Development Governance Platform — deterministic methodology enforcement for AI-augmented teams
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 53 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
add_task_comment
-
analyze_dependencies
-
assign_task_to_${id}
-
check_merge_readiness
-
complete_and_handoff
-
compute_compliance_score
-
create_${id}
-
create_sandbox
-
create_task
-
delete_orphan_sandbox
-
destroy_sandbox
-
find_task_pr
-
get_${id}_status
-
get_analytics
-
get_audit_summary
-
get_board_data
-
get_compliance_data
-
get_coordination_state
-
get_epic_tasks
-
get_epic_timeline
-
get_governance_memory
-
get_health_data
-
get_methodology_profile
-
get_next_task
-
get_pr_reviews
-
get_project_status
-
get_standup_data
-
get_sub_issues
-
get_task
-
get_task_comments
-
get_task_cycle_time
-
get_task_execution_data
-
get_task_field
-
get_task_lineage
-
ingest_spec
-
init_project
-
list_${id}s
-
list_agents
-
list_orphan_sandboxes
-
list_tasks
-
lock_task
-
parse_strategic_spec
-
persist_audit_findings
-
query_audit_trail
-
register_agent
-
release_task
-
reset_sandbox
-
search_epics
-
validate_${id}_completion
-
validate_all_transitions
-
validate_dependencies
-
validate_epic_integrity
-
validate_transition
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit f2ac022 · analyzer v33 · 4d ago
skills & prompt files 3
- agent-rules ido4-dev-ido4-f2ac022/CLAUDE.md
- agent-rules ido4-dev-ido4-f2ac022/ideas/CLAUDE.md
- prompt-file ido4-dev-ido4-f2ac022/packages/mcp/src/prompts/PROMPT-DESIGN.md
danger signals1
- committed secret GitHub token ido4-dev-ido4-f2ac022/packages/core/tests/infrastructure/github/core/credential-manager.test.ts :32
ghp_ov…(42 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 325
filesystem 31
- fs (weak) ido4-dev-ido4-f2ac022/docs/scripts/generate-previews.mjs :1
import { readdir, mkdir, rm } from 'node:fs/promises'; - fs ido4-dev-ido4-f2ac022/packages/core/src/config/git-workflow-config.ts :8
import * as fs from 'node:fs/promises'; - fs ido4-dev-ido4-f2ac022/packages/core/src/config/methodology-config.ts :11
import { promises as fs } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/core/src/config/profile-loader.ts :8
import { promises as fs } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/core/src/config/project-config-loader.ts :11
import * as fs from 'node:fs/promises'; - fs ido4-dev-ido4-f2ac022/packages/core/src/domains/agents/agent-store.ts :8
import { promises as fs } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/core/src/domains/audit/audit-store.ts :12
import { promises as fs } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/core/src/domains/containers/container-metadata-service.ts :8
import { promises as fs } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/core/src/domains/projects/project-init-service.ts :16
import * as fs from 'node:fs/promises'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/src/domains/sandbox/sandbox-service.ts :20
import * as fs from 'node:fs/promises'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/config/methodology-config.test.ts :2
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/config/profile-loader.test.ts :2
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/container/service-container.test.ts :5
import * as fs from 'node:fs/promises'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/agents/agent-store.test.ts :2
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/audit/audit-store.test.ts :2
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/projects/project-init-service.test.ts :15
import * as fs from 'node:fs/promises'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/domains/sandbox/sandbox-service.test.ts :7
import * as fs from 'node:fs/promises'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/audit-analytics-integration.test.ts :11
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/full-lifecycle-integration.test.ts :24
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/methodology-config-integration.test.ts :12
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/multi-agent-integration.test.ts :12
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/scrum-lifecycle-integration.test.ts :18
import { promises as fs } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/packages/core/tests/integration/shape-up-lifecycle-integration.test.ts :23
import { promises as fs } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/mcp/src/tools/finding-tools.ts :13
import { existsSync, readFileSync, writeFileSync, mkdirSync, renameSync, unlinkSync } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :83
const configData = JSON.parse(await fs.readFile(configPath, 'utf-8')); - fs (weak) ido4-dev-ido4-f2ac022/packages/mcp/tests/finding-tools.test.ts :13
import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/spec-format/esbuild.bundle.mjs :12
import { readFileSync } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/spec-format/src/cli.ts :17
import { readFileSync } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/tech-spec-format/esbuild.bundle.mjs :12
import { readFileSync } from 'node:fs'; - fs ido4-dev-ido4-f2ac022/packages/tech-spec-format/src/cli.ts :20
import { readFileSync } from 'node:fs'; - fs (weak) ido4-dev-ido4-f2ac022/scripts/test-ingestion-live.mjs :8
import fs from 'node:fs';
shell / exec 3
- shell ido4-dev-ido4-f2ac022/packages/core/src/domains/projects/project-init-service.ts :15
