From 4970376155f6db202c5ef791e70d4a5677e957ef Mon Sep 17 00:00:00 2001 From: tegwick Date: Mon, 6 Jul 2026 19:03:42 +0200 Subject: [PATCH] Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 1) Honest first-pass maturity vector grounded in README/docs/tests present in this repo; no invented evidence. Flagged for human review before publish. See reuse-surface history/2026-07-06-coverage-classification.md. Co-Authored-By: Claude Sonnet 5 --- ...unication.compliance-evidence-framework.md | 120 ++++++++++++++++++ registry/indexes/capabilities.yaml | 20 ++- 2 files changed, 138 insertions(+), 2 deletions(-) create mode 100644 registry/capabilities/capability.communication.compliance-evidence-framework.md diff --git a/registry/capabilities/capability.communication.compliance-evidence-framework.md b/registry/capabilities/capability.communication.compliance-evidence-framework.md new file mode 100644 index 0000000..1e5a5dc --- /dev/null +++ b/registry/capabilities/capability.communication.compliance-evidence-framework.md @@ -0,0 +1,120 @@ +--- +id: capability.communication.compliance-evidence-framework +name: Certification And Compliance Evidence Framework +summary: Framework that turns standards, conformance, regulatory, and repository-quality claims into structured, + reviewable, repeatable, comparable evidence via a pluggable extension architecture. +owner: guide-board +status: draft +domain: communication +tags: +- compliance +- certification +- evidence +- extensions +maturity: + discovery: + current: D2 + target: D4 + confidence: medium + rationale: README documents the framework/extension split and a working local baseline (extensions + list/validate, profile validate-target/validate-assessment, plan, run); no separate INTENT/SCOPE + found. + availability: + current: A2 + target: A3 + confidence: medium + rationale: Dependency-light and runnable today via `PYTHONPATH=src python3 -m guide_board ...`; ships + sample profiles and a working plan/run pipeline. +external_evidence: + completeness: + level: C1 + confidence: low + basis: scope_vs_intent_and_consumer_expectations + satisfied_expectations: + - extension listing/validation + - target/assessment profile validation + - plan and run pipeline with sample profiles + broken_expectations: [] + out_of_scope_expectations: [] + reliability: + level: R0 + confidence: low + basis: consumer_quality_signals + known_reliability_risks: + - domain-specific extensions are described as living separately; core repo scope stops at contracts +discovery: + intent: Turn certification/compliance claims into structured, repeatable evidence that can be reviewed + and compared across assessments, with domain specifics delegated to extensions. + includes: + - framework contracts (targets, assessments, plans, runs) + - extension listing and validation + - sample profiles + excludes: + - domain-specific compliance extensions themselves (live in separate extension packages) + assumptions: [] + use_cases: [] + research_memos: [] +availability: + current_level: A2 + target_level: A3 + current_artifacts: + - Python package (`guide_board`), runnable via `PYTHONPATH=src` + target_artifacts: [] + consumption_modes: + - cli +relations: + depends_on: [] + supports: [] + related_to: [] +evidence: + documentation: + - README.md + tests: + - tests/ + consumer_feedback: [] + bug_reports: [] + incidents: [] +consumer_guidance: + recommended_for: + - repos needing a structured compliance/certification evidence pipeline + not_recommended_for: + - needs where no extension exists yet for the target domain + known_limitations: + - core is intentionally dependency-light; domain coverage depends on which extensions exist +promotion_history: [] +--- + +# Certification And Compliance Evidence Framework + +## Overview + +`guide-board` is a certification and compliance preparation framework. The root project owns framework contracts (targets, assessments, plans, runs); domain-specific compliance logic lives in extensions. + +## Assessment notes + +### Discovery + +README documents the framework/extension split and a working local baseline (extensions list/validate, profile validate-target/validate-assessment, plan, run); no separate INTENT/SCOPE found. + +### Availability + +Dependency-light and runnable today via `PYTHONPATH=src python3 -m guide_board ...`; ships sample profiles and a working plan/run pipeline. + +### Completeness + +First-pass honest assessment from the REUSE-WP-0017 coverage campaign +(reuse-surface). No external consumer feedback exists yet; levels reflect +scope-vs-intent documentation quality, not internal code quality. + +### Reliability + +No production consumer telemetry exists yet; reliability level is +intentionally conservative pending REUSE-WP-0019 reuse-telemetry evidence. + +## Promotion checklist + +- [x] ID follows `capability..` pattern +- [x] Maturity enums match `specs/CapabilityMaturityStandard.md` +- [x] `external_evidence` is populated separately from `maturity` +- [ ] Relations reference valid capability IDs (none yet) +- [x] Index entry added in `registry/indexes/capabilities.yaml` diff --git a/registry/indexes/capabilities.yaml b/registry/indexes/capabilities.yaml index f944e47..7007f55 100644 --- a/registry/indexes/capabilities.yaml +++ b/registry/indexes/capabilities.yaml @@ -1,4 +1,20 @@ version: 1 -updated: '2026-06-16' +updated: '2026-07-06' domain: helix_forge -capabilities: [] +capabilities: +- id: capability.communication.compliance-evidence-framework + name: Certification And Compliance Evidence Framework + summary: Framework that turns standards, conformance, regulatory, and repository-quality claims into + structured, reviewable, repeatable, comparable evidence via a pluggable extension architecture. + vector: D2 / A2 / C1 / R0 + domain: communication + status: draft + owner: guide-board + path: registry/capabilities/capability.communication.compliance-evidence-framework.md + tags: + - compliance + - certification + - evidence + - extensions + consumption_modes: + - cli