ssot-cli 0.1.8__tar.gz → 0.1.9.dev3__tar.gz

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssot-cli
-Version: 0.1.8
+Version: 0.1.9.dev3
 Summary: Primary CLI distribution for ssot-registry.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License-Expression: Apache-2.0
@@ -24,8 +24,9 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Classifier: Topic :: Utilities
 Requires-Python: <3.14,>=3.10
 Description-Content-Type: text/markdown
-Requires-Dist: ssot-contracts<0.3.0,>=0.2.13
-Requires-Dist: ssot-core<0.3.0,>=0.2.13
+Requires-Dist: ssot-contracts<0.3.0,>=0.2.15.dev1
+Requires-Dist: ssot-core<0.3.0,>=0.2.15.dev1
+Requires-Dist: ssot-conformance<0.3.0,>=0.2.15.dev1
 Requires-Dist: tomli>=2.0.1; python_version < "3.11"
 
 <div align="center">
@@ -42,7 +43,7 @@ Requires-Dist: tomli>=2.0.1; python_version < "3.11"
 
 `ssot-cli` is the primary command-line distribution for SSOT.
 
-It installs `ssot`, `ssot-cli`, and `ssot-registry` as equivalent executables over the same parser and runtime. The command surface is implemented here, while domain logic lives in [ssot-core](https://pypi.org/project/ssot-core/) and shared contract metadata comes from [ssot-contracts](https://pypi.org/project/ssot-contracts/).
+It installs `ssot`, `ssot-cli`, and `ssot-registry` as equivalent executables over the same parser and runtime. The command surface is implemented here, while domain logic lives in [ssot-core](https://pypi.org/project/ssot-core/), reusable conformance checks come from [ssot-conformance](https://pypi.org/project/ssot-conformance/), and shared contract metadata comes from [ssot-contracts](https://pypi.org/project/ssot-contracts/).
 
 - GitHub: https://github.com/groupsum/ssot-registry
 
@@ -64,7 +65,7 @@ For local development:
 python -m pip install -e pkgs/ssot-cli
 ```
 
-This package depends on [ssot-core](https://pypi.org/project/ssot-core/) and [ssot-contracts](https://pypi.org/project/ssot-contracts/), so installing it gives you the full CLI runtime stack.
+This package depends on [ssot-core](https://pypi.org/project/ssot-core/), [ssot-conformance](https://pypi.org/project/ssot-conformance/), and [ssot-contracts](https://pypi.org/project/ssot-contracts/), so installing it gives you the full CLI runtime stack.
 
 ## Executable names
 
@@ -141,6 +142,21 @@ Boundary command help:
 
 - Non-zero exit code indicates an operation failure or failed checks.
 
+## Registry-driven test execution
+
+Tests are the executable SSOT entities. Specs and boundaries resolve to tests through registry links, and runnable tests carry an `execution` object that stores the command, cwd, environment, timeout, and success rule.
+
+Examples:
+
+```bash
+ssot test run . --id tst:pytest.conformance.registry-contract
+ssot spec run-tests . --id spc:0525
+ssot boundary run-tests . --id bnd:full-cert
+ssot conformance run . --profiles registry
+```
+
+`ssot conformance run` remains a compatibility wrapper for packaged conformance families. The primary operator story is now registry-driven execution through `test`, `spec`, and `boundary`.
+
 ## Command surface
 
 ### Top-level commands
@@ -313,6 +329,7 @@ ssot-registry feature create [path]
   --replacement-feature-id [REPLACEMENT_FEATURE_ID ...]
   --note NOTE
   --horizon {backlog,current,explicit,future,next,out_of_bounds}
+  --out-of-bounds-disposition {prohibited,tolerated}
   --claim-tier {T0,T1,T2,T3,T4}
   --target-lifecycle-stage {active,deprecated,obsolete,removed}
   --slot SLOT
@@ -349,6 +366,7 @@ ssot-registry feature unlink [path]
 ssot-registry feature plan [path]
   --ids IDS [IDS ...] (required)
   --horizon {backlog,current,explicit,future,next,out_of_bounds} (required)
+  --out-of-bounds-disposition {prohibited,tolerated}
   --claim-tier {T0,T1,T2,T3,T4}
   --target-lifecycle-stage {active,deprecated,obsolete,removed}
   --slot SLOT
@@ -846,7 +864,7 @@ ssot release certify . --release-id rel:0.1.0 --write-report
 ## Package relationships
 
 - Package type: CLI distribution
-- Depends on: [ssot-core](https://pypi.org/project/ssot-core/), [ssot-contracts](https://pypi.org/project/ssot-contracts/)
+- Depends on: [ssot-core](https://pypi.org/project/ssot-core/), [ssot-conformance](https://pypi.org/project/ssot-conformance/), [ssot-contracts](https://pypi.org/project/ssot-contracts/)
 - Related packages: [ssot-registry](https://pypi.org/project/ssot-registry/), [ssot-tui](https://pypi.org/project/ssot-tui/), [ssot-views](https://pypi.org/project/ssot-views/), [ssot-codegen](https://pypi.org/project/ssot-codegen/)
 
 If you need the command-line interface, this is the package to install.

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/README.md

@@ -12,7 +12,7 @@
 
 `ssot-cli` is the primary command-line distribution for SSOT.
 
-It installs `ssot`, `ssot-cli`, and `ssot-registry` as equivalent executables over the same parser and runtime. The command surface is implemented here, while domain logic lives in [ssot-core](https://pypi.org/project/ssot-core/) and shared contract metadata comes from [ssot-contracts](https://pypi.org/project/ssot-contracts/).
+It installs `ssot`, `ssot-cli`, and `ssot-registry` as equivalent executables over the same parser and runtime. The command surface is implemented here, while domain logic lives in [ssot-core](https://pypi.org/project/ssot-core/), reusable conformance checks come from [ssot-conformance](https://pypi.org/project/ssot-conformance/), and shared contract metadata comes from [ssot-contracts](https://pypi.org/project/ssot-contracts/).
 
 - GitHub: https://github.com/groupsum/ssot-registry
 
@@ -34,7 +34,7 @@ For local development:
 python -m pip install -e pkgs/ssot-cli
 ```
 