import { execFile } from 'node:child_process'; - shell ido4-dev-ido4-f2ac022/packages/core/src/infrastructure/github/core/credential-manager.ts :8
import { execFile } from 'node:child_process'; - shell (weak) ido4-dev-ido4-f2ac022/packages/core/tests/infrastructure/github/core/credential-manager.test.ts :6
// Mock child_process.execFile
network 1
- net ido4-dev-ido4-f2ac022/packages/core/src/infrastructure/github/core/types.ts :50
/** Safety cap on maximum pages to fetch (default: 10) */
secrets 5
- secrets ido4-dev-ido4-f2ac022/packages/core/src/infrastructure/github/core/credential-manager.ts :71
const githubToken = process.env.GITHUB_TOKEN; - secrets (weak) ido4-dev-ido4-f2ac022/packages/core/tests/infrastructure/github/core/credential-manager.test.ts :20
delete process.env.GITHUB_TOKEN; - secrets (weak) ido4-dev-ido4-f2ac022/packages/core/tests/setup.ts :2
process.env.GITHUB_TOKEN = 'test-token-for-unit-tests'; - secrets ido4-dev-ido4-f2ac022/packages/mcp/src/helpers/container-init.ts :32
githubToken: process.env.GITHUB_TOKEN, - secrets (weak) ido4-dev-ido4-f2ac022/packages/mcp/tests/helpers/container-init.test.ts :73
const originalToken = process.env.GITHUB_TOKEN;
tool registrations 53
- register_agent ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :10
- list_agents ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :26
- lock_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :37
- release_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/agent-tools.ts :49
- get_analytics ido4-dev-ido4-f2ac022/packages/mcp/src/tools/analytics-tools.ts :10
- get_task_cycle_time ido4-dev-ido4-f2ac022/packages/mcp/src/tools/analytics-tools.ts :30
- query_audit_trail ido4-dev-ido4-f2ac022/packages/mcp/src/tools/audit-tools.ts :10
- get_audit_summary ido4-dev-ido4-f2ac022/packages/mcp/src/tools/audit-tools.ts :33
- compute_compliance_score ido4-dev-ido4-f2ac022/packages/mcp/src/tools/compliance-tools.ts :10
- list_${id}s ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :31
- get_${id}_status ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :43
- assign_task_to_${id} ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :56
- create_${id} ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :94
- validate_${id}_completion ido4-dev-ido4-f2ac022/packages/mcp/src/tools/container-tools.ts :111
- get_coordination_state ido4-dev-ido4-f2ac022/packages/mcp/src/tools/coordination-tools.ts :13
- analyze_dependencies ido4-dev-ido4-f2ac022/packages/mcp/src/tools/dependency-tools.ts :10
- validate_dependencies ido4-dev-ido4-f2ac022/packages/mcp/src/tools/dependency-tools.ts :21
- get_next_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/distribution-tools.ts :14
- complete_and_handoff ido4-dev-ido4-f2ac022/packages/mcp/src/tools/distribution-tools.ts :26
- search_epics ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :23
- get_epic_tasks ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :34
- get_epic_timeline ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :45
- validate_epic_integrity ido4-dev-ido4-f2ac022/packages/mcp/src/tools/epic-tools.ts :56
- persist_audit_findings ido4-dev-ido4-f2ac022/packages/mcp/src/tools/finding-tools.ts :39
- get_governance_memory ido4-dev-ido4-f2ac022/packages/mcp/src/tools/finding-tools.ts :165
- check_merge_readiness ido4-dev-ido4-f2ac022/packages/mcp/src/tools/gate-tools.ts :13
- ingest_spec ido4-dev-ido4-f2ac022/packages/mcp/src/tools/ingestion-tools.ts :14
- parse_strategic_spec ido4-dev-ido4-f2ac022/packages/mcp/src/tools/ingestion-tools.ts :36
- init_project ido4-dev-ido4-f2ac022/packages/mcp/src/tools/project-tools.ts :21
- get_project_status ido4-dev-ido4-f2ac022/packages/mcp/src/tools/project-tools.ts :68
- create_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :41
- destroy_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :59
- reset_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :72
- list_orphan_sandboxes ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :104
- delete_orphan_sandbox ido4-dev-ido4-f2ac022/packages/mcp/src/tools/sandbox-tools.ts :115
- get_standup_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :22
- get_board_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :36
- get_compliance_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :49
- get_health_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :65
- get_task_execution_data ido4-dev-ido4-f2ac022/packages/mcp/src/tools/skill-data-tools.ts :78
- get_methodology_profile ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :42
- get_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :54
- get_task_field ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :67
- list_tasks ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :83
- create_task ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :98
- validate_transition ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :125
- validate_all_transitions ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :139
- find_task_pr ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :154
- get_pr_reviews ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :165
- add_task_comment ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :178
- get_task_comments ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :189
- get_task_lineage ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :223
- get_sub_issues ido4-dev-ido4-f2ac022/packages/mcp/src/tools/task-tools.ts :240