semantics

backend/src/scripts/clean_release_tui.py

@@ -4,6 +4,7 @@
 # @RELATION DEPENDS_ON -> [ComplianceExecutionService]
 # @RELATION DEPENDS_ON -> [CleanReleaseRepository]
 # @INVARIANT: TUI refuses startup in non-TTY environments; headless flow is CLI/API only.
+# @DATA_CONTRACT: CLIArgs -> TUIExitCode
 import contextlib
 import curses
 import json

backend/src/scripts/create_admin.py

@@ -1,12 +1,14 @@
-# #region CreateAdminScript [C:3] [TYPE Module] [SEMANTICS admin, search, user, cli]
+# #region CreateAdminScript [C:5] [TYPE Module] [SEMANTICS admin, search, user, cli]
 #
 # @BRIEF CLI tool for creating the initial admin user.
-# @LAYER:     Scripts
+# @LAYER: Infrastructure
 # @RELATION USES -> [AuthSecurityModule]
 # @RELATION USES -> [DatabaseModule]
 # @RELATION USES -> [AuthModels]
 #
 # @INVARIANT: Admin user must have the "Admin" role.
+# @SIDE_EFFECT: Writes admin user to database
+# @DATA_CONTRACT: CLIArgs -> AdminUser
 
 import argparse
 import sys

backend/src/scripts/seed_permissions.py

@@ -1,13 +1,15 @@
-# #region SeedPermissionsScript [C:3] [TYPE Module] [SEMANTICS rbac, search, auth]
+# #region SeedPermissionsScript [C:5] [TYPE Module] [SEMANTICS rbac, search, auth]
 #
 # @BRIEF Populates the auth database with initial system permissions.
-# @LAYER:     Scripts
+# @LAYER: Infrastructure
 # @RELATION DEPENDS_ON -> AuthSessionLocal
 # @RELATION DEPENDS_ON -> Permission
 # @RELATION DEPENDS_ON -> Role
 # @RELATION DEPENDS_ON -> AuthRepository
 #
 # @INVARIANT: Safe to run multiple times (idempotent).
+# @SIDE_EFFECT: Writes permissions to database
+# @DATA_CONTRACT: CLIArgs -> SeedSummary
 
 import sys
 from pathlib import Path

backend/src/scripts/seed_superset_load_test.py

@@ -1,10 +1,11 @@
-# #region SeedSupersetLoadTestScript [C:3] [TYPE Module] [SEMANTICS superset, validate]
+# #region SeedSupersetLoadTestScript [C:5] [TYPE Module] [SEMANTICS superset, validate]
 #
 # @BRIEF Creates randomized load-test data in Superset by cloning chart configurations and creating dashboards in target environments.
-# @LAYER: Scripts
+# @LAYER: Infrastructure
 # @RELATION USES -> [ConfigManager]
 # @RELATION USES -> [SupersetClient]
 # @INVARIANT: Created chart and dashboard names are globally unique for one script run.
+# @DATA_CONTRACT: CLIArgs -> TestDataSummary
 
 import argparse
 import json