[ // AI AGENT & CLI BRIEF — curl -fsSL https://studio2201.com/install.sh | sh -s boneyard ]

Boneyard org-wide tech-debt radar (`v0.2.12`). Scores repository catalogs across dormancy, risk, exposure, dependency depth, and AI-agent surface into a 0–100 index · Agent & MCP Guide · Canary Testbed.

studio2201 / product 05 v0.2.12 Apache-2.0 Boneyard Index 0/100

Boneyard

Org-wide tech-debt radar. Discovers and ranks internal repositories by dormancy, exposure, dependency depth, and AI-agent attack surface to emit actionable remediation budgets.

View on GitHub → Framework Doctrine →

What it does

Five-Axis Repo Scoring

Evaluates repos across dormancy, risk, exposure, dependency depth, and AI-agent surface.

Composite Boneyard Index

Computes an org-wide health score in [0, 100] categorized into unambiguous Red, Amber, and Green risk tiers.

Remediation Budgets

Quantifies tech debt into concrete engineering work units, generating estimates in repo-weeks for sprint planning.

TOML Policy Gate

Enforces org-wide security and maintenance policies in CI, preventing unreviewed orphan repos from going public.

GitHub Actions & CI Enforcement

Audit repository debt catalogs on pull requests and scheduled cron runs using the Boneyard action.

# .github/workflows/boneyard.yml (Prompt your AI Agent or copy directly)
name: boneyard
on:
  push: { branches: [ master, main ] }
  pull_request: { branches: [ master, main ] }
  workflow_dispatch:
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
permissions: { contents: read }
jobs:
  boneyard:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }
      - uses: studio2201/studio2201@v1
        with: { tools: 'boneyard', fail-on: 'block' }
      - uses: actions/upload-artifact@v4
        if: always()
        with: { name: boneyard-report, path: boneyard_report.md, if-no-files-found: ignore }

# Workstation CLI installation (unprivileged, installs to ~/.local/bin):
curl -fsSL https://studio2201.com/install.sh | sh -s boneyard
boneyard enrich --input repos.json --output scored.json

Why This Matters & Authoritative Mandates

Enforces Active Asset Ownership and eliminates zero-liability zombie repository debt.

Stripe Developer Report ↗

Bad code and technical debt drain $300 billion annually in global GDP, consuming 42% of engineer workweeks.

ACM Empirical Research ↗

Research confirms abandoned repositories harbor 4x higher critical CVE density and unpatched dependencies.

Active Asset Ownership ↗

Establishes active governance to eradicate zombie repos, ensuring every software asset has accountable maintainers.

OWASP A06: Outdated Comps ↗

Internal orphan repositories are primary targets for lateral movement and shadow credential harvesting.

How It Works Under the Hood

Catalog Ingestion

Parses multi-repository catalog dumps in JSON or NDJSON format with zero external crates.

Five-Axis Scoring Engine

Calculates weighted dormancy, risk, exposure, depth, and AI-generated surface into a composite [0, 100] index.

Repo-Week Budgeting

Models human remediation capacity based on codebase volume, dependency branching, and age of last commit.

TOML Policy Enforcement

Asserts deterministic exit code 1 when any repo exceeds maximum allowed debt index in CI pull requests.