Knowledge-as-Code Template v1.0.1
Added
- Added eval coverage for manifest hash freshness, changelog release-tag consistency, and generated-output injection boundaries.
- Documented generated-output safety behavior for external URLs, CSS tokens, table parsing, and client-side comparison labels.
- Adopted the GuideCheck Human-Verifiable Assistant Guide profile at Level 4 with
assistant-guide.txt, a well-known canonical guide, a sidecar manifest, and discovery links.
Changed
- Normalized example and public-facing URLs to
httpsbare-domain form.
Fixed
- Restricted generated navigation hrefs to safe internal paths before HTML emission.
- Normalized coverage-badge group classes on generated container detail pages before HTML emission.
- Refreshed the README content-provenance hash after the intentional schema documentation update.
- Escaped generated compare-page labels and script data before client-side HTML insertion.
- Validated generated CSS class names and color values before writing inline styles.
- Restricted generated external links to
httpsand normalizedwwwhostnames to bare domains. - Preserved empty markdown table cells during parsing.
- Parsed quoted empty YAML scalars as empty strings instead of objects.
Verification
- node scripts/validate.js
- ./scripts/validate-hashes.sh
- node scripts/check-links.js
- node scripts/verify.js
- node scripts/eval.js
Residual risk
No release assets are attached beyond GitHub-generated source archives.