },
+    {
+        "question": "How many hook events were logged today?",
+        "sql": "SELECT hook_type, COUNT(*) as count FROM hook_events WHERE date(created_at) = date('now') GROUP BY hook_type ORDER BY count DESC"
+    },
+    {
+        "question": "Show recent deployments",
+        "sql": "SELECT d.id, d.project_id, p.name as project_name, d.environment, d.version, d.status, d.deployed_by, d.created_at FROM deployments d JOIN projects p ON d.project_id = p.id ORDER BY d.created_at DESC LIMIT 20"
+    },
+    {
+        "question": "What projects have RED boundary impact?",
+        "sql": "SELECT bia.id, bia.project_id, p.name as project_name, bia.impact_tier, bia.impact_category, bia.impact_description FROM boundary_impact_assessments bia JOIN projects p ON bia.project_id = p.id WHERE bia.impact_tier = 'RED' ORDER BY bia.assessed_at DESC"
+    },
+    {
+        "question": "Show intake sessions with readiness scores",
+        "sql": "SELECT is2.id, is2.customer_name, is2.session_status, is2.readiness_score, is2.total_requirements, is2.gap_count, is2.ambiguity_count FROM intake_sessions is2 ORDER BY is2.created_at DESC"
+    },
+    {
+        "question": "List supply chain vendors with high risk",
+        "sql": "SELECT id, vendor_name, vendor_type, country_of_origin, scrm_risk_tier, section_889_status FROM supply_chain_vendors WHERE scrm_risk_tier IN ('high', 'critical') ORDER BY scrm_risk_tier, vendor_name"
+    }
+]

context/dashboard/schema_descriptions.json

@@ -0,0 +1,23 @@
+{
+    "projects": "Core project registry — tracks all ICDEV-managed software projects with classification, impact level, and ATO status",
+    "agents": "Multi-agent system registry — 10 agents (orchestrator, architect, builder, compliance, security, infrastructure, MBSE, modernization, knowledge, monitor)",
+    "audit_trail": "Append-only immutable audit log (NIST 800-53 AU) — every significant action is recorded here",
+    "hook_events": "Claude Code hook event log — captures tool usage, notifications, session lifecycle for observability",
+    "agent_executions": "Agent subprocess execution log — tracks Claude Code CLI invocations with tokens, duration, retry status",
+    "compliance_controls": "NIST 800-53 Rev 5 control catalog",
+    "project_controls": "Per-project control implementation status",
+    "ssp_documents": "System Security Plan documents",
+    "poam_items": "Plan of Action & Milestones — tracks security weaknesses and remediation timelines",
+    "stig_findings": "Security Technical Implementation Guide findings with severity categories",
+    "sbom_records": "Software Bill of Materials records (CycloneDX format)",
+    "deployments": "Deployment tracking — dev/staging/prod with rollback support",
+    "knowledge_patterns": "Self-healing knowledge base — failure patterns, remediation, confidence scores",
+    "boundary_impact_assessments": "ATO boundary impact analysis — GREEN/YELLOW/ORANGE/RED tier system",
+    "supply_chain_vendors": "Supply chain vendor registry with SCRM risk tiers",
+    "intake_sessions": "RICOAS requirements intake sessions with readiness scoring",
+    "intake_requirements": "Individual requirements captured during intake with quality scores",
+    "safe_decomposition": "SAFe hierarchy decomposition — epics, capabilities, features, stories",
+    "simulation_scenarios": "Digital Program Twin simulation scenarios",
+    "coa_definitions": "Course of Action definitions — speed/balanced/comprehensive/alternative",
+    "nlq_queries": "NLQ query history — audit trail for natural language database queries"
+}

