platformforge 0.1.0__py3-none-any.whl

platformforge/data/contracts/install-receipt-v1.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/install-receipt/v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "distribution_id",
+    "platformforge_version",
+    "target",
+    "profile",
+    "hosts",
+    "files"
+  ],
+  "properties": {
+    "schema": {
+      "const": "platformforge/install-receipt/v1"
+    },
+    "distribution_id": {
+      "type": "string",
+      "pattern": "^sha256:"
+    },
+    "platformforge_version": {
+      "type": "string"
+    },
+    "source_sha": {
+      "type": "string"
+    },
+    "target": {
+      "type": "string"
+    },
+    "profile": {
+      "type": "string"
+    },
+    "hosts": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "files": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "string",
+        "pattern": "^[0-9a-f]{64}$"
+      }
+    }
+  },
+  "additionalProperties": false
+}

platformforge/data/contracts/observation.schema.json

@@ -0,0 +1,93 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/observation/v1",
+  "title": "PlatformForge Observation Envelope",
+  "type": "object",
+  "required": ["schema", "observation_id", "collector", "collector_version",
+               "provider", "source_type", "captured_at", "scope",
+               "coverage", "objects"],
+  "properties": {
+    "schema": {"const": "platformforge/observation/v1"},
+    "observation_id": {"type": "string", "pattern": "^obs-[0-9a-f]{16}$"},
+    "collector": {"type": "string", "minLength": 1},
+    "collector_version": {"type": "string", "minLength": 1},
+    "provider": {"type": "string", "minLength": 1},
+    "source_type": {"enum": ["observed", "runtime"]},
+    "captured_at": {"type": "string", "minLength": 1},
+    "completed_at": {"type": "string"},
+    "fresh_until": {"type": "string"},
+    "scope": {
+      "type": "object",
+      "properties": {
+        "provider": {"type": "string"},
+        "accounts": {"type": "array", "items": {"type": "string"}},
+        "regions": {"type": "array", "items": {"type": "string"}},
+        "services": {"type": "array", "items": {"type": "string"}},
+        "resource_types": {"type": "array", "items": {"type": "string"}},
+        "namespaces": {"type": "array", "items": {"type": "string"}},
+        "clusters": {"type": "array", "items": {"type": "string"}},
+        "selectors": {"type": "object"},
+        "exclusions": {"type": "array", "items": {"type": "string"}}
+      },
+      "additionalProperties": true
+    },
+    "coverage": {
+      "type": "object",
+      "required": ["status"],
+      "properties": {
+        "status": {"enum": ["complete", "partial", "sampled", "truncated",
+                            "permission-limited", "unsupported", "unknown"]},
+        "per_resource_type": {"type": "object"},
+        "reasons": {"type": "array", "items": {"type": "string"}}
+      }
+    },
+    "pagination": {
+      "type": "object",
+      "properties": {
+        "pages": {"type": "integer"},
+        "cursors": {"type": "array"},
+        "resource_versions": {"type": "array"},
+        "truncated": {"type": "boolean"},
+        "remaining_item_count": {"type": ["integer", "null"]}
+      },
+      "additionalProperties": true
+    },
+    "permissions": {
+      "type": "object",
+      "properties": {
+        "denied": {"type": "array"}
+      },
+      "additionalProperties": true
+    },
+    "errors": {"type": "array", "items": {"type": "string"}},
+    "objects": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["resource_id", "resource_type"],
+        "properties": {
+          "resource_id": {"type": "string", "minLength": 1},
+          "resource_type": {"type": "string", "minLength": 1},
+          "provider": {"type": "string"},
+          "account": {"type": "string"},
+          "region": {"type": "string"},
+          "cluster": {"type": "string"},
+          "namespace": {"type": "string"},
+          "name": {"type": "string"},
+          "uid": {"type": "string"},
+          "lifecycle": {"enum": ["present", "deleting", "deleted", "unknown"]},
+          "deletion_evidence": {"type": "string"},
+          "attributes": {"type": "object"},
+          "content_hash": {"type": "string"},
+          "observed_at": {"type": "string"},
+          "artifact": {"type": "string"}
+        },
+        "additionalProperties": true
+      }
+    },
+    "bytes": {"type": "integer"},
+    "hashes": {"type": "object"},
+    "receipt": {"type": "object"}
+  },
+  "additionalProperties": true
+}

