Knowledge sources map

Knowledge sources

Steady-state refresh runs re-verify these sources instead of discovering them again. Update this map whenever a knowledge source in the repository is added, moved or removed.

Each concept derived from a file or folder of this repository names it by its path from the repository root, in resource and in sources. knowledge-report.sh worklist lists the concepts whose source moved since their stamp. It never fetches a page, so re-read the external pages this table names when the schema header’s reading date moves.

Source	Yields	Re-check by
src/github_actions/schema/github_actions.yaml, the four github_actions_*.yaml modules, src/github_actions/schema/README.md	datasets/github-actions-linkml-schema, the four glossary/ terms	load github_actions.yaml with SchemaView and recount classes, enums, types and subsets per module; re-read the header’s version, source, annotations and comments, each class’s required slots, rules, mappings and comments
project.justfile, .lokf/github-actions.yaml, .lokf/justfile, the README’s Knowledge Trust Ladder (KTL) section	the domain-schema section of datasets/github-actions-linkml-schema	re-read the --root list, the LOKF_CMD note, the copy’s notes, the schema := line and the renamed keys
README.md (What it models, Influences, Mappings, Not modelled here), docs/about.md, .linkmllint.yaml	explanations/scope-and-influences, explanations/element-names, the four references/	re-read each section and the lint comment
src/github_actions/schema/schemastore/, the SchemaStore section of NOTICE	datasets/schemastore-copy	re-read the pinned commit and each file’s $id; the upstream watch compares the blobs weekly
scripts/check_upstream_release.py, .github/scripts/report-issue.sh	playbooks/update-upstream-pins, workflows/upstream-watch	re-read PINNED_COMMIT, PINNED_API_VERSION, DOCS_READ, KNOWN_DIFFERENCES and the issue title
scripts/derive.py, scripts/github_export.py, tests/derive/, tests/test_derive.py, tests/test_github_export.py, the README’s Deriving the facts from a repository section, the sentences on both scripts in SECURITY.md	playbooks/derive-and-check, the tests/test_derive.py section of datasets/test-data, the naming details in glossary/required-status-check	re-read both docstrings, the options, ITEM_KEYS, RULESET_KEYS, CHECK_KEYS and the finding rules; re-list the fixtures and re-count the tests; run uv run --quiet scripts/derive.py --exclude tests/ --check .lokf/knowledge and expect no drift
justfile, .linkml/generators.yaml, project/, src/github_actions/datamodel/, docs/schema/, docs/elements/, .pre-commit-config.yaml	datasets/generated-artefacts	re-read the gen-project, gen-doc, gen-merged and lokf-adapt recipes and the excludes; re-list project/*/
tests/data/, tests/test_data.py, tests/test_schema_rules.py, tests/neighbours/slsa.yaml, examples/README.md	datasets/test-data	re-count valid/ and invalid/ per class; re-read the naming rule, the tests and the comment on the slsa neighbour
the Validating data section of docs/index.md	playbooks/validate-data	re-read the section
CONTRIBUTING.md, .copier-answers.yml, the test, lint and update recipes of justfile	playbooks/regenerate-and-test	confirm the setup, the checklist and the recipes
.releaserc.json, .github/scripts/changelog-release.mjs, CHANGELOG.md, pyproject.toml, the Releasing section of CONTRIBUTING.md	playbooks/release	re-read the release rules, the commands, the baseline paragraph and the versioning settings
the nine files in .github/workflows/	the nine workflows/ concepts	re-read each file’s on keys, its top-level permissions, and each job’s id, name, runs-on and permissions; check that none names workflow_call; the derivation check above compares the same facts
website/	services/documentation-site	re-read site.config.mjs and website/README.md
NOTICE, LICENSE, website/NOTICE, the License sections of README.md and CONTRIBUTING.md	policies/license-and-attribution	re-read each third-party entry
SECURITY.md, .github/dependabot.yml	policies/security-policy	re-read the table of surfaces and the settings not yet in force
AI_COVENANT.md	policies/ai-covenant	re-read the project note and the section on agent automation
GitHub’s workflow syntax, reusable workflows and metadata syntax pages, the REST API’s rules and check runs pages, and GitHub’s build type at https://actions.github.io/buildtypes/workflow/v1	the four references/	external authorities, read on the date the schema header gives; the pages are versionless, so re-read them when that date moves

These are not knowledge sources, and are left out:

• .github/ISSUE_TEMPLATE/, .github/pull_request_template.md and CODE_OF_CONDUCT.md (governance text);
• uv.lock, .gitignore, .editorconfig, .yamllint.yaml, .markdownlint-cli2.jsonc, lychee.toml and config.public.mk (tooling);
• src/README.md, docs/templates-linkml/ and project/README.md (text from the project template);
• src/github_actions/__init__.py, src/github_actions/_version.py and tests/__init__.py (package and test plumbing);
• llms.txt (the pointer that sends agents to this bundle);
• the knowledge_bundle link and .github/PULL_REQUEST_TEMPLATE/knowledge-sync.md, which belong to the sidecar, as does everything under .lokf/ apart from the domain schema and the justfile’s schema := line.