context/icdev_methodology.md

@@ -0,0 +1,100 @@
+# CUI // SP-CTI
+# ICDEV Methodology Reference — For Proposal SMART Solutioning
+
+## GOTCHA Framework (6-Layer Agentic Architecture)
+
+ICDEV uses the GOTCHA framework to ensure deterministic, auditable execution:
+
+| Layer | Purpose | Proposal Relevance |
+|-------|---------|-------------------|
+| **Goals** | Process definitions — what to achieve, expected outputs | Ensures every deliverable maps to a defined workflow |
+| **Orchestration** | AI reads goals, selects tools, applies context | Demonstrates AI-augmented decision-making with human oversight |
+| **Tools** | Deterministic Python scripts — one job each | Eliminates probabilistic drift; each tool is testable and auditable |
+| **Args** | YAML/JSON behavior settings | Change behavior without code changes; supports customer-specific configs |
+| **Context** | Static reference material (tone, standards, ICPs) | Ensures consistent voice, compliance language, and domain accuracy |
+| **Hard Prompts** | Reusable LLM instruction templates | Repeatable, version-controlled content generation |
+
+**Key Differentiator:** Separation of probabilistic AI (orchestration) from deterministic execution (tools) yields >95% accuracy across multi-step workflows, vs. ~59% for monolithic LLM pipelines (90% per step over 5 steps).
+
+## ATLAS Workflow (Build Methodology)
+
+| Phase | Activity | Deliverables |
+|-------|----------|-------------|
+| **A — Architect** | System design, component decomposition, interface contracts | Architecture Decision Records, interface specs |
+| **T — Trace** | Requirements traceability matrix, compliance mapping | RTM, control-to-requirement crosswalk |
+| **L — Link** | Wire components, dependency injection, A2A registration | Integration manifests, agent cards |
+| **A — Assemble** | TDD build (RED→GREEN→REFACTOR), integration | Code, unit tests, BDD scenarios |
+| **S — Stress-test** | Load testing, security scanning, compliance gate checks | Test reports, STIG findings, scan artifacts |
+
+**M-ATLAS Extension:** Adds a Model pre-phase for MBSE (SysML/DOORS import, digital thread, model-to-code generation). Backward-compatible — skips if no model exists.
+
+## RICOAS (Requirements Intake, COA & Approval System)
+
+5-stage AI-driven conversational requirements intake:
+
+1. **Intake** — Conversational elicitation with AI guidance and gap detection
+2. **Analysis** — 7-dimension readiness scoring, boundary impact assessment (GREEN/YELLOW/ORANGE/RED)
+3. **Decomposition** — SAFe hierarchy (Epic→Feature→Story→Task) with BDD scenario generation
+4. **Simulation** — Digital Program Twin: 6-dimension Monte Carlo, what-if scenarios, COA generation
+5. **Approval** — Stakeholder review, COA comparison, go/no-go decision
+
+**Key Differentiator:** Before writing a single line of code, RICOAS produces a validated, risk-scored, simulated project plan with multiple courses of action.
+
+## Zero Trust Architecture (ZTA)
+
+7-pillar DoD ZTA Strategy implementation:
+
+| Pillar | Approach |
+|--------|----------|
+| User | Identity-aware proxy, MFA, continuous authentication |
+| Device | Device posture assessment, health attestation |
+| Network | Microsegmentation, encrypted East-West traffic |
+| Application | Service mesh (Istio/Linkerd), mTLS, API gateway |
+| Data | Classification-driven access, CUI markings at rest/transit |
+| Visibility | Distributed tracing (OpenTelemetry), provenance (W3C PROV) |
+| Automation | Policy-as-code (Kyverno/OPA), automated remediation |
+
+**Maturity Levels:** Traditional → Advanced → Optimal (DoD scoring model)
+
+## Compliance Crosswalk (9 Frameworks)
+
+Implementing one NIST 800-53 control auto-populates status across:
+- NIST 800-53 Rev 5, FedRAMP Moderate/High, NIST 800-171, CMMC L2/L3
+- DoD CSSP (DI 8530.01), CISA Secure by Design, IEEE 1012 IV&V
+- DoDI 5000.87 DES, FIPS 140-3
+
+**Key Differentiator:** Single implementation effort yields multi-framework compliance evidence — reducing ATO timelines by 40-60%.
+
+## DevSecOps Pipeline Security
+
+| Stage | Gates |
+|-------|-------|
+| Code | SAST, secret detection, CUI marking validation |
+| Build | SBOM generation, dependency audit, container scan |
+| Test | Unit + BDD + E2E, compliance control evidence |
+| Deploy | IaC validation, policy-as-code enforcement, staging gates |
+| Operate | Runtime monitoring, self-healing, continuous ATO evidence |
+
+**Shift-Left Security:** Every commit triggers the full security pipeline. CAT1 STIG findings, critical CVEs, and missing CUI markings are blocking gates.
+
+## AI Security & Transparency
+
+| Capability | Implementation |
+|------------|---------------|
+| MITRE ATLAS Defense | Threat modeling, red team simulation, control mapping |
+| OWASP LLM Top 10 | Prompt injection detection, output validation, telemetry |
+| Agentic Security | Behavioral drift detection, tool chain validation, trust scoring |
+| Explainable AI | AgentSHAP attribution, W3C PROV provenance, model/system cards |
+| AI Accountability | Oversight plans, CAIO registry, ethics reviews, incident response |
+
+## SMART Solutioning Template
+
+When generating a SMART solution plan for a proposal section:
+
+- **Specific:** What exact capability, tool, or process addresses each requirement?
+- **Measurable:** What metrics, KPIs, or evidence demonstrate compliance/performance?
+- **Achievable:** What ICDEV tools, frameworks, and proven patterns enable delivery?
+- **Relevant:** How does this align with the customer's mission, risk posture, and timeline?
+- **Time-bound:** What is the phased delivery approach (sprints, milestones, ATO gates)?
+
+Reference ICDEV tools and frameworks by name (GOTCHA, ATLAS, RICOAS, ZTA) to demonstrate depth of methodology and reduce evaluator uncertainty.

