icdev 1.2.9__tar.gz → 1.2.11__tar.gz

{icdev-1.2.9 → icdev-1.2.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: icdev
-Version: 1.2.9
+Version: 1.2.11
 Summary: ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow.
 Author: Sovanna Chuon
 License-Expression: Apache-2.0

icdev-1.2.11/icdev/agents/1f2c64f3/icdev_state.json

@@ -0,0 +1,6 @@
+{
+  "run_id": "1f2c64f3",
+  "issue_number": "42",
+  "platform": "github",
+  "project_id": ""
+}

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/builder/code_generator.py

@@ -9,6 +9,7 @@ Implements:
 - Logs audit trail event (code_generated)
 - CLI: python tools/builder/code_generator.py --project-path PATH --spec "REST API endpoint for users" --language python
 """
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/builder/forge_validator.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/ci/core/recovery_engine.py

@@ -1,4 +1,6 @@
 # [TEMPLATE: CUI // SP-CTI]
+from __future__ import annotations
+
 # ICDEV™ Recovery Engine — self-recovery from test/lint failures (D134)
 
 """

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/ci/modules/state.py

@@ -1,4 +1,6 @@
 # [TEMPLATE: CUI // SP-CTI]
+from __future__ import annotations
+
 # ICDEV™ Workflow State Management
 # Adapted from ADW state.py
 

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/ci/triggers/webhook_server.py

@@ -1,4 +1,6 @@
 # [TEMPLATE: CUI // SP-CTI]
+from __future__ import annotations
+
 # ICDEV™ Webhook Server — GitHub + GitLab + Slack + Mattermost webhook support
 # Refactored to use EventEnvelope + EventRouter (D132, D133)
 

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/compliance/ivv_assessor.py

@@ -5,6 +5,7 @@
 Loads IV&V requirements from ivv_requirements.json, performs automated checks
 where possible, stores results in ivv_assessments table, generates findings in
 ivv_findings table, evaluates IV&V gates, applies CUI markings, and logs audit events."""
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/compliance/oscal_tools.py

@@ -22,6 +22,7 @@ Usage:
     python tools/compliance/oscal_tools.py --catalog-list --family AC --json
     python tools/compliance/oscal_tools.py --catalog-stats --json
 """
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/dashboard/api/batch.py

@@ -19,6 +19,7 @@ Enhancements:
   - DB persistence: completed runs written to icdev.db
   - rate limiting: max 3 concurrent + 10/hour per project
 """
+from __future__ import annotations
 
 import sqlite3
 import subprocess

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/dashboard/nlq_processor.py

@@ -5,6 +5,7 @@ Uses Amazon Bedrock (Claude) for SQL generation, with strict read-only enforceme
 Decision D30: Bedrock for NLQ→SQL (air-gap safe).
 Decision D34: Read-only SQL enforcement.
 """
+from __future__ import annotations
 
 import json
 import re

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/extensions/extension_manager.py

@@ -22,6 +22,7 @@ Usage:
     context = {"tool_name": "ssp_generator", "args": {...}}
     modified_ctx = extension_manager.dispatch(ExtensionPoint.TOOL_EXECUTE_BEFORE, context)
 """
+from __future__ import annotations
 
 from icdev._paths import get_project_root
 import importlib.util

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/infra/terraform_generator_gcp.py

@@ -3,6 +3,7 @@
 """Generate Terraform configurations for GCP Government (Assured Workloads) deployments.
 Produces provider.tf, variables.tf, outputs.tf, main.tf, and modules
 for VPC, Cloud SQL, Artifact Registry, and Secret Manager — all with CUI header comments."""
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/innovation/competitive_intel.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/maintenance/dependency_scanner.py

@@ -10,6 +10,7 @@ For each detected language:
 
 CLI: python tools/maintenance/dependency_scanner.py --project-id <id> [--language <lang>] [--offline] [--json]
 """
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/mbse/reqif_parser.py

@@ -8,6 +8,7 @@ ICDEV™ doors_requirements table.  Uses only Python stdlib xml.etree.ElementTre
 
 CUI // SP-CTI
 """
+from __future__ import annotations
 
 import argparse
 import hashlib

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/modernization/architecture_extractor.py

@@ -12,6 +12,8 @@ Usage:
 
