Skip to content

Latest commit

 

History

History
163 lines (143 loc) · 78.8 KB

README.md

File metadata and controls

163 lines (143 loc) · 78.8 KB

Documentation index

Português (Brasil): README.pt_BR.md

Data Boar is not shelfware; it is a precision instrument for forensic auditing. Every code path follows flight-engineering rigor. If documentation does not reflect code, documentation is a bug.

This folder centralizes application documentation. Navigation hubs (start here for agents): hubs/INDEX.md (pt-BR). Repository root keeps the files that GitHub and tooling expect (e.g. README.md, SECURITY.md, CONTRIBUTING.md, CODE_OF_CONDUCT.md, LICENSE). Use this index to find guides in English and Português (Brasil) and to jump between languages. Browse the tables below by topic; each row links to the English and Português (Brasil) version when available, so you can reach every document and switch language at any time. Partners / investors landing from GitHub: the root README section The Architect's Vault (README.md) surfaces the decision-maker value brief, ADR index, narrative history placeholder, governance-of-the-auditor ADR, and this index in one table—without linking execution plans from the pitch surface (ADR 0004). Concern-first navigation (CISO / DPO: minors, jurisdiction hints, child-privacy samples): MAP.md (pt-BR).

Documentation policy

  • Operator-only / homelab facts: Real hostnames, LAN IPs, and inventory belong in gitignored docs/private/homelab/, not in tracked Markdown. Policy: PRIVATE_OPERATOR_NOTES.md (pt-BR). Tracked template to copy: private.example/.
  • Location: Application documentation (user-facing guides, reference, branding, plans, releases) lives under docs/. The repo root keeps only what GitHub and automation expect: README, SECURITY, CONTRIBUTING, CODE_OF_CONDUCT, LICENSE, NOTICE, TERMS_OF_USE, PRIVACY_POLICY. Do not move those. Module-level READMEs that are mere pointers (e.g. deploy/README.md, tests/README.md) or deprecated notices next to code (e.g. database/, scanners/) may stay beside the code. .github/ and .cursor/ stay where GitHub and Cursor expect them. New substantive docs (e.g. mascot, logo candidates, feature guides) belong in docs/ and should be linked from this index. Operator runbooks (Git workflow, home-lab validation, self-hosted SonarQube, notification channels, Docker deploy troubleshooting) live under ops/ in English and pt-BR; primary user-facing guides (USAGE, TESTING, DOCKER_SETUP) stay at docs/ root so app-user discoverability is unchanged.
  • English (EN) is the canonical source: it represents the true capabilities, features, arguments, config, and behaviour of the application. When behaviour or options change, update the English doc first.
  • Brazilian Portuguese (pt-BR) must be kept in sync with the English version. Each pt-BR file is a translation of its English counterpart (same structure and coverage).
  • New documentation: Any new documentation file (user-facing guides, reference, legal/copyright, deploy, testing, etc.) must exist in both English and Brazilian Portuguese. Exception: plan files (e.g. under docs/plans/, docs/plans/completed/, or .cursor/plans/) and numbered ADR bodies (docs/adr/ADR-0000-*.md, ADR-0001-*.md, …) may be English-only (canonical decision text); the adr/README.md index has a pt-BR companion. When a plan or ADR drives application changes, update the other docs (README, USAGE, etc.) in both languages when they are user-facing.
  • When you update docs to reflect application changes, sync the other language too: edit the EN doc first, then update the corresponding pt-BR file so structure and coverage stay aligned.
  • Language switcher: Every documentation file that has a translation must have at the top (right after the title or in the first line) a clear link to the other language, e.g.
  • In EN files: **Português (Brasil):** [Filename.pt_BR.md](Filename.pt_BR.md)
  • In pt-BR files: **English:** [Filename.md](Filename.md)
  • Discoverability: When a doc mentions a topic that has its own dedicated doc (e.g. deploy, Docker, Kubernetes, testing, topology, commit/PR, compliance), it should link to that doc; if that doc exists in both languages, provide both links (e.g. [DEPLOY.md](deploy/DEPLOY.md) ([pt-BR](deploy/DEPLOY.pt_BR.md))) so the user can switch language easily. The main index is this README.
  • Planning vs product docs: Do not add Markdown links from buyer/legal/compliance/product guides into docs/plans/ or .cursor/plans/. Use this index Internal and reference (below) as the deliberate entry point to PMO files; operator runbooks under docs/ops/ may still link to plans. CI guard: tests/test_docs_external_no_plan_links.py. Rule: .cursor/rules/audience-segmentation-docs.mdc.

