[Extension]: Update DocGuard — CDD Enforcement (v0.47.0) #5373

Extension ID

docguard

Extension Name

DocGuard — CDD Enforcement

Version

0.47.0

Description

Documentation integrity for AI-assisted repositories: lifecycle registry, drift validation, traceability, safe archival, SARIF/JUnit, MCP, GitHub Actions, and Spec Kit hooks.

Author

raccioly

Repository URL

https://github.com/raccioly/docguard

Download URL

https://github.com/raccioly/docguard/releases/download/v0.47.0/spec-kit-docguard-v0.47.0.zip

License

MIT

Homepage (optional)

https://www.npmjs.com/package/docguard-cli

Documentation URL (optional)

https://github.com/raccioly/docguard/blob/main/extensions/spec-kit-docguard/README.md

Changelog URL (optional)

https://github.com/raccioly/docguard/blob/main/CHANGELOG.md

Required Spec Kit Version

=0.11.2

Required Tools (optional)

- node (>=18.0.0) - required
- npx - required
- specify - optional (auto-initializes the SDD workflow during docguard init)

Number of Commands

13

Number of Hooks (optional)

5

Tags

documentation, validation, traceability, ai-agents, spec-kit

Key Features

• Configurable quality gate with a closed verdict per check (pass, fail, empty, inconclusive, blocked, skipped) and severity triage
• AI-driven documentation repair with codebase research and validation loops
• Cross-document semantic consistency analysis (read-only review)
• CDD maturity score with an ROI-based improvement roadmap, plus an optional DORA documentation-quality view
• Reverse-engineers canonical docs from an existing codebase
• Spec Kit chain coverage (spec → plan → tasks) and spec lifecycle completion
• spec-kit workflow hooks (before_specify, after_implement, after_converge, before_tasks, after_tasks)

Testing Checklist

• Extension installs successfully via download URL
• All commands execute without errors
• Documentation is complete and accurate
• No security vulnerabilities identified
• Tested on at least one real project

Submission Requirements

• Valid extension.yml manifest included
• README.md with installation and usage instructions
• LICENSE file included
• GitHub release created with version tag
• All command files exist and are properly formatted
• Extension ID follows naming conventions (lowercase-with-hyphens)

Testing Details

Tested on:

• macOS (Darwin 25.5) with specify-cli 1.3.0 and Node.js 24, on 2026-11-10

Test project: a fresh specify init --here --integration claude project, plus the DocGuard repository itself (raccioly/docguard at v0.47.0) as the real project.

Test scenarios and results:

1. Installed with specify extension add docguard --from https://github.com/raccioly/docguard/releases/download/v0.47.0/spec-kit-docguard-v0.47.0.zip. No manifest validation errors; specify extension list shows DocGuard — CDD Enforcement (v0.47.0).
2. All 13 declared speckit.docguard.* commands registered (13 skills under .claude/skills/speckit-docguard-*).
3. All 5 declared workflow hook events registered in .specify/extensions.yml: before_specify, before_tasks, after_tasks, after_implement, after_converge.
4. Every command's underlying CLI call, run with the published docguard-cli@0.47.0 from npm in that project: init, guard, score, diagnose, generate --plan, sync, trace, anchors, review, fix, specs preflight, diff, explain. All ran. After init, guard reports the scaffold's warnings (exit 2, the same as 0.46.0), as designed.
5. This release's fix, checked in that project: docguard anchors no longer reports ANC007 for the files Spec Kit installed under .specify/extensions/docguard/ (0 findings).
6. Real project: docguard guard on the DocGuard repository at v0.47.0 passes (exit 0).
7. npm audit --omit=dev on the published package: 0 vulnerabilities. The release ZIP sha256 is 69bf3e08acb22b2825637aed7afb38c7b05de0a8a0072de8942405a51370de67.

Example Usage

# Install the extension
specify extension add docguard --from https://github.com/raccioly/docguard/releases/download/v0.47.0/spec-kit-docguard-v0.47.0.zip

# Run the documentation quality gate
/speckit.docguard.guard

Proposed Catalog Entry

{
  "docguard": {
    "name": "DocGuard — CDD Enforcement",
    "id": "docguard",
    "description": "Documentation integrity for AI-assisted repositories: lifecycle registry, drift validation, traceability, safe archival, SARIF/JUnit, MCP, GitHub Actions, and Spec Kit hooks.",
    "category": "docs",
    "effect": "read-write",
    "author": "raccioly",
    "version": "0.47.0",
    "download_url": "https://github.com/raccioly/docguard/releases/download/v0.47.0/spec-kit-docguard-v0.47.0.zip",
    "repository": "https://github.com/raccioly/docguard",
    "homepage": "https://www.npmjs.com/package/docguard-cli",
    "documentation": "https://github.com/raccioly/docguard/blob/main/extensions/spec-kit-docguard/README.md",
    "changelog": "https://github.com/raccioly/docguard/blob/main/CHANGELOG.md",
    "license": "MIT",
    "requires": {
      "speckit_version": ">=0.11.2",
      "tools": [
        {
          "name": "node",
          "version": ">=18.0.0",
          "required": true
        }
      ]
    },
    "provides": {
      "commands": 13,
      "hooks": 5
    },
    "tags": [
      "documentation",
      "validation",
      "traceability",
      "ai-agents",
      "spec-kit"
    ],
    "verified": false,
    "downloads": 0,
    "stars": 0
  }
}

Additional Context

Update from v0.46.0 (#5237): please bump the version and download URL on the existing docguard entry rather than adding a duplicate. Release notes: https://github.com/raccioly/docguard/releases/tag/v0.47.0