Status: Accepted
The standards a change is held to. Where 50-governance covers how change enters, this covers whether it’s good enough.
Contents
| Doc | Covers |
|---|---|
| code-comments.md | Comment policy — mechanical and judgment rules, lexer-based enforcement |
| code-standards.md | MSRV, strict lint policy, typed errors carrying remedies, module boundaries |
| testing-strategy.md | The pyramid, golden files, fixture discipline, the must-cover paths |
| ci-cd.md | Pipeline stages, cargo-deny, three-platform release via cargo-dist |
| security.md | STRIDE threat model, secret handling, supply chain, secure defaults |
| tooling.md | The external toolchain — SonarQube Cloud, CodeQL, Dependabot, and the rest, all free for public repos |
| definition-of-done.md | The single checklist a change is held to before its PR opens |
All Accepted.
The Q-R namespace
Quality requirements use Q-R##, distinct from feature requirements (A2-R4)
and governance rules (GOV-R12).
A change to how code is written cites a Q-R. A change to what the product does
cites a feature requirement. The separation matters because the two have
different review audiences and different rates of change.
The governing principle
Every rule here is either mechanically enforced or explicitly marked as judgment.
A standard that is neither is decoration. It gets cited when convenient, ignored under deadline pressure, and produces exactly the inconsistency it was written to prevent — while giving everyone the impression the matter is handled.
Where a rule can be checked by a machine, it is, and the check is part of CI. Where it genuinely cannot — whether code is complex enough to deserve a comment, whether an abstraction earns its place — the rule says so plainly and binds contributors anyway.
The comment policy demonstrates the split: mechanical rules
M1–M7 are enforced by a lexer-based test; judgment rules J1–J5 are not,
and say so.
Related
- 50-governance — how change enters
- 30-repos — per-repo technical specs
- 10-functional — what the product should do