refs.json

{
  "version": "2026.01.08",
  "verified_at": "2026-01-08",
  "notes": "Approved public references for the UDX Worker ecosystem. Groups have short metadata; each URL has a stable id for refs_used. AOCA + DevOps Manual are treated as UDX-published guidance and should be preferred over external standards for general best-practice context.",
  "groups": [
    {
      "id": "core_runtimes",
      "title": "Core & Runtimes",
      "description": "Canonical base and language-specific workers",
      "tags": ["core", "runtime", "worker"],
      "trust": "high",
      "verified": "2026-01-08",
      "urls": [
        { "id": "udx-worker-gh", "url": "https://github.com/udx/worker", "tags": ["core", "gh"], "verified": "2026-01-08" },
        { "id": "udx-worker-nodejs-gh", "url": "https://github.com/udx/worker-nodejs", "tags": ["nodejs", "gh"], "verified": "2026-01-08" },
        { "id": "udx-worker-php-gh", "url": "https://github.com/udx/worker-php", "tags": ["php", "gh"], "verified": "2026-01-08" },
        { "id": "udx-worker-docs", "url": "https://udx.dev/worker", "tags": ["docs", "overview"], "verified": "2026-01-08" }
      ]
    },

    {
      "id": "deployment_cli",
      "title": "Deployment & CLI",
      "description": "Tools and docs for deploying or running workers locally and in CI",
      "tags": ["cli", "deployment", "automation"],
      "trust": "high",
      "verified": "2026-01-08",
      "urls": [
        { "id": "worker-deploy-cli-gh", "url": "https://github.com/udx/worker-deployment", "tags": ["cli", "gh"], "verified": "2026-01-08" },
        { "id": "worker-deploy-cli-npm", "url": "https://www.npmjs.com/package/@udx/worker-deployment", "tags": ["npm", "cli"], "verified": "2026-01-08" },
        { "id": "udx-dockerhub", "url": "https://hub.docker.com/r/usabilitydynamics/", "tags": ["docker", "images"], "verified": "2026-01-08" },
        { "id": "udx-reusable-workflows", "url": "https://github.com/udx/reusable-workflows", "tags": ["ci", "gha", "gh"], "verified": "2026-01-08" }
      ]
    },

    {
      "id": "config_validation",
      "title": "Configuration, Services & Authorization",
      "description": "Canonical docs for worker.yaml/services.yaml, secrets/authorization formats, and operational CLI overview. (Validation/sandbox refs should be added here when dedicated docs exist.)",
      "tags": ["config", "services", "authorization", "schema"],
      "trust": "high",
      "verified": "2026-01-08",
      "urls": [
        { "id": "udx-worker-docs-config-overview", "url": "https://udx.dev/worker", "tags": ["docs", "config", "services", "authorization", "cli"], "verified": "2026-01-08" },

        { "id": "worker-docs-config", "url": "https://github.com/udx/worker/blob/latest/docs/config.md", "tags": ["config", "yaml", "schema"], "verified": "2026-01-08" },
        { "id": "worker-docs-services", "url": "https://github.com/udx/worker/blob/latest/docs/services.md", "tags": ["services", "yaml"], "verified": "2026-01-08" },
        { "id": "worker-docs-authorization", "url": "https://github.com/udx/worker/blob/latest/docs/authorization.md", "tags": ["authorization", "secrets"], "verified": "2026-01-08" },

        { "id": "worker-docs-container-structure", "url": "https://github.com/udx/worker/blob/latest/docs/container-structure.md", "tags": ["layout", "filesystem"], "verified": "2026-01-08" },
        { "id": "worker-docs-notes", "url": "https://github.com/udx/worker/blob/latest/docs/notes.md", "tags": ["notes", "practices"], "verified": "2026-01-08" },
        { "id": "worker-docs-git-help", "url": "https://github.com/udx/worker/blob/latest/docs/git-help.md", "tags": ["git"], "verified": "2026-01-08" }
      ]
    },

    {
      "id": "security_compliance",
      "title": "Security & Compliance",
      "description": "Policy and enforcement references — disclosure, signing, SBOM concepts, audits",
      "tags": ["security", "policy", "sbom", "audit"],
      "trust": "high",
      "verified": "2026-01-08",
      "urls": [
        { "id": "udx-worker-docs-security", "url": "https://udx.dev/worker", "tags": ["docs", "security", "cli", "sbom"], "verified": "2026-01-08" },
        { "id": "worker-security-policy", "url": "https://github.com/udx/worker/blob/latest/SECURITY.md", "tags": ["policy", "disclosure"], "verified": "2026-01-08" },