context/integration/__init__.py

@@ -0,0 +1,6 @@
+# CUI // SP-CTI
+# Controlled by: Department of Defense
+# CUI Category: CTI
+# Distribution: D
+# POC: ICDEV System Administrator
+# Package marker for PyPI distribution

context/integration/approval_workflows.json

@@ -0,0 +1,32 @@
+{
+  "workflow_types": {
+    "requirements_package": {
+      "name": "Requirements Package Approval",
+      "required_roles": ["isso", "project_manager"],
+      "minimum_approvers": 1,
+      "auto_escalate_after_days": 5,
+      "conditions": ["readiness_score >= 0.7", "no_critical_gaps"]
+    },
+    "coa_selection": {
+      "name": "COA Selection Approval",
+      "required_roles": ["project_manager", "customer_lead"],
+      "minimum_approvers": 1,
+      "auto_escalate_after_days": 3,
+      "conditions": ["simulation_completed", "coas_compared"]
+    },
+    "boundary_acceptance": {
+      "name": "Boundary Impact Acceptance",
+      "required_roles": ["isso", "ao", "security_engineer"],
+      "minimum_approvers": 2,
+      "auto_escalate_after_days": 7,
+      "conditions": ["boundary_assessment_completed", "no_red_without_alternative"]
+    },
+    "deployment_gate": {
+      "name": "Deployment Gate Approval",
+      "required_roles": ["isso", "project_manager", "test_lead"],
+      "minimum_approvers": 2,
+      "auto_escalate_after_days": 3,
+      "conditions": ["all_tests_pass", "compliance_artifacts_current", "rtm_coverage >= 0.9"]
+    }
+  }
+}

context/integration/gitlab_field_mappings.json

@@ -0,0 +1,33 @@
+{
+  "safe_to_gitlab_mapping": {
+    "epic": {"type": "epic", "labels": ["SAFe::Epic"]},
+    "capability": {"type": "epic", "labels": ["SAFe::Capability"]},
+    "feature": {"type": "issue", "labels": ["SAFe::Feature"]},
+    "story": {"type": "issue", "labels": ["SAFe::Story"]},
+    "enabler": {"type": "issue", "labels": ["SAFe::Enabler"]}
+  },
+  "field_mapping": {
+    "title": "title",
+    "description": "description",
+    "story_points": "weight",
+    "pi_target": "milestone",
+    "priority": "labels"
+  },
+  "priority_to_label": {
+    "P1": "priority::critical",
+    "P2": "priority::high",
+    "P3": "priority::medium",
+    "P4": "priority::low"
+  },
+  "status_mapping": {
+    "pending": "opened",
+    "in_progress": "opened",
+    "completed": "closed",
+    "blocked": "opened"
+  },
+  "merge_request_template": {
+    "title_prefix": "[RICOAS]",
+    "description_sections": ["requirements_summary", "compliance_impact", "boundary_tier", "test_plan"],
+    "labels": ["ICDEV", "RICOAS"]
+  }
+}

context/integration/jira_field_mappings.json

@@ -0,0 +1,32 @@
+{
+  "safe_to_jira_type_mapping": {
+    "epic": {"jira_type": "Epic", "label": null},
+    "capability": {"jira_type": "Epic", "label": "Capability"},
+    "feature": {"jira_type": "Story", "label": "Feature"},
+    "story": {"jira_type": "Sub-task", "label": null},
+    "enabler": {"jira_type": "Task", "label": "Enabler"}
+  },
+  "field_mapping": {
+    "title": "summary",
+    "description": "description",
+    "acceptance_criteria": "customfield_10001",
+    "t_shirt_size": "customfield_10002",
+    "story_points": "story_points",
+    "priority": "priority",
+    "status": "status",
+    "pi_target": "customfield_10003",
+    "wsjf_score": "customfield_10004"
+  },
+  "status_mapping": {
+    "pending": "To Do",
+    "in_progress": "In Progress",
+    "completed": "Done",
+    "blocked": "Blocked"
+  },
+  "priority_mapping": {
+    "P1": "Highest",
+    "P2": "High",
+    "P3": "Medium",
+    "P4": "Low"
+  }
+}