platformforge/data/contracts/receipt.schema.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/receipt/v1",
+  "title": "PlatformForge operation receipt",
+  "type": "object",
+  "required": ["operation", "inputs", "hashes", "started_at", "ended_at"],
+  "properties": {
+    "operation": {"type": "string"},
+    "inputs": {"type": "array"},
+    "hashes": {"type": "object", "additionalProperties": {"type": "string"}},
+    "tools": {"type": "array", "items": {"type": "string"}},
+    "versions": {"type": "object"},
+    "facts": {"type": "array", "items": {"type": "string"}},
+    "findings": {"type": "array", "items": {"type": "string"}},
+    "graph": {"type": ["string", "null"]},
+    "started_at": {"type": "string"},
+    "ended_at": {"type": "string"},
+    "extra": {"type": "object"}
+  },
+  "additionalProperties": false
+}

platformforge/data/contracts/recommendation.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/recommendation/v1",
+  "title": "PlatformForge Recommendation",
+  "type": "object",
+  "required": ["title", "severity", "confidence", "evidence", "proposed_change", "risks", "validation", "rollback", "basis"],
+  "properties": {
+    "title": {"type": "string", "minLength": 1},
+    "severity": {"type": "string", "enum": ["info", "low", "medium", "high", "critical"]},
+    "confidence": {"type": "string", "enum": ["high", "medium", "low"]},
+    "evidence": {"type": "array", "items": {"type": "string"}, "minItems": 1},
+    "root_cause": {"type": ["string", "null"]},
+    "proposed_change": {"type": "array", "items": {"type": "string"}},
+    "expected_effect": {"type": ["string", "null"], "description": "No quantified gain without benchmark_ref."},
+    "benchmark_ref": {"type": ["string", "null"]},
+    "risks": {"type": "array", "items": {"type": "string"}},
+    "tradeoffs": {"type": "array", "items": {"type": "string"}},
+    "validation": {"type": "array", "items": {"type": "string"}},
+    "rollback": {"type": "array", "items": {"type": "string"}},
+    "basis": {
+      "type": "object",
+      "required": ["observed", "declared", "inferred", "unknown"],
+      "properties": {
+        "observed": {"type": "array", "items": {"type": "string"}},
+        "declared": {"type": "array", "items": {"type": "string"}},
+        "inferred": {"type": "array", "items": {"type": "string"}},
+        "unknown": {"type": "array", "items": {"type": "string"}}
+      }
+    }
+  },
+  "additionalProperties": false
+}

platformforge/data/contracts/refusal.schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/refusal/v1",
+  "title": "PlatformForge Refusal — named unresolved, never a guess",
+  "type": "object",
+  "required": ["refusal_id", "code", "field", "unlock"],
+  "properties": {
+    "refusal_id": {"type": "string"},
+    "code": {"type": "string", "pattern": "^platform\\.[a-z_]+\\.unresolved$|^PF-[A-Z]+-[0-9]+$"},
+    "field": {"type": "string", "minLength": 1},
+    "message": {"type": "string"},
+    "unlock": {"type": "string", "minLength": 1},
+    "missing_evidence": {"type": "array", "items": {"type": "string"}}
+  },
+  "additionalProperties": false
+}

platformforge/data/contracts/slo-contract.schema.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/slo-contract/v1",
+  "title": "Declared SLO contract",
+  "type": "object",
+  "required": ["service", "sli", "target", "window"],
+  "properties": {
+    "service": {"type": "string", "minLength": 1},
+    "sli": {"type": "string", "minLength": 1},
+    "target": {"type": "number", "exclusiveMinimum": 0, "maximum": 100},
+    "window": {"type": "string", "pattern": "^[0-9]+[dhm]$"},
+    "burn_rate_alerts": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["window", "burn_rate"],
+        "properties": {
+          "window": {"type": "string"},
+          "burn_rate": {"type": "number", "exclusiveMinimum": 0}
+        }
+      }
+    }
+  },
+  "additionalProperties": false
+}

