chore(upstream): pull latest changes from upstream awslabs/aidlc-workflows

.bandit

@@ -0,0 +1,11 @@
+# Bandit configuration (YAML format, bandit 1.9+)
+# https://bandit.readthedocs.io/en/latest/config.html
+#
+# NOTE: scan targets must be passed via -r on the CLI; the YAML config
+# does not support a "targets" key.  Edit the workflow's bandit command
+# to add new directories.
+
+# Exclude test directories (test code often has intentional patterns
+# that trigger false positives like assert, subprocess in fixtures)
+exclude_dirs:
+  - "*/tests/*"

.checkov.yaml

@@ -0,0 +1,28 @@
+# Checkov configuration
+# https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html
+
+# Scan GitHub Actions workflows and Dockerfiles
+framework:
+  - github_actions
+  - dockerfile
+
+# Skip checks that conflict with this repo's patterns.
+#
+# Repo-wide suppressions go here. For file-level suppressions, use inline
+# comments in the source file:
+#
+#   Dockerfile:
+#     # checkov:skip=CKV_DOCKER_2:healthcheck not needed for build-only image
+#     FROM python:3.12-slim
+#
+#   GitHub Actions YAML:
+#     # checkov:skip=CKV_GHA_7:buildspec-override requires user parameters
+#     - uses: aws-actions/aws-codebuild-run-build@v1
+#
+# Multiple skips on one line:
+#     # checkov:skip=CKV_DOCKER_2,CKV_DOCKER_3:reason for both
+skip-check:
+  # CKV_GHA_7: "The build output cannot be affected by user parameters other
+  # than the build entry point and the top-level source location"
+  # — conflicts with inline buildspec-override in codebuild.yml
+  - CKV_GHA_7

.claude/settings.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "attribution": {
+    "pr": "By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the [project license](https://github.com/awslabs/aidlc-workflows/blob/main/LICENSE)."
+  }
+}

.github/CODEOWNERS

@@ -0,0 +1,21 @@
+# [CODEOWNERS](https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners#about-code-owners)
+
+## Default owners for everything in the repo
+
+*                                      @awslabs/aidlc-admins @awslabs/aidlc-maintainers
+
+.github/                               @awslabs/aidlc-admins
+.gitignore                             @awslabs/aidlc-admins
+aidlc-rules/                           @awslabs/aidlc-admins @awslabs/aidlc-maintainers @awslabs/aidlc-writers
+assets/                                @awslabs/aidlc-admins @awslabs/aidlc-maintainers @awslabs/aidlc-writers
+CHANGELOG.md                           @awslabs/aidlc-admins
+cliff.toml                             @awslabs/aidlc-admins
+CODE_OF_CONDUCT.md                     @awslabs/aidlc-admins
+CONTRIBUTING.md                        @awslabs/aidlc-admins
+LICENSE                                @awslabs/aidlc-admins
+README.md                              @awslabs/aidlc-admins
+scripts/                               @awslabs/aidlc-admins @awslabs/aidlc-maintainers
+
+## Secure the CODEOWNERS file
+
+/.github/CODEOWNERS                    @awslabs/aidlc-admins

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,108 @@
+name: Bug Report
+description: Report a bug or unexpected behavior
+title: "[Bug]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to report a bug. Please fill out the sections below so we can reproduce and fix the issue.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A clear and concise description of the bug.
+      placeholder: Describe what went wrong.
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to Reproduce
+      description: Steps to reproduce the behavior.
+      placeholder: |
+        1. Set up ...
+        2. Run ...
+        3. Observe ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected Behavior
+      description: What you expected to happen.
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual Behavior
+      description: What actually happened.
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: AI-DLC Version
+      description: Which version of AI-DLC are you using? Or the git commit hash if running from source.
+      placeholder: e.g., 0.1.5 or abc1234
+    validations:
+      required: true
+
+  - type: dropdown
+    id: phase
+    attributes:
+      label: AI-DLC Phase
+      description: Which workflow phase were you in when the bug occurred?
+      options:
+        - Inception (requirements, user stories, application design)
+        - Construction (component design, code generation, testing)
+        - Operations (deployment, monitoring)
+        - Not phase-specific
+    validations:
+      required: true
+
+  - type: dropdown
+    id: platform
+    attributes:
+      label: Platform / IDE
+      description: Which platform or IDE are you using AI-DLC with?
+      multiple: true
+      options:
+        - Kiro IDE
+        - Kiro CLI
+        - Amazon Q Developer IDE Plugin
+        - Cursor IDE
+        - Cline
+        - Claude Code
+        - GitHub Copilot
+        - Other
+    validations:
+      required: true
+
+  - type: input
+    id: model
+    attributes:
+      label: AI Model
+      description: Which AI model were you using?
+      placeholder: e.g., Claude Sonnet 4, GPT-4o, Amazon Nova
+
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Any other relevant environment details (OS, IDE version, etc.).
+      placeholder: |
+        - OS: macOS 15.x
+        - IDE: VS Code 1.x
+
+  - type: textarea
+    id: additional
+    attributes:
+      label: Additional Context
+      description: Add any other context, screenshots, or log output about the problem here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: true

