power-of-10-rules

NASA Power of 10 Rule 1 — Restrict control flow to simple constructs (no goto, setjmp/longjmp, recursion). Severity: blocker.

NASA Power of 10 Rule 2 — Every loop must have a statically determinable upper bound. Severity: blocker.

NASA Power of 10 Rule 3 — No dynamic memory allocation after initialization. Severity: blocker.

NASA Power of 10 Rule 4 — Functions ≤60 lines (one printed page). Severity: high.

NASA Power of 10 Rule 5 — Average ≥2 runtime assertions per function. Severity: high.

NASA Power of 10 Rule 6 — Declare data at smallest possible scope. Severity: medium.

NASA Power of 10 Rule 7 — Check every non-void return value; validate every parameter. Severity: blocker.

NASA Power of 10 Rule 8 — Limit preprocessor + metaprogramming (no recursive macros, no reflection-for-control-flow). Severity: high.

NASA Power of 10 Rule 9 — At most one level of dereferencing; no function pointers (analogues for non-C langs). Severity: blocker.

NASA Power of 10 Rule 10 — All warnings on; treat warnings as errors; second analyzer in CI. Severity: blocker.