platformforge/data/contracts/task-spec.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/task-spec/v1",
+  "title": "PlatformForge TaskSpec — sealed task for orchestration",
+  "type": "object",
+  "required": ["schema", "task_id", "intent", "state"],
+  "properties": {
+    "schema": {"const": "platformforge/task-spec/v1"},
+    "task_id": {"type": "string", "minLength": 1},
+    "intent": {"type": "string", "minLength": 1},
+    "scope": {"type": "string", "enum": ["repo", "fleet", "runtime",
+              "change"]},
+    "domains": {"type": "array", "items": {"type": "string"}},
+    "risk": {"type": "string", "enum": ["low", "medium", "high",
+             "critical"]},
+    "complexity": {"type": "string", "enum": ["low", "medium", "high"]},
+    "evidence_requirements": {"type": "array", "items": {"type": "string"}},
+    "acceptance_criteria": {"type": "array", "items": {"type": "string"}},
+    "autonomy": {"type": "string", "enum": ["read-only", "propose",
+                 "simulate"]},
+    "allowed_capabilities": {"type": "array", "items": {"type": "string"}},
+    "forbidden_capabilities": {"type": "array",
+                               "items": {"type": "string"}},
+    "rollback_requirement": {"type": "string", "enum": ["none",
+                             "declared", "material-bound"]},
+    "verification_requirement": {"type": "string"},
+    "budget": {"type": "string", "enum": ["tiny", "small", "standard",
+               "deep", "critical"]},
+    "state": {"type": "string", "enum": ["draft", "reviewed", "sealed",
+              "rejected", "expired"]},
+    "reviewer": {"type": "string"},
+    "review_notes": {"type": "array", "items": {"type": "string"}},
+    "created_at": {"type": "string"},
+    "spec_hash": {"type": "string"}
+  },
+  "additionalProperties": false
+}

platformforge/data/contracts/workspace-manifest-v1.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "platformforge/workspace-manifest/v1",
+  "type": "object",
+  "required": [
+    "schema",
+    "root",
+    "profile",
+    "hosts",
+    "repos",
+    "state_mode",
+    "installed_version"
+  ],
+  "properties": {
+    "schema": {
+      "const": "platformforge/workspace-manifest/v1"
+    },
+    "root": {
+      "type": "string"
+    },
+    "profile": {
+      "type": "string"
+    },
+    "hosts": {
+      "type": "array",
+      "items": {
+        "enum": [
+          "agents",
+          "claude",
+          "codex",
+          "devin"
+        ]
+      }
+    },
+    "state_mode": {
+      "const": "workspace-local"
+    },
+    "installed_version": {
+      "type": "string"
+    },
+    "repos": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "name",
+          "path"
+        ],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "path": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}

platformforge/data/evals/cases/agent-budget-exhaustion/case.yaml

@@ -0,0 +1,6 @@
+id: agent-budget-exhaustion
+type: agent
+check: budget_exhaustion
+expect:
+  budget_class: tiny
+  refusal: PF-AGENT-BUDGET-EXHAUSTED

platformforge/data/evals/cases/agent-conflicting-specialists/case.yaml

@@ -0,0 +1,11 @@
+id: agent-conflicting-specialists
+type: agent
+check: route
+signal:
+  task_type: analysis
+  domains: [k8s, sre]
+  conflict: true
+expect:
+  mode: debate
+  reviewers_include: [platform-debate-referee]
+  verifier_required: true

platformforge/data/evals/cases/agent-fleet-optimization/case.yaml

@@ -0,0 +1,13 @@
+id: agent-fleet-optimization
+type: agent
+check: route
+signal:
+  task_type: analysis
+  domains: [fleet, finops]
+  optimization: true
+  fleet_scope: true
+expect:
+  mode: critical-review
+  reviewers_include: [platform-operations-safety-reviewer,
+                      platform-security-reviewer]
+  verifier_required: true

platformforge/data/evals/cases/agent-host-no-subagents/case.yaml

@@ -0,0 +1,6 @@
+id: agent-host-no-subagents
+type: agent
+check: playbook_equivalence
+expect:
+  agent: platform-incident-coordinator
+  required_sections: [required_evidence, verifier, never, outputs]

platformforge/data/evals/cases/agent-incident-multi/case.yaml

@@ -0,0 +1,13 @@
+id: agent-incident-multi-specialist
+type: agent
+check: route
+signal:
+  task_type: incident
+  domains: [k8s, sre]
+  incident_status: active
+  risk: high
+expect:
+  mode: coordinated
+  coordinator: platform-incident-coordinator
+  includes: [platform-kubernetes-specialist, platform-sre-specialist]
+  verifier_required: true

