fix: Provide machine-readable project index from wasmagent to sync org profile tables (#55)

.github/workflows/project-index-ci.yml

@@ -0,0 +1,20 @@
+name: Project index CI
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+jobs:
+  validate-project-index:
+    name: Validate project index
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.x'
+      - name: Validate docs/project-index.json
+        run: python scripts/validate_project_index.py

.gitignore

@@ -0,0 +1,4 @@
+# Python bytecode and cache
+__pycache__/
+*.py[cod]
+*$py.class

README.md

@@ -14,6 +14,7 @@ Generators and ops tooling live in
 
 - [`profile/README.md`](profile/README.md) — organization profile
 - [`docs/`](docs/) — roadmap, architecture, evaluation summary
+- [`docs/project-index.json`](docs/project-index.json) — machine-readable project index (source of truth for the project list)
 - [`claims/`](claims/), [`releases/`](releases/), [`media/`](media/) — public ledgers
 - [`assets/`](assets/) — logo and product matrix
 
@@ -28,6 +29,8 @@ references are never orphaned when content moves between repos. Prefer the
 
 - Product matrix image (raw URL for embedding):
   `https://raw.githubusercontent.com/WasmAgent/.github/main/assets/product-matrix.svg`
+- Project index (machine-readable repo, role, and status registry):
+  `https://github.com/WasmAgent/.github/blob/main/docs/project-index.json`
 - Claims registry:
   `https://github.com/WasmAgent/.github/blob/main/claims/public-claims.yml`
 - Release ledger:

docs/project-index.json

@@ -0,0 +1,139 @@
+{
+  "schema_version": 1,
+  "org": "WasmAgent",
+  "description": "Machine-readable source of truth for the WasmAgent project index. Lists every repository in the organization with its category, role, status, and visibility. Consumed by the org profile (profile/README.md project table) and the living roadmap (docs/roadmap.md) so the public project matrix is rendered from a single registry instead of maintained by hand, preventing omissions.",
+  "source_url": "https://github.com/WasmAgent/.github/blob/main/docs/project-index.json",
+  "last_reviewed": "2026-07-02",
+  "consumers": [
+    "profile/README.md — Projects table",
+    "docs/roadmap.md — project layers"
+  ],
+  "status_legend": {
+    "shipped": "Public repository exists and is the source of truth for its layer.",
+    "in_progress": "Spec or reference implementation landing.",
+    "planned": "Not yet public."
+  },
+  "categories": {
+    "project-home": "Public landing page that directs readers to the org hub.",
+    "org-hub": "Org-wide documentation, ledgers, and source of truth for the project list.",
+    "runtime": "Embedded agent runtime.",
+    "workload": "Reference agent workload.",
+    "evidence-pipeline": "Trace ingestion, evidence admission, and training audit.",
+    "trust-artifacts": "Machine-readable identity and policy posture artifacts.",
+    "audit": "Enterprise audit product.",
+    "evaluation": "Adversarial evaluation protocol.",
+    "internal-tool": "Internal automation or operations; ships no public product."
+  },
+  "repos": [
+    {
+      "name": "wasmagent",
+      "category": "project-home",
+      "role": "Project home",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Public landing page that directs readers to .github for the full roadmap and project list.",
+      "url": "https://github.com/WasmAgent/wasmagent"
+    },
+    {
+      "name": ".github",
+      "category": "org-hub",
+      "role": "Org hub",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Org-wide documentation and ledger hub; public home for the roadmap, claims registry, release ledger, and cross-repo coordination.",
+      "url": "https://github.com/WasmAgent/.github"
+    },
+    {
+      "name": "wasmagent-js",
+      "category": "runtime",
+      "role": "Runtime",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Embedded agent runtime: WASM sandbox, MCP firewall, capability manifests, signed AEP event emitter.",
+      "url": "https://github.com/WasmAgent/wasmagent-js"
+    },
+    {
+      "name": "bscode",
+      "category": "workload",
+      "role": "Workload",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Reference coding-agent workload on Cloudflare Workers with AEP evidence export.",
+      "url": "https://github.com/WasmAgent/bscode"
+    },
+    {
+      "name": "trace-pipeline",
+      "category": "evidence-pipeline",
+      "role": "Evidence pipeline",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Trace-to-training backend and data factory; ingests AEP traces, gates training-data admission, and records every training run as auditable evidence.",
+      "url": "https://github.com/WasmAgent/trace-pipeline"
+    },
+    {
+      "name": "agent-trust-infra",
+      "category": "trust-artifacts",
+      "role": "Trust artifacts",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "AgentBOM, MCP Posture, and Trust Passport spec, reference implementation, and CLI.",
+      "url": "https://github.com/WasmAgent/agent-trust-infra"
+    },
+    {
+      "name": "open-agent-audit",
+      "category": "audit",
+      "role": "Audit",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Enterprise audit product; deployed at trustavo.com.",
+      "url": "https://github.com/WasmAgent/open-agent-audit"
+    },
+    {
+      "name": "fresharena",
+      "category": "evaluation",
+      "role": "Evaluation",
+      "status": "shipped",
+      "visibility": "public",
+      "in_profile": true,
+      "summary": "Dynamic, verifiable, adversarial evaluation protocol for coding agents.",
+      "url": "https://github.com/WasmAgent/fresharena"
+    },
+    {
+      "name": "claude-bot",
+      "category": "internal-tool",
+      "role": "Internal automation",
+      "status": "shipped",
+      "visibility": "internal",
+      "in_profile": true,
+      "summary": "Internal automation: issue triage, PR review, and cross-repo coherence patrol. Not a public product.",
+      "url": "https://github.com/WasmAgent/claude-bot"
+    },
+    {
+      "name": "wasmagent-ops",
+      "category": "internal-tool",
+      "role": "Internal operations",
+      "status": "shipped",
+      "visibility": "internal",
+      "in_profile": true,
+      "summary": "Private operations hub: media, release, research, and security operations for the org. Not a public product.",
+      "url": "https://github.com/WasmAgent/wasmagent-ops"
+    },
+    {
+      "name": "erp-agent",
+      "category": "workload",
+      "role": "Workload (planned)",
+      "status": "planned",
+      "visibility": "public",
+      "in_profile": false,
+      "summary": "Planned ERP-domain workload with order-state and ledger verifiers, mirroring the role bscode plays for coding tasks.",
+      "url": "https://github.com/WasmAgent/erp-agent"
+    }
+  ]
+}