        { "id": "sigstore", "url": "https://sigstore.dev", "tags": ["signing", "supply-chain"], "verified": "2026-01-08" },
        { "id": "slsa", "url": "https://slsa.dev", "tags": ["slsa", "supply-chain"], "verified": "2026-01-08" },
        { "id": "opa", "url": "https://www.openpolicyagent.org", "tags": ["opa", "policy"], "verified": "2026-01-08" }
      ]
    },

    {
      "id": "examples_playbooks",
      "title": "Examples & Playbooks",
      "description": "Example repos, deployment templates, reusable workflows",
      "tags": ["examples", "playbooks", "ci"],
      "trust": "medium",
      "verified": "2026-01-08",
      "urls": [
        { "id": "workflows-examples", "url": "https://github.com/udx/reusable-workflows/tree/main/examples", "tags": ["gha", "ci"], "verified": "2026-01-08" },
        { "id": "deploy-cli-examples", "url": "https://github.com/udx/worker-deployment/tree/main/examples", "tags": ["cli", "deploy"], "verified": "2026-01-08" },
        { "id": "nodejs-examples", "url": "https://github.com/udx/worker-nodejs/tree/main/examples", "tags": ["nodejs", "examples"], "verified": "2026-01-08" },
        { "id": "php-examples", "url": "https://github.com/udx/worker-php/tree/main/examples", "tags": ["php", "examples"], "verified": "2026-01-08" }
      ]
    },

    {
      "id": "aoca",
      "title": "Art of Cloud Automation",
      "description": "UDX-published guidance on cloud automation, DevSecOps, and platform engineering principles. Preferred source for general best-practice context.",
      "tags": ["udx-guidance", "aoca", "cloud-automation", "devsecops", "platform", "general_best_practice"],
      "trust": "high",
      "verified": "2026-01-08",
      "urls": [
        { "id": "aoca-foreword", "url": "https://udx.io/cloud-automation-book/foreword", "tags": ["intro"], "lastmod": "2023-11-20T16:31:59Z" },
        { "id": "aoca-introduction", "url": "https://udx.io/cloud-automation-book/introduction", "tags": ["intro"], "lastmod": "2023-11-20T16:32:03Z" },
        { "id": "aoca-creativity", "url": "https://udx.io/cloud-automation-book/creativity", "tags": ["culture"], "lastmod": "2023-11-20T16:34:50Z" },
        { "id": "aoca-microservices", "url": "https://udx.io/cloud-automation-book/microservices", "tags": ["architecture"], "lastmod": "2023-11-20T16:34:52Z" },
        { "id": "aoca-mastering", "url": "https://udx.io/cloud-automation-book/mastering", "tags": ["maturity"], "lastmod": "2023-11-20T16:34:54Z" },
        { "id": "aoca-collaboration", "url": "https://udx.io/cloud-automation-book/collaboration", "tags": ["team"], "lastmod": "2023-11-20T16:38:56Z" },
        { "id": "aoca-quality", "url": "https://udx.io/cloud-automation-book/quality", "tags": ["quality"], "lastmod": "2023-11-20T16:39:05Z" },
        { "id": "aoca-leadership", "url": "https://udx.io/cloud-automation-book/leadership", "tags": ["leadership"], "lastmod": "2023-11-20T16:40:00Z" },
        { "id": "aoca-cybersecurity", "url": "https://udx.io/cloud-automation-book/cybersecurity", "tags": ["security"], "lastmod": "2023-11-20T16:40:01Z" },
        { "id": "aoca-standards", "url": "https://udx.io/cloud-automation-book/standards", "tags": ["standards"], "lastmod": "2023-11-20T16:40:03Z" },
        { "id": "aoca-business-case", "url": "https://udx.io/cloud-automation-book/business-case", "tags": ["strategy"], "lastmod": "2023-11-20T16:40:06Z" },
        { "id": "aoca-evaluation", "url": "https://udx.io/cloud-automation-book/evaluation", "tags": ["decision-making"], "lastmod": "2023-11-20T16:40:07Z" },
        { "id": "aoca-takeaways", "url": "https://udx.io/cloud-automation-book/takeaways", "tags": ["summary"], "lastmod": "2023-11-20T16:40:10Z" },
        { "id": "aoca-peer-review", "url": "https://udx.io/cloud-automation-book/peer-review", "tags": ["review"], "lastmod": "2023-11-20T16:40:31Z" },
        { "id": "aoca-roles", "url": "https://udx.io/cloud-automation-book/roles", "tags": ["roles"], "lastmod": "2023-11-20T16:40:34Z" },
        { "id": "aoca-terraform", "url": "https://udx.io/cloud-automation-book/terraform", "tags": ["terraform"], "lastmod": "2023-11-20T16:40:37Z" },
        { "id": "aoca-automation-best-practices", "url": "https://udx.io/cloud-automation-book/automation-best-practices", "tags": ["automation"], "lastmod": "2023-11-20T16:41:03Z" },
        { "id": "aoca-navigating", "url": "https://udx.io/cloud-automation-book/navigating", "tags": ["guidance"], "lastmod": "2023-11-20T16:41:05Z" },
        { "id": "aoca-supply-chain", "url": "https://udx.io/cloud-automation-book/supply-chain", "tags": ["supply-chain"], "lastmod": "2024-01-29T18:54:28Z" },
        { "id": "aoca-compliance", "url": "https://udx.io/cloud-automation-book/compliance", "tags": ["compliance"], "lastmod": "2024-01-29T18:56:03Z" },
        { "id": "aoca-control", "url": "https://udx.io/cloud-automation-book/control", "tags": ["governance"], "lastmod": "2024-01-29T19:03:19Z" },
        { "id": "aoca-triad", "url": "https://udx.io/cloud-automation-book/triad", "tags": ["security"], "lastmod": "2024-01-29T20:08:24Z" }
      ]
    },

