RFCTracker

Establishes the core seven-pillar model as the foundational structure of WAF++. Extended to eight pillars by RFC-0012.

Defines the public roadmap for 2026 covering Q1–Q4 milestones, v1.0 target, pilot programme, and foundation readiness goals.

Adds the initial content definition for each of the 7 pillars. Later extended to cover the 8th Agentic pillar (RFC-0012).

Migrates all framework documentation from Markdown to AsciiDoc and establishes Antora as the documentation build system with component versioning.

Adds the standard open-source health files to the framework repository.

Introduces the Sovereign pillar as the 7th pillar of WAF++ with 10 initial controls (WAF-SOV-010 through WAF-SOV-100).

Restructures the Governance pillar into modular best-practice pages and adds case-study content.

Defines a formal schema for WAF++ controls YAML files, enabling validation and tooling integration for the 83+ controls library.

Formalises the PASS scoring model as a normative specification for tier definitions, calculation rules, aggregation logic, and versioning contract.

Defines the approach for official WAF++ assessment tooling including the WAFPass CLI, server, dashboard, and web scorecard.

Introduces automated checks and release workflows for framework, wafpass-core, wafpass-server, and wafpass-dashboard repositories.

Adds the Agentic pillar as the 8th pillar of WAF++ with 10 initial controls, regulatory mappings, and bilingual documentation.

Standardises machine- and human-readable remediation guidance for every WAF++ control so operators can act on findings directly.

Defines how WAFPass detection and controls will be extended to cover Azure, GCP, and other cloud providers while keeping the framework cloud-agnostic.

CI checks for dead xrefs, unregistered nav.adoc files, and control-schema consistency between YAML, AsciiDoc, and navigation.

Expand Sovereign definitions, evidence matrix, and create real overview/glossary pages for resources and wording.

Complete Agentic pillar maturity, evidence, glossary, and best-practice pages with examples.

Standardise module links, convert relative xrefs to module-prefixed xrefs, and clean Markdown links.

Finalise antora.yml registration, create pillar-security nav, update README/AGENTS for 8-module layout.

Align controls to 8 pillars, add Agentic, and extend control-schema.adoc.

Extends WAFPass CLI, server, and dashboard to evaluate the Agentic pillar controls as part of a full PASS assessment.

Releases WAFPass CLI v1.1.0, Server v1.1.0, and Dashboard v1.1.0 with Pillar-8 Agentic support, detection fixes, and SINA Cloud region detection.

Unify fragmented test and coverage strategy across wafpass-core, server, and dashboard.

Define API maturity, backwards-compatibility rules, and versioning strategy for WAF++ PASS APIs.

Define a reliable source-snapshot ingestion contract so dashboard preview and auto-fix work consistently.

Reduce dashboard navigation fragmentation and add guided onboarding with role-based landing pages.

Make dashboard notifications actionable instead of passive text displays.

Expand the control-packs feature beyond admin-only uploads to a real marketplace with discovery and governance.

Tie maturity tiers to CI/CD policy gates so pipelines can block promotion below a target tier.

Allow curated aliases for long auto-generated MCP tool names so LLMs can match them more naturally.

Add MCP Resource definitions for run://{run_id}, control://{id}, etc. to expose read-only data without multiple tool calls.

Extend auto-fix/classify with an apply step that records changes and supports rollback.

Add cursor-based pagination helpers so large runs do not blow MCP message size limits.

Add fix blocks to control YAMLs or a central provider registry so common assertions get default patches.