-This package depends on [ssot-core](https://pypi.org/project/ssot-core/) and [ssot-contracts](https://pypi.org/project/ssot-contracts/), so installing it gives you the full CLI runtime stack.
+This package depends on [ssot-core](https://pypi.org/project/ssot-core/), [ssot-conformance](https://pypi.org/project/ssot-conformance/), and [ssot-contracts](https://pypi.org/project/ssot-contracts/), so installing it gives you the full CLI runtime stack.
 
 ## Executable names
 
@@ -111,6 +111,21 @@ Boundary command help:
 
 - Non-zero exit code indicates an operation failure or failed checks.
 
+## Registry-driven test execution
+
+Tests are the executable SSOT entities. Specs and boundaries resolve to tests through registry links, and runnable tests carry an `execution` object that stores the command, cwd, environment, timeout, and success rule.
+
+Examples:
+
+```bash
+ssot test run . --id tst:pytest.conformance.registry-contract
+ssot spec run-tests . --id spc:0525
+ssot boundary run-tests . --id bnd:full-cert
+ssot conformance run . --profiles registry
+```
+
+`ssot conformance run` remains a compatibility wrapper for packaged conformance families. The primary operator story is now registry-driven execution through `test`, `spec`, and `boundary`.
+
 ## Command surface
 
 ### Top-level commands
@@ -283,6 +298,7 @@ ssot-registry feature create [path]
   --replacement-feature-id [REPLACEMENT_FEATURE_ID ...]
   --note NOTE
   --horizon {backlog,current,explicit,future,next,out_of_bounds}
+  --out-of-bounds-disposition {prohibited,tolerated}
   --claim-tier {T0,T1,T2,T3,T4}
   --target-lifecycle-stage {active,deprecated,obsolete,removed}
   --slot SLOT
@@ -319,6 +335,7 @@ ssot-registry feature unlink [path]
 ssot-registry feature plan [path]
   --ids IDS [IDS ...] (required)
   --horizon {backlog,current,explicit,future,next,out_of_bounds} (required)
+  --out-of-bounds-disposition {prohibited,tolerated}
   --claim-tier {T0,T1,T2,T3,T4}
   --target-lifecycle-stage {active,deprecated,obsolete,removed}
   --slot SLOT
@@ -816,7 +833,7 @@ ssot release certify . --release-id rel:0.1.0 --write-report
 ## Package relationships
 
 - Package type: CLI distribution
-- Depends on: [ssot-core](https://pypi.org/project/ssot-core/), [ssot-contracts](https://pypi.org/project/ssot-contracts/)
+- Depends on: [ssot-core](https://pypi.org/project/ssot-core/), [ssot-conformance](https://pypi.org/project/ssot-conformance/), [ssot-contracts](https://pypi.org/project/ssot-contracts/)
 - Related packages: [ssot-registry](https://pypi.org/project/ssot-registry/), [ssot-tui](https://pypi.org/project/ssot-tui/), [ssot-views](https://pypi.org/project/ssot-views/), [ssot-codegen](https://pypi.org/project/ssot-codegen/)
 
 If you need the command-line interface, this is the package to install.

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/pyproject.toml

@@ -4,15 +4,16 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ssot-cli"
-version = "0.1.8"
+version = "0.1.9.dev3"
 description = "Primary CLI distribution for ssot-registry."
 readme = "README.md"
 requires-python = ">=3.10,<3.14"
 license = "Apache-2.0"
 authors = [{ name = "Jacob Stewart", email = "jacob@swarmauri.com" }]
 dependencies = [
-  "ssot-contracts>=0.2.13,<0.3.0",
-  "ssot-core>=0.2.13,<0.3.0",
+  "ssot-contracts>=0.2.15.dev1,<0.3.0",
+  "ssot-core>=0.2.15.dev1,<0.3.0",
+  "ssot-conformance>=0.2.15.dev1,<0.3.0",
   "tomli>=2.0.1; python_version < '3.11'",
 ]
 keywords = ["ssot", "cli", "registry", "governance", "release-management", "validation", "developer-tools"]

