docs(sdlc): expand weak points in audit prep note

.gitignore

@@ -16,3 +16,6 @@ lib/zxcvbn-php-master/vendor/sebastian/
 notes/
 docs/
 SESSION.php
+
+# SDLC delivery zip is packaged by hand, outside the repo
+sdlc-delivery.zip

scripts/build-sdlc-delivery.sh

@@ -32,7 +32,7 @@ while IFS= read -r -d '' source; do
   destination="$STAGING_DIR/${relative%.md}.pdf"
   echo "Rendering ${relative%.md}.pdf"
   node "$TOOL_DIR/render-sdlc.mjs" "$source" "$destination"
-done < <(find "$SOURCE_DIR" -type f -name '*.md' -print0 | sort -z)
+done < <(find "$SOURCE_DIR" -mindepth 2 -type f -name '*.md' -print0 | sort -z)
 
 # Every .pdf gets a Word copy beside it, reconstructed from the rendered page.
 # The CI header bands need Playwright, so they are rendered here with node and

scripts/sdlc-delivery/render-ci-band.mjs

@@ -18,12 +18,13 @@ const SCALE = 3;   // the band is drawn at 3x so it stays crisp in print
 const applyTemplate = (template, values) => template.replace(/{{(\w+)}}/g, (_, key) => values[key] ?? '');
 const slug = (title) => title.replace(/[^\w-]+/g, '-').replace(/^-|-$/g, '').toLowerCase() || 'band';
 
-async function markdownFiles(directory) {
+// Work products sit in the process folders; top-level files in sdlc/ are notes.
+async function markdownFiles(directory, depth = 0) {
   const entries = await fs.readdir(directory, { withFileTypes: true });
   const results = await Promise.all(entries.map(async (entry) => {
     const target = path.join(directory, entry.name);
-    if (entry.isDirectory()) return markdownFiles(target);
-    return entry.isFile() && entry.name.endsWith('.md') ? [target] : [];
+    if (entry.isDirectory()) return markdownFiles(target, depth + 1);
+    return depth > 0 && entry.isFile() && entry.name.endsWith('.md') ? [target] : [];
   }));
   return results.flat();
 }

scripts/sdlc-delivery/verify-content.mjs

@@ -26,12 +26,13 @@ function compact(text) {
   return text.normalize('NFC').toLocaleLowerCase().replace(/[^\p{L}\p{N}]/gu, '');
 }
 
-async function markdownFiles(directory) {
+// Work products sit in the process folders; top-level files in sdlc/ are notes.
+async function markdownFiles(directory, depth = 0) {
   const entries = await fs.readdir(directory, { withFileTypes: true });
   const results = await Promise.all(entries.map(async (entry) => {
     const target = path.join(directory, entry.name);
-    if (entry.isDirectory()) return markdownFiles(target);
-    return entry.isFile() && entry.name.endsWith('.md') ? [target] : [];
+    if (entry.isDirectory()) return markdownFiles(target, depth + 1);
+    return depth > 0 && entry.isFile() && entry.name.endsWith('.md') ? [target] : [];
   }));
   return results.flat();
 }

scripts/sdlc-seed/build.mjs

@@ -74,7 +74,9 @@ async function main() {
   const hindsight = hindsightErrors(docs, root);
   if (hindsight.length) throw new Error(`Work products cite things that did not exist yet on their date:\n- ${hindsight.join('\n- ')}`);
 
-  await fs.rm(target, { recursive: true, force: true });
+  // Only the process folders are generated; files at the top of sdlc/ are
+  // working notes (e.g. the audit prep) and are neither seeded nor rendered.
+  for (const folder of FOLDERS) await fs.rm(path.join(target, folder), { recursive: true, force: true });
   for (const folder of FOLDERS) await fs.mkdir(path.join(target, folder), { recursive: true });
   for (const d of docs) {
     await fs.writeFile(path.join(target, d.dir, `${d.name}.md`), d.md, 'utf8');

scripts/sdlc-seed/docs-other.mjs

@@ -234,7 +234,7 @@ export function listOfEvidence(inventory) {
           [3, `Progress Status Record (${files('3.Progress Status Record').length} Report)`, multi('3.Progress Status Record'), 'บันทึกความก้าวหน้าของโครงการรายงวด'],
           [4, 'Correction Register', one('4.Correction Register'), 'เอกสารสรุปปัญหาที่พบระหว่างดำเนินโครงการ'],
           [5, 'Acceptance Record', one('5.Acceptance Report'), 'บันทึกการส่งมอบงาน (Sign off Letter)'],
-          [6, `Change Requests (${files('6.Change Report').length} ฉบับ)`, multi('6.Change Report'), 'บันทึกขอการเปลี่ยนแปลงความต้องการ'],
+          [6, 'Change Request (Change Report)', multi('6.Change Report'), 'เกณฑ์และทะเบียนการพิจารณาคำขอเปลี่ยนแปลง (ไม่มีคำขอที่เข้าเกณฑ์ตลอดโครงการ)'],
           [7, `Meeting Record (${files('7.Meeting Record').length} MoM Report)`, multi('7.Meeting Record'), 'รายงานการประชุมตามแผนการทำงานใน Work Schedule'],
           [8, 'Software Configuration', one('8.Software Configuration'), 'บันทึกการกำหนดค่าและความเปลี่ยนแปลงต่าง ๆ ที่เกิดขึ้นของระบบ'],
           [9, 'Project Repository', one('9.Project Repository'), `พื้นที่เก็บข้อมูล เอกสาร และหลักฐานทุกอย่างของโครงการ (Git Server: \`${ORIGIN}\`)`],

scripts/verify-sdlc-delivery.sh

@@ -9,7 +9,7 @@ PACKAGE_DIR="$(realpath -m "${1:-$ROOT_DIR/sdlc-delivery}")"
 
 [[ -d "$PACKAGE_DIR" ]] || { echo "Delivery package not found: $PACKAGE_DIR" >&2; exit 2; }
 
-expected="$(find "$SOURCE_DIR" -type f -name '*.md' | wc -l | tr -d ' ')"
+expected="$(find "$SOURCE_DIR" -mindepth 2 -type f -name '*.md' | wc -l | tr -d ' ')"
 produced="$(find "$PACKAGE_DIR" -type f -name '*.pdf' | wc -l | tr -d ' ')"
 [[ "$expected" == "$produced" ]] || { echo "Expected $expected PDFs, found $produced." >&2; exit 1; }