feat: add multi-sourced-ownership x-property detection to OpenApiAttributeDocumentationCheck

[kotis831]

Summary

• Extends OpenApiAttributeDocumentationCheck to recognise and parse the multi-sourced-ownership key in the OpenAPI x: extension array on controller write methods
• When x: ['multi-sourced-ownership' => true] is present, the check tracks it — enabling downstream BambooHR plugin checks (e.g. MultiSourcedOwnershipCheck) to enforce that MultiSourcedOwnershipPolicy is wired into the call chain from that endpoint
• Adds test fixture .5.inc covering the four cases: flag absent, flag=true with the resolver call present, flag=false, and flag=true with the call missing (1 expected error)

Made with Cursor

[kotis831]

mechanism: fit-report
status: advisory
mode: pr
summary: "no-grounding — no Jira / Slite / Google Docs / committed-in-repo-path / allow-listed companion PR mentioned in PR prose or commits"
commit_sha: 224f2e5b7b6576261c5c911f9580457d9fbf94c5
generator: pr-fit-report/v1

Fit Report

PR: feat: add multi-sourced-ownership x-property detection to OpenApiAttributeDocumentationCheck
Base → Head: master → kotis/multi-sourced-ownership-x-tag (224f2e5b7b6576261c5c911f9580457d9fbf94c5)
Generated: 2026-05-14 15:56 MDT (UTC-0600) — observations only

Note

ℹ No fit report could be generated — no grounding sources were mentioned in the PR description, the PR title, or any commit message on this branch. The skill posts this comment to record that it ran; if grounding was missing by mistake, mention the relevant Jira ticket / Slite spec / Google Doc / committed in-repo path / companion PR in the PR description (or any commit message) and re-run.

[kotis831]

mechanism: team-standards-review
status: advisory
mode: pr
summary: "0 findings across 0 standards sources (0 AGENTS.md/CLAUDE.md, 0 tracked cursor rules, 0 repo-root review/contributing files, 0 inlined ADRs applied, 0 inlined REST API standards applied)"
findings_count: 0
commit_sha: 224f2e5b7b6576261c5c911f9580457d9fbf94c5
generator: pr-team-standards/v1

Team-Standards Review

PR: feat: add multi-sourced-ownership x-property detection to OpenApiAttributeDocumentationCheck
Base → Head: master → kotis/multi-sourced-ownership-x-tag (224f2e5b7b6576261c5c911f9580457d9fbf94c5)
Generated: 2026-05-14 15:56 MDT (UTC-0600) — observations only

Tip

✓ No drift observed — the diff appears to follow loaded standards.

Findings

(no standards drifts observed)

Drafting inputs

(no .code-review/ skill overrides discovered)

[kotis831]

Closing per review feedback from @jongardiner.

Guardrail core is open source and is intended to hold only generic, org-agnostic PHP checks. multi-sourced-ownership is a BambooHR-specific concept, so detecting/enforcing it does not belong in core OpenApiAttributeDocumentationCheck.

The enforcement now lives entirely in main as a self-contained Guardrail plugin: plugins/guardrail/MultiSourcedOwnershipCheck.php (BambooHR/main#129683). That plugin does its own x: ['multi-sourced-ownership' => true] tag detection and uses only the public plugin API (BaseCheck, symbolTable, emitErrorOnLine), so it requires no changes to this repo.

No core guardrail change is needed — closing this PR.