[Extension]: Update DocGuard — CDD Enforcement (v0.37.1)

[raccioly]

Extension ID

docguard

Extension Name

DocGuard — CDD Enforcement

Version

0.37.1

Description

Documentation integrity for AI-assisted repositories: lifecycle registry, drift validation, traceability, safe archival, SARIF/JUnit, MCP, GitHub Actions, and Spec Kit hooks.

Author

raccioly

Repository URL

https://github.com/raccioly/docguard

Download URL

https://github.com/raccioly/docguard/releases/download/v0.37.1/spec-kit-docguard-v0.37.1.zip

License

MIT

Homepage (optional)

https://www.npmjs.com/package/docguard-cli

Documentation URL (optional)

https://github.com/raccioly/docguard/blob/main/extensions/spec-kit-docguard/README.md

Changelog URL (optional)

https://github.com/raccioly/docguard/blob/main/CHANGELOG.md

Required Spec Kit Version

=0.1.0

Required Tools (optional)

• Node.js >=18.0.0
• npx
• specify is optional; it enables Spec Kit auto-initialization during docguard init

Number of Commands

8

Number of Hooks (optional)

4

Tags

documentation, validation, traceability, ai-agents, spec-kit

Key Features

• Deterministic spec lifecycle registry and prior-intent preflight before new specifications and tasks.
• Safe Git-backed retirement with immutable requirement tombstones, provenance, and restore commands.
• Documentation drift validation with stable finding codes, explicit confidence, and coverage limits.
• Traceability, SARIF/JUnit, MCP, GitHub Actions, and provenance-checked mechanical fixes.
• Mandatory Spec Kit hooks before specification, before task generation, and after implementation.

Testing Checklist

• Extension installs successfully via download URL
• All commands execute without errors
• Documentation is complete and accurate
• No security vulnerabilities identified
• Tested on at least one real project

Submission Requirements

• Valid extension.yml manifest included
• README.md with installation and usage instructions
• LICENSE file included
• GitHub release created with version tag
• All command files exist and are properly formatted
• Extension ID follows naming conventions (lowercase-with-hyphens)

Testing Details

Tested on macOS and GitHub Actions Ubuntu. The full suite passed 1,664 tests across 280 suites on Node 18, 20, 22, and 24 with zero failures; the OSV supply-chain scan also passed.

The published v0.37.1 release ZIP was installed into a disposable Git repository with:

specify extension add docguard --from https://github.com/raccioly/docguard/releases/download/v0.37.1/spec-kit-docguard-v0.37.1.zip

Spec Kit accepted the manifest and listed all eight declared commands. Package and contract tests verify five AI skills and four lifecycle hooks. The npm tarball executes as docguard v0.37.1; PyPI exposes both 0.37.1 distribution artifacts; and the GHCR 0.37.1 tag resolves. The official MCP Registry also lists io.github.raccioly/docguard v0.37.1 as latest.

Example Usage

# Install the released extension
specify extension add docguard --from https://github.com/raccioly/docguard/releases/download/v0.37.1/spec-kit-docguard-v0.37.1.zip

# Brief prior intent before creating a spec
/speckit.docguard.brief

# Gate the generated spec before tasks
/speckit.docguard.preflight

# Validate documentation after implementation
/speckit.docguard.guard

Proposed Catalog Entry

{
  "docguard": {
    "name": "DocGuard — CDD Enforcement",
    "id": "docguard",
    "description": "Documentation integrity for AI-assisted repositories: lifecycle registry, drift validation, traceability, safe archival, SARIF/JUnit, MCP, GitHub Actions, and Spec Kit hooks.",
    "author": "raccioly",
    "version": "0.37.1",
    "download_url": "https://github.com/raccioly/docguard/releases/download/v0.37.1/spec-kit-docguard-v0.37.1.zip",
    "repository": "https://github.com/raccioly/docguard",
    "homepage": "https://www.npmjs.com/package/docguard-cli",
    "documentation": "https://github.com/raccioly/docguard/blob/main/extensions/spec-kit-docguard/README.md",
    "changelog": "https://github.com/raccioly/docguard/blob/main/CHANGELOG.md",
    "license": "MIT",
    "requires": {
      "speckit_version": ">=0.1.0",
      "tools": [
        {
          "name": "node",
          "version": ">=18.0.0",
          "required": true
        }
      ]
    },
    "provides": {
      "commands": 8,
      "hooks": 4
    },
    "tags": [
      "documentation",
      "validation",
      "traceability",
      "ai-agents",
      "spec-kit"
    ],
    "verified": false,
    "downloads": 0,
    "stars": 0
  }
}

Additional Context

This updates the existing docguard catalog submission rather than creating a duplicate. v0.37.1 carries the v0.37 lifecycle foundation plus post-release catalog corrections, completed R1 tracking, read-only command side-effect fixes, and fail-closed synchronization of every published version surface.

The registry separates reviewed intent from observed implementation evidence. The release does not silently rewrite approved specifications from code changes; completion reconciliation and reviewed back-propagation remain planned R2 work.

Release: https://github.com/raccioly/docguard/releases/tag/v0.37.1
Merged release PR: raccioly/docguard#355
Release workflow: https://github.com/raccioly/docguard/actions/runs/34880001819

[raccioly]

Superseded by #4590, which carries the verified DocGuard v0.40.0 release, current 9-command/5-hook contract, and updated test evidence.