@ai-sdlc/reference
├── core/         — Types, validation, provenance, comparison
├── builders/     — Fluent resource builders for all 5 resource types
├── policy/       — Enforcement, autonomy, authorization, admission
├── adapters/     — Interface contracts, built-in + stub adapters
├── agents/       — Orchestration patterns, execution, memory, discovery
├── reconciler/   — Controller loop, diff, resource reconcilers
├── audit/        — Hash-chained audit log with pluggable sinks
├── metrics/      — Metric store, standard metrics, instrumentation
├── telemetry/    — OpenTelemetry tracing, structured logging
├── security/     — Sandbox, JIT credentials, kill switch, approvals
└── compliance/   — Regulatory framework mapping and checking

import { validate, enforce, PipelineBuilder } from '@ai-sdlc/reference';

import {
  PipelineBuilder,
  QualityGateBuilder,
  enforce,
  validateResource,
} from '@ai-sdlc/reference';

// Build a pipeline
const pipeline = new PipelineBuilder('my-pipeline')
  .addTrigger({ event: 'issue.assigned' })
  .addProvider('issueTracker', { type: 'linear' })
  .addStage({ name: 'implement', agent: 'code-agent' })
  .build();

// Validate it
const result = validateResource(pipeline);
console.log(result.valid); // true

// Build and enforce a quality gate
const gate = new QualityGateBuilder('standards')
  .addGate({
    name: 'coverage',
    enforcement: 'soft-mandatory',
    rule: { metric: 'line-coverage', operator: '>=', threshold: 80 },
  })
  .build();

const enforcement = enforce(gate, {
  authorType: 'ai-agent',
  repository: 'org/repo',
  metrics: { 'line-coverage': 85 },
});
console.log(enforcement.allowed); // true