context/integration/reqif_export_schema.json

@@ -0,0 +1,23 @@
+{
+  "reqif_version": "1.2",
+  "namespace": "http://www.omg.org/spec/ReqIF/20110401/reqif.xsd",
+  "datatypes": {
+    "string_type": {"id": "DT-STRING", "long_name": "String", "type": "xhtml"},
+    "priority_enum": {"id": "DT-PRIORITY", "long_name": "Priority", "values": ["P1-Critical", "P2-High", "P3-Medium", "P4-Low"]},
+    "type_enum": {"id": "DT-TYPE", "long_name": "RequirementType", "values": ["functional", "security", "performance", "interface", "data", "operational"]},
+    "status_enum": {"id": "DT-STATUS", "long_name": "Status", "values": ["draft", "extracted", "refined", "approved"]}
+  },
+  "spec_type": {
+    "id": "ST-REQ",
+    "long_name": "ICDEV Requirement",
+    "attributes": [
+      {"id": "AT-TITLE", "long_name": "Title", "datatype": "DT-STRING"},
+      {"id": "AT-DESC", "long_name": "Description", "datatype": "DT-STRING"},
+      {"id": "AT-PRIORITY", "long_name": "Priority", "datatype": "DT-PRIORITY"},
+      {"id": "AT-TYPE", "long_name": "Type", "datatype": "DT-TYPE"},
+      {"id": "AT-STATUS", "long_name": "Status", "datatype": "DT-STATUS"},
+      {"id": "AT-ACCEPT", "long_name": "AcceptanceCriteria", "datatype": "DT-STRING"},
+      {"id": "AT-SOURCE", "long_name": "Source", "datatype": "DT-STRING"}
+    ]
+  }
+}

context/integration/servicenow_field_mappings.json

@@ -0,0 +1,22 @@
+{
+  "safe_to_servicenow_table_mapping": {
+    "epic": {"table": "rm_epic", "category": "Epic"},
+    "feature": {"table": "rm_story", "category": "Feature"},
+    "story": {"table": "rm_story", "category": "Story"},
+    "enabler": {"table": "rm_story", "category": "Enabler"}
+  },
+  "field_mapping": {
+    "title": "short_description",
+    "description": "description",
+    "acceptance_criteria": "acceptance_criteria",
+    "priority": "priority",
+    "status": "state",
+    "story_points": "story_points"
+  },
+  "status_mapping": {
+    "pending": "1",
+    "in_progress": "2",
+    "completed": "3",
+    "blocked": "-5"
+  }
+}

context/languages/__init__.py

@@ -0,0 +1,6 @@
+# CUI // SP-CTI
+# Controlled by: Department of Defense
+# CUI Category: CTI
+# Distribution: D
+# POC: ICDEV System Administrator
+# Package marker for PyPI distribution