docs/roadmap.md

@@ -3,7 +3,8 @@
 Living roadmap for the WasmAgent organization. Ticked items ship as public
 repositories under [github.com/WasmAgent](https://github.com/WasmAgent);
 unticked items are planned or in progress. This document mirrors
-`gh repo list WasmAgent --visibility public`.
+`gh repo list WasmAgent --visibility public`, and its machine-readable
+counterpart is [`project-index.json`](project-index.json).
 
 ## Status legend
 

profile/README.md

@@ -4,6 +4,11 @@ Protect agent runs. Record evidence. Audit claims. Train only from trusted trace
 
 ## Projects
 
+The table below is the human-readable view of
+[`docs/project-index.json`](../docs/project-index.json), the machine-readable
+source of truth for the project list. Profile generation consumes that index so
+the public matrix stays complete and in sync across repos.
+
 | Repository | Role |
 | --- | --- |
 | [wasmagent](https://github.com/WasmAgent/wasmagent) | **Project home** · Public landing page that directs readers to [`.github`](https://github.com/WasmAgent/.github) for the full roadmap and project list |
@@ -77,6 +82,7 @@ org, not any single product.
 - [Claims registry](../claims/public-claims.yml) — org claims mapped to evidence and review status
 - [Release ledger](../releases/public-release-ledger.yml) — public releases across repositories
 - [Media & posts](../media/posts.yml) — talks, posts, and appearances
+- [Project index](../docs/project-index.json) — machine-readable source of truth for the project list
 - [Roadmap](../docs/roadmap.md) — living roadmap mirroring the public repo list
 
 ## Disclaimer