feat(scaffold): SIAX masterplan-lock-gate + PLAN/MASTERPLAN_INDEX.md integrering

2026-09-10 13:27:19 +02:00
parent 51f05ffeba
commit d8463e7ffe
3 changed files with 92 additions and 0 deletions
@@ -0,0 +1,53 @@
+#!/usr/bin/env sh
+# check-masterplan-lock.sh
+#
+# Fails the build if this repo has drifted from the canonical SIAX Non-Platform
+# masterplan (sax3l/siax-masterplan). Dependency-free (POSIX sh + grep only) so
+# it runs before any language toolchain is installed.
+#
+# What it guards against:
+#   1. PLAN/MASTERPLAN_INDEX.md being deleted (silent regression to a parallel
+#      truth with no pointer back to the canonical docs).
+#   2. The "locked architecture principles" section being stripped or edited
+#      away, which is the actual enforcement text (one canonical owner per
+#      domain/truth, no cross-service SQL, no frontend-tenant-trust, no
+#      production-mock-fallbacks, API-first).
+#   3. The status vocabulary line (MISSING -> ... -> PRODUCTION_READY) going
+#      missing, which would let a repo invent its own status labels.
+#
+# See PLAN/MASTERPLAN_INDEX.md and sax3l/siax-masterplan for the source of
+# truth. Do not weaken this check to make a red build pass -- fix the drift
+# in PLAN/MASTERPLAN_INDEX.md instead (or resync it from siax-masterplan).
+
+set -eu
+
+PLAN_FILE="PLAN/MASTERPLAN_INDEX.md"
+fail=0
+
+if [ ! -f "$PLAN_FILE" ]; then
+  echo "::error::${PLAN_FILE} is missing. This repo must carry a repo-local copy of the SIAX Non-Platform masterplan index (source: sax3l/siax-masterplan). Restore it -- do not remove this check."
+  exit 1
+fi
+
+check_contains() {
+  needle="$1"
+  label="$2"
+  if ! grep -qF "$needle" "$PLAN_FILE"; then
+    echo "::error::${PLAN_FILE} no longer contains ${label} ('${needle}'). This looks like drift away from the canonical masterplan (sax3l/siax-masterplan). Refresh PLAN/MASTERPLAN_INDEX.md from source instead of editing this check."
+    fail=1
+  fi
+}
+
+check_contains "Låsta arkitekturprinciper" "the locked-architecture-principles heading"
+check_contains "En canonical owner per domän och sanning" "the one-canonical-owner-per-domain principle"
+check_contains "aldrig egen SQL" "the no-own-SQL / no-parallel-truth clause"
+check_contains "ingen frontend-tenant-trust" "the no-frontend-tenant-trust clause"
+check_contains "PRODUCTION_READY" "the status vocabulary"
+check_contains "sax3l/siax-masterplan" "the pointer back to the canonical masterplan repo"
+
+if [ "$fail" -ne 0 ]; then
+  echo "::error::masterplan lock check FAILED -- see above."
+  exit 1
+fi
+
+echo "masterplan lock check OK -- ${PLAN_FILE} still matches the canonical principles."