Private configuration-only engineering assurance module
Rust
0
102 commits
updated Sep 17, 2026
Engineering Assurance is the Agent IX assurance module for making engineering decisions explicit, reviewable, and owned by a person. It gives a coding agent one canonical onboarding skill and four resumable workflows for deciding what assurance work a repository actually needs.
It is deliberately not a compliance oracle. Engineering Assurance does not calculate a trust score, import external rules, or approve a release. The decision owner remains responsible for the boundary, claims, exceptions, evidence sufficiency, and terminal decision.
Engineering Assurance is a small part of the Agent IX documentation toolchain:
| Component | Responsibility |
|---|---|
| quire-rs | Rust engine that parses and validates Markdown documents against Quire modules. |
| quire-cli | CLI distribution of the quire-rs engine used by the validation commands below. |
| Quoin | Installs Quire modules and provides specification, evidence, and planning skills. |
| ix-flow | Owns resumable workflow state, event history, and human gates. |
| Engineering Assurance | Supplies assurance artifact schemas, skeletons, onboarding, and governed workflows. |
Quire-rs validates the artifacts, Quoin installs and composes the modules, and ix-flow records the workflow lifecycle.
This module uses the Rust quire-rs engine through quire-cli
These are the versions recorded in
engineering_assurance/compatibility-matrix.json:
npm install --global \
@agent-ix/quire-cli@0.31.0 \
@agent-ix/quoin@0.23.1 \
@agent-ix/ix-flow@0.2.3
rustup toolchain install 1.98.1
Install the unpublished native CLI from the tagged source checkout:
cargo +1.98.1 install \
--git https://github.com/agent-ix/engineering-assurance \
--tag v0.3.1 \
--locked \
--bin engineering-assurance
Install the module directory from the same tag. The //engineering_assurance
suffix selects the module root inside this repository:
quoin module install \
github:agent-ix/engineering-assurance//engineering_assurance@v0.3.1
The installed module contains manifest.yaml, schemas/, and skeletons/.
Quire-rs consumes those files when validating assurance artifacts.
The same assurance-onboarding skill is available to Claude Code, Codex,
OpenCode, and GitHub Copilot. Use the section for your agent.
/plugin marketplace add agent-ix/engineering-assurance
/plugin install engineering-assurance@engineering-assurance
codex plugin marketplace add agent-ix/engineering-assurance
codex plugin add engineering-assurance@engineering-assurance
You can also install it from the Codex /plugins menu after adding the
marketplace.
OpenCode discovers the Agent Skills layout. Install the canonical skill with GitHub CLI so it is available in every repository:
gh skill install agent-ix/engineering-assurance \
engineering_assurance/skills/assurance-onboarding \
--pin v0.3.1 \
--scope user \
--agent opencode
With Copilot CLI:
copilot plugin marketplace add agent-ix/engineering-assurance
copilot plugin install engineering-assurance@engineering-assurance
If you want the skills-only route, use GitHub CLI instead:
gh skill install agent-ix/engineering-assurance \
engineering_assurance/skills/assurance-onboarding \
--pin v0.3.1 \
--scope user \
--agent github-copilot
The module supplies Quire schemas and Markdown skeletons for five artifact types:
| Type | Purpose |
|---|---|
AssuranceProfile | State a decision boundary, impacts, evidence policy, and exceptions. |
MeasurementPlan | Define a measure, its population, collection procedure, and interpretation. |
ArchitectureDescription | Record system boundaries, views, architecture decisions, and risks. |
ComponentAssuranceContract | State required component behavior, failure handling, controls, and replacement. |
AssuranceArgument | Record a claim, reasoning, sufficiency decision, and challenges. |
Ask the agent to use assurance-onboarding and provide the repository root,
exact decision boundary, and human decision owner. The skill inventories before
proposing anything and preserves malformed or conflicting existing artifacts.
