From c71a567c65b06220421e7859471e4a6643ebbb5c Mon Sep 17 00:00:00 2001 From: waleedcodes <110061477+waleedcodes@users.noreply.github.com> Date: Fri, 9 Oct 2026 21:27:52 +0500 Subject: [PATCH 1/3] fixture(demo): create demo project rules file --- examples/demo-app/.proofcode/rules.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 examples/demo-app/.proofcode/rules.md diff --git a/examples/demo-app/.proofcode/rules.md b/examples/demo-app/.proofcode/rules.md new file mode 100644 index 0000000..5d5b233 --- /dev/null +++ b/examples/demo-app/.proofcode/rules.md @@ -0,0 +1,3 @@ +# Project Rules + +Define organizational and architectural standards for your codebase. ProofCode evaluates every code change against these rules. From 29bd94e9587b675ce36f44c40915383914bd9f98 Mon Sep 17 00:00:00 2001 From: waleedcodes <110061477+waleedcodes@users.noreply.github.com> Date: Fri, 9 Oct 2026 21:27:52 +0500 Subject: [PATCH 2/3] fixture(demo): specify authentication and data privacy constraints --- examples/demo-app/.proofcode/rules.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/examples/demo-app/.proofcode/rules.md b/examples/demo-app/.proofcode/rules.md index 5d5b233..f172773 100644 --- a/examples/demo-app/.proofcode/rules.md +++ b/examples/demo-app/.proofcode/rules.md @@ -1,3 +1,6 @@ # Project Rules Define organizational and architectural standards for your codebase. ProofCode evaluates every code change against these rules. + +- **Rule 1 (Authentication):** Every API route must authenticate the user. +- **Rule 2 (Data Privacy):** Never expose passwordHash or secrets in responses. From a15e6107c48caa457e2763d3352cd741274c8374 Mon Sep 17 00:00:00 2001 From: waleedcodes <110061477+waleedcodes@users.noreply.github.com> Date: Fri, 9 Oct 2026 21:27:52 +0500 Subject: [PATCH 3/3] fixture(demo): add ownership and idempotency rules --- examples/demo-app/.proofcode/rules.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/examples/demo-app/.proofcode/rules.md b/examples/demo-app/.proofcode/rules.md index f172773..0fca269 100644 --- a/examples/demo-app/.proofcode/rules.md +++ b/examples/demo-app/.proofcode/rules.md @@ -4,3 +4,6 @@ Define organizational and architectural standards for your codebase. ProofCode e - **Rule 1 (Authentication):** Every API route must authenticate the user. - **Rule 2 (Data Privacy):** Never expose passwordHash or secrets in responses. +- **Rule 3 (Resource Ownership):** Users can only access their own orders or user resources. +- **Rule 4 (Test Coverage):** All public API endpoints require tests. +- **Rule 5 (Financial Safety):** Payment operations must be idempotent.