.github/ISSUE_TEMPLATE/documentation.yml

@@ -0,0 +1,46 @@
+name: Documentation Problem
+description: Report incorrect, unclear, or missing documentation
+title: "[Docs]: "
+labels: ["documentation"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Help us improve the documentation. Please describe the problem you found or what is missing.
+
+  - type: dropdown
+    id: type
+    attributes:
+      label: Type of Documentation Problem
+      options:
+        - Incorrect or outdated information
+        - Unclear or confusing explanation
+        - Missing documentation
+        - Broken link
+        - Typo or formatting issue
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: location
+    attributes:
+      label: Location
+      description: Where is the problem? Provide a file path, URL, or section name.
+      placeholder: e.g., README.md, "Platform-Specific Setup" section
+    validations:
+      required: true
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Describe what is wrong or missing.
+    validations:
+      required: true
+
+  - type: textarea
+    id: suggestion
+    attributes:
+      label: Suggested Fix
+      description: If you have a suggestion for how to fix the documentation, describe it here.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,47 @@
+name: Feature Request
+description: Suggest a small enhancement or improvement
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Suggest an enhancement or improvement. For larger, design-level proposals, please use the [RFC template](https://github.com/awslabs/aidlc-workflows/issues/new?template=rfc.yml) instead.
+
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: A clear and concise description of the feature or improvement you'd like.
+    validations:
+      required: true
+
+  - type: textarea
+    id: use-case
+    attributes:
+      label: Use Case
+      description: What problem does this solve or what workflow does it improve?
+    validations:
+      required: true
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      description: What area of AI-DLC does this relate to?
+      options:
+        - Inception phase rules
+        - Construction phase rules
+        - Operations phase rules
+        - New extension (e.g., compliance, security)
+        - Platform support
+        - Documentation
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: additional
+    attributes:
+      label: Additional Context
+      description: Any other context, examples, or references that help explain the request.

.github/ISSUE_TEMPLATE/rfc.yml

@@ -0,0 +1,51 @@
+name: RFC (Request for Comments)
+description: Propose a significant change or new feature for discussion
+title: "[RFC]: "
+labels: ["rfc"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Use this template to propose a significant change or new feature. RFCs are meant to gather feedback before implementation begins.
+
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: A brief one-paragraph summary of the proposal.
+    validations:
+      required: true
+
+  - type: textarea
+    id: motivation
+    attributes:
+      label: Motivation
+      description: Why should this change be made? What problem does it solve or what use case does it enable?
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Detailed Proposal
+      description: Describe the proposed change in detail. Include specifics on how it would work.
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives Considered
+      description: What other approaches did you consider and why were they not chosen?
+
+  - type: textarea
+    id: drawbacks
+    attributes:
+      label: Drawbacks
+      description: Are there any reasons why this proposal should not be adopted?
+
+  - type: textarea
+    id: additional
+    attributes:
+      label: Additional Context
+      description: Any other information, mockups, references, or examples that help explain the proposal.

.github/labeler.yml

@@ -0,0 +1,16 @@
+# Auto-label configuration for actions/labeler
+# See https://github.com/actions/labeler#match-object for syntax
+
+rules:
+- changed-files:
+  - any-glob-to-any-file: 'aidlc-rules/**'
+
+documentation:
+- changed-files:
+  - all-globs-to-any-file:
+    - '**/*.md'
+    - '!aidlc-rules/**'
+
+github:
+- changed-files:
+  - any-glob-to-any-file: '.github/**'

.github/pull_request_template.md

@@ -0,0 +1,28 @@
+# Summary
+
+> replace with your summary...
+
+## Changes
+
+> replace with a description of the changes
+
+## User experience
+
+> Please share what the user experience looks like before and after this change
+
+## Checklist
+
+If your change doesn't seem to apply, please leave them unchecked.
+
+* [ ] I have reviewed the [contributing guidelines](https://github.com/awslabs/aidlc-workflows/blob/main/CONTRIBUTING.md)
+* [ ] I have performed a self-review of this change
+* [ ] Changes have been tested
+* [ ] Changes are documented
+
+## Test Plan
+
+> replace with instructions or a checklist for reviewers to verify
+
+## Acknowledgment
+
+By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the [project license](https://github.com/awslabs/aidlc-workflows/blob/main/LICENSE).