Generated from configs/governance/upstream-inventory.yaml. Do not edit this file manually.
| System | Category | Contract Type | Glue Layers | Contract Surface | Validation Profile | Required Gate | Validation Commands |
|---|---|---|---|---|---|---|---|
@modelcontextprotocol/sdk |
protocol |
public_contract |
services/mcp-server, packages/orchestrator |
MCP tool registration, run artifact read helpers |
ci |
mcp_real_backend_gate |
pnpm mcp:test, pnpm mcp:smoke |
Playwright |
browser-engine |
public_contract |
automation, tests/frontend-e2e, tests/web-harness/tests/e2e |
web e2e, component tests, automation replay |
ci |
harness_web_e2e |
pnpm test:e2e:frontend:smoke, pnpm test:ct |
Crawlee |
browser-engine |
public_contract |
packages/orchestrator, scripts/ai |
explore engine policy |
pr |
pr-run-gate |
pnpm uiq engines:check --profile pr |
BackstopJS |
analysis-engine |
public_contract |
packages/orchestrator |
visual engine policy |
nightly |
nightly-gate |
pnpm uiq engines:check --profile nightly |
Lost Pixel |
analysis-engine |
public_contract |
packages/orchestrator |
visual engine policy |
nightly |
nightly-gate |
pnpm uiq engines:check --profile nightly |
k6 |
analysis-engine |
public_contract |
packages/orchestrator, scripts/thirdparty |
load engine policy |
nightly |
nightly-gate |
pnpm uiq engines:check --profile nightly |
Semgrep |
analysis-engine |
public_contract |
packages/orchestrator, scripts/ci |
security engine policy |
nightly |
nightly-gate |
pnpm uiq engines:check --profile nightly |
Gemini / Google GenAI |
ai-provider |
public_contract |
scripts/ai, automation, packages/orchestrator |
provider readiness, ai review reporting |
ci |
live_smoke_required |
node scripts/ai/check-provider-readiness.mjs |
curlconverter |
external-cli |
public_contract |
scripts/thirdparty, automation |
external tool wrapper |
ci |
frontend |
pnpm run automation:convert:curl -- --help |
har-to-k6 |
external-cli |
public_contract |
scripts/thirdparty, automation |
external tool wrapper |
nightly |
nightly-gate |
pnpm run automation:har:k6 -- --help |
Tauri runtime |
desktop-runtime |
semi_public |
packages/drivers, packages/orchestrator |
desktop readiness, desktop smoke |
nightly |
nightly-gate |
pnpm test:packages:runtime-target-macos |
Swift / macOS driver |
desktop-runtime |
semi_public |
packages/drivers, packages/orchestrator |
desktop readiness, desktop e2e |
nightly |
nightly-gate |
pnpm test:packages:runtime-target-macos |
actions/checkout |
ci-integration |
public_contract |
.github/workflows/ci.yml, .github/workflows/pr.yml, .github/workflows/nightly.yml |
CI checkout semantics, clean worktree bootstrap |
ci |
workflow_lint |
bash scripts/docs-gate.sh |
actions/cache |
ci-integration |
public_contract |
.github/actions/setup-python-smart/action.yml, .github/actions/setup-playwright/action.yml |
CI cache restore and save semantics |
ci |
workflow_lint |
node scripts/ci/check-workflow-runner-governance.mjs |
actions/upload-artifact |
ci-integration |
public_contract |
.github/actions/failure-bundle/action.yml, .github/workflows/nightly.yml, .github/workflows/pr.yml |
CI artifact publication, failure bundle upload |
ci |
workflow_lint |
bash scripts/docs-gate.sh |
node:20-bookworm-slim |
image |
public_contract |
docker/ci/base.Dockerfile |
CI Node runtime baseline |
ci |
workflow_lint |
node scripts/ci/check-python-baseline.mjs |
python:3.12-slim-bookworm |
image |
public_contract |
docker/ci/base.Dockerfile, services/api/Dockerfile |
CI and backend Python runtime baseline |
ci |
workflow_lint |
node scripts/ci/check-python-baseline.mjs |