Mechanism census
Every mechanism, by role and family. form (the shape it takes) and Enf. (soft/hard) are the cross-cuts (see README). Families 1–5 = the agent role (the fleet + work-producing substrate); family 6 = the models-bridge (the MBSE substrate between the two); families 7–11 = the product role (the shipped artifact). All <!--census:controls-->69<!--/census--> entries are fully written (✅).
Enf. = soft/hard (see README Governance has two mechanisms): Hard = deterministic (blocking / audit / signal); Soft = probabilistic (influences, cannot block); Soft·Hard = soft guidance with a hard counterpart.
Agent target
1. Context & dispatch substrate
What an agent knows and how it is launched. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Brief-linting | validation | Hard | brief-linting.md |
| ✅ | Docs hierarchy + governance index | validation | Soft·Hard | docs-hierarchy.md |
| ✅ | Dynamic context injection | agent-output | Soft | dynamic-context-injection.md |
| ✅ | Role-typed dispatch | quality-gate | Hard | role-typed-dispatch.md |
2. Gates & merge-train
The path-to-production staircase for agent work. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Pre-commit hook (3-stanza, tree-sha markers) | quality-gate | Hard | pre-commit-hook.md |
| ✅ | Sentinel first-commit early-abort | quality-gate | Hard | sentinel-first-commit.md |
| ✅ | Merge-train MIS batching | quality-gate | Hard | merge-train-mis-batching.md |
| ✅ | Staged deploy gates (canary → smoke → promote) | quality-gate | Hard | staged-deploy-gates.md |
3. Mediators & resource locks
Host-level wrappers that ration shared compute across concurrent worktrees. Three cap by cardinality — one resource-mediator pattern at three lock cardinalities (exclusive N=1 · bounded M=8 · a global mutex); the fourth caps by live pressure instead of count (an admit-before / shed-during gate on a GREEN/YELLOW/RED signal). — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Test-serializer (N=1 flock on dotnet test) | regression | Hard | test-serializer.md |
| ✅ | Build-serializer (M=8 semaphore) | validation | Hard | build-serializer.md |
| ✅ | Aggregate-compute protection (lint-all host mutex) | validation | Hard | aggregate-compute-protection.md |
| ✅ | Resource-pressure gating (admit before, shed during) | quality-gate | Hard | resource-pressure-gating.md |
4. Lifecycle & observability
Live signal surfaces over the fleet. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Agent-registry (agent-registry.jsonl + marker cache) | observability | Hard (signal) | agent-registry.md |
| ✅ | Orchestrator-as-reactor over an event bus | observability | Hard (signal) | typed-event-bus.md |
| ✅ | Deploy heartbeats + stale-worker detection | observability | Hard (signal) | deploy-heartbeats.md |
| ✅ | Tombstone commits (lifecycle close records) | audit-trail | Hard (audit) | tombstone-commits.md |
| ✅ | Cron-alerts gate | observability | Hard (blocking) | cron-alerts-gate.md |
| ✅ | Lifecycle hooks (turn-stop / compaction / session-start / pre-action) | quality-gate | Soft·Hard | lifecycle-hooks.md |
| ✅ | Reflection-facet substrate (tempo-gated policy nudges) | quality-gate | Soft·Hard | reflection-facet-substrate.md |
| ✅ | Caused-by provenance (agent-side change traceability) | audit-trail | Hard | caused-by-provenance.md |
5. Governance-doc mechanisms
Documentation treated as enforced infrastructure. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | CLAUDE.md rule index + cap lint | validation | Soft·Hard | claude-md-rule-index.md |
| ✅ | Mandatory snippet-table enforcement | validation | Hard | mandatory-snippet-table.md |
| ✅ | Epic Definition-of-Done (Final-Opus trust-nothing re-run) | quality-gate | Hard | epic-definition-of-done.md |