platformforge/data/evals/cases/agent-missing-evidence/case.yaml

@@ -0,0 +1,6 @@
+id: agent-missing-evidence
+type: agent
+check: finding_no_evidence
+expect:
+  status: confirmed
+  demoted_to: unsupported

platformforge/data/evals/cases/agent-multi-domain-audit/case.yaml

@@ -0,0 +1,14 @@
+id: agent-multi-domain-platform-audit
+type: agent
+check: route
+signal:
+  task_type: analysis
+  domains: [iac, k8s, aws, security]
+  complexity: high
+  risk: medium
+expect:
+  mode: coordinated
+  coordinator: platform-orchestrator
+  includes: [platform-iac-specialist, platform-kubernetes-specialist,
+             platform-aws-specialist, platform-security-specialist]
+  verifier_required: true

platformforge/data/evals/cases/agent-production-change/case.yaml

@@ -0,0 +1,15 @@
+id: agent-production-change
+type: agent
+check: route
+signal:
+  task_type: change
+  domains: [iac]
+  production: true
+  mutability: mutate
+  risk: high
+expect:
+  mode: critical-review
+  coordinator: platform-change-coordinator
+  reviewers_include: [platform-operations-safety-reviewer,
+                      platform-security-reviewer]
+  verifier_required: true

platformforge/data/evals/cases/agent-security-mandatory/case.yaml

@@ -0,0 +1,12 @@
+id: agent-security-review-mandatory
+type: agent
+check: route
+signal:
+  task_type: review
+  domains: [aws]
+  security_sensitive: true
+  risk: high
+expect:
+  reviewers_include: [platform-security-reviewer,
+                      platform-evidence-reviewer]
+  verifier_required: true

platformforge/data/evals/cases/agent-simple-iac/case.yaml

@@ -0,0 +1,14 @@
+id: agent-simple-iac-single-specialist
+type: agent
+check: route
+signal:
+  task_type: analysis
+  domains: [iac]
+  complexity: low
+  risk: low
+expect:
+  mode: single-specialist
+  not_mode: [coordinated, debate]
+  includes: [platform-iac-specialist]
+  max_agents: 4
+  verifier_required: true

platformforge/data/evals/cases/approval-integrity-seal/case.yaml

@@ -0,0 +1,6 @@
+id: approval-integrity-seal
+type: live
+domain: ops-rollback
+expect:
+  check: ops-invariant
+  probe: approval-seal-tamper

platformforge/data/evals/cases/capacity-hot/case.yaml

@@ -0,0 +1,7 @@
+id: capacity-hot
+type: golden
+variant: positive
+domain: capacity
+fixture: fixture
+expect:
+  rules_fired: [PF-SRE-001, PF-SRE-002]

platformforge/data/evals/cases/capacity-hot/fixture/capacity.json

@@ -0,0 +1,5 @@
+{"items": [
+  {"resource": "node-pool/cpu", "used": 96.5, "limit": 100, "unit": "%"},
+  {"resource": "node-pool/mem", "used": 88.0, "limit": 100, "unit": "%"},
+  {"resource": "db/connections", "used": 40, "limit": 100, "unit": "%"}
+]}

platformforge/data/evals/cases/catalog-noowner/case.yaml

@@ -0,0 +1,7 @@
+id: catalog-noowner
+type: golden
+variant: positive
+domain: catalog
+fixture: fixture
+expect:
+  rules_fired: [PF-CAT-001, PF-CAT-002]

platformforge/data/evals/cases/catalog-noowner/fixture/catalog-info.yaml

@@ -0,0 +1,6 @@
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: orphan-svc
+spec:
+  type: service

platformforge/data/evals/cases/contract-fact/case.yaml

@@ -0,0 +1,5 @@
+id: contract-fact
+type: contract
+fixture: fixture/doc.json
+expect:
+  schema: fact.schema.json

platformforge/data/evals/cases/contract-fact/fixture/doc.json

@@ -0,0 +1,2 @@
+{"fact_id": "PF-TST-001", "kind": "test.thing", "source": "fixture",
+ "location": "evals", "tier": 3, "observed": true, "attrs": {}}