Root (do not move)

These stay at repo root for GitHub and automation:

Document English Português (pt-BR)
Readme README.md README.pt_BR.md
License LICENSE LICENSE.pt_BR.md
Notice (copyright) NOTICE NOTICE.pt_BR.md
Terms of use TERMS_OF_USE.md TERMS_OF_USE.pt_BR.md
Privacy policy PRIVACY_POLICY.md PRIVACY_POLICY.pt_BR.md
Security SECURITY.md SECURITY.pt_BR.md
Contributing CONTRIBUTING.md CONTRIBUTING.pt_BR.md
Code of conduct CODE_OF_CONDUCT.md CODE_OF_CONDUCT.pt_BR.md
Quick start (5 min) QUICKSTART.md QUICKSTART.pt_BR.md

Usage and configuration

Topic English Português (pt-BR)
Quick start (5 min — first contact) QUICKSTART.md QUICKSTART.pt_BR.md
Technical guide (install, run, CLI/API, connectors) TECH_GUIDE.md TECH_GUIDE.pt_BR.md
Enterprise integration (IT / SRE — deploy, CI, security; not pricing) ENTERPRISE_INTEGRATION_GUIDE.md ENTERPRISE_INTEGRATION_GUIDE.pt_BR.md
Topic map (minors, jurisdiction hints, child-privacy samples — by concern) MAP.md MAP.pt_BR.md
Usage (CLI, API) USAGE.md USAGE.pt_BR.md
Config samples hub (links to deploy/samples, legacy JSON note) samples/README.md samples/README.pt_BR.md
Sensitivity (ML/DL) SENSITIVITY_DETECTION.md SENSITIVITY_DETECTION.pt_BR.md
Minor detection MINOR_DETECTION.md MINOR_DETECTION.pt_BR.md
Security (fixes, tests, technician guidance; operator hardening / Priority band A) SECURITY.md · CODE_PROTECTION_OPERATOR_PLAYBOOK.md SECURITY.pt_BR.md · CODE_PROTECTION_OPERATOR_PLAYBOOK.pt_BR.md
Versioning VERSIONING.md VERSIONING.pt_BR.md
Adding connectors ADDING_CONNECTORS.md ADDING_CONNECTORS.pt_BR.md
Plugin author guide (YAML pattern plugins — regex / ML / DL) PLUGIN_AUTHOR_GUIDE.md PLUGIN_AUTHOR_GUIDE.pt_BR.md
Plugin SDK (Enterprise remediation L1 — partner guide) PLUGIN_SDK.md PLUGIN_SDK.pt_BR.md
Plugin SDK contract (language-neutral L1/L2/L3 — #865) SDK.md · sdk/PLUGIN_CONTRACT.schema.json — (EN hub; L1 how-to remains in PLUGIN_SDK.pt_BR)
Compliance COMPLIANCE_FRAMEWORKS.md COMPLIANCE_FRAMEWORKS.pt_BR.md
ITSM / IT governance alignment (ITIL 4, COBIT, ISO 38500 / 27014 / 20000) ITSM_GOVERNANCE_ALIGNMENT.md ITSM_GOVERNANCE_ALIGNMENT.pt_BR.md
Audience guide (entry points by role — overlaps, what to skip) AUDIENCE_GUIDE.md AUDIENCE_GUIDE.pt_BR.md
Decision-maker value brief (leadership/legal/compliance) DECISION_MAKER_VALUE_BRIEF.md DECISION_MAKER_VALUE_BRIEF.pt_BR.md
Compliance and legal (for legal teams and DPOs) COMPLIANCE_AND_LEGAL.md COMPLIANCE_AND_LEGAL.pt_BR.md
Compliance methodology (verification modules, ROPA-style column priorities) COMPLIANCE_METHODOLOGY.md COMPLIANCE_METHODOLOGY.pt_BR.md
