Pour les développeurs

Every architecture rule enforced at build time and the test suites that enforce it — generated from the governance kit. For contributors who want to know what the build will refuse.

Governance Rules

🤖 Generated from code by scripts/generate-docs.mjs — do not hand-edit. Run orazaka docs build to refresh.

A rule with no suite is a rule that enforces nothing — it is written, it compiles, and no build fails when it is violated. Treat an empty cell as a defect, not as a gap.

ConfigBindingRules

Rule	Enforced by	Summary
`assertConfigurationBindsUnambiguously`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `EdgeGovernanceTest` `GovernanceTest` `IdentityServiceGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Asserts [CFG-001] over the given classes: no type reachable from a configuration-binding root has more than one constructor without one of them annotated @ConstructorBinding.
`assertInjectableComponentsHaveOneConstructor`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `EdgeGovernanceTest` `GovernanceTest` `IdentityServiceGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Asserts every Spring-instantiated component has a constructor set the container can choose from.

ExecutorCoherenceRules

Rule	Enforced by	Summary
`assertEveryCapabilityHasAnExecutor`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	[EXEC-001] Every enabled capability executed in process has a JobExecutor for its handler_key.
`assertEveryCapabilityIsDrained`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	[EXEC-002] Every enabled capability's routing_key is drained by some worker's declared bindings.

GovernanceRules

Rule	Enforced by	Summary
`assertCollectionFieldsPrivateFinal`	`BusinessGovernanceTest` `IdentityGovernanceTest` `InterceptorsGovernanceTest` `ToolsGovernanceTest`	Asserts collection fields (List, Map, Set) in non-record classes are private final.
`assertDedupIsAtomic`	`JobServiceGovernanceTest`	[KIT-002] Message deduplication is a claim, never a check followed by an act.
`assertDomainHasNoTransportDtos`	`BillingServiceGovernanceTest` `BusinessGovernanceTest` `IdentityGovernanceTest` `StudioServiceGovernanceTest`	Asserts the domain package holds no transport DTOs (Request/Response).
`assertDomainPurity`	`IdentityGovernanceTest` `ToolsGovernanceTest`	[HEX-002] Prohibits domain classes from depending on framework packs.
`assertEndpointRuleHasOneAuthor`	`JobServiceGovernanceTest`	[CAP-002] The endpoint rule has one author.
`assertEveryCapabilityHasAnExecutor`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	[EXEC-001] Fails when an in-process capability's handler_key has no JobExecutor.
`assertEveryCapabilityIsDrained`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	[EXEC-002] Fails when a capability's routing_key is drained by no declared worker.
`assertFieldsPrivate`	`BusinessGovernanceTest` `IdentityGovernanceTest` `InterceptorsGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `ToolsGovernanceTest`	Asserts instance fields in concrete non-record classes are private.
`assertImplClassesPackagePrivate`	`PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest`	Asserts *Impl classes in the given service package are not public.
`assertInternalSurfaceRequiresServiceAuthority`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `EdgeGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Fails when a SecurityConfig matches /internal/v1/** without demanding the SERVICE authority.
`assertMappersFinal`	`IdentityGovernanceTest` `InterceptorsGovernanceTest` `PersistenceBridgeGovernanceTest`	Asserts *Mapper classes in the given package are final.
`assertMappersPackagePrivate`	`IdentityGovernanceTest` `InterceptorsGovernanceTest` `PersistenceBridgeGovernanceTest`	Asserts *Mapper classes in the given package are not public.
`assertNoAnonymousClasses`	`BusinessGovernanceTest` `IdentityGovernanceTest` `InterceptorsGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `ToolsGovernanceTest`	Asserts no anonymous classes in production (with enum/TypeReference exemption).
`assertNoDependencyOn`	`BusinessBoundaryTest` `InterceptorsBoundaryTest`	Asserts that classes in modulePackage do not depend on forbiddenPackage.
`assertNoFieldInjection`	`BillingServiceGovernanceTest` `BusinessBoundaryTest` `InterceptorsBoundaryTest` `JobServiceGovernanceTest` `PersistenceBridgeGovernanceTest` `StudioServiceGovernanceTest`	Asserts no @Autowired field injection in the given module package.
`assertNoForeignTier3Dependency`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `StudioServiceGovernanceTest`	[SEAM-002] Asserts an autonomous service depends on no bounded context's Tier-3 (owned-domain) implementation.
`assertNoPackKeyConditionals`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	[PACK-003] Fails when engine code branches on one of those identifiers — inline, or through a constant declared in the same file.
`assertNoPackKeyLiterals`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	[PACK-002] Fails when a pack, studio, or pack-capability key appears as a literal in engine code under orazaka-libs/, orazaka-apps/services/ or orazaka-apps/workers/**.
`assertNoPermitAllOnInternalOrUploads`	`BillingServiceGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Fails when a SecurityConfig opens /internal/ or /uploads/.
`assertNoRedundantPrefix`	`BillingServiceGovernanceTest` `BusinessGovernanceTest` `IdentityGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `StudioServiceGovernanceTest` `ToolsGovernanceTest`	Asserts no class names start with 'Orazaka' prefix.
`assertNoStandardStreams`	`BillingServiceGovernanceTest` `BusinessGovernanceTest` `IdentityGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `StudioServiceGovernanceTest` `ToolsGovernanceTest`	Asserts no classes access System.out or System.err.
`assertNoWebControllers`	`BusinessGovernanceTest` `InterceptorsGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `ToolsGovernanceTest`	Asserts no @RestController or @Controller annotations exist in the given module.
`assertOneCapabilityModel`	`JobServiceGovernanceTest`	[CAP-001] One record models a capability, and the projections of it say so.
`assertOneDeclarationAuthor`	`StudioServiceGovernanceTest`	[SAGA-002] One author resolves what a dispatched step carries from its pack.
`assertOneSettlementAuthor`	`StudioServiceGovernanceTest`	[SAGA-001] One author closes a run's credit hold.
`assertOneTopLevelClassPerFile`	`BillingServiceGovernanceTest` `BusinessGovernanceTest` `IdentityGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `StudioServiceGovernanceTest` `ToolsGovernanceTest`	Asserts every top-level class resides in a dedicated file matching its simple name.
`assertOutboxRelaysClaim`	`JobServiceGovernanceTest`	[KIT-003] An outbox relay claims the rows it publishes.
`assertPersistenceAdapterPackageKind`	`IdentityGovernanceTest`	Asserts the exact infrastructure.adapter.persistence package (excluding its entity/repository/converter sub-packs) holds only Adapter/Mapper — one package, one component kind [ERR-130].
`assertPersistencePackageHygiene`	`PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest`	Asserts JPA components reside in correct sub-packs.
`assertSagaReadersDoNotWrite`	`StudioServiceGovernanceTest`	[SAGA-003] The saga's read-only invariants stay read-only.
`assertSecurityBaselineIsUniform`	`JobServiceGovernanceTest`	[KIT-001] Every service's security baseline says the same four things.
`assertServicePackageOnlyServices`	`BillingServiceGovernanceTest` `JobServiceGovernanceTest` `StudioServiceGovernanceTest` `ToolsGovernanceTest`	Asserts every top-level class in servicePackage is named *Service (capability-oriented).
`assertSessionSecretMinimumIsUniform`	`JobServiceGovernanceTest`	[KIT-004] The session JWT minimum is one number with five authors, and they agree.
`assertStrictHexagonalBoundaries`	`ToolsGovernanceTest`	[HEX-001] Enforces strict hexagonal layer dependencies using ArchUnit's layeredArchitecture.
`assertSupportPackageHygiene`	none	Asserts infrastructure.support holds only cross-cutting helpers / shared plumbing — never a use-case Service, a Controller/*Adapter, or config [ERR-130].
`assertVirtualThreadsEnabled`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `EdgeGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Fails when a service that serves HTTP does not run its requests on virtual threads.