 Classification: CUI // SP-CTI
 """
+from __future__ import annotations
+
 import argparse
 import collections
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/modernization/db_migration_planner.py

@@ -21,6 +21,7 @@ Usage:
     python tools/modernization/db_migration_planner.py --app-id APP-001 --output-dir .tmp/migration --type validation
     python tools/modernization/db_migration_planner.py --app-id APP-001 --output-dir .tmp/migration --type all --json
 """
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/modernization/framework_migrator.py

@@ -9,6 +9,7 @@ Supports: Struts->Spring Boot, EJB->Spring, WCF->ASP.NET Core gRPC,
 ================================================================================
 CUI // SP-CTI
 """
+from __future__ import annotations
 
 import re
 import sys

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/modernization/legacy_analyzer.py

@@ -25,6 +25,7 @@ Usage:
 
 Classification: CUI // SP-CTI
 """
+from __future__ import annotations
 
 import argparse
 import ast

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/modernization/strangler_fig_manager.py

@@ -44,6 +44,7 @@ Usage:
 
 Classification: CUI // SP-CTI
 """
+from __future__ import annotations
 
 import argparse
 import collections

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/modernization/version_migrator.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D -- Authorized DoD Personnel Only

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/mosa/icd_generator.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/mosa/modular_design_analyzer.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/requirements/clarification_engine.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/requirements/decomposition_engine.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/security/confabulation_detector.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/security/prompt_injection_detector.py

@@ -17,6 +17,7 @@ CLI:
     python tools/security/prompt_injection_detector.py --file /path/to/file.md --json
     python tools/security/prompt_injection_detector.py --project-dir /path --gate --json
 """
+from __future__ import annotations
 
 import argparse
 import base64

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/security/secret_detector.py

@@ -7,6 +7,7 @@ Implements:
 - evaluate_gate(findings) -> any secrets found = FAIL
 - CLI: python tools/security/secret_detector.py --project-path PATH [--gate]
 """
+from __future__ import annotations
 
 import argparse
 import json

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/testing/claude_dir_validator.py

@@ -23,6 +23,7 @@ Usage:
 
 Exit codes: 0 = all checks pass, 1 = at least one check failed
 """
+from __future__ import annotations
 
 import argparse
 import ast

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/translation/feature_map.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D -- Authorized DoD Personnel Only

{icdev-1.2.9 → icdev-1.2.11}/icdev/tools/translation/source_extractor.py

@@ -1,5 +1,7 @@
 #!/usr/bin/env python3
 # CUI // SP-CTI
+from __future__ import annotations
+
 # Controlled by: Department of Defense
 # CUI Category: CTI
 # Distribution: D -- Authorized DoD Personnel Only

{icdev-1.2.9 → icdev-1.2.11}/icdev.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: icdev
-Version: 1.2.9
+Version: 1.2.11
 Summary: ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow.
 Author: Sovanna Chuon
 License-Expression: Apache-2.0

{icdev-1.2.9 → icdev-1.2.11}/icdev.egg-info/SOURCES.txt

@@ -40,6 +40,7 @@ icdev/agents/1af97d0e/icdev_state.json
 icdev/agents/1e25ab93/icdev_state.json
 icdev/agents/1ee35f41/icdev_state.json
 icdev/agents/1f1f9426/icdev_state.json
+icdev/agents/1f2c64f3/icdev_state.json
 icdev/agents/1f803036/icdev_state.json
 icdev/agents/208f0f7f/icdev_state.json
 icdev/agents/21e8e411/icdev_state.json
@@ -1400,6 +1401,7 @@ tests/test_finetune_gpu_detector.py
 tests/test_finetune_provider.py
 tests/test_finetune_router_integration.py
 tests/test_finetune_training_engine.py
+tests/test_forge_anvil_rename.py
 tests/test_gao_ai_assessor.py
 tests/test_gateway.py
 tests/test_genai_attributes.py

