- Core Standards & Governance: The core mathematics, PER metric definitions, and Top 10 categories are stable and maintained by the project leadership.
- Welcome Contributions: We actively encourage Pull Requests focused on:
- Policy-as-Code & IaC validation rules (OPA/Rego, Semgrep, Kyverno).
- CI/CD automation scripts for calculating PER at build time.
- Mappings to external compliance frameworks (NIST, ISO, PCI-DSS).
- Platform-specific subtraction reference architectures.