feat(traceability): add 21 CFR Part 11 control traceability matrix - #627

Draft

bdeitte wants to merge 109 commits into

mainfrom

feat/part11-traceability

Commits on Aug 28, 2026

docs: add design spec for control tagging, traceability export, part11 example
bdeitte
committed
b134cea
docs: revise part11 traceability design after verification and research
bdeitte
committed
7f82f28
docs: promote evidence-record provenance into the part11 design
bdeitte
committed
bf2963f
docs: require backward-compatible load of pre-1.0 results.json
bdeitte
committed
b868294
docs: register control marks instead of silencing the unknown-mark warning
bdeitte
committed
851fe07
docs: add implementation plan for part11 control traceability
bdeitte
committed
51e4803
fix(plan): make the audit-log immutability check non-destructive
bdeitte
committed
1e8f58a
docs: reconcile part11 spec and plan with the PDF report PR
bdeitte
committed
220b233
feat(plan): add tasks 13-14 rendering the matrix in both report editions
bdeitte
committed
15ac099
fix(plan): scope the report control list to one render via env var
bdeitte
committed
3ae9034
fix(plan): add the missing imports controls_path needs
bdeitte
committed
927cd84
chore: ignore the superpowers SDD workspace
bdeitte
committed
90d8b31
feat(reporting): add schema_version to results.json
bdeitte
committed
23ef1b9
feat(reporting): record per-test start and finish timestamps
bdeitte
committed
fef39db
feat(reporting): attribute results to host, commit and CI run
bdeitte
committed
574403e
docs(plan): warn in load_results on an unknown schema major
bdeitte
committed
a93bb9b
docs: record that the SAS reference is not a CSV tracker
bdeitte
committed
a9f9dd7
feat(reporting): write a sha256 sidecar next to results.json
bdeitte
committed
9924724
fix(reporting): skip shasum test cleanly when binary missing or on Windows
bdeitte
committed
a14ee1f
chore(.gitignore): ignore report/results.json.sha256 sidecar
bdeitte
committed
bdc3e7e
fix(gherkin): keep control tags out of the derived feature marker
bdeitte
committed
14fb9fb
fix(reporting): prevent sidecar failure from suppressing requested outputs
bdeitte
committed
9b735ff
docs(plan): fix an empty code block and an over-length snippet
bdeitte
committed
6ae1dfe
feat(plugin): register control tags as markers before collection
bdeitte
committed
f6914cf
feat(traceability): add the control list model and loader
bdeitte
committed
2aad663
fix(traceability): validate description type and improve error messages
bdeitte
committed
60959d3
fix(traceability): validate verification type and reject whitespace-only descriptions
bdeitte
committed
3e9a852
fix(plugin): find control tags in extension dirs and targeted step files
bdeitte
committed
3b6626b
docs(plan): harden the task 7 control-loader reference code
bdeitte
committed
1df7945
feat(traceability): build the control-to-scenario matrix
bdeitte
committed
4f34c11
feat(traceability): render the matrix as csv and json
bdeitte
committed
362b361
fix(traceability): prevent csv formula injection and preserve json non-ascii
bdeitte
committed
9774f54
feat(cli): add vip trace for compliance traceability matrices
bdeitte
committed
8ad49c0
fix(cli): catch malformed results.json and silence redundant schema warning in vip trace
bdeitte
committed
5032d4d
docs(plan): catch malformed results.json in the trace snippet
bdeitte
committed
22824ed
feat(examples): add a part11 validation scaffold template
bdeitte
committed
4bc5245
fix(traceability): close csv, schema-gate, and 401/403 gaps
bdeitte
committed
d1bf3f0

Commits on Aug 29, 2026

Commits on Aug 30, 2026

Commits on Aug 31, 2026

Merge remote-tracking branch 'origin/main' into feat/part11-traceability
bdeitte
committed
5970d81

Commits on Sep 1, 2026

Commits on Sep 4, 2026