version: 1
rules:
  require_primary_source: true
  require_provider_service_region_version_date_and_status: true
  require_measured_evidence_and_workload_fit: true
  require_corroboration_for_major_change: true
  reject_unsourced_claims: true
  automatic_apply: false
# El contexto de la empresa no es una fuente de la profesión: vive en
# organization/roles/cloud-architect.md dentro de cada instalación.
sources:
  - {name: NIST SP 800-145 cloud definition, url: "https://csrc.nist.gov/pubs/sp/800/145/final", tier: standard, topics: [cloud, service-models, deployment-models]}
  - {name: ISO IEC 27017:2015 cloud security controls, url: "https://webstore.iec.ch/en/publication/23891", tier: standard, topics: [cloud-security, customers, providers]}
  - {name: ISO IEC 27017:2026 cloud security controls, url: "https://webstore.iec.ch/en/publication/115400", tier: standard, topics: [cloud-security, revision-status]}
  - {name: FinOps Framework, url: "https://www.finops.org/framework/", tier: profession, topics: [value, cost, usage, accountability]}
  - {name: AWS What is New, url: "https://aws.amazon.com/new/", tier: platform, topics: [servicios, regiones, precios, deprecaciones]}
  - {name: Google Cloud release notes, url: "https://cloud.google.com/release-notes", tier: platform, topics: [servicios, regiones, deprecaciones]}