{icdev-1.2.9 → icdev-1.2.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "icdev"
-version = "1.2.9"
+version = "1.2.11"
 description = "ICDEV™ — Intelligent Certified Development Platform. AI-powered SDLC with NIST 800-53 RMF compliance, multi-agent orchestration, FORGE framework, and ANVIL build workflow."
 readme = "README.md"
 requires-python = ">=3.9"

icdev-1.2.11/tests/test_forge_anvil_rename.py

@@ -0,0 +1,297 @@
+#!/usr/bin/env python3
+# CUI // SP-CTI
+"""Tests for FORGE framework / ANVIL workflow rename (feat/forge-anvil-rename).
+
+Validates:
+  1. forge_validator.py uses ANVIL (not ATLAS) terminology internally
+  2. FORGE check IDs and layer names are consistent
+  3. build_app.md detection checks for ANVIL keyword (not ATLAS)
+  4. CHECK_REGISTRY key for the ANVIL workflow check uses 'anvil' (not 'atlas')
+  5. GotchaCheck / GotchaReport dataclasses reference FORGE naming
+  6. validate() returns correct structure under various project layouts
+  7. Command markdown files use ANVIL workflow terminology
+  8. forge_validator CLI produces JSON with expected keys
+
+20 tests total.
+"""
+
+import json
+import sys
+from pathlib import Path
+import pytest
+
+BASE_DIR = Path(__file__).resolve().parent.parent
+if str(BASE_DIR) not in sys.path:
+    sys.path.insert(0, str(BASE_DIR))
+
+from tools.builder.forge_validator import (
+    CHECK_REGISTRY,
+    GotchaCheck,
+    GotchaReport,
+    _check_atlas,
+    validate,
+)
+
+
+# ============================================================
+# Fixtures
+# ============================================================
+
+
+@pytest.fixture
+def minimal_project(tmp_path):
+    """Create a minimal valid FORGE project layout."""
+    goals = tmp_path / "goals"
+    goals.mkdir()
+    (goals / "manifest.md").write_text("# Goals Manifest\n", encoding="utf-8")
+    (goals / "build_app.md").write_text(
+        "# Build App\n\nFollows the ANVIL workflow: Architect → Navigate → Verify → Integrate → Launch.\n",
+        encoding="utf-8",
+    )
+    (tmp_path / "tools").mkdir()
+    (tmp_path / "args").mkdir()
+    (tmp_path / "context").mkdir()
+    (tmp_path / "hardprompts").mkdir()
+    (tmp_path / "CLAUDE.md").write_text(
+        "# CLAUDE.md\n\n## Architecture: FORGE Framework\n\nMeta-builder using FORGE + ANVIL workflow.\n",
+        encoding="utf-8",
+    )
+    return tmp_path
+
+
+@pytest.fixture
+def project_with_atlas_build_app(tmp_path):
+    """Project whose build_app.md uses old ATLAS terminology (should NOT satisfy ANVIL check)."""
+    goals = tmp_path / "goals"
+    goals.mkdir()
+    (goals / "build_app.md").write_text(
+        "# Build App\n\nFollows the ATLAS workflow: Architect → Trace → Link → Assemble → Stress-test.\n",
+        encoding="utf-8",
+    )
+    return tmp_path
+
+
+@pytest.fixture
+def project_without_build_app(tmp_path):
+    """Project with no goals/build_app.md."""
+    goals = tmp_path / "goals"
+    goals.mkdir()
+    (goals / "tdd_workflow.md").write_text(
+        "# TDD Workflow\n\nRED → GREEN → REFACTOR.\n",
+        encoding="utf-8",
+    )
+    return tmp_path
+
+
+# ============================================================
+# Test: Module-Level Naming Consistency
+# ============================================================
+
+
+class TestNamingConsistency:
+    def test_check_registry_has_anvil_key(self):
+        """CHECK_REGISTRY must expose 'anvil' key for the ANVIL workflow check.
+
+        This is a regression guard: the pre-rename code used 'atlas' as the key.
+        After the forge-anvil rename, the key must be 'anvil'.
+        """
+        assert "anvil" in CHECK_REGISTRY, (
+            "CHECK_REGISTRY must use 'anvil' key (not 'atlas') after forge-anvil rename"
+        )
+
+    def test_check_registry_no_legacy_atlas_workflow_key(self):
+        """CHECK_REGISTRY must NOT have an 'atlas' key pointing to the ANVIL workflow check.
+
+        'atlas' is reserved for MITRE ATLAS security framework checks only.
+        The ANVIL workflow check key was renamed from 'atlas' to 'anvil'.
+        """
+        if "atlas" in CHECK_REGISTRY:
+            # If 'atlas' remains, it must be a different function (MITRE ATLAS security)
+            # not the ANVIL workflow check function
+            assert CHECK_REGISTRY["atlas"] is not _check_atlas, (
