Static Analysis

Kind: mechanism

Layer: Computation Core

Record: architecture:static-analysis

Severity: mandatory

Scope: codebase, build

Canonical: Ontology

A mechanism that checks source code against a ruleset without running it.

Listed in Architecture principles, after Property-Based Testing and before Testability.

Requires

• Ruleset

Reinforces

• Type Safety
• Security
• Architecture Compliance

Enables

• Automated Enforcement

Conflicts with

• Unchecked Dynamic Code

In tension with

• False Positives
• Runtime Discovery
• Metaprogramming
• Reflection
• Plugin Architecture
• Runtime Discovery / Static Analysis
• Metaprogramming / Static Analysis
• Reflection / Static Analysis
• Plugin Architecture / Static Analysis

Tensions

• Static Analysis / False Positives

Violated by

• Ignored Analyzer Findings

Refactored by

• Automated Enforcement
• Track Rule Metrics

Severity

• mandatory

Techniques

• Static Analysis

Category

• Correctness / Determinism / Verification

Refactors

• Manual-Only Governance
• Runtime Discovery
• Verification

Linked from

• What PAG is
• Well-formedness
• Who does what
• Three encodings
• A check matches a shape
• From intent to predicate
• Scale follows determinism
• Anti-patterns
• Runtime Discovery / Dynamic Binding
• Correctness / Determinism / Verification
• Metaprogramming / Language-Oriented Architecture
• Plugin / Extensibility / IoC
• Schema / Canonical Data / Semantics
• Architecture Review Evolution Governance
• Core Vocabulary
• Correctness / Determinism / Verification
• Quality Attributes
• The techniques
• Severity levels
• The resolutions

in this codebase

• checkNaming
• checkPlacement