# Ideation: Orca v0.1

Full autonomy mode: all ideas auto-accepted. Three tiers explored.

## Tier 1: Mechanical (security/quality, automated)

| ID | Idea | Source | Confidence |
|----|------|--------|------------|
| I-001 | Add `gosec` to CI pipeline | mechanical | 0.95 |
| I-002 | Add `govulncheck` to CI pipeline | mechanical | 0.95 |
| I-003 | Enable `gofmt` and `goimports` pre-commit checks | mechanical | 0.90 |
| I-004 | Pin Go version in `go.mod` (`go 1.25`) | mechanical | 0.95 |
| I-005 | Use `log/slog` for all logging (no `fmt.Println` in production) | mechanical | 0.95 |
| I-006 | Add `.gitignore` for `bin/`, `coverage.out`, `*.test` | mechanical | 0.95 |
| I-007 | Add `LICENSE` (MIT) | mechanical | 0.90 |
| I-008 | Add `README.md` with quickstart | mechanical | 0.90 |
| I-009 | Use `context.Context` for all I/O | mechanical | 0.95 |
| I-010 | Wrap errors with `fmt.Errorf("...: %w", err)` | mechanical | 0.95 |

## Tier 2: Backend-Enriched (architecture/coverage)

| ID | Idea | Source | Confidence |
|----|------|--------|------------|
| I-011 | Use Cobra for CLI (industry standard) | backend | 0.95 |
| I-012 | Use `viper` for config OR hand-rolled HCL parser | backend | 0.85 |
| I-013 | Use `hashicorp/hcl` for HCL parsing | backend | 0.90 |
| I-014 | Use `modernc.org/sqlite` (CGO-free) | backend | 0.92 |
| I-015 | Repository pattern for state access | backend | 0.85 |
| I-016 | Use `os/exec` for task execution with `cmd.WaitDelay` (Go 1.25+) | backend | 0.95 |
| I-017 | Use `iter.Seq` (Go 1.25+) for streaming job lists | backend | 0.90 |
| I-018 | Use `crypto/tls` with self-signed cert generation for mTLS | backend | 0.80 |
| I-019 | Use `slog.NewJSONHandler` for structured logs | backend | 0.95 |
| I-020 | Add health check HTTP endpoint on configurable port | backend | 0.90 |

## Tier 3: Cross-Project (from backlog/coreci patterns)

| ID | Idea | Source | Confidence |
|----|------|--------|------------|
| I-021 | Mirror `.coreci.yml` pattern from coreci (validate/build/test/release) | cross-project | 0.95 |
| I-022 | Mirror `tea` CLI integration for releases | cross-project | 0.90 |
| I-023 | Mirror `lead-developer` persona-driven decomposition | cross-project | 0.90 |
| I-024 | Mirror `phase/NN-*` → `milestone/*` → `main` branching | cross-project | 0.95 |
| I-025 | Mirror `---ci---` commit block discipline | cross-project | 0.95 |
| I-026 | Mirror pre-push hook pattern from coreci (if exists) | cross-project | 0.85 |
| I-027 | Mirror Go module structure: `cmd/orca`, `internal/`, `pkg/` | cross-project | 0.95 |
| I-028 | Mirror persona territory enforcement (`warn` mode) | cross-project | 0.90 |
| I-029 | Mirror security audit logging in all write paths | cross-project | 0.90 |
| I-030 | Mirror `Makefile` with `build`, `test`, `lint`, `fmt` targets | cross-project | 0.95 |

## Accepted Ideas (auto-accepted, full autonomy)

All 30 ideas accepted. Implementation in subsequent EXECUTE phases.

## Resulting REQ Additions
- REQ-014: `gosec` + `govulncheck` in CI (I-001, I-002)
- REQ-015: MIT LICENSE (I-007)
- REQ-016: README.md with quickstart (I-008)
- REQ-017: `context.Context` propagation (I-009)
- REQ-018: Error wrapping with `%w` (I-010)
- REQ-019: Cobra CLI framework (I-011)
- REQ-020: HCL parser integration (I-013)
- REQ-021: `os/exec` with `WaitDelay` (I-016)
- REQ-022: `iter.Seq` for streaming (I-017)
- REQ-023: Self-signed mTLS cert generation (I-018)
- REQ-024: `Makefile` with standard targets (I-030)