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/boundary_cmd.py

@@ -12,6 +12,7 @@ from ssot_registry.api import (
     list_entities,
     remove_boundary_features,
     remove_boundary_profiles,
+    run_boundary_tests,
     update_entity,
 )
 from ssot_cli.common import add_ids_argument, add_optional_bool_argument, add_path_argument, compact_dict
@@ -87,6 +88,17 @@ def register_boundary(subparsers: argparse._SubParsersAction) -> None:
     freeze.add_argument("--boundary-id", default=None, help="Boundary id to freeze. Omit to freeze the active boundary.")
     freeze.set_defaults(func=run_freeze)
 
+    run_tests = boundary_sub.add_parser(
+        "run-tests",
+        help="Resolve and execute tests for a boundary.",
+        description="Resolve the boundary's direct and profile-expanded features, then execute their linked test rows from registry metadata.",
+    )
+    add_path_argument(run_tests)
+    run_tests.add_argument("--id", default=None, help="Boundary id to execute. Omit to use program.active_boundary_id.")
+    run_tests.add_argument("--dry-run", action="store_true", help="Resolve linked tests without executing them.")
+    run_tests.add_argument("--evidence-output", default=None, help="Optional JSON output path for machine-readable execution evidence.")
+    run_tests.set_defaults(func=run_execute_tests)
+
 
 def run_create(args: argparse.Namespace) -> dict[str, object]:
     row = {
@@ -138,3 +150,12 @@ def run_remove_profile(args: argparse.Namespace) -> dict[str, object]:
 def run_freeze(args: argparse.Namespace) -> dict[str, object]:
     return freeze_boundary(path=args.path, boundary_id=args.boundary_id)
 
+
+def run_execute_tests(args: argparse.Namespace) -> dict[str, object]:
+    return run_boundary_tests(
+        args.path,
+        boundary_id=args.id,
+        evidence_output=args.evidence_output,
+        dry_run=args.dry_run,
+    )
+

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/common.py

@@ -1,6 +1,8 @@
 from __future__ import annotations
 
 import argparse
+import json
+from pathlib import Path
 from typing import Any
 
 
@@ -43,3 +45,26 @@ def collect_list_fields(args: argparse.Namespace, mapping: dict[str, str]) -> di
         if value:
             links[field_name] = value
     return links
+
+
+def load_json_object_argument(
+    *,
+    inline_value: str | None,
+    file_value: str | None,
+    label: str,
+) -> dict[str, Any] | None:
+    if inline_value is None and file_value is None:
+        return None
+    if inline_value is not None and file_value is not None:
+        raise ValueError(f"{label} accepts only one of inline JSON or JSON file")
+    if file_value is not None:
+        raw_text = Path(file_value).read_text(encoding="utf-8")
+    else:
+        raw_text = inline_value or ""
+    try:
+        payload = json.loads(raw_text)
+    except json.JSONDecodeError as exc:
+        raise ValueError(f"{label} must be valid JSON: {exc.msg}") from exc
+    if not isinstance(payload, dict):
+        raise ValueError(f"{label} must decode to a JSON object")
+    return payload

ssot_cli-0.1.9.dev3/src/ssot_cli/conformance_cmd.py

@@ -0,0 +1,88 @@
+from __future__ import annotations
+
+import argparse
+
+from ssot_registry.api import run_resolved_test_rows
+from ssot_cli.common import add_path_argument
+
+
+def register_conformance(subparsers: argparse._SubParsersAction) -> None:
+    conformance = subparsers.add_parser(
+        "conformance",
+        help="Conformance package, scaffold, and execution operations.",
+        description="Operate reusable SSOT conformance discovery, scaffold, pytest execution, and evidence-output flows.",
+    )
+    conformance_sub = conformance.add_subparsers(dest="conformance_command", required=True)
+
+    profile = conformance_sub.add_parser("profile", help="Profile discovery.", description="List available SSOT conformance profiles and their grouped case families.")
+    profile_sub = profile.add_subparsers(dest="conformance_profile_command", required=True)
+    profile_list = profile_sub.add_parser("list", help="List conformance profiles.", description="Show built-in SSOT conformance profiles and family counts.")
+    add_path_argument(profile_list)
+    profile_list.set_defaults(func=run_profile_list)
+
+    discover = conformance_sub.add_parser("discover", help="Discover conformance cases.", description="Resolve selected SSOT conformance profiles into concrete case files and linked SSOT rows.")
+    add_path_argument(discover)
+    discover.add_argument("--profiles", nargs="*", default=None, help="Conformance profiles or family names to resolve.")
+    discover.set_defaults(func=run_discover)
+
+    scaffold = conformance_sub.add_parser("scaffold", help="Plan or apply conformance rows.", description="Plan or create missing conformance feature, claim, evidence, and test rows in a target SSOT repo.")
+    add_path_argument(scaffold)
+    scaffold.add_argument("--profiles", nargs="*", default=None, help="Conformance profiles or family names to scaffold.")
+    scaffold.add_argument("--apply", action="store_true", help="Create missing rows instead of only reporting the dry-run plan.")
+    scaffold.add_argument("--include-claims", action="store_true", help="Allow scaffold apply to create missing claim rows.")
+    scaffold.add_argument("--include-evidence", action="store_true", help="Allow scaffold apply to create missing evidence rows and placeholder artifacts.")
+    scaffold.set_defaults(func=run_scaffold)
+
+    run = conformance_sub.add_parser(
+        "run",
+        help="Run conformance cases from registry metadata.",
+        description="Resolve selected SSOT conformance case families into governed test rows and execute the stored registry commands.",
+    )
+    add_path_argument(run)
+    run.add_argument("--profiles", nargs="*", default=None, help="Conformance profiles or family names to execute.")
+    run.add_argument("--dry-run", action="store_true", help="Resolve governed conformance tests without executing them.")
+    run.add_argument("--evidence-output", default=None, help="Optional JSON output path for machine-readable evidence.")
+    run.set_defaults(func=run_run)
+
+
+def run_profile_list(args: argparse.Namespace) -> dict[str, object]:
+    from ssot_conformance import list_profiles
+
+    return {"passed": True, "profiles": list_profiles()}
+
+
+def run_discover(args: argparse.Namespace) -> dict[str, object]:
+    from ssot_conformance import discover_cases
+
+    return discover_cases(args.profiles)
+
+
+def run_scaffold(args: argparse.Namespace) -> dict[str, object]:
+    from ssot_conformance import apply_scaffold, plan_scaffold
+
+    if args.apply:
+        return apply_scaffold(
+            args.path,
+            profiles=args.profiles,
+            include_claims=args.include_claims,
+            include_evidence=args.include_evidence,
+        )
+    return plan_scaffold(
+        args.path,
+        profiles=args.profiles,
+        include_claims=args.include_claims,
+        include_evidence=args.include_evidence,
+    )
+
+
+def run_run(args: argparse.Namespace) -> dict[str, object]:
+    from ssot_conformance import build_catalog_slice
+
+    catalog = build_catalog_slice(args.profiles)
+    return run_resolved_test_rows(
+        args.path,
+        target={"kind": "conformance", "profiles": catalog["profiles"], "families": catalog["families"]},
+        tests=list(catalog["tests"]),
+        evidence_output=args.evidence_output,
+        dry_run=args.dry_run,
+    )

