Baseline C++ Language Policy
baseline-lang-cpp
Minimal C++ starter policy. It includes baseline-shared-foundation and adds one high-signal C++-specific check. Use it when you want low-noise onboarding coverage before moving up to lang-cpp.
Language-Specific Checks
Any app type
- rel-cpp-001 — Resource ownership uses RAII with safe copy, move, and lifetime semantics.
Shared Foundation Checks
Security
- sec-006 — Protected operations enforce authentication, authorization, and principal scoping at the boundary.
- bp-sec-001 — External input is validated at trust boundaries.
- bp-sec-004 — Sensitive data is not emitted to logs or traces.
- sec-008 — Client-facing errors, URLs, and public responses do not leak secrets or internals.
Reliability
- bp-rel-001 — Outbound dependencies have explicit time budgets.
- bp-rel-002 — Retries are bounded, deliberate, and safe for the operation.
- rel-006 — Retried or redelivered work is idempotent or deduplicated.
- rel-017 — Side effects and downstream jobs run only after durable commit.
- rel-008 — Overload-triggering work and resource consumption are bounded.
Architecture Core
- bp-arch-001 — Modules depend through explicit, reviewable seams.
- bp-arch-002 — Dependency direction follows the architecture instead of bypassing it.
Application Programming Interface
- api-004 — Retried mutating operations are idempotent end-to-end.
- api-009 — Published API contracts remain backward compatible within a version.
- bp-api-001 — External APIs return machine-readable error contracts.
Data
- data-011 — Durable-state mutations are atomic, rollback-safe, and concurrency-correct.
Operations
- ops-022 — Configuration is semantically validated before it is applied.
- bp-ops-001 — Services expose meaningful health signals.
- ops-017 — Per-unit production telemetry is structured and complete.
- ops-018 — Cross-boundary work preserves correlation and dependency attribution.