review-controls.json

{
  "controls": [
    {
      "record": "single-authoritative-source",
      "catches": "Add a hand-written docs/PRINCIPLES.md that restates each record's claim and applies_when, alongside the generated REVIEW.md that already compiles them from principles/*.toml.",
      "misses": "Change scripts/review.py's render() so the compiled document prints applies_when before the claim."
    }
  ],
  "uncontrolled": [
    "complete-mediation",
    "confused-deputy",
    "conways-law",
    "defense-in-depth",
    "economy-of-mechanism",
    "end-to-end-principle",
    "enforcement-needs-a-trigger",
    "fail-fast",
    "goodharts-law",
    "graceful-degradation",
    "high-cohesion-low-coupling",
    "hyrums-law",
    "information-hiding",
    "informed-consent",
    "least-astonishment",
    "least-common-mechanism",
    "least-power",
    "make-illegal-states-unrepresentable",
    "mechanism-policy-separation",
    "observability",
    "parameterize-do-not-enumerate",
    "psychological-acceptability",
    "reversible-decisions",
    "robustness-principle",
    "rule-of-three",
    "separation-of-concerns",
    "separation-of-privilege",
    "unix-composability"
  ]
}