| ✅ | Doc-hygiene lints (index coverage, autogen provenance) | validation | Hard | doc-hygiene-lints.md |
| ✅ | Operational playbooks (situation-keyed devops procedures) | agent-output | Soft | operational-playbooks.md |
| ✅ | Operator runbook skill (positive map + symptom index, ref-lint-kept) | agent-output | Soft·Hard | operator-runbook-skill.md |
| ✅ | Epic & design-doc templates | agent-output | Soft·Hard | epic-and-design-templates.md |
| ✅ | Enforce at the right semantic level | agent-output | Soft | semantic-level-enforcement.md |
Models-bridge
6. System models
One MBSE method (the trunk — <!--census:bridge_method:word-->thirteen<!--/census--> subject-agnostic mechanisms) reified toward the two subjects the bridge couples: the product it ships and the orchestration that builds it (a Y). <!--census:bridge_models:Word-->Eight<!--/census--> models split product-facing (service-flow, user-journey, domain-registries) · orchestration-facing (synchronization, agent-orch) · shared-spine (component-zone, concurrency, deployment — both faces); the <!--census:bridge_method:word-->thirteen<!--/census--> method-mechanisms — incl. formal temporal-logic verification, coverage→model-node mapping, journey-criticality → test-tier placement, invariant-DAG execution policy, computed control↔substrate blast-radius, and the symbol-anchored traceability graph — hold them all true. Rows below are grouped trunk → product → orchestration → shared. — family folder · role README
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Executable source-of-truth (data-not-code, can't drift) — trunk / method | typed-ir | Hard | executable-source-of-truth.md |
| ✅ | Drift & parity gates (model↔reality) — trunk / method | validation | Hard | drift-parity-gates.md |
| ✅ | Agent-first MBSE harness (frozen records; adopt schema, skip runtime) — trunk / method | typed-ir | Hard | agent-first-mbse-harness.md |
| ✅ | Formal invariant verification (temporal form → model check) — trunk / method | validation | Hard | formal-invariant-verification.md |
| ✅ | Coverage → model-node mapping (which invariants are tested) — trunk / method | validation | Soft·Hard | coverage-model-mapping.md |
| ✅ | Journey-criticality → test-tier placement (which host a test runs on) — trunk / method | validation | Soft·Hard | journey-criticality-test-placement.md |
| ✅ | Invariant-DAG execution policy (typed Scheduler: correctness vs resource + cost) — trunk / method | typed-ir | Soft·Hard | invariant-dag-execution-policy.md |
| ✅ | Model-driven codegen — trunk / method | validation | Hard | model-driven-codegen.md |
| ✅ | Model query surface (repo-query) — trunk / method | agent-output | Soft | query-surface.md |
| ✅ | Meta-model consumption (read, don't hardcode) — trunk / method | typed-ir | Hard | meta-model-consumption.md |
| ✅ | Control↔substrate dependency (computed blast-radius) — trunk / method | typed-ir | Hard | control-substrate-dependency.md |
| ✅ | Symbol-anchored traceability graph (derived edges) — trunk / method | typed-ir | Hard | symbol-anchored-traceability-graph.md |
| ✅ | Model-graded finding severity (distance-graded gate) — trunk / method | quality-gate | Hard | model-graded-finding-severity.md |
| ✅ | Service-flow / API model — product-facing | typed-ir | Hard | service-flow-model.md |
| ✅ | User-journey model (product-goal → implementation) — product-facing | typed-ir | Hard | user-journey-model.md |
| ✅ | Domain registries — product-facing | typed-ir | Hard | domain-registries.md |
| ✅ | Synchronization model (meta-sync) — orchestration-facing | typed-ir | Hard | synchronization-model.md |
| ✅ | Agent-orchestration model (developer journeys) — orchestration-facing | typed-ir | Hard | agent-orchestration-model.md |
