Knowledge-as-Code is actively used internally and maintained as an open utility. Public support is best effort. There is no guaranteed response time, release schedule, or commitment to implement requested features.
The maintained public path is:
- Run the initializer from a clean checkout.
- Edit
project.ymland the generateddata/tree. - Run validation, build, verification, evals where included, and link checking.
- Deploy the generated
docs/artifact with the included GitHub Pages workflow or another static host. - Optionally run the local MCP server over standard input and output.
The current supported runtime is Node.js 18 or later on macOS and Linux. Windows may work but is not part of the tested support promise.
Work is prioritized in this order:
- Security vulnerabilities and unsafe generated output
- Incorrect validation or evidence results
- Breakage in the initializer, build, or deployment golden path
- Reproducibility and portability defects
- Documentation failures reproduced by an independent user
- Features needed by active internal deployments
- Other enhancements when maintainer capacity permits
Patch releases may fix correctness, security, documentation, and generated output. Minor releases may add backward-compatible configuration or output. Breaking configuration, API, route, or MCP changes require a major version or a documented migration path.
Generated HTML appearance is not a stable API. JSON API fields, entity IDs, routes, configuration keys, MCP tool contracts, and the mapping keys regulation and obligations are compatibility surfaces.
Bug reports with a minimal reproduction are the most useful public contribution. Small fixes that preserve the zero-dependency core and supported path are welcome. A pull request may be correct and still remain unmerged if it expands the permanent maintenance surface beyond current capacity.
Domain-specific adapters and model integrations should generally live outside this repository and use the external verifier contract.
There is no fixed release cadence. Releases are cut when a coherent set of tested changes is ready. A deprecated compatibility surface should remain available for at least one minor release when practical and be called out in the changelog.
If the project becomes maintenance-only or archived, the README will say so plainly. The last working release and MIT license will remain available.
See SECURITY.md for private reporting and the supported security scope.