orca/.ciagent/IDEATION.md

Ideation: Orca v0.1

Full autonomy mode: all ideas auto-accepted. Three tiers explored.

Tier 1: Mechanical (security/quality, automated)

ID	Idea	Source	Confidence
I-001	Add gosec to CI pipeline	mechanical	0.95
I-002	Add govulncheck to CI pipeline	mechanical	0.95
I-003	Enable gofmt and goimports pre-commit checks	mechanical	0.90
I-004	Pin Go version in go.mod (go 1.25)	mechanical	0.95
I-005	Use log/slog for all logging (no fmt.Println in production)	mechanical	0.95
I-006	Add .gitignore for bin/, coverage.out, *.test	mechanical	0.95
I-007	Add LICENSE (MIT)	mechanical	0.90
I-008	Add README.md with quickstart	mechanical	0.90
I-009	Use context.Context for all I/O	mechanical	0.95
I-010	Wrap errors with fmt.Errorf("...: %w", err)	mechanical	0.95

Tier 2: Backend-Enriched (architecture/coverage)

ID	Idea	Source	Confidence
I-011	Use Cobra for CLI (industry standard)	backend	0.95
I-012	Use viper for config OR hand-rolled HCL parser	backend	0.85
I-013	Use hashicorp/hcl for HCL parsing	backend	0.90
I-014	Use modernc.org/sqlite (CGO-free)	backend	0.92
I-015	Repository pattern for state access	backend	0.85
I-016	Use os/exec for task execution with cmd.WaitDelay (Go 1.25+)	backend	0.95
I-017	Use iter.Seq (Go 1.25+) for streaming job lists	backend	0.90
I-018	Use crypto/tls with self-signed cert generation for mTLS	backend	0.80
I-019	Use slog.NewJSONHandler for structured logs	backend	0.95
I-020	Add health check HTTP endpoint on configurable port	backend	0.90

Tier 3: Cross-Project (from backlog/coreci patterns)

ID	Idea	Source	Confidence
I-021	Mirror .coreci.yml pattern from coreci (validate/build/test/release)	cross-project	0.95
I-022	Mirror tea CLI integration for releases	cross-project	0.90
I-023	Mirror lead-developer persona-driven decomposition	cross-project	0.90
I-024	Mirror phase/NN-* → milestone/* → main branching	cross-project	0.95
I-025	Mirror ---ci--- commit block discipline	cross-project	0.95
I-026	Mirror pre-push hook pattern from coreci (if exists)	cross-project	0.85
I-027	Mirror Go module structure: cmd/orca, internal/, pkg/	cross-project	0.95
I-028	Mirror persona territory enforcement (warn mode)	cross-project	0.90
I-029	Mirror security audit logging in all write paths	cross-project	0.90
I-030	Mirror Makefile with build, test, lint, fmt targets	cross-project	0.95

Accepted Ideas (auto-accepted, full autonomy)

All 30 ideas accepted. Implementation in subsequent EXECUTE phases.

Resulting REQ Additions

• REQ-014: gosec + govulncheck in CI (I-001, I-002)
• REQ-015: MIT LICENSE (I-007)
• REQ-016: README.md with quickstart (I-008)
• REQ-017: context.Context propagation (I-009)
• REQ-018: Error wrapping with %w (I-010)
• REQ-019: Cobra CLI framework (I-011)
• REQ-020: HCL parser integration (I-013)
• REQ-021: os/exec with WaitDelay (I-016)
• REQ-022: iter.Seq for streaming (I-017)
• REQ-023: Self-signed mTLS cert generation (I-018)
• REQ-024: Makefile with standard targets (I-030)