# aibvf-check

> SonarQube for AI initiatives — a CI/CD pre-flight gate that fails the build when an AI initiative would not survive a board review. Deterministic, runs on AI BVF v1.0.

Latest version **0.1.1** (published 2026-07-08) · MIT license · 0 weekly downloads

## Install

```sh
npm install aibvf-check
pnpm add aibvf-check
yarn add aibvf-check
bun add aibvf-check
```

Provides the command `aibvf-check`.

## Health

**Score 55/100 (C)** — status: active.

Positive: esm support; no vulnerabilities; has provenance.

Warnings: low downloads; no types; pre 1.0.

## Facts

| | |
|---|---|
| Version | 0.1.1 |
| Published | 2026-07-08 |
| First published | 2026-06-30 |
| Weekly downloads | 0 |
| License | MIT |
| TypeScript types | none |
| Module format | ESM + CommonJS |
| Dependencies | 1 |
| Unpacked size | 29.5 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| Provenance | attested (GitHub Actions) |
| Author | Craig Horton |
| Maintainers | bvf123 |
| Keywords | ai-bvf, bvf, ci, ci-cd, pre-flight, gate, ai-governance, ai-roi, policy, eu-ai-act, github-action, sonarqube-for-ai |

## Links

- npm: https://www.npmjs.com/package/aibvf-check
- Repository: https://github.com/Bahamas1717/ai-bvf
- Homepage: https://www.aibvf.com/protocol
- Issues: https://github.com/Bahamas1717/ai-bvf/issues
- npm.io page: https://npm.io/package/aibvf-check

## Dependencies (1)

- [@aibvf/core](https://npm.io/package/@aibvf/core.md) ^0.8.0

## Alternatives

- [random-seedable](https://npm.io/package/random-seedable.md) — 27.9K weekly downloads
- [n2words](https://npm.io/package/n2words.md) — 22.2K weekly downloads
- [@stdlib/math-base-special-factorialln](https://npm.io/package/@stdlib/math-base-special-factorialln.md) — 5.7K weekly downloads
- [@stdlib/math-base-special-abs2](https://npm.io/package/@stdlib/math-base-special-abs2.md) — 1.7K weekly downloads
- [commons-math-interpolation](https://npm.io/package/commons-math-interpolation.md) — 1.4K weekly downloads

## Recent versions

- 0.1.1 (latest) — 2026-07-08
- 0.1.0 — 2026-06-30

## README

# aibvf-check

**SonarQube for AI initiatives.** A CI/CD pre-flight gate that fails the build when a declared AI initiative would not survive a board review — using the deterministic [AI BVF v1.0](https://www.aibvf.com/protocol) engine.

The scoring belongs upstream of the slide deck. `aibvf-check` puts it in the one place a team already trusts to block bad work: the pipeline.

## 30-second use

Add a manifest at your repo root, `.aibvf.json`:

```json
{
  "bvf_version": "1.0",
  "organization": { "industry": "financial", "revenue_eur": 400000000 },
  "policy": { "fail_on": ["Stop"], "max_governance_risk": 60, "min_decision_confidence": 50 },
  "initiatives": [
    { "id": "cx-genai-assistant", "function": "cx", "ai_tier": "gen2", "readiness": "traditional",
      "scores": { "strategic_alignment": 70, "financial_return": 55, "change_enablement": 55, "governance_risk": 45 },
      "signal_completeness": 0.8 }
  ]
}
```

Run it:

```bash
npx aibvf-check
```

It scores every initiative, prints a scorecard, and **exits non-zero if any trips the policy** — so CI goes red.

## GitHub Action

```yaml
- uses: Bahamas1717/ai-bvf@main
  with:
    manifest: .aibvf.json   # optional, this is the default
```

The step fails the workflow on any policy violation.

## Policy

| Field | Effect |
|---|---|
| `fail_on` | Classifications that fail the gate. Default `["Stop"]`. Add `"Fix"` to be strict. |
| `max_governance_risk` | Optional hard ceiling (0–100). A higher `governance_risk` fails, regardless of verdict. |
| `min_decision_confidence` | Optional floor (0–100). A lower decision confidence fails. |

`signal_completeness` (0–1, per initiative) forwards to the engine: estimated inputs honestly haircut confidence and surface a caveat, so a low-evidence initiative can't sail through on a confident-looking number.

## Exit codes

| Code | Meaning |
|---|---|
| `0` | All initiatives cleared the policy. |
| `1` | One or more policy violations — the gate failed. |
| `2` | Config error (manifest missing, malformed, or a bad enum value). |

## Options

```
aibvf-check [--manifest <path>] [--json]
  -m, --manifest <path>   Manifest file (default: .aibvf.json)
      --json              Machine-readable JSON instead of the table
  -h, --help              Help
```

Deterministic, no network, no telemetry. Same inputs → same verdict, every run. Built on [`@aibvf/core`](https://www.npmjs.com/package/@aibvf/core).

## License

MIT.

---
_Source: https://npm.io/package/aibvf-check · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._