Directories
¶
| Path | Synopsis |
|---|---|
|
Package await implements quiescence and completeness detection — the make-or-break of the capture harness (trace-capture-harness spec §4).
|
Package await implements quiescence and completeness detection — the make-or-break of the capture harness (trace-capture-harness spec §4). |
|
Package boundarylabel is the single source of truth for the boundary-effect LABEL grammar that flowmap's graphio emits and every consumer parses: the "boundary:" namespace prefix and the per-kind "boundary:db " / "boundary:bus " prefixes.
|
Package boundarylabel is the single source of truth for the boundary-effect LABEL grammar that flowmap's graphio emits and every consumer parses: the "boundary:" namespace prefix and the per-kind "boundary:db " / "boundary:bus " prefixes. |
|
Package buildinfo resolves a binary's self-reported version.
|
Package buildinfo resolves a binary's self-reported version. |
|
Package canon is the load-bearing behavioral transform: it turns a captured, scoped flow into flowmap's deterministic, run-independent IR (canon spec).
|
Package canon is the load-bearing behavioral transform: it turns a captured, scoped flow into flowmap's deterministic, run-independent IR (canon spec). |
|
opkey
Package opkey derives flowmap's canonical operation key from a span's kind and attributes (canon spec §3.5).
|
Package opkey derives flowmap's canonical operation key from a span's kind and attributes (canon spec §3.5). |
|
promote
Package promote implements salience filtering as tree contraction (canon spec §3.7, plan [C3]).
|
Package promote implements salience filtering as tree contraction (canon spec §3.7, plan [C3]). |
|
sql
Package sql is flowmap's tokenizer-grade SQL normalizer (canon spec §3.4, §8.3).
|
Package sql is flowmap's tokenizer-grade SQL normalizer (canon spec §3.4, §8.3). |
|
url
Package url parameterizes request paths into route templates (canon spec §3.4).
|
Package url parameterizes request paths into route templates (canon spec §3.4). |
|
Package canonjson is flowmap's single deterministic JSON serializer.
|
Package canonjson is flowmap's single deterministic JSON serializer. |
|
Package config loads and validates the per-service .flowmap.yaml document.
|
Package config loads and validates the per-service .flowmap.yaml document. |
|
Package coverage computes flowmap's emergent capability: the delta between the static inter-service boundary (every statically-reachable effect) and the union of behavioral snapshots (the effects tested flows actually exercised).
|
Package coverage computes flowmap's emergent capability: the delta between the static inter-service boundary (every statically-reachable effect) and the union of behavioral snapshots (the effects tested flows actually exercised). |
|
Package diff computes the structural, prioritized change set between two canonical traces — the observed flow versus its committed golden (golden-diff spec §3, §4).
|
Package diff computes the structural, prioritized change set between two canonical traces — the observed flow versus its committed golden (golden-diff spec §3, §4). |
|
Package effectkind is the single source of truth for the "method-named outbound" boundary-kind tokens (the sqlverb precedent, for boundary kinds instead of SQL verbs).
|
Package effectkind is the single source of truth for the "method-named outbound" boundary-kind tokens (the sqlverb precedent, for boundary kinds instead of SQL verbs). |
|
Package fqnres resolves a hand-authored claim label to fully-qualified function names (FQNs) in a flowmap graph.
|
Package fqnres resolves a hand-authored claim label to fully-qualified function names (FQNs) in a flowmap graph. |
|
Package glob implements flowmap's identity-glob matching, used by the tier-map for pins and rules (for example "*ledger#Post" or "*decisioning#Evaluate").
|
Package glob implements flowmap's identity-glob matching, used by the tier-map for pins and rules (for example "*ledger#Post" or "*decisioning#Evaluate"). |
|
Package golden is the snapshot-assertion lifecycle behind the behavioral gate (golden-diff spec, canon spec §6).
|
Package golden is the snapshot-assertion lifecycle behind the behavioral gate (golden-diff spec, canon spec §6). |
|
groundwork
|
|
|
chains
Package chains composes the per-service facts groundwork already holds into a cross-service happens-before "chain card" (CX-5).
|
Package chains composes the per-service facts groundwork already holds into a cross-service happens-before "chain card" (CX-5). |
|
claims
Package claims evaluates a point-in-time claims file against a flowmap graph — the verification complement to fitness.
|
Package claims evaluates a point-in-time claims file against a flowmap graph — the verification complement to fitness. |
|
contract
Package contract decodes flowmap's gated boundary contract (the output of `flowmap boundary <service>`) and computes the semantic diff between a base and a branch contract — the inter-service surface movement that `groundwork diff` reports and flags as breaking.