GovernanceSubjects

Rule	Enforced by	Summary
`assertEveryRuleIsNonVacuous`	`GovernanceSubjectsTest`	[GOV-006] Asserts every governance rule in this package is non-vacuous by construction.

LaneCoherenceRules

Rule	Enforced by	Summary
`assertEveryCapabilityDeclaresItsLane`	`JobServiceGovernanceTest`	[LANE-001] Every seeded capability whose routing key a lane binds declares that lane's class.

LoggedContentRules

Rule	Enforced by	Summary
`assertNoLoggingCallTakesContent`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `EdgeGovernanceTest` `GovernanceTest` `IdentityServiceGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Asserts [LOG-001] over the given classes: no argument of a logging call is, or was derived from, a prompt, a response body or a message text.

MeteringMarkerRules

Rule	Enforced by	Summary
`assertEveryJobProducerDeclaresItsMetering`	`MeteringMarkerTest`	Asserts that every class publishing to the jobs exchange stamps #MARKER or is exempt with a written reason.

PackCoherenceRules

Rule	Enforced by	Summary
`assertPackCatalogueIsCoherent`	`SqlBoundaryTest`	Asserts the pack catalogue is coherent: infra/initdb seeds no pack, and no bundle manifest declares a pack the database would refuse.

RunSurfaceRules

Rule	Enforced by	Summary
`assertNoInboundEntryDispatchesAJob`	`BillingServiceGovernanceTest` `EdgeGovernanceTest` `IdentityGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest`	Asserts [DOOR-001] over this module's production classes, against the whole repository's sinks.

SourceFileScanner

Rule	Enforced by	Summary
`assertNoBannedLiterals`	`EdgeGovernanceTest`	Scans Java source files under sourceRoot for default banned patterns [GOV-003].
`assertNoEnvironmentInjection`	`AutomationServiceGovernanceTest` `BillingServiceGovernanceTest` `BusinessGovernanceTest` `EdgeGovernanceTest` `GovernanceTest` `IdentityGovernanceTest` `IdentityServiceGovernanceTest` `InterceptorsGovernanceTest` `JobServiceGovernanceTest` `KnowledgeServiceGovernanceTest` `NotificationServiceGovernanceTest` `PersistenceBridgeGovernanceTest` `PersistenceGovernanceTest` `PersistenceIdentityGovernanceTest` `RouterGovernanceTest` `StudioServiceGovernanceTest` `ToolsGovernanceTest`	Scans for org.springframework.core.env.Environment imports in non-@Configuration classes [ERR-113].

SqlBoundaryRules

Rule	Enforced by	Summary
`assertNoCrossContextForeignKeys`	`SqlBoundaryTest`	Asserts that every REFERENCES in every *.sql file under initdbDir targets a table created in the same file (same bounded context).