一键导入
hack23-future-architecture-standards
Hack23 organization architecture documentation standards, C4 model requirements, future state planning
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Hack23 organization architecture documentation standards, C4 model requirements, future state planning
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
Identity and access management: RBAC, least privilege, MFA, quarterly reviews per ISO 27001 A.5.15, A.8.2, A.8.3
Business continuity and disaster recovery: 30-day retention, quarterly restore tests, RTO/RPO targets per ISO 27001 A.17
Political psychology, cognitive biases, group dynamics, leadership analysis, decision-making patterns for Swedish political intelligence
Risk-based data and asset classification framework: PUBLIC, INTERNAL, CONFIDENTIAL, RESTRICTED aligned with ISO 27001 A.5.12 and CIA triad
Unified compliance verification across ISO 27001, NIST CSF, CIS Controls, NIS2, EU CRA, GDPR, SOC 2, PCI DSS, and HIPAA for cybersecurity consulting
Cryptographic controls implementation: TLS 1.3, AES-256-GCM, bcrypt, RSA-4096, key management per NIST FIPS 140-2 and ISO 27001 A.8.24
| name | hack23-future-architecture-standards |
| description | Hack23 organization architecture documentation standards, C4 model requirements, future state planning |
| license | Apache-2.0 |
Define and enforce architecture documentation standards across the Hack23 organization, using the C4 model for system decomposition, future state planning with ADRs (Architecture Decision Records), and consistent documentation patterns across all repositories.
Do NOT use for:
Every Hack23 project must include a system context diagram showing:
C4Context
title CIA Platform - System Context
Person(citizen, "Citizen", "Swedish citizen seeking political transparency")
Person(analyst, "Political Analyst", "Researches political patterns")
System(cia, "CIA Platform", "Political intelligence and analysis")
System_Ext(riksdag, "Riksdagen API", "Swedish Parliament open data")
System_Ext(val, "Val.se", "Swedish Election Authority")
System_Ext(worldbank, "World Bank", "Economic indicators")
System_Ext(esv, "ESV", "Swedish financial data")
Rel(citizen, cia, "Views political data", "HTTPS")
Rel(analyst, cia, "Analyzes political trends", "HTTPS")
Rel(cia, riksdag, "Fetches parliament data", "HTTPS/JSON")
Rel(cia, val, "Fetches election data", "HTTPS/JSON")
Rel(cia, worldbank, "Fetches economic data", "HTTPS/JSON")
Rel(cia, esv, "Fetches financial data", "HTTPS/JSON")
Show major deployable units:
C4Container
title CIA Platform - Container Diagram
Container(webapp, "Web Application", "Vaadin/Spring", "Political data dashboards")
ContainerDb(db, "PostgreSQL", "Database", "Political data store")
Container(agent, "Data Agent", "Spring Integration", "Data import pipelines")
Rel(webapp, db, "Reads/Writes", "JDBC/JPA")
Rel(agent, db, "Writes imported data", "JDBC/JPA")
Required for complex modules showing internal components.
Optional — only for critical/complex algorithms.
# ADR-{number}: {Title}
## Status
{Proposed | Accepted | Deprecated | Superseded by ADR-xxx}
## Context
{What is the issue? Why do we need to make a decision?}
## Decision
{What is the change that we're proposing and/or doing?}
## Consequences
### Positive
- {Benefit 1}
- {Benefit 2}
### Negative
- {Trade-off 1}
- {Trade-off 2}
### Risks
- {Risk 1 and mitigation}
docs/adr/ADR-NNNN-short-title.mdEach Hack23 project must maintain:
| Document | Purpose | Update Frequency |
|---|---|---|
ARCHITECTURE.md | Current state architecture | Every major change |
FUTURE_ARCHITECTURE.md | Target state architecture | Quarterly review |
SECURITY_ARCHITECTURE.md | Security architecture | Every security change |
DATA_MODEL.md | Entity relationship diagrams | Every schema change |
FLOWCHART.md | Data processing workflows | When workflows change |
MINDMAP.md | Component relationships | Annually |
## Current State → Future State
### Phase 1: Foundation (Q1)
- [ ] Milestone 1: Description
- [ ] Milestone 2: Description
### Phase 2: Migration (Q2)
- [ ] Milestone 3: Description
### Phase 3: Optimization (Q3)
- [ ] Milestone 4: Description
### Rollback Plan
- Step 1: {rollback action}
- Step 2: {verification}
All repositories under github.com/Hack23/ must:
ARCHITECTURE.md, not architecture.mdARCHITECTURE.md| Control | Requirement |
|---|---|
| ISO 27001 A.5.1 | Policies for information security (documented) |
| ISO 27001 A.8.25 | Secure development lifecycle documentation |
| NIST CSF ID.AM-2 | Software platform inventory |
| CIS Control 2 | Inventory and control of software assets |