|
Package contract decodes flowmap's gated boundary contract (the output of `flowmap boundary <service>`) and computes the semantic diff between a base and a branch contract — the inter-service surface movement that `groundwork diff` reports and flags as breaking. |
|
diagram
Package diagram turns a hand-authored diagram manifest plus one or more flowmap graphs into a mermaid `flowchart` whose every SOLID edge is an induced-subgraph edge READ from a graph and whose every tier annotation is READ from a graph — neither can be typed by hand.
|
Package diagram turns a hand-authored diagram manifest plus one or more flowmap graphs into a mermaid `flowchart` whose every SOLID edge is an induced-subgraph edge READ from a graph and whose every tier annotation is READ from a graph — neither can be typed by hand. |
|
facts
Package facts evaluates presentation-free, deterministic graph facts shared by standing fitness policy and caller-supplied claims.
|
Package facts evaluates presentation-free, deterministic graph facts shared by standing fitness policy and caller-supplied claims. |
|
fitness
Package fitness evaluates a policy against a graph index and returns deterministic findings — the architectural invariants that fail closed in CI.
|
Package fitness evaluates a policy against a graph index and returns deterministic findings — the architectural invariants that fail closed in CI. |
|
graph
Package graph loads and indexes the call graph that flowmap emits (`flowmap graph <service>`) and is the substrate every groundwork surface is built on.
|
Package graph loads and indexes the call graph that flowmap emits (`flowmap graph <service>`) and is the substrate every groundwork surface is built on. |
|
ground
Package ground assembles the pre-edit grounding card (GX-5): everything an agent (or human) should know BEFORE touching a function — its identity and neighborhood, the external effects it can reach, the rules that demonstrably bind it, and the blind spots touching any claim on the card.
|
Package ground assembles the pre-edit grounding card (GX-5): everything an agent (or human) should know BEFORE touching a function — its identity and neighborhood, the external effects it can reach, the rules that demonstrably bind it, and the blind spots touching any claim on the card. |
|
impact
Package impact assembles the incident-triage card: given suspect functions, the bidirectional blast radius an incident responder needs — which entrypoints are implicated (reverse reach), which external effects are in play (forward reach), and where the graph's own knowledge stops being sound (blind spots on any traversed path).
|
Package impact assembles the incident-triage card: given suspect functions, the bidirectional blast radius an incident responder needs — which entrypoints are implicated (reverse reach), which external effects are in play (forward reach), and where the graph's own knowledge stops being sound (blind spots on any traversed path). |
|
policy
Package policy is the schema and loader for a service's groundwork policy — the single, human-authored source of architectural truth that the fitness functions enforce.
|
Package policy is the schema and loader for a service's groundwork policy — the single, human-authored source of architectural truth that the fitness functions enforce. |
|
review
Package review computes the deterministic MR review artifact from a base graph and a branch graph.
|
Package review computes the deterministic MR review artifact from a base graph and a branch graph. |
|
reviewtriage
Package reviewtriage is a PROTOTYPE human-reviewer triage surface: given the base and branch graphs of an MR, it sorts the *changed* functions into three zones for a reviewer drowning in diff volume, by the inverse of the tool's own confidence AND by what THIS diff actually moved —
|
Package reviewtriage is a PROTOTYPE human-reviewer triage surface: given the base and branch graphs of an MR, it sorts the *changed* functions into three zones for a reviewer drowning in diff volume, by the inverse of the tool's own confidence AND by what THIS diff actually moved — |
|
setutil
Package setutil holds the small string-set helpers shared across the groundwork packages, so the same sorted-keys / membership logic is defined once rather than copied per package.
|
Package setutil holds the small string-set helpers shared across the groundwork packages, so the same sorted-keys / membership logic is defined once rather than copied per package. |
|
transcript
Package transcript reads and summarizes the MCP server's --log file (calls.jsonl) — the E4 measurement apparatus, and the evidence the MCP tiers 2–3 plan-of-record defers to: per-session query counts, the tool and service mix, whether agents make cross-service hops mid-session, and how often a tool error is followed by a corrected call.
|
Package transcript reads and summarizes the MCP server's --log file (calls.jsonl) — the E4 measurement apparatus, and the evidence the MCP tiers 2–3 plan-of-record defers to: per-session query counts, the tool and service mix, whether agents make cross-service hops mid-session, and how often a tool error is followed by a corrected call. |
|
Package impeach implements the static × behavioral impeachment cell — a counterexample finder for the static analyzer's own negatives (docs/design/behavioral-impeachment-plan.md).
