[rubenvdlinde]

What

Adds sigrid.yaml, the same scope file dossiq, pipelinq, shillinq and thematiq carry on development:

• pins the maintainability model (model: "2026");
• lists every technology in the repo with its test-code patterns (listing languages switches off automatic detection, so the list names them all);
• leaves out only generated files and developer tooling: the generated l10n/*.js catalogues, scripts/ and tools/, OpenSpec change proposals, .claude/, and the root tool configuration (ESLint, PHPStan bootstrap, PHP-CS-Fixer).

One stackiq-specific line: the root ArchiMate comparison scripts compare_archimate.php and compare_archimate.py. They are developer debug tools (the PHP one boots a local Nextcloud from /var/www/html/lib/base.php), and .distignore already keeps compare_*.php out of the release package.

This branch first held a minimal file that only excluded .claude/; it now holds the full file, with development merged in.

Effect on the gate 122 proxy (development 1c3dff9; gate 123 on the merged head)

	without sigrid.yaml	with this file
checks met, 4-star	28 / 48	14 / 34
checks met, 5-star	22 / 48	8 / 34

The drop is the scope change, not the code: the only Python file is compare_archimate.py, so all 14 Python checks (all met) leave scope, as they did for dossiq and pipelinq. No other check changes state. Within the remaining checks the shares move a little because scripts/ held small, simple units: php params >=5 4.7% -> 4.8%, javascript CCN >25 11.1% -> 11.5%. Both were missed before and still are; the open SIG PRs #1370, #1371 and #1372 take javascript CCN >25 to 0% either way.

Checked

• development (with refactor(store): split the related-data fetch and make the stackiq plugin measurable #1370 to ci(quality): block on the SIG unit ratchet and commit the SIG score floor #1373) merged in. Gate 123 (sig-floor) on the merged head: PASS, 29 floored checks held; the 14 Python checks are reported as having left the measured scope through sigrid.yaml, which the gate allows for a change that edits sigrid.yaml. With refactor(store): split the related-data fetch and make the stackiq plugin measurable #1370 to refactor(store): drive the focused schema selections from key tables #1372 merged the counts are 29 / 48 without and 15 / 34 with this file at 4-star.
• check_sig_maintainability.py (gate 122) parses the file and drops scripts/ and both compare_archimate files from the production set (310 -> 300 files).
• Same caveat as the earlier scope-file PRs: Sigrid reads sigrid.yaml when a repository is published to it; whether SIG uses it for an imported assessment is not documented.

AI disclosure: prepared with Claude Code (claude-opus-5-5) and reviewed by the lane before opening.

[github-actions]

Quality Report — ConductionNL/stackiq @ 825a7ef

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-vue-demi		✅
test-l10n		✅
format		❌
check-schema-l10n		❌
check-l10n-js		✅
composer			❌	✅ 127/127
npm			❌	✅ 807/807
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					⏭️ not run for this diff — no file in this diff matches the code globs, and none carries a source extension — the heavy tier has nothing to decide about it.
Newman					⏭️
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-11-01 20:34 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/stackiq @ c22966d

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-vue-demi		✅
test-l10n		✅
format		❌
check-schema-l10n		❌
check-l10n-js		✅
composer			❌	✅ 127/127
npm			❌	✅ 807/807
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					⏭️ not run for this diff — no file in this diff matches the code globs, and none carries a source extension — the heavy tier has nothing to decide about it.
Newman					⏭️
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-11-02 20:55 UTC

Download the full PDF report from the workflow artifacts.