Reports and compliance outputs (XLSX, heatmap, audit JSON, maturity export; PDF roadmap) REPORTS_AND_COMPLIANCE_OUTPUTS.md REPORTS_AND_COMPLIANCE_OUTPUTS.pt_BR.md
GRC executive JSON (risk matrix contract for CISO/DPO dashboards and PDF engines) GRC_EXECUTIVE_REPORT_SCHEMA.md GRC_EXECUTIVE_REPORT_SCHEMA.pt_BR.md
Jurisdiction collision / multinational hints (DPO narrative — not legal advice) JURISDICTION_COLLISION_HANDLING.md JURISDICTION_COLLISION_HANDLING.pt_BR.md
Use-case storyboards (workshop flows) use-cases/README.md (MSP, insurance, RPO, real estate, NGO, EdTech, port, law, accounting, pharma — mid-market) use-cases/README.pt_BR.md
Executive pitch decks (stakeholder, DPO, DPO+legal, CISO, CDO, IT governance, PMO, CFO, CCO) pitch/INDEX.md pitch/INDEX.pt_BR.md
Product philosophy (evidence over theatre; public-safe) philosophy/THE_WHY.md philosophy/THE_WHY.pt_BR.md
Engineering practices (fail-closed, pin+cooldown, integrity, metadata-first) ENGINEERING_PRACTICES.md ENGINEERING_PRACTICES.pt_BR.md
LGPD witness report (ISP field visit — consumer awareness, Brazil 2026) LGPD_WITNESS_REPORT_NIO_FIELD_VISIT_2026.md LGPD_WITNESS_REPORT_NIO_FIELD_VISIT_2026.pt_BR.md
Compliance technical reference (IT, security — encodings, API limits, timeouts) COMPLIANCE_TECHNICAL_REFERENCE.md COMPLIANCE_TECHNICAL_REFERENCE.pt_BR.md
Compliance samples (UK GDPR, EU GDPR, PIPEDA, 152-FZ (Russia), etc.) compliance-samples/ · COMPLIANCE_FRAMEWORKS.md#compliance-samples · compliance-samples/OPERATOR_GOVERNANCE_CHECKLIST.md compliance-samples/ · COMPLIANCE_FRAMEWORKS.pt_BR.md#amostras-de-conformidade · compliance-samples/OPERATOR_GOVERNANCE_CHECKLIST.pt_BR.md
Operator / IT requirements (minimal permissions) ops/OPERATOR_IT_REQUIREMENTS.md ops/OPERATOR_IT_REQUIREMENTS.pt_BR.md
Glossary (terms by theme; A–Z within each section — ADR 0022) GLOSSARY.md GLOSSARY.pt_BR.md
AI evolution primer (winters, expert systems, ML/DL, LLMs — no hype, integrator context) AI_EVOLUTION_PRIMER.md AI_EVOLUTION_PRIMER.pt_BR.md
Forensics and evidence primer (inventory artefacts vs official forensic report) FORENSICS_AND_EVIDENCE_PRIMER.md FORENSICS_AND_EVIDENCE_PRIMER.pt_BR.md

Deploy and Docker

Topic English Português (pt-BR)
Deploy guide deploy/DEPLOY.md deploy/DEPLOY.pt_BR.md
Docker setup (MCP, build, push) DOCKER_SETUP.md DOCKER_SETUP.pt_BR.md
Starter config samples (copy-paste YAML, CSV scope) ../deploy/samples/README.md ../deploy/samples/README.pt_BR.md

Deploy assets (Compose, Kubernetes, config examples) remain in the deploy/ folder; see deploy/README.md for pointers to the deploy docs above. First-run config: ../deploy/samples/ (LGPD-oriented starter YAML and scope CSV example).

