Skip to content

fix(estimation): remediate PERF-AUDIT findings and adopt Wellmanifest standards (ticket-018) #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ifuri-validator-agent merged 1 commit into from
Oct 17, 2026
Merged

fix(estimation): remediate PERF-AUDIT findings and adopt Wellmanifest standards (ticket-018) #20

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion .governance/manifest.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,8 @@
"ownedPaths": [
"api/**",
"sdk/**",
"clients/**"
"clients/**",
"src/estimation/monitor.py"
]
}
}
Expand Down Expand Up @@ -168,6 +169,10 @@
"TODO.md",
"project/TICKETS.md",
"project/ticket-*/**",
".governance/manifest.json",
".governance/standard-adoption.json",
".governance/standard-packs.json",
".governance/standard_pack_check.py",
"config/artifact-registry.json"
],
"repository": {
Expand Down
279 changes: 279 additions & 0 deletions .governance/standard-adoption.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,279 @@
{
"schema": "wellmanifest.standard-adoption/v1",
"mode": "enforce",
"profile": "baseline",
"repositoryRole": "adopter",
"updates": {
"enabled": false,
"trigger": "pre-commit",
"action": "prepare-and-abort",
"executor": "goal"
},
"adoptions": [
{
"id": "wellmanifest/git-lifecycle",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S4",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S4",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
},
{
"id": "wellmanifest/logs",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S3",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
},
{
"id": "wellmanifest/merge",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S4",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S4",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
},
{
"id": "wellmanifest/new-project",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S4",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S4",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
},
{
"id": "wellmanifest/ticket-lifecycle",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S3",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
},
{
"id": "wellmanifest/validation-attestation",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S4",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S4",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
},
{
"id": "wellmanifest/worktrees",
"version": "0.18.7",
"revision": "c6cf798727229df252fadfe02c0da36757a40673",
"model": "protected-conformance",
"level": "S3",
"artifacts": [
{
"target": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
],
"evidence": [
{
"level": "S0",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S1",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S2",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
},
{
"level": "S3",
"uri": ".governance/manifest.json",
"sha256": "2f7e30d30d571158e22fe989407b38953753e33a89bd24482984f5e49f99aabc"
}
]
}
]
}
96 changes: 96 additions & 0 deletions .governance/standard-packs.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,96 @@
{
"schema": "wellmanifest.standard-pack-routing/v1",
"owner": "wellmanifest/new-project",
"purpose": "composition-only",
"aliases": {"wellmanifest/git": "wellmanifest/git-lifecycle"},
"rules": {
"oneSemanticOwner": true,
"aliasesMustNotCreateRepositories": true,
"adoptionProjectionRequiresImmutableRevision": true,
"adoptionProjectionRequiresDigest": true,
"runtimeBindingsRemainWithAdopter": true
},
"executionModels": {
"reference-only": {"maximumLevel": "S0", "authorizesEffects": false},
"local-conformance": {"maximumLevel": "S2", "authorizesEffects": false},
"protected-conformance": {"maximumLevel": "S4", "authorizesEffects": false},
"runtime-conformance": {"maximumLevel": "S5", "authorizesEffects": true}
},
"levels": {
"S0": "Versioned normative contract with closed schemas and negative examples.",
"S1": "Dependency-free deterministic conformance command with stable finding codes.",
"S2": "Immutable source revision and SHA-256 digests for every managed projection.",
"S3": "The conformance command runs as a stable required CI check on pull requests.",
"S4": "Hosted branch protection or rulesets require the exact CI check before merge.",
"S5": "The effectful runtime validates live bindings and emits a digest-bound receipt."
},
"profiles": {
"baseline": {
"extends": [],
"requirements": [
{"id": "wellmanifest/new-project", "minimumLevel": "S4"},
{"id": "wellmanifest/git-lifecycle", "minimumLevel": "S4"},
{"id": "wellmanifest/worktrees", "minimumLevel": "S3"},
{"id": "wellmanifest/merge", "minimumLevel": "S4"},
{"id": "wellmanifest/validation-attestation", "minimumLevel": "S4"},
{"id": "wellmanifest/ticket-lifecycle", "minimumLevel": "S3"},
{"id": "wellmanifest/logs", "minimumLevel": "S3"}
]
},
"domain-pack": {
"extends": ["baseline"],
"requirements": [{"id": "wellmanifest/dsl", "minimumLevel": "S4"}]
},
"runtime-service": {
"extends": ["baseline"],
"requirements": [
{"id": "wellmanifest/poa", "minimumLevel": "S5"},
{"id": "wellmanifest/authority-lifecycle", "minimumLevel": "S5"},
{"id": "wellmanifest/logs", "minimumLevel": "S5"}
]
},
"agent-executor": {
"extends": ["runtime-service"],
"requirements": [
{"id": "wellmanifest/repair-lifecycle", "minimumLevel": "S5"},
{"id": "wellmanifest/validation-attestation", "minimumLevel": "S5"}
]
},
"deployment": {
"extends": ["runtime-service"],
"requirements": [
{"id": "wellmanifest/deployment", "minimumLevel": "S5"},
{"id": "wellmanifest/merge", "minimumLevel": "S5"}
]
}
},
"duplicationPolicy": {
"independentNormativeSourcesForOneConcern": "error",
"managedProjectionWithMatchingRevisionAndDigest": "allowed",
"managedProjectionWithDigestDrift": "error",
"historicalWorktree": "exclude-from-authority-scan-and-audit-via-wellmanifest/worktrees",
"compatibilityAlias": "allowed-only-when-it-resolves-to-one-canonical-pack"
},
"rollout": {
"defaultMode": "audit",
"targetMode": "enforce",
"transition": "Attach catalog and checker, record immutable evidence, enable the exact required check, then switch the adoption record to enforce."
},
"packs": [
{"id": "wellmanifest/new-project", "owns": ["repository bootstrap", "pack composition", "immutable adoption projection"]},
{"id": "wellmanifest/git-lifecycle", "owns": ["repository identity", "branch and ref lifecycle", "pull-request lifecycle", "remote hygiene"]},
{"id": "wellmanifest/worktrees", "owns": ["worktree placement", "worktree naming", "lease path identity", "local checkout audit handoff"]},
{"id": "wellmanifest/merge", "owns": ["divergent-work disposition", "merge decision contract"], "excludes": ["merge execution", "deletion"]},
{"id": "wellmanifest/validation-attestation", "owns": ["trusted exact-head evidence", "attestation validation"]},
{"id": "wellmanifest/ticket-lifecycle", "owns": ["ticket state semantics", "ticket transition semantics"]},
{"id": "wellmanifest/authority-lifecycle", "owns": ["authority lease semantics", "fencing and expiry semantics"]},
{"id": "wellmanifest/llm", "owns": ["LLM policy boundary"], "excludes": ["runtime provider credentials", "runtime model routing"]},
{"id": "wellmanifest/logs", "owns": ["structured log contract", "diagnostic event vocabulary"]},
{"id": "wellmanifest/poa", "owns": ["plan of action contract"]},
{"id": "wellmanifest/dsl", "owns": ["DSL interoperability contract"]},
{"id": "wellmanifest/code-dsl", "owns": ["code-level semantic query contract", "AST diagnostics model"]},
{"id": "wellmanifest/nl-dsl-llm", "owns": ["tripartite natural-language, canonical DSL, and adaptive LLM contract", "universal MCP/CLI parity"]},
{"id": "wellmanifest/repair-lifecycle", "owns": ["repair and remediation lifecycle"]},
{"id": "wellmanifest/deployment", "owns": ["deployment contract", "deployment verification"]}
]
}
Loading
Loading