+                "CHECK_REGISTRY['atlas'] still points to _check_atlas (ANVIL workflow check). "
+                "This key should be 'anvil' after the forge-anvil rename."
+            )
+
+    def test_gotcha_check_class_exists(self):
+        """GotchaCheck dataclass is importable and has required fields."""
+        import dataclasses
+        fields = {f.name for f in dataclasses.fields(GotchaCheck)}
+        required = {"check_id", "check_name", "layer", "status", "expected", "actual", "message"}
+        assert required.issubset(fields), f"GotchaCheck missing fields: {required - fields}"
+
+    def test_gotcha_report_class_exists(self):
+        """GotchaReport dataclass is importable and has required fields."""
+        import dataclasses
+        fields = {f.name for f in dataclasses.fields(GotchaReport)}
+        required = {"overall_pass", "timestamp", "project_dir", "total_checks",
+                    "passed_checks", "failed_checks", "score", "checks"}
+        assert required.issubset(fields), f"GotchaReport missing fields: {required - fields}"
+
+
+# ============================================================
+# Test: _check_atlas (ANVIL workflow detector)
+# ============================================================
+
+
+class TestCheckAtlasFunction:
+    """Tests for _check_atlas() which detects the ANVIL workflow in build_app.md.
+
+    Note: Despite its internal name '_check_atlas' (historical), this function
+    validates the ANVIL workflow presence after the forge-anvil rename.
+    The check_name field inside the returned GotchaCheck must say 'ANVIL'.
+    """
+
+    def test_anvil_build_app_returns_pass(self, minimal_project):
+        """build_app.md with 'ANVIL' keyword yields pass status."""
+        results = _check_atlas(minimal_project)
+        assert len(results) == 1
+        check = results[0]
+        assert check.status == "pass", (
+            f"Expected pass when build_app.md contains ANVIL, got: {check.status}. "
+            f"Message: {check.message}"
+        )
+
+    def test_anvil_check_id_is_forge_10(self, minimal_project):
+        """ANVIL workflow check uses FORGE-10 check ID."""
+        results = _check_atlas(minimal_project)
+        assert results[0].check_id == "FORGE-10"
+
+    def test_anvil_check_name_references_anvil(self, minimal_project):
+        """GotchaCheck.check_name must reference 'ANVIL' (not 'ATLAS workflow')."""
+        results = _check_atlas(minimal_project)
+        check = results[0]
+        assert "ANVIL" in check.check_name, (
+            f"check_name must contain 'ANVIL' after rename, got: '{check.check_name}'"
+        )
+
+    def test_atlas_only_build_app_does_not_pass(self, project_with_atlas_build_app):
+        """build_app.md with only old 'ATLAS' keyword does NOT yield pass status.
+
+        After the rename, the validator should check for 'ANVIL' keyword presence,
+        not 'ATLAS'. A file with only ATLAS should be warn (not pass).
+        """
+        results = _check_atlas(project_with_atlas_build_app)
+        assert len(results) == 1
+        check = results[0]
+        assert check.status != "pass", (
+            "A build_app.md using only old 'ATLAS' terminology should not yield 'pass' "
+            "— the validator must check for 'ANVIL', not 'ATLAS'."
+        )
+
+    def test_missing_build_app_returns_warn(self, project_without_build_app):
+        """Missing goals/build_app.md returns warn status."""
+        results = _check_atlas(project_without_build_app)
+        assert len(results) == 1
+        assert results[0].status == "warn"
+        assert results[0].check_id == "FORGE-10"
+
+    def test_forge_10_layer_is_meta(self, minimal_project):
+        """FORGE-10 check belongs to 'meta' layer."""
+        results = _check_atlas(minimal_project)
+        assert results[0].layer == "meta"
+
+    def test_check_message_references_anvil(self, minimal_project):
+        """Check message references ANVIL workflow name."""
+        results = _check_atlas(minimal_project)
+        check = results[0]
+        assert "ANVIL" in check.message, (
+            f"Message should reference 'ANVIL' after rename, got: '{check.message}'"
+        )
+
+
+# ============================================================
