docs(dox): build out the DOX AGENTS.md hierarchy

Root Child DOX Index assembled, plus a per-module AGENTS.md across the tree (core/*, infrastructure/*, apps/*, testing/*, and docs/examples/frontend/etc), each following the DOX section shape: Purpose, Ownership, Local Contracts, Work Guidance, Verification, Child DOX Index.
2026-06-28 20:43:27 +04:00
parent 1cb7fec677
commit d26f20c316
48 changed files with 1783 additions and 0 deletions
@@ -0,0 +1,32 @@
+# core/risk — AGENTS.md
+
+## Purpose
+
+Risk assessment for tool calls and workflow operations: maps tool execution tiers to risk levels and evaluates `RiskContext` to produce a `RiskSummary`.
+
+## Ownership
+
+CORREX kernel team.
+
+## Local Contracts
+
+- `RiskAssessor` — interface; `DefaultRiskAssessor` applies `TierMapping` to produce `RiskSummary`. `NoOpRiskAssessor` always returns clean (used in test contexts).
+- `RiskContext` — input to assessment: tool identity, parameters, session context.
+- `TierMapping` — maps `Tier` values (from `core:events`) to `RiskLevel`. Tier levels are the canonical risk signal — do not invent secondary risk signals here.
+- `RiskSummary` / `RiskAction` / `RiskLevel` / `RiskSignal` — vocabulary types (defined in `core:events`; referenced here).
+- Hard Invariant #5: all tools declare execution tier; tier drives risk level. Risk assessment is not optional.
+
+## Work Guidance
+
+- `DefaultRiskAssessor` is stateless — no event sourcing needed here.
+- Do not add approval logic here; that belongs in `core:approvals`. Risk assessment produces a summary; approval evaluation consumes it.
+
+## Verification
+
+```bash
+./gradlew :core:risk:test --rerun-tasks
+```
+
+## Child DOX Index
+
+No child AGENTS.md (leaf module).