agent-ix/engineering-assurance

Private configuration-only engineering assurance module

Rust

0

102 commits

updated Sep 17, 2026

See the code

README

Engineering Assurance

Discord

Engineering Assurance is the Agent IX assurance module for making engineering decisions explicit, reviewable, and owned by a person. It gives a coding agent one canonical onboarding skill and four resumable workflows for deciding what assurance work a repository actually needs.

It is deliberately not a compliance oracle. Engineering Assurance does not calculate a trust score, import external rules, or approve a release. The decision owner remains responsible for the boundary, claims, exceptions, evidence sufficiency, and terminal decision.

How it fits

Engineering Assurance is a small part of the Agent IX documentation toolchain:

ComponentResponsibility
quire-rsRust engine that parses and validates Markdown documents against Quire modules.
quire-cliCLI distribution of the quire-rs engine used by the validation commands below.
QuoinInstalls Quire modules and provides specification, evidence, and planning skills.
ix-flowOwns resumable workflow state, event history, and human gates.
Engineering AssuranceSupplies assurance artifact schemas, skeletons, onboarding, and governed workflows.

Quire-rs validates the artifacts, Quoin installs and composes the modules, and ix-flow records the workflow lifecycle.

This module uses the Rust quire-rs engine through quire-cli

Install

1. Install the toolchain

These are the versions recorded in engineering_assurance/compatibility-matrix.json:

npm install --global \
  @agent-ix/quire-cli@0.31.0 \
  @agent-ix/quoin@0.23.1 \
  @agent-ix/ix-flow@0.2.3
rustup toolchain install 1.98.1

Install the unpublished native CLI from the tagged source checkout:

cargo +1.98.1 install \
  --git https://github.com/agent-ix/engineering-assurance \
  --tag v0.3.1 \
  --locked \
  --bin engineering-assurance

2. Install the Quire module

Install the module directory from the same tag. The //engineering_assurance suffix selects the module root inside this repository:

quoin module install \
  github:agent-ix/engineering-assurance//engineering_assurance@v0.3.1

The installed module contains manifest.yaml, schemas/, and skeletons/. Quire-rs consumes those files when validating assurance artifacts.

3. Install the agent skill

The same assurance-onboarding skill is available to Claude Code, Codex, OpenCode, and GitHub Copilot. Use the section for your agent.

Claude Code
/plugin marketplace add agent-ix/engineering-assurance
/plugin install engineering-assurance@engineering-assurance
OpenAI Codex
codex plugin marketplace add agent-ix/engineering-assurance
codex plugin add engineering-assurance@engineering-assurance

You can also install it from the Codex /plugins menu after adding the marketplace.

OpenCode

OpenCode discovers the Agent Skills layout. Install the canonical skill with GitHub CLI so it is available in every repository:

gh skill install agent-ix/engineering-assurance \
  engineering_assurance/skills/assurance-onboarding \
  --pin v0.3.1 \
  --scope user \
  --agent opencode
GitHub Copilot

With Copilot CLI:

copilot plugin marketplace add agent-ix/engineering-assurance
copilot plugin install engineering-assurance@engineering-assurance

If you want the skills-only route, use GitHub CLI instead:

gh skill install agent-ix/engineering-assurance \
  engineering_assurance/skills/assurance-onboarding \
  --pin v0.3.1 \
  --scope user \
  --agent github-copilot

What it provides

Artifact types

The module supplies Quire schemas and Markdown skeletons for five artifact types:

TypePurpose
AssuranceProfileState a decision boundary, impacts, evidence policy, and exceptions.
MeasurementPlanDefine a measure, its population, collection procedure, and interpretation.
ArchitectureDescriptionRecord system boundaries, views, architecture decisions, and risks.
ComponentAssuranceContractState required component behavior, failure handling, controls, and replacement.
AssuranceArgumentRecord a claim, reasoning, sufficiency decision, and challenges.

Agent skill and workflows

Ask the agent to use assurance-onboarding and provide the repository root, exact decision boundary, and human decision owner. The skill inventories before proposing anything and preserves malformed or conflicting existing artifacts.

