Versioned starter packs of rules and decisions, hardened by real incidents in regulated industries. Fork one and your first governance run is opinionated on day one.
Hardened baseline for regulated financial-services APIs. v1.1.0 adds rate-limiting and TLS minimums, and promotes PII redaction to a blocker — learned from customer incident post-mortems.
HIPAA-aware Angular baseline. Enforces PHI boundaries in the client, OnPush change detection, signals-only state, and audit breadcrumbs on every chart view.
High-throughput baseline for commerce and catalog APIs. Enforces strict TypeScript, structured logging, cache-aside reads, and idempotent checkout endpoints.
Opinionated FastAPI baseline for B2B platforms. Enforces per-tenant data isolation, row-level security scoping, Pydantic-v2 validation, and background jobs done right.
Your fork freezes the exact rules and ADRs of the version you chose. Publisher updates never change your tenant silently.
New version? You review the diff — including which rules got promoted, and why — before anything changes.
Any starter rule can be tightened or suppressed in Your Rules — on the record, with provenance.