Skip to content

Releases: rock-the-prototype/dsl-core

Audit-by-Design DSL Core (License Migration Release)

24 Nov 09:36
0993508

Choose a tag to compare

  • Introduce Apache License 2.0 as the official code license
  • Add license headers to all source files
  • Clarify separation between dsl-core (open specification) and commercial validator suite
  • Add OpenAPI schema (previous commit)
  • Add v1 API

License Notice

As of version v0.2.0, the project is licensed under the Apache License 2.0.
Previous pre-release versions (≤ v0.1.0) were published under Creative Commons BY 4.0.

For all current and future releases, the Apache 2.0 license applies.

Audit-by-Design DSL Core MVP

23 Nov 10:06
1eea4cb

Choose a tag to compare

Pre-release

This release marks the first official version of the Audit-by-Design DSL, including all foundational components required to express, normalize, parse, validate, and audit Requirement Atoms in a deterministic and machine-verifiable way.

🚀 Included in this release

1. Formal DSL Grammar (CFG)

Defined in dsl-docs/02_DSL_Grammar.md, including:

  • Actor clause
  • Binary modality (must / must not)
  • Action clause
  • Optional condition + result clauses
  • Deterministic terminator rule

2. Canonical Normalization Engine

src/parser/normalizer.ts
Transforms any DSL input into a strict, canonical form:

  • normalized spacing
  • normalized casing
  • normalized punctuation
  • protection against ambiguity

3. Parser Implementation

src/parser/parser.ts
CFG-aligned parser producing a structured Requirement Atom.

4. JSON Schema Validation

src/schema/requirement.schema.json
Defines the machine-verifiable contract for every requirement.

5. Test Suite

tests/*.test.ts
Covers:

  • positive parsing
  • negative failures
  • normalization behavior
  • schema validation

6. DSL Playground (MVP)

Minimal Deno HTTP server for local experimentation:

  • enter DSL text
  • receive normalized + parsed + validated JSON
  • clean error messages

🔒 Security Foundations (New)
This release introduces the security model driven by Auguste Kerckhoffs’ principle:

The DSL treats all input exclusively as structured data — never executable logic.

This ensures:

  • no code execution
  • no template evaluation
  • no injection
  • strict separation of data vs. logic
    → a foundation for sovereign, trustworthy digital infrastructure.

Details: dsl-docs/07_Superior_IT-Security_Design_Principles.md

Next Milestones

  • /v1/normalize API
  • /v1/parse API
  • /v1/validate API
  • /v1/atom unified pipeline endpoint
  • OpenAPI 3.1 schema
  • Playground UI upgrade
  • WASM build for browser SDK