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/feature_cmd.py

@@ -2,7 +2,13 @@
 
 import argparse
 
-from ssot_contracts.generated.python.enums import CLAIM_TIERS, FEATURE_IMPLEMENTATION_STATUSES, FEATURE_LIFECYCLE_STAGES, PLANNING_HORIZONS
+from ssot_contracts.generated.python.enums import (
+    CLAIM_TIERS,
+    FEATURE_IMPLEMENTATION_STATUSES,
+    FEATURE_LIFECYCLE_STAGES,
+    OUT_OF_BOUNDS_DISPOSITIONS,
+    PLANNING_HORIZONS,
+)
 from ssot_registry.api import (
     create_entity,
     delete_entity,
@@ -47,6 +53,7 @@ def register_feature(subparsers: argparse._SubParsersAction) -> None:
     create.add_argument("--replacement-feature-id", nargs="*", default=[], help="Replacement feature ids if this feature is being deprecated or removed.")
     create.add_argument("--note", default=None, help="Lifecycle note explaining replacement or status context.")
     create.add_argument("--horizon", choices=sorted(PLANNING_HORIZONS), default="backlog", help="Planning horizon that determines when the feature is expected to land.")
+    create.add_argument("--out-of-bounds-disposition", choices=sorted(OUT_OF_BOUNDS_DISPOSITIONS), default=None, help="Required when a non-absent feature is out_of_bounds; tolerated means acceptable non-target support, prohibited means removal is required.")
     create.add_argument("--claim-tier", choices=sorted(CLAIM_TIERS), default=None, help="Target assurance tier expected for claims tied to this feature.")
     create.add_argument("--target-lifecycle-stage", choices=sorted(FEATURE_LIFECYCLE_STAGES), default="active", help="Planned future lifecycle target for this feature.")
     create.add_argument("--slot", default=None, help="Explicit planning slot label when the horizon is schedule-driven.")
@@ -107,6 +114,12 @@ def register_feature(subparsers: argparse._SubParsersAction) -> None:
         help="Planning horizon to assign.",
     )
     plan.add_argument("--claim-tier", choices=sorted(CLAIM_TIERS), default=None, help="Target claim tier for the selected features.")
+    plan.add_argument(
+        "--out-of-bounds-disposition",
+        choices=sorted(OUT_OF_BOUNDS_DISPOSITIONS),
+        default=None,
+        help="Disposition for non-absent out_of_bounds features.",
+    )
     plan.add_argument(
         "--target-lifecycle-stage",
         choices=sorted(FEATURE_LIFECYCLE_STAGES),
@@ -136,6 +149,15 @@ def _build_links(args: argparse.Namespace) -> dict[str, list[str]]:
 
 
 def run_create(args: argparse.Namespace) -> dict[str, object]:
+    plan = {
+        "horizon": args.horizon,
+        "slot": args.slot,
+        "target_claim_tier": args.claim_tier,
+        "target_lifecycle_stage": args.target_lifecycle_stage,
+    }
+    if args.out_of_bounds_disposition is not None:
+        plan["out_of_bounds_disposition"] = args.out_of_bounds_disposition
+
     row = {
         "id": args.id,
         "title": args.title,
@@ -146,12 +168,7 @@ def run_create(args: argparse.Namespace) -> dict[str, object]:
             "replacement_feature_ids": args.replacement_feature_id,
             "note": args.note,
         },
-        "plan": {
-            "horizon": args.horizon,
-            "slot": args.slot,
-            "target_claim_tier": args.claim_tier,
-            "target_lifecycle_stage": args.target_lifecycle_stage,
-        },
+        "plan": plan,
         "spec_ids": args.spec_ids,
         "claim_ids": args.claim_ids,
         "test_ids": args.test_ids,
@@ -201,6 +218,7 @@ def run_plan(args: argparse.Namespace) -> dict[str, object]:
         claim_tier=args.claim_tier,
         slot=args.slot,
         target_lifecycle_stage=args.target_lifecycle_stage,
+        out_of_bounds_disposition=args.out_of_bounds_disposition,
     )
 
