Skip to content

Standards Graph

This graph shows how VibeCode QA turns upstream framework and platform guidance into judgeable standards. Stack items are leaves. Authored stack rubrics are deployable composition nodes. Authored cross-cutting rubrics are first-class standards that apply across many stack shapes. Reference templates are runnable fixtures that prove the standard in CI. Some stack items are optional composition leaves: they are judged when present, but they do not define the minimum shape of the standard.

The machine-readable source for this map is /standards/compositions.json.

Authored stack rubric
Deployable stack standard with stable rule IDs.
Authored cross-cutting rubric
First-class rubric applied across stack shapes.
Planned standard
Cataloged rule surface; full rubric is not published yet.
Stack item leaf
Framework, runtime, tool, protocol, quality, or supply-chain layer.
Reference template
Runnable repo with CI and a tracked VCQA report.

Generated graph data: graph.json.

Reference Templates

ref-react-spapublished

Authored Stack Rubrics

react-spaauthored v1
React, client-rendered, hosted as static files. No SSR, no server of its own.
Server-side API co-deployed with a static frontend as Cloudflare Pages Functions. Edge runtime, bindings, no long-lived server.
SQLite-at-the-edge: schema, migrations discipline, parameterized queries, local/remote parity.
A remote MCP server hosted on Cloudflare Workers, with Worker-bound authorization, tool schemas, validation, storage boundaries, and auditability.
A tenant-scoped Cloudflare SaaS deployment model composing Pages Functions, D1, Worker MCP, bindings, secrets, aliases, promotion gates, provisioning, and auditability.
Flutter app/admin/shared workspace backed by Firebase Auth, Firestore, Storage, Messaging, Hosting, and Cloud Functions, with Melos orchestration and deploy/test gates.

Authored Cross-Cutting Rubrics

securityauthored v1
Secrets handling, input validation, XSS/injection, dependency supply chain.
testingauthored v1
Behavior-focused test strategy, required test layers, coverage risk, CI evidence, and fake/flaky test controls.
typescriptauthored v1
Strict flags, project references, no-any, typed-and-validated boundaries.

Published Aliases

Alias for the authored Cloudflare Pages Fullstack rubric when a React SPA and Pages Functions API are co-deployed in one Pages project.

Planned Standards

A Node command-line tool used by developers or CI, with stable exit codes, credential resolution, structured output, and noninteractive safety.
A TypeScript package or SDK consumed by other code, with export maps, declarations, runtime validation, typed errors, and consumer compatibility checks.
A packaged GitHub Action with action metadata, minimum permissions, validated inputs, pinned runtime/dependencies, and release tag policy.
A VS Code extension package with activation scope, workspace trust behavior, command/webview boundaries, marketplace metadata, and extension tests.
A Tauri desktop application with a React frontend, command/capability boundaries, secure storage posture, packaging, and typed frontend/backend contracts.
A docs-only knowledge base site published from Markdown with generated site output separated from source, stable URLs, references, and docs smoke checks.
Semantics, keyboard, focus, ARIA, contrast. Applies to any UI-rendering slice.
Lockfile pinning, audit, vetting, no unexpected install scripts.

Stack Item Leaves

Framework
Build Tool
Security
Protocol
Validation
API Contract
Automation
Desktop
Documentation
Supply Chain
Backend Platform
Workspace Tool

Reading The Map

  • A stack item can feed several standards. typescript, web-security, and github-actions are intentionally shared across many stack shapes.
  • react-spa is both an authored stack rubric and an input to cloudflare-pages-fullstack.
  • security, testing, and typescript are authored cross-cutting rubrics, so they are shown separately from deployable stack standards.
  • Dashed chips are optional/example leaves: they appear in reference templates but only apply to repositories that use that component.
  • Reference templates are examples, not vendor-starter replacements. They point to the relevant standard and to a committed VCQA report.
  • Planned stack charters are included so the graph shows the pathway, not only what is already published.