Branding and assets

Topic English
Mascot assets MASCOT.md
Logo candidates LOGO_CANDIDATES.md
Social copy drafts (LinkedIn / X style; not CI-scheduled) EN / pt-BR

These docs are EN-only (reference for assets in api/static/)

Internal and reference

Topic English Português (pt-BR)
Navigation hubs (map of maps) hubs/INDEX.md hubs/INDEX.pt_BR.md
Master hub index (plans, ADR, policies, scripts) ops/DOCS_AND_HUBS_INDEX.md ops/DOCS_AND_HUBS_INDEX.pt_BR.md
Testing TESTING.md TESTING.pt_BR.md
POC testing (synthetic corpus validation; SBOM for reviewers) TESTING_POC_GUIDE.md TESTING_POC_GUIDE.pt_BR.md
Detection accuracy baseline (precision / recall / F1 vs labeled fixtures) VALIDATION.md VALIDATION.pt_BR.md
SonarQube (home lab, Docker, CI / IDE / MCP) ops/SONARQUBE_HOME_LAB.md ops/SONARQUBE_HOME_LAB.pt_BR.md
Home lab (deploy smoke, synthetic/real targets) ops/HOMELAB_VALIDATION.md ops/HOMELAB_VALIDATION.pt_BR.md
Multi-host lab smoke (DB compose, LAN, compressed corpus, shares) ops/LAB_SMOKE_MULTI_HOST.md ops/LAB_SMOKE_MULTI_HOST.pt_BR.md
Lab-OP host personas (ENT / PRO / edge / bridge; Ansible + completão evidence) ops/LAB_OP_HOST_PERSONAS.md ops/LAB_OP_HOST_PERSONAS.pt_BR.md
Completão prompt library (completao + tier: + completao-chat-starter.ps1) ops/COMPLETAO_OPERATOR_PROMPT_LIBRARY.md ops/COMPLETAO_OPERATOR_PROMPT_LIBRARY.pt_BR.md
Completão prompt-mestre v1.7.3 (checklist SRE arquivado) ops/COMPLETAO_MESTRE_RELEASE_CHECKLIST_PROMPT.md ops/COMPLETAO_MESTRE_RELEASE_CHECKLIST_PROMPT.pt_BR.md
Lab vs security tooling (firewall, MAC, fail2ban, FIM, customer checklist) ops/DATA_BOAR_LAB_SECURITY_TOOLING.md ops/DATA_BOAR_LAB_SECURITY_TOOLING.pt_BR.md
Windows WSL2 — dev testing (second execution surface) ops/WSL2_DATA_BOAR_DEV_TESTING.md ops/WSL2_DATA_BOAR_DEV_TESTING.pt_BR.md
External connectivity eval (public APIs, read-only DBs, intentional failures) ops/LAB_EXTERNAL_CONNECTIVITY_EVAL.md ops/LAB_EXTERNAL_CONNECTIVITY_EVAL.pt_BR.md
ThinkPad LAB-NODE-01 — finish Ansible baseline + sudo / bw / VeraCrypt workflow ops/LAB-NODE-01_BASELINE_COMPLETION.md ops/LAB-NODE-01_BASELINE_COMPLETION.pt_BR.md
Secure dashboard (API key + HTTPS technician how-to) ops/SECURE_DASHBOARD_AUTH_AND_HTTPS_HOWTO.md ops/SECURE_DASHBOARD_AUTH_AND_HTTPS_HOWTO.pt_BR.md
Topology TOPOLOGY.md TOPOLOGY.pt_BR.md
Team collaboration (maintainer + contributor, Cursor + Git) COLLABORATION_TEAM.md COLLABORATION_TEAM.pt_BR.md
Talent pool — optional learning paths by role archetype TALENT_POOL_LEARNING_PATHS.md TALENT_POOL_LEARNING_PATHS.pt_BR.md
Talent dossier workflow + pool sync (talent-dossier) ops/TALENT_DOSSIER_AND_POOL_SYNC.md ops/TALENT_DOSSIER_AND_POOL_SYNC.pt_BR.md
