 Reuven
|
02eee0bcdc
|
docs(adr): bulk-update plugin contract ADR statuses (sweep)
- 27 plugins moved Proposed → Accepted (shipped versions, in marketplace)
- 0 plugins kept as Proposed (all have real versions ≥ 0.2.0)
Per-plugin breakdown:
ruflo-aidefence v0.2.0 Accepted — 3-gate pattern, 6 aidefence_* tools
ruflo-autopilot v0.2.0 Accepted — 10 autopilot_* tools, /loop integration
ruflo-core v0.2.1 Accepted — MCP server contract, plugin-catalog discovery
ruflo-cost-tracker v0.16.1 Accepted — namespace-routing fix, ADR-097 budget integration
ruflo-daa v0.2.0 Accepted — 8 daa_* tools, intelligence-pipeline alignment
ruflo-ddd v0.2.0 Accepted — AgentDB domain graph, SPARC Architecture-phase
ruflo-docs v0.2.0 Accepted — document worker dispatch, drift detection
ruflo-federation v0.2.0 Accepted — ADR-097 Phase 1+2, 3-gate alignment
ruflo-goals v0.2.0 Accepted — 6 namespaces, GOAP + dossier ADR-099
ruflo-iot-cognitum v0.2.0 Accepted — 5-tier trust, 6 background workers
ruflo-jujutsu v0.2.0 Accepted — 6 analyze_* tools, ADR-compliance cross-link
ruflo-knowledge-graph v0.2.0 Accepted — embeddings_generate fix, pathfinder
ruflo-loop-workers v0.2.0 Accepted — 12 worker triggers, 5 hooks_worker-* tools
ruflo-market-data v0.2.0 Accepted — embeddings + namespace-routing bugs fixed
ruflo-migrations v0.2.0 Accepted — namespace-routing bug fixed both skills
ruflo-neural-trader v0.2.0 Accepted — 4 namespaces already compliant
ruflo-observability v0.2.0 Accepted — namespace-routing bug fixed both skills
ruflo-plugin-creator v0.2.0 Accepted — scaffolding templates updated with contract
ruflo-rag-memory v0.2.0 Accepted — claude-memories reserved namespace consumer
ruflo-ruvllm v0.2.0 Accepted — LLM-config + chat-format slice ownership
ruflo-rvf v0.2.0 Accepted — portable-memory + session-persistence slice
ruflo-security-audit v0.2.0 Accepted — 3-gate + audit_1776853149979 regression class
ruflo-sparc v0.2.0 Accepted — all 5 SPARC phases cross-linked
ruflo-swarm v0.2.0 Accepted — 12 MCP tools (4 swarm_* + 8 agent_*)
ruflo-testgen v0.2.0 Accepted — testgaps worker + coverage CLI commands
ruflo-wasm v0.2.0 Accepted — 10 wasm_* tools, ADR-070 cross-ref
ruflo-workflows v0.2.0 Accepted — 10 workflow_* tools, SPARC phase transitions
Each ADR received: updated: 2026-05-09 in frontmatter + Implementation status
section noting version, marketplace presence, and contract element alignment.
Co-Authored-By: RuFlo <ruv@ruv.net>
|
2026-05-09 15:10:42 -04:00 |
|
|
Reuven
|
c203bc5d88
|
feat(ruflo-security-audit): adopt plugin contract — AIDefence static/runtime layered integration (ADR-0001)
Plugin already at v0.2.0 with 1 agent + 2 skills + 1 command. The
contract pieces were missing.
Notable: this plugin's static analysis layer complements ruflo-aidefence's
runtime 3-gate pattern. ADR-0001 documents the layered story:
| Layer | Owner | What it catches |
|------------------|------------------------|------------------------------------------------------------------|
| Static analysis | ruflo-security-audit | Shell-injection patterns, CVEs, plaintext secrets, loader-hijack |
| Runtime 3-gate | ruflo-aidefence ADR-1 | PII pre-storage, sanitization, prompt-injection |
Static analysis finds the patterns; the runtime gates catch what slipped
through. The audit_1776853149979 pattern catalog (already in README) is
the regression-prevention contract for the shell-injection class the
3.6.25 release closed.
- ADR-0001 (Proposed) at docs/adrs/0001-security-audit-contract.md
- README adds Compatibility (pin v3.6), AIDefence integration block
(static/runtime layered table; cross-reference to ruflo-aidefence
ADR-0001), Namespace coordination (claims security-findings; defers to
ruflo-agentdb ADR-0001), Verification + Architecture Decisions
- plugin.json keywords add mcp, cve-monitoring, policy-gates,
shell-injection (already at v0.2.0)
- scripts/smoke.sh — 10 structural checks: version + keywords, both
skills + agent + command present, v3.6 pin, namespace coordination,
security-findings claimed, AIDefence 3-gate cross-reference,
audit_1776853149979 pattern catalog intact (execSync, execFileSync,
loader-hijack, isSafePackageSpec), ADR-096 encryption cross-reference,
ADR Proposed, no wildcard tools
Verification: bash plugins/ruflo-security-audit/scripts/smoke.sh → 10/10
Co-Authored-By: RuFlo <ruv@ruv.net>
|
2026-05-04 20:37:35 -04:00 |
|