How rakeesssh007/sovereign-cloud-orchestration-framework works
SCOF is an AWS Terraform policy-as-code framework: developers or a pull-request gate supply Terraform configurations, which are planned and checked against shared Rego controls using a jurisdiction-specific context; violations become diagnostics or gate failures. The graph preserves the developer/VS Code and CI paths, context routing, and the documented control areas. Source excerpts show the CLI, router, and CI gate relationships; policy details and editor wiring are described in the README, so those links cite it.
Main entry points: scof_core.py Plan and evaluation · ci_gate.py CI gate · scof_router.py Context router · scof_lint.py CLI linter
Components 16
Developer and CI
- VS Code tasks
vscode/lightweight-editor-integration/README.md - CLI linter
cli/compliance-linter/scof_lint.py - CI gate
scripts/ci_gate.py - GitHub Actions workflow
.github/workflows/compliance-gate.yml
Context routing
- Context router
router/policy-routing/scof_router.py - Routing configuration
router/policy-routing/routing.json - Context data
router/policy-routing/contexts - Control sets
router/policy-routing/control_sets.json
Policy evaluation
- Plan and evaluation
cli/compliance-linter/scof_core.py - Shared Rego controls
policies
Results and diagnostics
- Violations and diagnostics
cli/compliance-linter/scof_core.py
Other components
- Developer
- Pull request
- Terraform
- OPA
- Conftest
Connections 19
- Developer → VS Code tasks: runs task
README.md - VS Code tasks → CLI linter: invokes
README.md - Developer → CLI linter: runs
README.md - CLI linter → Plan and evaluation: calls
cli/compliance-linter/scof_lint.py - Plan and evaluation → Terraform: plans with
cli/compliance-linter/scof_core.py - Plan and evaluation → OPA: evaluates via
cli/compliance-linter/scof_core.py - Plan and evaluation → Conftest: evaluates via
cli/compliance-linter/scof_core.py - Plan and evaluation → Shared Rego controls: loads policies
cli/compliance-linter/scof_core.py - Plan and evaluation → Context data: loads context
cli/compliance-linter/scof_core.py - Plan and evaluation → Control sets: loads controls
cli/compliance-linter/scof_core.py - Plan and evaluation → Violations and diagnostics: formats results
cli/compliance-linter/scof_core.py - Pull request → GitHub Actions workflow: triggers gate
README.md - GitHub Actions workflow → CI gate: runs
README.md - CI gate → Context router: resolves context
scripts/ci_gate.py - Context router → Routing configuration: reads routes
router/policy-routing/scof_router.py - Context router → Context data: writes context
router/policy-routing/scof_router.py - Context router → Control sets: reads controls
router/policy-routing/scof_router.py - CI gate → CLI linter: invokes
scripts/ci_gate.py - CI gate → Violations and diagnostics: reports gate result
scripts/ci_gate.py