Certification Summary
An at-a-glance view of StreetJS's production-readiness gates. Every result below was produced by executing the certification suites — re-run node scripts/run-certification.mjs to regenerate certification-report.json.
Verdict
Gate matrix
Every gate is a real command
The suite fails closed — a single non-zero exit blocks certification. Commands and timings below come straight from the generated report.
npm run lint
npm run build
npx tsc
node --test dist/src/tests/
security-certification.test.js
observability-certification.test.js
deployment-certification.test.js
enterprise-certification.test.js
documentation-certification.test.js
repository-certification.test.js
Domain coverage
Security
JWT, AES-256-GCM sessions, scrypt vault, rate limiting, security headers — 74/74 system checks.
Performance
27.5k req/s median, 2ms P50, 70ms startup — measured, run-by-run.
Observability
Prometheus rules (promtool-validated), Grafana dashboard, tracing and health checks.
Deployment
Kubernetes manifest generation, kind-cluster apply and liveness smoke test.
Known follow-ups
Tracked, low-impact
In the spirit of honest reporting — none of these block production use.
- One documented dynamic-import cycle (MySQL detection seam) — slated for a factory-layer refactor
- Plugin marketplace / registry hardening
- Additional official plugins
- Broader live deployment verification