LinkedIn + ATS playbook (public-safe; private copy for founder/candidates) ops/LINKEDIN_ATS_PLAYBOOK.md ops/LINKEDIN_ATS_PLAYBOOK.pt_BR.md
Commit and PR ops/COMMIT_AND_PR.md ops/COMMIT_AND_PR.pt_BR.md
Branch protection on main ops/BRANCH_PROTECTION.md ops/BRANCH_PROTECTION.pt_BR.md
Operator workflow (pace, focus, tokens, Corporate-Entity-C) ops/OPERATOR_WORKFLOW_PACE_AND_FOCUS.md ops/OPERATOR_WORKFLOW_PACE_AND_FOCUS.pt_BR.md
Remotes and origin ops/REMOTES_AND_ORIGIN.md ops/REMOTES_AND_ORIGIN.pt_BR.md
GitLab mirror of GitHub (read-only, single source of truth) ops/GITLAB_GITHUB_MIRROR.md ops/GITLAB_GITHUB_MIRROR.pt_BR.md
Branch + Docker cleanup (stale branches, image retention, legacy remote §7) ops/BRANCH_AND_DOCKER_CLEANUP.md ops/BRANCH_AND_DOCKER_CLEANUP.pt_BR.md
Operator alerts (GitHub, Slack, Signal, KPI hook) ops/OPERATOR_NOTIFICATION_CHANNELS.md ops/OPERATOR_NOTIFICATION_CHANNELS.pt_BR.md
Evidence packet template (exec/legal/compliance) ops/EVIDENCE_PACKET_TEMPLATE.md ops/EVIDENCE_PACKET_TEMPLATE.pt_BR.md
Zero trust connector matrix (least privilege baseline) ops/ZERO_TRUST_CONNECTOR_MATRIX.md ops/ZERO_TRUST_CONNECTOR_MATRIX.pt_BR.md
Service tiers scope template (starter/growth/enterprise) ops/SERVICE_TIERS_SCOPE_TEMPLATE.md ops/SERVICE_TIERS_SCOPE_TEMPLATE.pt_BR.md
Grafana Cloud (reactivation + token hygiene) ops/GRAFANA_CLOUD_REACTIVATION.md ops/GRAFANA_CLOUD_REACTIVATION.pt_BR.md
Cursor + AppArmor (Ubuntu / Zorin) ops/CURSOR_UBUNTU_APPARMOR.md ops/CURSOR_UBUNTU_APPARMOR.pt_BR.md
Cursor / agent policy map (Quick index — rules, skills, ops) ops/CURSOR_AGENT_POLICY_HUB.md ops/CURSOR_AGENT_POLICY_HUB.pt_BR.md
Cursor rules — phase 2 situationalization (Tier A/B/C, reproducible ritual) ops/CURSOR_RULES_PHASE2_SITUATIONALIZATION.md ops/CURSOR_RULES_PHASE2_SITUATIONALIZATION.pt_BR.md
Agent cold-start ladder (token-aware, fresh chat) ops/OPERATOR_AGENT_COLD_START_LADDER.md ops/OPERATOR_AGENT_COLD_START_LADDER.pt_BR.md
LLM / agent editing caution (vendor chat vs validated scripts) ops/LLM_AGENT_EDITING_CAUTION.md ops/LLM_AGENT_EDITING_CAUTION.pt_BR.md
PII public tree — cadence, remediation, SAFE gate ops/PII_PUBLIC_TREE_OPERATOR_GUIDE.md ops/PII_PUBLIC_TREE_OPERATOR_GUIDE.pt_BR.md
PII remediation ritual (on-demand; private seeds; token-aware order) ops/PII_REMEDIATION_RITUAL.md ops/PII_REMEDIATION_RITUAL.pt_BR.md
Native packages on GitHub Release (air-gap verify) ops/NATIVE_PACKAGE_RELEASE.md ops/NATIVE_PACKAGE_RELEASE.pt_BR.md
Homebrew tap (macOS, own tap, host Python) ops/HOMEBREW_TAP.md ops/HOMEBREW_TAP.pt_BR.md