+# Test: validate() function
+# ============================================================
+
+
+class TestValidateFunction:
+    def test_validate_returns_gotcha_report(self, minimal_project):
+        """validate() returns a GotchaReport instance."""
+        report = validate(minimal_project, checks=["goals"])
+        assert isinstance(report, GotchaReport)
+
+    def test_validate_json_serializable(self, minimal_project):
+        """GotchaReport.to_dict() produces JSON-serializable output."""
+        report = validate(minimal_project, checks=["goals"])
+        data = report.to_dict()
+        serialized = json.dumps(data)
+        parsed = json.loads(serialized)
+        assert "overall_pass" in parsed
+        assert "checks" in parsed
+        assert "score" in parsed
+
+    def test_validate_all_checks_no_error(self, minimal_project):
+        """Running all checks on a minimal project does not raise."""
+        report = validate(minimal_project)
+        assert isinstance(report, GotchaReport)
+        # Should not have ERR checks
+        err_checks = [c for c in report.checks if "ERR" in c.check_id]
+        assert len(err_checks) == 0, f"Unexpected error checks: {err_checks}"
+
+    def test_validate_score_range(self, minimal_project):
+        """Score is between 0.0 and 1.0."""
+        report = validate(minimal_project)
+        assert 0.0 <= report.score <= 1.0
+
+    def test_validate_passes_failed_count(self, minimal_project):
+        """passed_checks + failed_checks + warned_checks == total_checks."""
+        report = validate(minimal_project)
+        assert report.passed_checks + report.failed_checks + report.warned_checks == report.total_checks
+
+    def test_validate_layer_summary_keys(self, minimal_project):
+        """layer_summary contains at least 'goals' and 'meta' keys when running all checks."""
+        report = validate(minimal_project)
+        assert "goals" in report.layer_summary
+        assert "meta" in report.layer_summary
+
+    def test_validate_specific_check_anvil(self, minimal_project):
+        """Running check 'anvil' specifically returns FORGE-10 result."""
+        # This test also validates CHECK_REGISTRY has 'anvil' key
+        if "anvil" not in CHECK_REGISTRY:
+            pytest.skip("'anvil' not in CHECK_REGISTRY — rename not yet applied")
+        report = validate(minimal_project, checks=["anvil"])
+        forge_10 = [c for c in report.checks if c.check_id == "FORGE-10"]
+        assert len(forge_10) == 1
+        assert forge_10[0].status == "pass"
+
+
+# ============================================================
+# Test: Command Files Use ANVIL Workflow Terminology
+# ============================================================
+
+
+COMMAND_FILES_TO_CHECK = [
+    ".claude/commands/feature.md",
+    ".claude/commands/bug.md",
+    ".claude/commands/chore.md",
+]
+
+
+class TestCommandFileNaming:
+    """Validate that command markdown files use ANVIL workflow, not ATLAS workflow."""
+
+    @pytest.mark.parametrize("rel_path", COMMAND_FILES_TO_CHECK)
+    def test_command_uses_anvil_workflow(self, rel_path):
+        """Command file must reference 'ANVIL workflow', not 'ATLAS workflow'."""
+        cmd_file = BASE_DIR / rel_path
+        if not cmd_file.exists():
+            pytest.skip(f"{rel_path} not found in this environment")
+        content = cmd_file.read_text(encoding="utf-8")
+        assert "ANVIL workflow" in content, (
+            f"{rel_path} must contain 'ANVIL workflow' after forge-anvil rename"
+        )
+
+    @pytest.mark.parametrize("rel_path", COMMAND_FILES_TO_CHECK)
+    def test_command_does_not_use_atlas_workflow(self, rel_path):
+        """Command file must NOT reference 'ATLAS workflow' (old terminology)."""
+        cmd_file = BASE_DIR / rel_path
+        if not cmd_file.exists():
+            pytest.skip(f"{rel_path} not found in this environment")
+        content = cmd_file.read_text(encoding="utf-8")
+        # "ATLAS workflow" as a workflow name is the old term
+        # Note: MITRE ATLAS (security framework) references are still valid
+        assert "ATLAS workflow" not in content, (
+            f"{rel_path} still contains old 'ATLAS workflow' terminology. "
+            "Update to 'ANVIL workflow' after forge-anvil rename."
+        )