 

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/main.py

@@ -12,6 +12,7 @@ from ssot_registry.util.formatting import render_payload
 from .adr_cmd import register_adr
 from .boundary_cmd import register_boundary
 from .claim_cmd import register_claim
+from .conformance_cmd import register_conformance
 from .evidence_cmd import register_evidence
 from .feature_cmd import register_feature
 from .graph_cmd import register_graph
@@ -68,6 +69,7 @@ def build_parser(*, prog: str | None = None) -> argparse.ArgumentParser:
     register_test(subparsers)
     register_issue(subparsers)
     register_claim(subparsers)
+    register_conformance(subparsers)
     register_evidence(subparsers)
     register_risk(subparsers)
     register_boundary(subparsers)

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/release_cmd.py

@@ -4,6 +4,7 @@ import argparse
 
 from ssot_registry.api import (
     add_release_claims,
+    add_release_boundaries,
     add_release_evidence,
     certify_release,
     create_entity,
@@ -13,6 +14,7 @@ from ssot_registry.api import (
     promote_release,
     publish_release,
     remove_release_claims,
+    remove_release_boundaries,
     remove_release_evidence,
     revoke_release,
     update_entity,
@@ -33,7 +35,8 @@ def register_release(subparsers: argparse._SubParsersAction) -> None:
     create.add_argument("--id", required=True, help="Normalized release id to create.")
     create.add_argument("--version", required=True, help="Semantic or operator-defined version string for the release.")
     create.add_argument("--status", choices=["draft", "candidate", "certified", "promoted", "published", "revoked"], default="draft", help="Current publication stage of the release.")
-    create.add_argument("--boundary-id", required=True, help="Frozen boundary id that defines the release scope.")
+    create.add_argument("--boundary-id", required=True, help="Primary frozen boundary id that defines the release scope.")
+    create.add_argument("--boundary-ids", nargs="*", default=None, help="Additional frozen boundary ids to include in the release scope. The primary --boundary-id is always included.")
     create.add_argument("--claim-ids", nargs="*", default=[], help="Claim ids bundled into the release.")
     create.add_argument("--evidence-ids", nargs="*", default=[], help="Evidence ids bundled into the release.")
     create.set_defaults(func=run_create)
@@ -53,7 +56,8 @@ def register_release(subparsers: argparse._SubParsersAction) -> None:
     update.add_argument("--id", required=True, help="Release id to update.")
     update.add_argument("--version", default=None, help="Replacement release version string.")
     update.add_argument("--status", choices=["draft", "candidate", "certified", "promoted", "published", "revoked"], default=None, help="Updated publication stage.")
-    update.add_argument("--boundary-id", default=None, help="Replacement boundary id that defines the release scope.")
+    update.add_argument("--boundary-id", default=None, help="Replacement primary boundary id that defines the release scope.")
+    update.add_argument("--boundary-ids", nargs="*", default=None, help="Replacement full boundary-id list for the release scope.")
     update.set_defaults(func=run_update)
 
     delete = release_sub.add_parser("delete", help="Delete a release.", description="Remove a release record from the registry.")
@@ -85,6 +89,18 @@ def register_release(subparsers: argparse._SubParsersAction) -> None:
     remove_evidence.add_argument("--evidence-ids", nargs="+", required=True, help="Evidence ids to remove from the release.")
     remove_evidence.set_defaults(func=run_remove_evidence)
 
+    add_boundary = release_sub.add_parser("add-boundary", help="Attach boundaries to a release.", description="Add one or more boundary ids to the release scope.")
+    add_path_argument(add_boundary)
+    add_boundary.add_argument("--id", required=True, help="Release id that should receive the boundaries.")
+    add_boundary.add_argument("--boundary-ids", nargs="+", required=True, help="Boundary ids to attach to the release.")
+    add_boundary.set_defaults(func=run_add_boundary)
+
+    remove_boundary = release_sub.add_parser("remove-boundary", help="Remove boundaries from a release.", description="Remove one or more boundary ids from the release scope.")
+    add_path_argument(remove_boundary)
+    remove_boundary.add_argument("--id", required=True, help="Release id whose boundaries should be removed.")
+    remove_boundary.add_argument("--boundary-ids", nargs="+", required=True, help="Boundary ids to remove from the release.")
+    remove_boundary.set_defaults(func=run_remove_boundary)
+
     certify = release_sub.add_parser("certify", help="Run release certification.", description="Evaluate release guards and certify the release when all required checks pass.")
     add_path_argument(certify)
     certify.add_argument("--release-id", default=None, help="Release id to certify. Omit to use the active release.")
@@ -109,11 +125,14 @@ def register_release(subparsers: argparse._SubParsersAction) -> None:
 