|
Package impeach implements the static × behavioral impeachment cell — a counterexample finder for the static analyzer's own negatives (docs/design/behavioral-impeachment-plan.md). |
|
Package ingest groups a flat set of post-hoc spans (decoded from an OTLP/JSON trace export) into per-flow, per-service CapturedFlows ready for the existing canonicalizer — the out-of-process analog of the in-process harness's scope-and-assemble step (capture.Scope, post-hoc design [P10.2]).
|
Package ingest groups a flat set of post-hoc spans (decoded from an OTLP/JSON trace export) into per-flow, per-service CapturedFlows ready for the existing canonicalizer — the out-of-process analog of the in-process harness's scope-and-assemble step (capture.Scope, post-hoc design [P10.2]). |
|
Package irtest provides shared builders for constructing ir.CanonicalTrace values in the engine's tests, so the IR's construction shape lives in one place rather than being re-spelled in every package's _test file.
|
Package irtest provides shared builders for constructing ir.CanonicalTrace values in the engine's tests, so the IR's construction shape lives in one place rather than being re-spelled in every package's _test file. |
|
Package loansut is the shared system-under-test for flowmap's behavioral tests: a miniature, OTel-instrumented loan service that both the harness suite and the public flow-DSL suite drive through the real router.
|
Package loansut is the shared system-under-test for flowmap's behavioral tests: a miniature, OTel-instrumented loan service that both the harness suite and the public flow-DSL suite drive through the real router. |
|
Package model holds the normalized feature vocabulary shared by both flowmap pipelines.
|
Package model holds the normalized feature vocabulary shared by both flowmap pipelines. |
|
Package nodecount owns the ONE phrasing for a node count that had to collapse several node RECORDS into one function.
|
Package nodecount owns the ONE phrasing for a node count that had to collapse several node RECORDS into one function. |
|
Package otlpjson decodes OTLP/JSON trace exports — the output of an OTel Collector file exporter — into flowmap's OTel-free capture model.
|
Package otlpjson decodes OTLP/JSON trace exports — the output of an OTel Collector file exporter — into flowmap's OTel-free capture model. |
|
Package render turns the canonical IR into a Mermaid sequence diagram — the human-readable view committed alongside the golden for review (canon spec §3.8, golden-diff spec).
|
Package render turns the canonical IR into a Mermaid sequence diagram — the human-readable view committed alongside the golden for review (canon spec §3.8, golden-diff spec). |
|
Package routematch decides whether a hand-authored route/topic query names the same entrypoint as a graph entrypoints[].name registration literal.
|
Package routematch decides whether a hand-authored route/topic query names the same entrypoint as a graph entrypoints[].name registration literal. |
|
Package sqlverb is the single source of truth for which SQL verbs commit a row mutation.
|
Package sqlverb is the single source of truth for which SQL verbs commit a row mutation. |
|
static
|
|
|
analyze
Package analyze runs the front half of the static pipeline as one step: read the service config, load and SSA-build the unit, discover its roots (using the config's bus-consumer hints), and build the call graph.
|
Package analyze runs the front half of the static pipeline as one step: read the service config, load and SSA-build the unit, discover its roots (using the config's bus-consumer hints), and build the call graph. |
|
blindspots
Package blindspots detects where the static analysis is blind at the service boundary, so a reviewer never operates on false completeness (static-extractor spec §7).
|
Package blindspots detects where the static analysis is blind at the service boundary, so a reviewer never operates on false completeness (static-extractor spec §7). |
|
boundary
Package boundary derives flowmap's gated static artifact: the inter-service boundary contract (static-extractor spec §4).
|
Package boundary derives flowmap's gated static artifact: the inter-service boundary contract (static-extractor spec §4). |
|
callgraph
Package callgraph builds a deterministic call graph for one service unit from its discovered roots.
|
Package callgraph builds a deterministic call graph for one service unit from its discovered roots. |
|
features
Package features reduces a call-graph edge to the normalized feature vector the shared tier-map classifies (static-extractor spec §5).
|
Package features reduces a call-graph edge to the normalized feature vector the shared tier-map classifies (static-extractor spec §5). |
|
frontier
Package frontier classifies a built call graph's FRONTIER — every place static reachability stops being able to answer — into the taxonomy from docs/design/frontier-instrumentation-plan.md, deterministically and with no coupling to any verdict surface (rule R3: a frontier label can only (mis)prioritize our own work, never change a fitness/verify result).
|
Package frontier classifies a built call graph's FRONTIER — every place static reachability stops being able to answer — into the taxonomy from docs/design/frontier-instrumentation-plan.md, deterministically and with no coupling to any verdict surface (rule R3: a frontier label can only (mis)prioritize our own work, never change a fitness/verify result). |
|
graphio
Package graphio renders the static pipeline's NON-gated view: the full first-party call graph with signatures and typed boundary edges (static- extractor spec §2, §9).