Void xbps native overlay (Podman validate, runit) ops/VOID_XBPS_PACKAGING.md ops/VOID_XBPS_PACKAGING.pt_BR.md
Troubleshooting TROUBLESHOOTING.md TROUBLESHOOTING.pt_BR.md
Copyright and trademark COPYRIGHT_AND_TRADEMARK.md COPYRIGHT_AND_TRADEMARK.pt_BR.md
Observability and SRE OBSERVABILITY_SRE.md OBSERVABILITY_SRE.pt_BR.md
Narrative & architecture history (placeholder — ask operator for blog/timeline) NARRATIVE_AND_ARCHITECTURE_HISTORY.md NARRATIVE_AND_ARCHITECTURE_HISTORY.pt_BR.md
Architecture decisions (ADR index) adr/README.md adr/README.pt_BR.md
Academic use & thesis guidance ACADEMIC_USE_AND_THESIS.md ACADEMIC_USE_AND_THESIS.pt_BR.md
Licensing, hosting, release integrity SUBSCRIPTION_TIERS.md, LICENSE_FAQ.md, LICENSING_SPEC.md, LICENSING_OPEN_CORE_AND_COMMERCIAL.md, HOSTING_AND_WEBSITE_OPTIONS.md, RELEASE_INTEGRITY.md, ops/INTEGRITY_HUB.md SUBSCRIPTION_TIERS.pt_BR.md · LICENSE_FAQ.pt_BR.md · LICENSING_SPEC.pt_BR.md · LICENSING_OPEN_CORE_AND_COMMERCIAL.pt_BR.md · HOSTING_AND_WEBSITE_OPTIONS.pt_BR.md · RELEASE_INTEGRITY.pt_BR.md · ops/INTEGRITY_HUB.pt_BR.md
  • ops/README.md — Operator runbooks index (this folder) and link-audit checklist for doc moves.
  • plans/PLANS_TODO.md — Plan status and current app state (single source of truth for open-plan to-dos). Plan files are EN-only for history; operator runbooks under ops/ are EN + pt-BR.
  • ops/PLANS_DOCUMENTATION_HIERARCHY.md — PLAN_*.md vs PLANS_HUB vs PLANS_TODO: three-layer PMO model and maintainer ritual — pt-BR.
  • plans/PLANS_HUB.md — Plans hub: table of every PLAN_*.md (open + completed) for collaborators; refresh with python scripts/plans_hub_sync.py --write. pt-BR intro.
  • plans/MAINTENANCE_FRONT_OF_WORK.md — After parallel PR bursts: keep one active dev front; CI/Python matrix alignment; optional maintenance slices (Scout, deps).
  • plans/PYTHON_UPGRADE_PLAYBOOK.md — Python runtime upgrade sequencing (3.12→3.13→…), Docker, CI, and wheels; pt-BR companion.
  • plans/SPRINTS_AND_MILESTONES.md — Token-aware sprints, milestones, Gantt/Kanban, SRE-aligned workflow (toil, SLO/error budget, blameless retro); pt-BR companion.
  • External evolution reviews are mapped into plan history (internal; not a public doc surface).
  • releases/ — Release notes (e.g. 1.7.3, 1.7.2+safe / v1.7.2-safe, 1.7.1, 1.7.0, 1.6.8, 1.6.7, 1.6.5, 1.6.4, 1.6.3, 1.6.2, 1.6.1, 1.6.0, 1.5.4, 1.5.3, 1.4.3).
  • plans/completed/ — Archived completed plans and the implementation checklist (NEXT_STEPS.md), all items Done.

Man pages: docs/data_boar.1 (command), docs/data_boar.5 (config and file formats). Install and optionally add compatibility symlinks so man lgpd_crawler also works (see root README and TECH_GUIDE.md).