It routes bounded work through these ix-flow definitions:
| Workflow | Use it for | Terminal decisions |
|---|---|---|
assurance-intake | Decide which assurance artifacts a bounded subject needs. | accepted / rejected |
architecture-evaluation | Evaluate an architecture against declared scenarios. | accepted / rejected |
measurement-promotion | Decide whether a recorded measure advances one stage. | promoted / not_promoted |
change-assurance | Decide a bounded change from impact, review, and assurance records. | approved / rejected |
Example prompt:
Use assurance-onboarding for this repository. The decision boundary is the
database migration in this change, and Jane Doe owns the terminal decision.
Inventory the existing assurance context before proposing work.
Validate Markdown documents with quire-cli (the quire-rs-backed CLI):
quire validate --scope . 'spec/**/*.md'
The native CLI is primarily an automation boundary. Every stdin/stdout
protocol is versioned and documented by the schemas under
engineering_assurance/schemas/.
| Command group | Purpose |
|---|---|
onboarding | Inventory a repository and emit a bounded onboarding result. |
workflow-host | Coordinate a bound workflow lifecycle through ix-flow. |
compatibility / compatibility-observe | Classify explicit or locally observed toolchain versions. |
manifest-validate | Qualify the module against explicit repository and registry roots. |
integration-evidence | Verify Quire traceability and retained release evidence. |
content-rights-tree | Inspect a Git-selected repository tree for rights violations. |
agent-evals / agent-evals-provider | Run or serve the Engineering Assurance evaluation contract. |
evaluation-aggregate / evaluation-aggregate-verify | Build or re-check retained evaluation aggregates. |
package-audit / package-lifecycle | Audit private distributions and stage or refuse npm publication. |
workflow-invariants | Evaluate a closed workflow projection against named invariants. |
Run engineering-assurance --help or
engineering-assurance <command> --help for argument details. Maintainer-only
commands do not make a release decision and should not be invoked as a
substitute for the human workflow gates.
make lint
make test
make package-audit
make rust-foundation-gate
make integration-gate
Read CONTENT_RIGHTS.md before adding content. The repository is public. The repository is public. Registry packages remain private and unpublished until separate, explicit authorization is given.
AGPL-3.0-or-later
102 commits
Hacker News (1)
Rust
95.4%
Python
2.9%
Private configuration-only engineering assurance module
Rust
0
102 commits
updated Sep 17, 2026
Engineering Assurance is the Agent IX assurance module for making engineering decisions explicit, reviewable, and owned by a person. It gives a coding agent one canonical onboarding skill and four resumable workflows for deciding what assurance work a repository actually needs.
It is deliberately not a compliance oracle. Engineering Assurance does not calculate a trust score, import external rules, or approve a release. The decision owner remains responsible for the boundary, claims, exceptions, evidence sufficiency, and terminal decision.
Engineering Assurance is a small part of the Agent IX documentation toolchain:
| Component | Responsibility |
|---|---|
| quire-rs | Rust engine that parses and validates Markdown documents against Quire modules. |
| quire-cli | CLI distribution of the quire-rs engine used by the validation commands below. |
| Quoin | Installs Quire modules and provides specification, evidence, and planning skills. |
| ix-flow | Owns resumable workflow state, event history, and human gates. |
| Engineering Assurance | Supplies assurance artifact schemas, skeletons, onboarding, and governed workflows. |
Quire-rs validates the artifacts, Quoin installs and composes the modules, and ix-flow records the workflow lifecycle.
This module uses the Rust quire-rs engine through quire-cli
These are the versions recorded in
engineering_assurance/compatibility-matrix.json:
npm install --global \
@agent-ix/quire-cli@0.31.0 \
@agent-ix/quoin@0.23.1 \
@agent-ix/ix-flow@0.2.3
rustup toolchain install 1.98.1
Install the unpublished native CLI from the tagged source checkout:
cargo +1.98.1 install \
--git https://github.com/agent-ix/engineering-assurance \
--tag v0.3.1 \
--locked \
--bin engineering-assurance
Install the module directory from the same tag. The //engineering_assurance
suffix selects the module root inside this repository:
quoin module install \
github:agent-ix/engineering-assurance//engineering_assurance@v0.3.1
The installed module contains manifest.yaml, schemas/, and skeletons/.
Quire-rs consumes those files when validating assurance artifacts.