|
Package graphio renders the static pipeline's NON-gated view: the full first-party call graph with signatures and typed boundary edges (static- extractor spec §2, §9). |
|
loader
Package loader is the front of the static pipeline: it type-checks one service unit with go/packages and hands the result to SSA construction.
|
Package loader is the front of the static pipeline: it type-checks one service unit with go/packages and hands the result to SSA construction. |
|
obligations
Package obligations evaluates domain-declared path obligations over each function's SSA control-flow graph — the intraprocedural-but-domain-specific slice no off-the-shelf analyzer can know (path-obligations plan).
|
Package obligations evaluates domain-declared path obligations over each function's SSA control-flow graph — the intraprocedural-but-domain-specific slice no off-the-shelf analyzer can know (path-obligations plan). |
|
openapi
Package openapi is the opt-in labeler that names outbound calls made through spec-generated HTTP clients (oapi-codegen and comparable generators).
|
Package openapi is the opt-in labeler that names outbound calls made through spec-generated HTTP clients (oapi-codegen and comparable generators). |
|
rebind
Package rebind is flowmap's EXPERIMENTAL, opt-in de-union pass.
|
Package rebind is flowmap's EXPERIMENTAL, opt-in de-union pass. |
|
reclaim
Package reclaim holds the sound static reclaimers from docs/design/frontier-instrumentation-plan.md, Phase 3: passes that ADD the call edges the builder lost at a recognized framework dispatch seam, shrinking the Category-B frontier.
|
Package reclaim holds the sound static reclaimers from docs/design/frontier-instrumentation-plan.md, Phase 3: passes that ADD the call edges the builder lost at a recognized framework dispatch seam, shrinking the Category-B frontier. |
|
roots
Package roots discovers the entry points a call graph must be rooted at.
|
Package roots discovers the entry points a call graph must be rooted at. |
|
schemadrift
Package schemadrift is the deterministic schema-drift cross-check: it diffs the DB tables the code WRITES (already named in the emitted graph as "boundary:db <OP> <table>" labels) against the tables the migrations DEFINE.
|
Package schemadrift is the deterministic schema-drift cross-check: it diffs the DB tables the code WRITES (already named in the emitted graph as "boundary:db <OP> <table>" labels) against the tables the migrations DEFINE. |
|
signatures
Package signatures renders a function's type signature as a canonical, package-qualified string for the non-gated call-graph view (static-extractor spec §6).
|
Package signatures renders a function's type signature as a canonical, package-qualified string for the non-gated call-graph view (static-extractor spec §6). |
|
sqlfold
Package sqlfold is the SQL const-accumulation fold (docs/design/ sql-constfold-reclaim-plan.md): a sound, opt-in LABEL reclaimer that recovers the verb (and, when constant, the table) of a SQL statement assembled at runtime from compile-time-constant fragments — the dominant shape of the B2 "opaque SQL" frontier (a constant statement laundered through a strings.Builder), not genuinely dynamic SQL.
|
Package sqlfold is the SQL const-accumulation fold (docs/design/ sql-constfold-reclaim-plan.md): a sound, opt-in LABEL reclaimer that recovers the verb (and, when constant, the table) of a SQL statement assembled at runtime from compile-time-constant fragments — the dominant shape of the B2 "opaque SQL" frontier (a constant statement laundered through a strings.Builder), not genuinely dynamic SQL. |
|
ssabuild
Package ssabuild turns a loaded service unit into an SSA program.
|
Package ssabuild turns a loaded service unit into an SSA program. |
|
statictest
Package statictest provides shared fixtures for the static pipeline's tests: loading and SSA-building the hermetic loansvc service, and the registrar hints that match its router and bus.
|
Package statictest provides shared fixtures for the static pipeline's tests: loading and SSA-building the hermetic loansvc service, and the registrar hints that match its router and bus. |
|
taint
Package taint is flowmap's sound forward value-flow (taint) analysis: it answers, for a declared set of sensitive SOURCES and must-not-receive SINKS, whether sensitive data can flow from a source to a sink argument.
|
Package taint is flowmap's sound forward value-flow (taint) analysis: it answers, for a declared set of sensitive SOURCES and must-not-receive SINKS, whether sensitive data can flow from a source to a sink argument. |
|
Package syscontext aggregates many post-hoc flows into one deduplicated service-interaction graph — the system-context view (post-hoc design: the merged diagram unit).
|
Package syscontext aggregates many post-hoc flows into one deduplicated service-interaction graph — the system-context view (post-hoc design: the merged diagram unit). |
|
Package tiermap is flowmap's single salience classifier.
|
Package tiermap is flowmap's single salience classifier. |
Click to show internal directories.
Click to hide internal directories.