context/languages/framework_patterns.json

@@ -0,0 +1,205 @@
+{
+    "python": {
+        "frameworks": {
+            "flask": {
+                "entry_point": "app.py",
+                "app_factory": "create_app()",
+                "routing": "Blueprint",
+                "orm": "SQLAlchemy",
+                "validation": "marshmallow",
+                "auth": "Flask-Login + JWT",
+                "server": "gunicorn"
+            },
+            "fastapi": {
+                "entry_point": "main.py",
+                "app_factory": "FastAPI()",
+                "routing": "APIRouter",
+                "orm": "SQLAlchemy + async",
+                "validation": "pydantic",
+                "auth": "OAuth2PasswordBearer",
+                "server": "uvicorn"
+            }
+        },
+        "testing": {
+            "unit": "pytest",
+            "bdd": "behave",
+            "coverage": "pytest-cov",
+            "fixtures": "conftest.py"
+        },
+        "quality": {
+            "linter": "ruff",
+            "formatter": "ruff format",
+            "sast": "bandit",
+            "dep_audit": "pip-audit",
+            "secrets": "detect-secrets"
+        },
+        "stig_hardening": {
+            "base_image": "python:3.11-slim",
+            "user": "appuser",
+            "no_cache": true,
+            "read_only_fs": true,
+            "drop_capabilities": ["ALL"]
+        }
+    },
+    "java": {
+        "frameworks": {
+            "spring_boot": {
+                "entry_point": "Application.java",
+                "annotation": "@SpringBootApplication",
+                "routing": "@RestController",
+                "orm": "Spring Data JPA",
+                "validation": "Jakarta Bean Validation",
+                "auth": "Spring Security",
+                "server": "embedded Tomcat"
+            }
+        },
+        "testing": {
+            "unit": "JUnit 5",
+            "bdd": "Cucumber-JVM",
+            "coverage": "JaCoCo",
+            "mocking": "Mockito"
+        },
+        "quality": {
+            "linter": "checkstyle + PMD",
+            "formatter": "google-java-format",
+            "sast": "SpotBugs + Find Security Bugs",
+            "dep_audit": "OWASP Dependency-Check",
+            "secrets": "detect-secrets"
+        },
+        "stig_hardening": {
+            "base_image": "gcr.io/distroless/java17-debian12",
+            "user": "nonroot",
+            "multi_stage": true,
+            "read_only_fs": true,
+            "drop_capabilities": ["ALL"]
+        }
+    },
+    "go": {
+        "frameworks": {
+            "stdlib": {
+                "entry_point": "main.go",
+                "routing": "http.ServeMux",
+                "orm": "database/sql",
+                "validation": "custom",
+                "auth": "middleware",
+                "server": "net/http"
+            },
+            "gin": {
+                "entry_point": "main.go",
+                "routing": "gin.Engine",
+                "orm": "GORM",
+                "validation": "go-playground/validator",
+                "auth": "gin middleware",
+                "server": "gin"
+            }
+        },
+        "testing": {
+            "unit": "testing + testify",
+            "bdd": "godog",
+            "coverage": "go test -cover",
+            "benchmarks": "go test -bench"
+        },
+        "quality": {
+            "linter": "golangci-lint",
+            "formatter": "gofmt + goimports",
+            "sast": "gosec",
+            "dep_audit": "govulncheck",
+            "secrets": "detect-secrets"
+        },
+        "stig_hardening": {
+            "base_image": "scratch",
+            "user": "65534:65534",
+            "static_binary": true,
+            "cgo_disabled": true,
+            "read_only_fs": true
+        }
+    },
+    "rust": {
+        "frameworks": {
+            "actix_web": {
+                "entry_point": "main.rs",
+                "routing": "web::resource",
+                "orm": "diesel/sqlx",
+                "validation": "validator",
+                "auth": "actix-web middleware",
+                "server": "actix-web"
+            }
+        },
+        "testing": {
+            "unit": "cargo test",
+            "bdd": "cucumber-rs",
+            "coverage": "cargo tarpaulin"
+        },
+        "quality": {
+            "linter": "clippy",
+            "formatter": "rustfmt",
+            "sast": "cargo-audit",
+            "dep_audit": "cargo-audit"
+        },
+        "stig_hardening": {
+            "base_image": "gcr.io/distroless/cc-debian12",
+            "user": "nonroot",
+            "static_binary": false,
+            "read_only_fs": true
+        }
+    },
+    "csharp": {
+        "frameworks": {
+            "aspnet_core": {
+                "entry_point": "Program.cs",
+                "routing": "MapControllers()",
+                "orm": "Entity Framework Core",
+                "validation": "Data Annotations + FluentValidation",
+                "auth": "ASP.NET Core Identity",
+                "server": "Kestrel"
+            }
+        },
+        "testing": {
+            "unit": "xUnit + Moq",
+            "bdd": "SpecFlow",
+            "coverage": "coverlet"
+        },
+        "quality": {
+            "linter": "dotnet analyzers + StyleCop",
+            "formatter": "dotnet format",
+            "sast": "SecurityCodeScan",
+            "dep_audit": "dotnet list package --vulnerable"
+        },
+        "stig_hardening": {
+            "base_image": "mcr.microsoft.com/dotnet/aspnet:8.0-alpine",
+            "user": "appuser",
+            "multi_stage": true,
+            "read_only_fs": true
+        }
+    },
+    "typescript": {
+        "frameworks": {
+            "express": {
+                "entry_point": "index.ts",
+                "routing": "Router()",
+                "orm": "TypeORM/Prisma",
+                "validation": "zod/joi",
+                "auth": "passport.js",
+                "server": "express"
+            }
+        },
+        "testing": {
+            "unit": "Jest",
+            "bdd": "cucumber-js",
+            "coverage": "jest --coverage",
+            "e2e": "supertest"
+        },
+        "quality": {
+            "linter": "eslint + @typescript-eslint",
+            "formatter": "prettier",
+            "sast": "eslint-plugin-security + njsscan",
+            "dep_audit": "npm audit"
+        },
+        "stig_hardening": {
+            "base_image": "gcr.io/distroless/nodejs20-debian12",
+            "user": "nonroot",
+            "multi_stage": true,
+            "read_only_fs": true
+        }
+    }
+}