The same assurance-onboarding skill is available to Claude Code, Codex,
OpenCode, and GitHub Copilot. Use the section for your agent.
/plugin marketplace add agent-ix/engineering-assurance
/plugin install engineering-assurance@engineering-assurance
codex plugin marketplace add agent-ix/engineering-assurance
codex plugin add engineering-assurance@engineering-assurance
You can also install it from the Codex /plugins menu after adding the
marketplace.
OpenCode discovers the Agent Skills layout. Install the canonical skill with GitHub CLI so it is available in every repository:
gh skill install agent-ix/engineering-assurance \
engineering_assurance/skills/assurance-onboarding \
--pin v0.3.1 \
--scope user \
--agent opencode
With Copilot CLI:
copilot plugin marketplace add agent-ix/engineering-assurance
copilot plugin install engineering-assurance@engineering-assurance
If you want the skills-only route, use GitHub CLI instead:
gh skill install agent-ix/engineering-assurance \
engineering_assurance/skills/assurance-onboarding \
--pin v0.3.1 \
--scope user \
--agent github-copilot
The module supplies Quire schemas and Markdown skeletons for five artifact types:
| Type | Purpose |
|---|---|
AssuranceProfile | State a decision boundary, impacts, evidence policy, and exceptions. |
MeasurementPlan | Define a measure, its population, collection procedure, and interpretation. |
ArchitectureDescription | Record system boundaries, views, architecture decisions, and risks. |
ComponentAssuranceContract | State required component behavior, failure handling, controls, and replacement. |
AssuranceArgument | Record a claim, reasoning, sufficiency decision, and challenges. |
Ask the agent to use assurance-onboarding and provide the repository root,
exact decision boundary, and human decision owner. The skill inventories before
proposing anything and preserves malformed or conflicting existing artifacts.
It routes bounded work through these ix-flow definitions:
| Workflow | Use it for | Terminal decisions |
|---|---|---|
assurance-intake | Decide which assurance artifacts a bounded subject needs. | accepted / rejected |
architecture-evaluation | Evaluate an architecture against declared scenarios. | accepted / rejected |
measurement-promotion | Decide whether a recorded measure advances one stage. | promoted / not_promoted |
change-assurance | Decide a bounded change from impact, review, and assurance records. | approved / rejected |
Example prompt:
Use assurance-onboarding for this repository. The decision boundary is the
database migration in this change, and Jane Doe owns the terminal decision.
Inventory the existing assurance context before proposing work.
Validate Markdown documents with quire-cli (the quire-rs-backed CLI):
quire validate --scope . 'spec/**/*.md'
The native CLI is primarily an automation boundary. Every stdin/stdout
protocol is versioned and documented by the schemas under
engineering_assurance/schemas/.
| Command group | Purpose |
|---|---|
onboarding | Inventory a repository and emit a bounded onboarding result. |
workflow-host | Coordinate a bound workflow lifecycle through ix-flow. |
compatibility / compatibility-observe | Classify explicit or locally observed toolchain versions. |
manifest-validate | Qualify the module against explicit repository and registry roots. |
integration-evidence | Verify Quire traceability and retained release evidence. |
content-rights-tree | Inspect a Git-selected repository tree for rights violations. |
agent-evals / agent-evals-provider | Run or serve the Engineering Assurance evaluation contract. |
evaluation-aggregate / evaluation-aggregate-verify | Build or re-check retained evaluation aggregates. |
package-audit / package-lifecycle | Audit private distributions and stage or refuse npm publication. |
workflow-invariants | Evaluate a closed workflow projection against named invariants. |
Run engineering-assurance --help or
engineering-assurance <command> --help for argument details. Maintainer-only
commands do not make a release decision and should not be invoked as a
substitute for the human workflow gates.
make lint
make test
make package-audit
make rust-foundation-gate
make integration-gate
Read CONTENT_RIGHTS.md before adding content. The repository is public. The repository is public. Registry packages remain private and unpublished until separate, explicit authorization is given.
AGPL-3.0-or-later
Hacker News (1)
102 commits
Rust
95.4%
Python
2.9%