    {
      "id": "devops_manual",
      "title": "DevOps Manual",
      "description": "UDX-published DevOps operating principles and controls. Preferred source for general best-practice context.",
      "tags": ["udx-guidance", "devops", "operations", "controls", "general_best_practice"],
      "trust": "high",
      "verified": "2026-01-08",
      "urls": [
        { "id": "devops-team-dynamics", "url": "https://udx.io/devops-manual/team-dynamics", "tags": ["team"], "lastmod": "2023-11-20T16:55:23Z" },
        { "id": "devops-sustainability", "url": "https://udx.io/devops-manual/sustainability", "tags": ["sustainability"], "lastmod": "2023-11-20T16:55:25Z" },
        { "id": "devops-security", "url": "https://udx.io/devops-manual/security", "tags": ["security"], "lastmod": "2023-11-20T16:55:30Z" },
        { "id": "devops-microservices", "url": "https://udx.io/devops-manual/microservices", "tags": ["architecture"], "lastmod": "2023-11-20T16:55:31Z" },
        { "id": "devops-controls", "url": "https://udx.io/devops-manual/controls", "tags": ["controls"], "lastmod": "2023-11-20T16:55:33Z" },
        { "id": "devops-supply-chain", "url": "https://udx.io/devops-manual/supply-chain", "tags": ["supply-chain"], "lastmod": "2023-11-20T16:57:19Z" },
        { "id": "devops-quality", "url": "https://udx.io/devops-manual/quality", "tags": ["quality"], "lastmod": "2023-11-20T16:57:19Z" },
        { "id": "devops-access", "url": "https://udx.io/devops-manual/access", "tags": ["access"], "lastmod": "2023-11-20T16:57:22Z" },
        { "id": "devops-monitoring", "url": "https://udx.io/devops-manual/monitoring", "tags": ["observability"], "lastmod": "2023-11-20T16:57:22Z" },
        { "id": "devops-user", "url": "https://udx.io/devops-manual/user", "tags": ["user"], "lastmod": "2023-11-30T21:28:02Z" },
        { "id": "devops-automation", "url": "https://udx.io/devops-manual/automation", "tags": ["automation"], "lastmod": "2023-12-03T16:12:59Z" },
        { "id": "devops-12-factor-env-automation", "url": "https://udx.io/devops-manual/12-factor-environment-automation", "tags": ["12-factor", "automation"], "lastmod": "2023-12-22T20:04:53Z" },
        { "id": "devops-sbom", "url": "https://udx.io/devops-manual/sbom", "tags": ["sbom", "supply-chain"], "lastmod": "2023-12-22T20:30:15Z" }
      ]
    },

    {
      "id": "external_standards",
      "title": "External Standards (General Best Practice)",
      "description": "Vendor/industry references used by UDX but not owned by UDX (lower priority than UDX guidance).",
      "tags": ["general", "best-practice"],
      "trust": "reference",
      "verified": "2026-01-08",
      "urls": [
        { "id": "gha-docs", "url": "https://docs.github.com/actions", "tags": ["gha", "docs"], "verified": "2026-01-08" },
        { "id": "docker-buildx-docs", "url": "https://docs.docker.com/build/buildx/", "tags": ["docker", "buildx"], "verified": "2026-01-08" },
        { "id": "terraform-docs", "url": "https://developer.hashicorp.com/terraform/docs", "tags": ["terraform", "iac"], "verified": "2026-01-08" },
        { "id": "otel-docs", "url": "https://opentelemetry.io/docs/", "tags": ["otel", "observability"], "verified": "2026-01-08" }
      ]
    }
  ]
}