 
 def run_create(args: argparse.Namespace) -> dict[str, object]:
+    boundary_ids = [args.boundary_id, *(args.boundary_ids or [])]
+    boundary_ids = list(dict.fromkeys(boundary_ids))
     row = {
         "id": args.id,
         "version": args.version,
         "status": args.status,
         "boundary_id": args.boundary_id,
+        "boundary_ids": boundary_ids,
         "claim_ids": args.claim_ids,
         "evidence_ids": args.evidence_ids,
     }
@@ -129,7 +148,19 @@ def run_list(args: argparse.Namespace) -> dict[str, object]:
 
 
 def run_update(args: argparse.Namespace) -> dict[str, object]:
-    changes = compact_dict({"version": args.version, "status": args.status, "boundary_id": args.boundary_id})
+    boundary_ids = args.boundary_ids
+    if boundary_ids is not None:
+        boundary_ids = list(dict.fromkeys(([args.boundary_id] if args.boundary_id else []) + boundary_ids))
+        if not boundary_ids:
+            raise ValueError("At least one boundary id is required when updating boundary membership")
+    elif args.boundary_id is not None:
+        boundary_ids = [args.boundary_id]
+    changes = compact_dict({
+        "version": args.version,
+        "status": args.status,
+        "boundary_id": args.boundary_id or (boundary_ids[0] if boundary_ids else None),
+        "boundary_ids": boundary_ids,
+    })
     if not changes:
         raise ValueError("At least one update field is required")
     return update_entity(args.path, "releases", args.id, changes)
@@ -155,6 +186,14 @@ def run_remove_evidence(args: argparse.Namespace) -> dict[str, object]:
     return remove_release_evidence(args.path, args.id, args.evidence_ids)
 
 
+def run_add_boundary(args: argparse.Namespace) -> dict[str, object]:
+    return add_release_boundaries(args.path, args.id, args.boundary_ids)
+
+
+def run_remove_boundary(args: argparse.Namespace) -> dict[str, object]:
+    return remove_release_boundaries(args.path, args.id, args.boundary_ids)
+
+
 def run_certify(args: argparse.Namespace) -> dict[str, object]:
     return certify_release(path=args.path, release_id=args.release_id, write_report=args.write_report)
 

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/spec_cmd.py

@@ -15,6 +15,7 @@ from ssot_registry.api import (
     sync_documents,
     supersede_documents,
     update_document,
+    run_spec_tests,
 )
 from ssot_cli.common import add_ids_argument, add_path_argument, compact_dict
 
@@ -116,6 +117,17 @@ def register_spec(subparsers: argparse._SubParsersAction) -> None:
     add_path_argument(reserve_list)
     reserve_list.set_defaults(func=run_reserve_list)
 
+    run_tests = spec_sub.add_parser(
+        "run-tests",
+        help="Resolve and execute tests for a SPEC.",
+        description="Resolve features that declare the selected SPEC in feature.spec_ids, then execute their linked test rows from registry metadata.",
+    )
+    add_path_argument(run_tests)
+    run_tests.add_argument("--id", required=True, help="SPEC id whose linked tests should be resolved and run.")
+    run_tests.add_argument("--dry-run", action="store_true", help="Resolve linked tests without executing them.")
+    run_tests.add_argument("--evidence-output", default=None, help="Optional JSON output path for machine-readable execution evidence.")
+    run_tests.set_defaults(func=run_spec_tests_command)
+
 
 def run_create(args: argparse.Namespace) -> dict[str, object]:
     return create_document(
@@ -191,3 +203,12 @@ def run_reserve_create(args: argparse.Namespace) -> dict[str, object]:
 def run_reserve_list(args: argparse.Namespace) -> dict[str, object]:
     return list_document_reservations(args.path, "spec")
 
+
+def run_spec_tests_command(args: argparse.Namespace) -> dict[str, object]:
+    return run_spec_tests(
+        args.path,
+        spec_id=args.id,
+        evidence_output=args.evidence_output,
+        dry_run=args.dry_run,
+    )
+

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli/test_cmd.py

@@ -2,8 +2,8 @@
 
 import argparse
 
-from ssot_registry.api import create_entity, delete_entity, get_entity, link_entities, list_entities, unlink_entities, update_entity
-from ssot_cli.common import add_ids_argument, add_path_argument, collect_list_fields, compact_dict
+from ssot_registry.api import create_entity, delete_entity, get_entity, link_entities, list_entities, run_tests, unlink_entities, update_entity
+from ssot_cli.common import add_ids_argument, add_path_argument, collect_list_fields, compact_dict, load_json_object_argument
 