platformforge/data/evals/cases/cosign-unverified/case.yaml

@@ -0,0 +1,8 @@
+id: cosign-unverified
+type: golden
+variant: positive
+case_of: PF-SEC-042
+domain: cosign
+fixture: fixture
+expect:
+  rules_fired: [PF-SEC-042]

platformforge/data/evals/cases/cosign-unverified/fixture/sig.json

@@ -0,0 +1,33 @@
+{
+ "mediaType": "application/vnd.dev.sigstore.bundle+json;version=0.3",
+ "verificationMaterial": {
+  "certificate": {
+   "rawBytes": "MIIC..."
+  },
+  "timestampVerificationData": {}
+ },
+ "dsseEnvelope": {
+  "payloadType": "application/vnd.in-toto+json",
+  "payload": "eyJ...",
+  "signatures": [
+   {
+    "keyid": "",
+    "sig": "MEUC..."
+   }
+  ]
+ },
+ "subject": [
+  {
+   "name": "registry/app",
+   "digest": {
+    "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+   }
+  }
+ ],
+ "signatures": [
+  {
+   "keyid": "",
+   "sig": "MEUC..."
+  }
+ ]
+}

platformforge/data/evals/cases/expected-delta-refusal/case.yaml

@@ -0,0 +1,6 @@
+id: expected-delta-refusal
+type: live
+domain: ops-rollback
+expect:
+  check: ops-invariant
+  probe: no-delta

platformforge/data/evals/cases/finops-noattr/case.yaml

@@ -0,0 +1,9 @@
+id: finops-noattr
+type: golden
+variant: positive
+case_of: PF-FIN-002
+domain: finops
+fixture: fixture
+expect:
+  rules_fired: [PF-FIN-002]
+  rules_not_fired: [PF-FIN-001]

platformforge/data/evals/cases/finops-noattr/fixture/costs.json

@@ -0,0 +1,7 @@
+{"rows": [
+  {"resource": "i-0123abc", "amount": 42.50, "currency": "USD",
+   "period": "2025-01", "tags": {"cost_center": "eng"}},
+  {"resource": "i-0456def", "amount": 10.00, "currency": "USD",
+   "period": "2025-01", "service": "payments",
+   "tags": {"cost_center": "eng"}}
+]}

platformforge/data/evals/cases/fleet-inv-absent-allocation-unknown/case.yaml

@@ -0,0 +1,7 @@
+id: fleet-inv-absent-allocation-unknown
+type: live
+variant: boundary
+domain: fleet
+expect:
+  check: fleet-invariant
+  probe: absent-allocation-unknown

platformforge/data/evals/cases/fleet-inv-centrality-not-criticality/case.yaml

@@ -0,0 +1,7 @@
+id: fleet-inv-centrality-not-criticality
+type: live
+variant: boundary
+domain: fleet
+expect:
+  check: fleet-invariant
+  probe: centrality-not-criticality

platformforge/data/evals/cases/fleet-inv-correlation-not-causality/case.yaml

@@ -0,0 +1,7 @@
+id: fleet-inv-correlation-not-causality
+type: live
+variant: boundary
+domain: fleet
+expect:
+  check: fleet-invariant
+  probe: correlation-not-causality

platformforge/data/evals/cases/fleet-inv-dx-no-person-metrics/case.yaml

@@ -0,0 +1,7 @@
+id: fleet-inv-dx-no-person-metrics
+type: live
+variant: boundary
+domain: fleet
+expect:
+  check: fleet-invariant
+  probe: dx-no-person-metrics

platformforge/data/evals/cases/fleet-inv-federation-restricted-denied/case.yaml

@@ -0,0 +1,7 @@
+id: fleet-inv-federation-restricted-denied
+type: live
+variant: boundary
+domain: fleet
+expect:
+  check: fleet-invariant
+  probe: federation-restricted-denied

platformforge/data/evals/cases/fleet-inv-federation-secret-denied/case.yaml

@@ -0,0 +1,7 @@
+id: fleet-inv-federation-secret-denied
+type: live
+variant: boundary
+domain: fleet
+expect:
+  check: fleet-invariant
+  probe: federation-secret-denied