Releases: rock-the-prototype/dsl-core
Audit-by-Design DSL Core (License Migration Release)
- Introduce Apache License 2.0 as the official code license
- Add license headers to all source files
- Clarify separation between dsl-core (open specification) and commercial validator suite
- Add OpenAPI schema (previous commit)
- Add v1 API
License Notice
As of version v0.2.0, the project is licensed under the Apache License 2.0.
Previous pre-release versions (≤ v0.1.0) were published under Creative Commons BY 4.0.
For all current and future releases, the Apache 2.0 license applies.
Audit-by-Design DSL Core MVP
This release marks the first official version of the Audit-by-Design DSL, including all foundational components required to express, normalize, parse, validate, and audit Requirement Atoms in a deterministic and machine-verifiable way.
🚀 Included in this release
1. Formal DSL Grammar (CFG)
Defined in dsl-docs/02_DSL_Grammar.md, including:
- Actor clause
- Binary modality (must / must not)
- Action clause
- Optional condition + result clauses
- Deterministic terminator rule
2. Canonical Normalization Engine
src/parser/normalizer.ts
Transforms any DSL input into a strict, canonical form:
- normalized spacing
- normalized casing
- normalized punctuation
- protection against ambiguity
3. Parser Implementation
src/parser/parser.ts
CFG-aligned parser producing a structured Requirement Atom.
4. JSON Schema Validation
src/schema/requirement.schema.json
Defines the machine-verifiable contract for every requirement.
5. Test Suite
tests/*.test.ts
Covers:
- positive parsing
- negative failures
- normalization behavior
- schema validation
6. DSL Playground (MVP)
Minimal Deno HTTP server for local experimentation:
- enter DSL text
- receive normalized + parsed + validated JSON
- clean error messages
🔒 Security Foundations (New)
This release introduces the security model driven by Auguste Kerckhoffs’ principle:
The DSL treats all input exclusively as structured data — never executable logic.
This ensures:
- no code execution
- no template evaluation
- no injection
- strict separation of data vs. logic
→ a foundation for sovereign, trustworthy digital infrastructure.
Details: dsl-docs/07_Superior_IT-Security_Design_Principles.md
Next Milestones
- /v1/normalize API
- /v1/parse API
- /v1/validate API
- /v1/atom unified pipeline endpoint
- OpenAPI 3.1 schema
- Playground UI upgrade
- WASM build for browser SDK