 
 _LINK_MAPPING = {
@@ -31,6 +31,8 @@ def register_test(subparsers: argparse._SubParsersAction) -> None:
     create.add_argument("--feature-ids", nargs="*", default=[], help="Feature ids this test verifies.")
     create.add_argument("--claim-ids", nargs="*", default=[], help="Claim ids this test supports.")
     create.add_argument("--evidence-ids", nargs="*", default=[], help="Evidence ids produced by or associated with the test.")
+    create.add_argument("--execution-json", default=None, help="Inline JSON object describing registry-owned execution metadata for this test.")
+    create.add_argument("--execution-file", default=None, help="Path to a JSON file containing registry-owned execution metadata for this test.")
     create.set_defaults(func=run_create)
 
     get = test_sub.add_parser("get", help="Show one test.", description="Fetch a single test record by id.")
@@ -50,6 +52,8 @@ def register_test(subparsers: argparse._SubParsersAction) -> None:
     update.add_argument("--status", choices=["planned", "passing", "failing", "blocked", "skipped"], default=None, help="Updated execution or readiness state.")
     update.add_argument("--kind", default=None, help="Updated test category.")
     update.add_argument("--test-path", dest="test_path", default=None, help="Updated repository-relative path to the test or procedure.")
+    update.add_argument("--execution-json", default=None, help="Replacement inline JSON object for test execution metadata.")
+    update.add_argument("--execution-file", default=None, help="Replacement JSON file for test execution metadata.")
     update.set_defaults(func=run_update)
 
     delete = test_sub.add_parser("delete", help="Delete a test.", description="Remove a test record from the registry.")
@@ -73,6 +77,19 @@ def register_test(subparsers: argparse._SubParsersAction) -> None:
     unlink.add_argument("--evidence-ids", nargs="*", help="Evidence ids to detach.")
     unlink.set_defaults(func=run_unlink)
 
+    run = test_sub.add_parser(
+        "run",
+        help="Execute runnable tests from registry metadata.",
+        description="Resolve one or more test rows by id, require execution metadata, and run the stored commands from registry truth.",
+    )
+    add_path_argument(run)
+    selector = run.add_mutually_exclusive_group(required=True)
+    selector.add_argument("--id", default=None, help="Single test id to execute.")
+    selector.add_argument("--ids", nargs="+", default=None, help="One or more test ids to execute.")
+    run.add_argument("--dry-run", action="store_true", help="Resolve tests without executing their commands.")
+    run.add_argument("--evidence-output", default=None, help="Optional JSON output path for machine-readable execution evidence.")
+    run.set_defaults(func=run_execute)
+
 
 def _build_links(args: argparse.Namespace) -> dict[str, list[str]]:
     links = collect_list_fields(args, _LINK_MAPPING)
@@ -82,6 +99,11 @@ def _build_links(args: argparse.Namespace) -> dict[str, list[str]]:
 
 
 def run_create(args: argparse.Namespace) -> dict[str, object]:
+    execution = load_json_object_argument(
+        inline_value=args.execution_json,
+        file_value=args.execution_file,
+        label="test execution metadata",
+    )
     row = {
         "id": args.id,
         "title": args.title,
@@ -91,6 +113,7 @@ def run_create(args: argparse.Namespace) -> dict[str, object]:
         "feature_ids": args.feature_ids,
         "claim_ids": args.claim_ids,
         "evidence_ids": args.evidence_ids,
+        "execution": execution,
     }
     return create_entity(args.path, "tests", row)
 
@@ -104,12 +127,18 @@ def run_list(args: argparse.Namespace) -> dict[str, object]:
 
 
 def run_update(args: argparse.Namespace) -> dict[str, object]:
+    execution = load_json_object_argument(
+        inline_value=args.execution_json,
+        file_value=args.execution_file,
+        label="test execution metadata",
+    )
     changes = compact_dict(
         {
             "title": args.title,
             "status": args.status,
             "kind": args.kind,
             "path": args.test_path,
+            "execution": execution,
         }
     )
     if not changes:
@@ -128,3 +157,13 @@ def run_link(args: argparse.Namespace) -> dict[str, object]:
 def run_unlink(args: argparse.Namespace) -> dict[str, object]:
     return unlink_entities(args.path, "tests", args.id, _build_links(args))
 
+
+def run_execute(args: argparse.Namespace) -> dict[str, object]:
+    test_ids = [args.id] if args.id is not None else list(args.ids or [])
+    return run_tests(
+        args.path,
+        test_ids=test_ids,
+        evidence_output=args.evidence_output,
+        dry_run=args.dry_run,
+    )
+

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssot-cli
-Version: 0.1.8
+Version: 0.1.9.dev3
 Summary: Primary CLI distribution for ssot-registry.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License-Expression: Apache-2.0
@@ -24,8 +24,9 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Classifier: Topic :: Utilities
 Requires-Python: <3.14,>=3.10
 Description-Content-Type: text/markdown
-Requires-Dist: ssot-contracts<0.3.0,>=0.2.13
-Requires-Dist: ssot-core<0.3.0,>=0.2.13
+Requires-Dist: ssot-contracts<0.3.0,>=0.2.15.dev1
+Requires-Dist: ssot-core<0.3.0,>=0.2.15.dev1
+Requires-Dist: ssot-conformance<0.3.0,>=0.2.15.dev1
 Requires-Dist: tomli>=2.0.1; python_version < "3.11"
 
 <div align="center">
@@ -42,7 +43,7 @@ Requires-Dist: tomli>=2.0.1; python_version < "3.11"
 
 `ssot-cli` is the primary command-line distribution for SSOT.
 
