Static system-graph engine. Package manager: uv (uv sync --all-groups).
- Tests:
uv run pytest(unit; integration/e2e/docker markers deselected by default).-m integrationruns a real cldk analyzer;-m e2eruns the Online Boutique demo (network + analyzers; strict launch gate);-m dockerbuilds and smokes the image. - Module map:
cocoa/system/= engine (detect → driver → facts → stitch → datastore → build → blast → topology → report/htmlmap);cocoa/cli.py= typer CLI;cocoa/server.py+cocoa/tools/= MCP;skills//commands/= plugin content (validated bytest/test_plugin_assets.py). - Provenance discipline is the product: never emit an edge without
DERIVED-STATIC/INFERREDtagging; skips are recorded, never silent. - Conventional commits, no trailers. Branch-per-issue
feat/issue-NNN-<slug>.