An executable control library, not a folder of templates.
Every control includes a machine-readable contract, domain-specific starter, substantive glossary, targeted failure fixture and actual expected report.
Engineering and release
API Reference
Method, auth, typed parameters, examples, errors, limits and compatibility.
Architecture
Quality attributes, responsibilities, interfaces, trust boundaries and ADR links.
ADR
Controlled status, date, deciders, alternatives, consequences and follow-ups.
Runbook
Access, expected outcomes, failure branches, verification, rollback and escalation.
Postmortem
Impact, timeline, root cause, contributing factors and owned actions.
Incident Review
Detection, impact, decision log, communication and closure evidence.
Migration Guide
Versions, backup, commands, success, rollback and post-migration ownership.
Release Notes
Upgrade path, breaking changes, known issues and support.
Changelog
Semantic versions, dates, categories, security and migration notes.
Onboarding
Access prerequisites, validated setup, first task and acceptance evidence.
Contributing
DCO, two-reviewer gates, security reporting and release authority.
Security Policy
Reporting, supported versions, severity SLAs, disclosure and safe harbour.
Compliance and operations
Policy Document
Accountability, effective date, mandatory requirements, exceptions and evidence.
Audit Report
Criteria, method, evidence index, findings, conclusion and remediation.
Risk Register
Scoring, ownership, treatment, residual risk and review date.
Vendor Assessment
Data, DPA, due diligence, exit test and approval.
Data Retention
Classification, basis, deletion triggers, legal hold and evidence.
Handover
Current state, risk, decisions, action acceptance and response.
Procedure
Separation of duties, step evidence, exceptions and quality review.
Training Module
Measurable outcomes, assessment, accessibility and completion records.
Decision Record
Decision, evidence, dissent, risk, actions and status.
AI and agents
Model Card
Version, use, non-use, data, evaluation, risk and owner.
Dataset Card
Consent, privacy, licensing, bias, access and retention.
Eval Rubric
Weights, anchors, thresholds, adjudication and calibration.
Prompt Contract
Trust boundaries, output schema, failure behavior and injection tests.
Skill Spec
Triggers, non-triggers, permissions, stop rules and proof cases.
Tool Description
Schemas, authorization, side effects, errors and safety limits.
Business and content
Proposal
Objective, evidence, exclusions, acceptance, dependencies and price.
SOW
Parties, exclusions, change order, data, IP, liability and signatures.
Pricing Page
Entitlements, exclusions, tax, refunds, support and fair use.
Case Study
Consent, baseline, method, result, limitations and verifiability.
World Bible
Canon, rules, factions, geography, timeline and continuity.
Character Sheet
Identity, motivation, voice, relationships, limits and review.
Episode Outline
Duration, scene purpose, act turns, continuity and handoff.
Style Guide
Voice, rules, examples, accessibility and ownership.
Chapter Contract
POV, length, reveals, continuity and handoff.
Campaign Brief
Objective, budget, channels, attribution, approvals and risk.
Content Calendar
Timezone, assets, dependencies, publication state and approval.
Localization Brief
Locale, terminology, do-not-translate, bilingual QA and owner.
Glossary
Definition, forbidden aliases, evidence, version and review trigger.
Use them in a real enterprise workflow
The diagnostic selects the ten controls that matter for one production workflow and proves each with representative PASS and FAIL cases.
Request a diagnostic