Version v0.1 of the documentation is no longer actively maintained. The site that you are currently viewing is an archived snapshot. For up-to-date documentation, see the latest version.
Local validation
The repository intentionally runs its gates locally. It does not contain GitHub Actions workflow files.
Install security tools
The supported bootstrap installs pinned tools into the ignored
.ainfra/tools/ directory:
scripts/bootstrap-security-tools
It installs:
- Checkov
3.2.529in an isolated uv tool environment; - Gitleaks
8.30.1, verified against its release checksum.
Checkov is isolated because its dependency constraints conflict with the project environment. Runtime version checks fail closed.
Run all gates
scripts/validate-all
scripts/test-all
The validation suite covers formatting, typing, contracts, OpenTofu,
Ansible, repository policy, Rust Clippy and RustSec checks, Checkov, and
Gitleaks. Rust 1.96.1 is pinned in rust-toolchain.toml; the aibox workspace
installs Rust, Clippy, Rustfmt, and cargo-audit. Missing required tooling is a
failure, not a skipped check.
Build the documentation
docs/scripts/build-docs.sh
docs/scripts/serve-docs.sh
The local server uses
http://localhost:1313/ainfra/ so relative links behave like the
GitHub Pages deployment.