It routes bounded work through these ix-flow definitions:

WorkflowUse it forTerminal decisions
assurance-intakeDecide which assurance artifacts a bounded subject needs.accepted / rejected
architecture-evaluationEvaluate an architecture against declared scenarios.accepted / rejected
measurement-promotionDecide whether a recorded measure advances one stage.promoted / not_promoted
change-assuranceDecide a bounded change from impact, review, and assurance records.approved / rejected

Example prompt:

Use assurance-onboarding for this repository. The decision boundary is the
database migration in this change, and Jane Doe owns the terminal decision.
Inventory the existing assurance context before proposing work.

Validate Markdown documents with quire-cli (the quire-rs-backed CLI):

quire validate --scope . 'spec/**/*.md'

Native CLI reference

The native CLI is primarily an automation boundary. Every stdin/stdout protocol is versioned and documented by the schemas under engineering_assurance/schemas/.

Command groupPurpose
onboardingInventory a repository and emit a bounded onboarding result.
workflow-hostCoordinate a bound workflow lifecycle through ix-flow.
compatibility / compatibility-observeClassify explicit or locally observed toolchain versions.
manifest-validateQualify the module against explicit repository and registry roots.
integration-evidenceVerify Quire traceability and retained release evidence.
content-rights-treeInspect a Git-selected repository tree for rights violations.
agent-evals / agent-evals-providerRun or serve the Engineering Assurance evaluation contract.
evaluation-aggregate / evaluation-aggregate-verifyBuild or re-check retained evaluation aggregates.
package-audit / package-lifecycleAudit private distributions and stage or refuse npm publication.
workflow-invariantsEvaluate a closed workflow projection against named invariants.

Run engineering-assurance --help or engineering-assurance <command> --help for argument details. Maintainer-only commands do not make a release decision and should not be invoked as a substitute for the human workflow gates.

Development

make lint
make test
make package-audit
make rust-foundation-gate
make integration-gate

Read CONTENT_RIGHTS.md before adding content. The repository is public. The repository is public. Registry packages remain private and unpublished until separate, explicit authorization is given.

License

AGPL-3.0-or-later

Contributors

kreneskyp

102 commits

agent-ix/engineering-assurance

Private configuration-only engineering assurance module

Rust

0

102 commits

updated Sep 17, 2026

See the code

README

Engineering Assurance

Discord

Engineering Assurance is the Agent IX assurance module for making engineering decisions explicit, reviewable, and owned by a person. It gives a coding agent one canonical onboarding skill and four resumable workflows for deciding what assurance work a repository actually needs.

It is deliberately not a compliance oracle. Engineering Assurance does not calculate a trust score, import external rules, or approve a release. The decision owner remains responsible for the boundary, claims, exceptions, evidence sufficiency, and terminal decision.

How it fits

Engineering Assurance is a small part of the Agent IX documentation toolchain:

ComponentResponsibility
quire-rsRust engine that parses and validates Markdown documents against Quire modules.
quire-cliCLI distribution of the quire-rs engine used by the validation commands below.
QuoinInstalls Quire modules and provides specification, evidence, and planning skills.
ix-flowOwns resumable workflow state, event history, and human gates.
Engineering AssuranceSupplies assurance artifact schemas, skeletons, onboarding, and governed workflows.

Quire-rs validates the artifacts, Quoin installs and composes the modules, and ix-flow records the workflow lifecycle.

This module uses the Rust quire-rs engine through quire-cli

Install

1. Install the toolchain

These are the versions recorded in engineering_assurance/compatibility-matrix.json:

npm install --global \
  @agent-ix/quire-cli@0.31.0 \
  @agent-ix/quoin@0.23.1 \
  @agent-ix/ix-flow@0.2.3
rustup toolchain install 1.98.1

Install the unpublished native CLI from the tagged source checkout:

cargo +1.98.1 install \
  --git https://github.com/agent-ix/engineering-assurance \
  --tag v0.3.1 \
  --locked \
  --bin engineering-assurance

2. Install the Quire module

Install the module directory from the same tag. The //engineering_assurance suffix selects the module root inside this repository:

quoin module install \
  github:agent-ix/engineering-assurance//engineering_assurance@v0.3.1

The installed module contains manifest.yaml, schemas/, and skeletons/. Quire-rs consumes those files when validating assurance artifacts.