-It installs `ssot`, `ssot-cli`, and `ssot-registry` as equivalent executables over the same parser and runtime. The command surface is implemented here, while domain logic lives in [ssot-core](https://pypi.org/project/ssot-core/) and shared contract metadata comes from [ssot-contracts](https://pypi.org/project/ssot-contracts/).
+It installs `ssot`, `ssot-cli`, and `ssot-registry` as equivalent executables over the same parser and runtime. The command surface is implemented here, while domain logic lives in [ssot-core](https://pypi.org/project/ssot-core/), reusable conformance checks come from [ssot-conformance](https://pypi.org/project/ssot-conformance/), and shared contract metadata comes from [ssot-contracts](https://pypi.org/project/ssot-contracts/).
 
 - GitHub: https://github.com/groupsum/ssot-registry
 
@@ -64,7 +65,7 @@ For local development:
 python -m pip install -e pkgs/ssot-cli
 ```
 
-This package depends on [ssot-core](https://pypi.org/project/ssot-core/) and [ssot-contracts](https://pypi.org/project/ssot-contracts/), so installing it gives you the full CLI runtime stack.
+This package depends on [ssot-core](https://pypi.org/project/ssot-core/), [ssot-conformance](https://pypi.org/project/ssot-conformance/), and [ssot-contracts](https://pypi.org/project/ssot-contracts/), so installing it gives you the full CLI runtime stack.
 
 ## Executable names
 
@@ -141,6 +142,21 @@ Boundary command help:
 
 - Non-zero exit code indicates an operation failure or failed checks.
 
+## Registry-driven test execution
+
+Tests are the executable SSOT entities. Specs and boundaries resolve to tests through registry links, and runnable tests carry an `execution` object that stores the command, cwd, environment, timeout, and success rule.
+
+Examples:
+
+```bash
+ssot test run . --id tst:pytest.conformance.registry-contract
+ssot spec run-tests . --id spc:0525
+ssot boundary run-tests . --id bnd:full-cert
+ssot conformance run . --profiles registry
+```
+
+`ssot conformance run` remains a compatibility wrapper for packaged conformance families. The primary operator story is now registry-driven execution through `test`, `spec`, and `boundary`.
+
 ## Command surface
 
 ### Top-level commands
@@ -313,6 +329,7 @@ ssot-registry feature create [path]
   --replacement-feature-id [REPLACEMENT_FEATURE_ID ...]
   --note NOTE
   --horizon {backlog,current,explicit,future,next,out_of_bounds}
+  --out-of-bounds-disposition {prohibited,tolerated}
   --claim-tier {T0,T1,T2,T3,T4}
   --target-lifecycle-stage {active,deprecated,obsolete,removed}
   --slot SLOT
@@ -349,6 +366,7 @@ ssot-registry feature unlink [path]
 ssot-registry feature plan [path]
   --ids IDS [IDS ...] (required)
   --horizon {backlog,current,explicit,future,next,out_of_bounds} (required)
+  --out-of-bounds-disposition {prohibited,tolerated}
   --claim-tier {T0,T1,T2,T3,T4}
   --target-lifecycle-stage {active,deprecated,obsolete,removed}
   --slot SLOT
@@ -846,7 +864,7 @@ ssot release certify . --release-id rel:0.1.0 --write-report
 ## Package relationships
 
 - Package type: CLI distribution
-- Depends on: [ssot-core](https://pypi.org/project/ssot-core/), [ssot-contracts](https://pypi.org/project/ssot-contracts/)
+- Depends on: [ssot-core](https://pypi.org/project/ssot-core/), [ssot-conformance](https://pypi.org/project/ssot-conformance/), [ssot-contracts](https://pypi.org/project/ssot-contracts/)
 - Related packages: [ssot-registry](https://pypi.org/project/ssot-registry/), [ssot-tui](https://pypi.org/project/ssot-tui/), [ssot-views](https://pypi.org/project/ssot-views/), [ssot-codegen](https://pypi.org/project/ssot-codegen/)
 
 If you need the command-line interface, this is the package to install.

{ssot_cli-0.1.8 → ssot_cli-0.1.9.dev3}/src/ssot_cli.egg-info/SOURCES.txt

@@ -5,6 +5,7 @@ src/ssot_cli/adr_cmd.py
 src/ssot_cli/boundary_cmd.py
 src/ssot_cli/claim_cmd.py
 src/ssot_cli/common.py
+src/ssot_cli/conformance_cmd.py
 src/ssot_cli/evidence_cmd.py
 src/ssot_cli/feature_cmd.py
 src/ssot_cli/graph_cmd.py

ssot_cli-0.1.9.dev3/src/ssot_cli.egg-info/requires.txt

@@ -0,0 +1,6 @@
+ssot-contracts<0.3.0,>=0.2.15.dev1
+ssot-core<0.3.0,>=0.2.15.dev1
+ssot-conformance<0.3.0,>=0.2.15.dev1
+
+[:python_version < "3.11"]
+tomli>=2.0.1

ssot_cli-0.1.8/src/ssot_cli.egg-info/requires.txt

@@ -1,5 +0,0 @@
-ssot-contracts<0.3.0,>=0.2.13
-ssot-core<0.3.0,>=0.2.13
-
-[:python_version < "3.11"]
-tomli>=2.0.1