
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
@okforest/validate
Advanced tools
Validate Open Knowledge Format (OKF) v0.2 trees: spec conformance, link and metadata checks, and D2 and Mermaid diagram syntax, as structured findings with stable rule IDs and file and line locations.
Validate Open Knowledge Format (OKF) v0.2 trees: spec conformance, field shapes, links, OKForest conventions, and D2 and Mermaid diagram syntax. Findings are structured, with stable rule IDs, severities, and file, line, and column locations. Deterministic: no model calls and no network.
import { readTree } from "@okforest/okf/node"
import { validate } from "@okforest/validate"
const result = await validate(await readTree("./sales-okf"))
result.ok // no errors (warnings and info never fail)
for (const f of result.findings) {
console.log(`${f.file}:${f.line ?? ""} ${f.severity} ${f.ruleId} ${f.message}`)
}
Options: rules (defaults to defaultRules, which is okfRules plus
okforestRules), severity (per-rule overrides, or "off"), and now (for
date checks). A rule is { id, severity, description, check(context) }, so
your own rules plug in alongside the built-in ones.
Diagram checks load the optional peers @d2lang/d2 and mermaid if they are
installed; otherwise diagram blocks are reported as not checked (info). To
load them from somewhere else (a bundle, a download), pass diagrams loaders.
Each runs at most once per validation, and only if the tree has diagrams of
that language; return the module, or { unavailable: "<reason>" }:
await validate(tree, {
diagrams: {
d2: async () => (await fetchD2()) ?? { unavailable: "D2 could not be downloaded." },
},
})
toReport(result, { tool, path }) wraps a result as the versioned JSON
document that okforest validate --format json prints (schemaVersion: 1),
so other tools can produce and consume the same format.
The full rule list is in the OKForest CLI README.
Part of the OKForest CLI · Apache-2.0 · © Preneur LLC
FAQs
Validate Open Knowledge Format (OKF) v0.2 trees: spec conformance, link and metadata checks, and D2 and Mermaid diagram syntax, as structured findings with stable rule IDs and file and line locations.
The npm package @okforest/validate receives a total of 0 weekly downloads. As such, @okforest/validate popularity was classified as not popular.
We found that @okforest/validate demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.