3. Install the agent skill

The same assurance-onboarding skill is available to Claude Code, Codex, OpenCode, and GitHub Copilot. Use the section for your agent.

Claude Code
/plugin marketplace add agent-ix/engineering-assurance
/plugin install engineering-assurance@engineering-assurance
OpenAI Codex
codex plugin marketplace add agent-ix/engineering-assurance
codex plugin add engineering-assurance@engineering-assurance

You can also install it from the Codex /plugins menu after adding the marketplace.

OpenCode

OpenCode discovers the Agent Skills layout. Install the canonical skill with GitHub CLI so it is available in every repository:

gh skill install agent-ix/engineering-assurance \
  engineering_assurance/skills/assurance-onboarding \
  --pin v0.3.1 \
  --scope user \
  --agent opencode
GitHub Copilot

With Copilot CLI:

copilot plugin marketplace add agent-ix/engineering-assurance
copilot plugin install engineering-assurance@engineering-assurance

If you want the skills-only route, use GitHub CLI instead:

gh skill install agent-ix/engineering-assurance \
  engineering_assurance/skills/assurance-onboarding \
  --pin v0.3.1 \
  --scope user \
  --agent github-copilot

What it provides

Artifact types

The module supplies Quire schemas and Markdown skeletons for five artifact types:

TypePurpose
AssuranceProfileState a decision boundary, impacts, evidence policy, and exceptions.
MeasurementPlanDefine a measure, its population, collection procedure, and interpretation.
ArchitectureDescriptionRecord system boundaries, views, architecture decisions, and risks.
ComponentAssuranceContractState required component behavior, failure handling, controls, and replacement.
AssuranceArgumentRecord a claim, reasoning, sufficiency decision, and challenges.

Agent skill and workflows

Ask the agent to use assurance-onboarding and provide the repository root, exact decision boundary, and human decision owner. The skill inventories before proposing anything and preserves malformed or conflicting existing artifacts.

It routes bounded work through these ix-flow definitions:

WorkflowUse it forTerminal decisions
assurance-intakeDecide which assurance artifacts a bounded subject needs.accepted / rejected
architecture-evaluationEvaluate an architecture against declared scenarios.accepted / rejected
measurement-promotionDecide whether a recorded measure advances one stage.promoted / not_promoted
change-assuranceDecide a bounded change from impact, review, and assurance records.approved / rejected

Example prompt:

Use assurance-onboarding for this repository. The decision boundary is the
database migration in this change, and Jane Doe owns the terminal decision.
Inventory the existing assurance context before proposing work.

Validate Markdown documents with quire-cli (the quire-rs-backed CLI):

quire validate --scope . 'spec/**/*.md'

Native CLI reference

The native CLI is primarily an automation boundary. Every stdin/stdout protocol is versioned and documented by the schemas under engineering_assurance/schemas/.

Command groupPurpose
onboardingInventory a repository and emit a bounded onboarding result.
workflow-hostCoordinate a bound workflow lifecycle through ix-flow.
compatibility / compatibility-observeClassify explicit or locally observed toolchain versions.
manifest-validateQualify the module against explicit repository and registry roots.
integration-evidenceVerify Quire traceability and retained release evidence.
content-rights-treeInspect a Git-selected repository tree for rights violations.
agent-evals / agent-evals-providerRun or serve the Engineering Assurance evaluation contract.
evaluation-aggregate / evaluation-aggregate-verifyBuild or re-check retained evaluation aggregates.
package-audit / package-lifecycleAudit private distributions and stage or refuse npm publication.
workflow-invariantsEvaluate a closed workflow projection against named invariants.

Run engineering-assurance --help or engineering-assurance <command> --help for argument details. Maintainer-only commands do not make a release decision and should not be invoked as a substitute for the human workflow gates.

Development

make lint
make test
make package-audit
make rust-foundation-gate
make integration-gate

Read CONTENT_RIGHTS.md before adding content. The repository is public. The repository is public. Registry packages remain private and unpublished until separate, explicit authorization is given.

License

AGPL-3.0-or-later

See what people are saying

Contributors

kreneskyp

102 commits

Languages

Rust

95.4%

Python

2.9%