| ✅ | Component & zone model — shared spine | typed-ir | Hard | component-zone-model.md |
| ✅ | Mediator & single-writer contracts — shared spine | typed-ir | Hard | concurrency-contracts.md |
| ✅ | Deployment & tier topology — shared spine | typed-ir | Hard | deployment-topology-model.md |
Product target
7. Canonical models & seams
The one sanctioned typed model or seam per concern, each held in place by a ban-lint. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | PdfModel (sole PDF mutation surface) | typed-ir | Hard | pdf-model.md |
| ✅ | Office Models ({Slides,Docs,Sheets}Model) | typed-ir | Hard | office-models.md |
| ✅ | ServiceClient (typed cross-service seam) | bounded-service | Hard | service-client.md |
| ✅ | Canonical walkers (one traversal per tree) | typed-ir | Hard | canonical-walkers.md |
| ✅ | Sole raw-Redis seam (the dispatch module) | bounded-service | Hard | raw-redis-seam.md |
8. Validation & conformance
Deterministic pass/fail checks over the artifact. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | ContentValidator (input ⊆ output fidelity) | validation | Hard | content-validator.md |
| ✅ | Blocking semantic lints | validation | Hard | semantic-lints.md |
| ✅ | Standards / WCAG rule engine | validation | Hard | standards-rule-engine.md |
| ✅ | Cross-source coherence lints | validation | Hard | coherence-lints.md |
9. Regression tests
Repeatable behaviour-pinning bodies. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Test-onion tiers (Smoke / Lite / targeted / full) | regression | Hard | test-onion-tiers.md |
| ✅ | FsCheck property tests | regression | Hard | property-tests.md |
| ✅ | Fuzz campaigns (+ auto-coverage) | regression | Hard | fuzz-campaigns.md |
| ✅ | DDT pin-trailers | regression | Hard | ddt-pin-trailers.md |
10. Provenance & attribution
Durable records of what the tool changed. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Per-mutator attribution stamps | audit-trail | Hard (audit) | mutator-stamps.md |
| ✅ | F10 mutator-stamp-wiring lint | validation | Hard | f10-wiring-lint.md |
| ✅ | derive-changelog (reconstruct mutations) | audit-trail | Hard (audit) | derive-changelog.md |
| ✅ | a11y_ prefix convention | repair-vocab | Hard | a11y-prefix.md |
11. Repair vocabulary
The bounded move-space of the remediator. — family folder
| ✓ | Mechanism | Form | Enf. | Entry |
|---|---|---|---|---|
| ✅ | Typed ViolationCategory / FailureCategory enums | repair-vocab | Hard | typed-categories.md |
| ✅ | Closed remediation-verb sets | repair-vocab | Hard | remediation-verbs.md |
| ✅ | Codemod-first threshold (N≳50 → AST transformer) | repair-vocab | Soft | codemod-first.md |
Three roles complete — 69 mechanisms across 11 families, all fully developed. Agent (28): Context & dispatch (4) · Gates & merge-train (4) · Mediators & resource locks (4) · Lifecycle & observability (8) · Governance-doc mechanisms (8, incl. the CLAUDE.md rule index meta-mechanism). Models-bridge (21): the MBSE method (<!--census:bridge_method-->13<!--/census--> subject-agnostic mechanisms, incl. formal temporal-logic verification, coverage→model-node mapping, journey-criticality → test-tier placement, invariant-DAG execution policy, computed control↔substrate blast-radius, + the symbol-anchored traceability graph) reified as a Y over <!--census:bridge_models-->8<!--/census--> models — product-facing 3 (service-flow · user-journey · domain-registries) · orchestration-facing 2 (synchronization · agent-orch) · shared-spine 3 (component-zone · concurrency · deployment, both faces); the MBSE substrate through which a bounded agent operates an unbounded codebase. Product (20): Canonical models & seams (5) · Validation & conformance (4) · Regression tests (4) · Provenance & attribution (4) · Repair vocabulary (3).