felipe/vibeflow-n8n
1
0
Fork 0
mirror of https://github.com/domfelipe/vibeflow-n8n.git synced 2026-08-07 05:16:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add outcome-aware preflight contracts for v0.9 (#6)

Browse source 
Add VF010-VF013, structural outcome contracts, adversarial fixtures, documentation, and Friday release materials.
This commit is contained in:
Felipe Domingues 2026-07-22 13:58:46 -03:00 • committed by GitHub
parent b312f18251
commit f62a78faaf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
23 changed files with 1107 additions and 95 deletions
Download patch file Download diff file Expand all files Collapse all files

8
docs/roadmap.md
View file

@ -4,17 +4,23 @@
Ship the executable reset: CLI, nine configurable policies, fixtures, tests, SARIF, GitHub Action, and Codex plugin.
## 0.9.0 — target 2026-07-24
Separate dangerous nodes from dangerous outcomes. Add VF010-VF013, explicit outcome contracts, graph evidence for policy gates, safe/unsafe refund fixtures, and clear runtime boundaries.
## Next release gate
Do not add another integration by default. Prioritize evidence from real workflows:
1. Measure false positives by rule.
1. Measure false positives by rule and impact classifier.
2. Accept anonymized fixtures from external users.
3. Add a node type or policy only with a failing fixture.
4. Improve GitHub annotations if SARIF users request it.
5. Package for npm only when GitHub installation creates material friction.
6. Add node-specific handoff and side-effect adapters only with adversarial safe/unsafe fixtures.
7. Model additional atomic idempotency gates only when their duplicate path is proven to stop downstream items.
8. Add impact categories and adapters only with a real anonymized workflow and an adversarial fixture.
9. Explore optional runtime attestations only after users demonstrate that static contracts are insufficient.
## Explicitly deferred