feat: implement Fase 2 — new document types, validation engine, and compliance CI#27
Merged
Merged
Conversation
…ompliance CI Add 4 new document types (SEC, MCARD, SBOM, DPIA) with EN/ES templates, dedicated skills for Claude/Gemini/generic agents, and a full `devtrail validate` command with 13 validation rules, auto-fix support, and 54 passing tests. Key changes: - Templates: SEC (security assessment), MCARD (model card), SBOM (AI bill of materials), DPIA (data protection impact assessment) in EN and ES - CLI: new `devtrail validate [--fix]` command with document parsing (document.rs), validation engine (validation.rs), and Lizard complexity integration (complexity.rs) - Skills: devtrail-sec and devtrail-mcard skills (3 platforms each), updated devtrail-new and devtrail-status for 12 document types - CI/CD: compliance-check and governance-metrics jobs in docs-validation.yml, related-ref validation and code-without-AILOG detection in pre-commit/PS1 - GitHub Actions upgraded from v4 to v5 (Node.js 20 → 24 compatibility) - Version bump: CLI 1.3.0 → 1.4.0, Framework 3.0.0 → 3.1.0 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
|
montfort
added a commit
that referenced
this pull request
Mar 27, 2026
…ce docs (#27) Add `devtrail compliance` and `devtrail metrics` CLI commands, ISO 42001 governance documents, NIST AI RMF implementation guides, and OpenTelemetry observability guide. CLI (cli-2.0.0): - New `devtrail compliance` command with EU AI Act, ISO 42001, and NIST AI RMF checkers, supporting text/markdown/json output - New `devtrail metrics` command with period filtering, review compliance, risk distribution, agent activity, and trend analysis - Compliance engine (compliance.rs) with 12 checks across 3 standards - Metrics engine (metrics_engine.rs) with chrono-based date handling - 16 new integration tests (9 compliance + 7 metrics) Framework (fw-3.2.0): - AI-RISK-CATALOG.md — risk registry mapped to NIST AI 600-1 + ISO 42001 - AI-LIFECYCLE-TRACKER.md — AI system lifecycle tracking (ISO 42001 A.6) - AI-KPIS.md — governance KPIs aligned with ISO 42001 Clause 9 - MANAGEMENT-REVIEW-TEMPLATE.md — periodic reviews (ISO 42001 Clause 9.3) - OBSERVABILITY-GUIDE.md — OpenTelemetry integration guide (10 sections) - 5 NIST AI RMF guides (MAP, MEASURE, MANAGE, GOVERN, GenAI Risks 600-1) - All documents available in EN + ES (20 new documents total) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
montfort
added a commit
that referenced
this pull request
Mar 27, 2026
… docs (#27) Add `devtrail audit` command with timeline, traceability map (BFS), risk distribution, and compliance summary. Supports text, markdown, json, and html (with SVG pie chart) output formats. Framework additions: C4-DIAGRAM-GUIDE.md (EN+ES), api_changes/api_spec_path fields in ADR/REQ templates, C4 and API tracking rules in AGENT-RULES.md. Bump versions to fw-4.0.0 / cli-2.1.0. Add CHANGELOG.md covering all 4 phases. Update README, CLI-REFERENCE, and plan-implementacion.md. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
devtrail-new/devtrail-statusfor 12 typesdevtrail validate [--fix]command with document parsing engine (document.rs), 13 validation rules (validation.rs), auto-fix support, and Lizard cyclomatic complexity integration (complexity.rs)compliance-check,governance-metrics) indocs-validation.yml, plusrelated:reference validation and code-without-AILOG detection in pre-commit/PowerShell scriptsTest plan
--fixauto-correction tested (review_required enforcement)devtrail-new.shverified for 12 typescargo clippyclean (no new warnings)🤖 Generated with Claude Code