1. Status and authority
ZAF is an independent library edited by Elvis Ndayishimiye for Zawatu. The current edition is a public working draft. No independent review, external adoption or accreditation is claimed. Publication does not constitute acceptance.
| State | Meaning |
|---|---|
| Planned | Outline only; no accepted rule text. |
| Working draft | Written material open to substantive change. |
| In review | Named reviewers examine an identified version. |
| Accepted | Recorded owner decision after required evidence. |
| Deprecated | A replacement and migration path are identified. |
| Withdrawn | Use is discontinued with a recorded reason. |
2. Documentation contract
A section records purpose, scope, stakeholders, requirements, available evidence, assessment, recommendations, useful figures and their limits, decisions, artifacts, verification, exceptions and cross-references. Examples are distinguished from applicable rules.
3. Normative rules and evidence
Book III will distinguish Mandatory, Recommended, Optional, Example and Compliance Checklist content. Every mandatory rule needs a stable ID, applicability, rationale, verifiable evidence, accountable owner and exception route. ZAF rules apply to an institution only through explicit adoption.
Proposed rule identifier: ZAF-[BOOK]-[DOMAIN]-[NUMBER]. A generic checklist does not establish that a system has passed it.
4. Versions and change control
The library, each book and each section have separate versions. A change records its request, rationale, author, impact, evidence and decision. Editorial corrections preserve meaning; new or incompatible rules require compatibility review and migration guidance where needed. Earlier accepted versions must remain identifiable.
5. Book acceptance gate
Finishing the text is insufficient. Required sections, definitions, links, figures and evidence must be reviewed. Normative rules must be verifiable; operating procedures must be exercised within their stated scope. The editor records actual reviewers and findings before an acceptance decision. Nobody is presented as a reviewer without participation.
6. References and international maturity
The international ambition is pursued through traceable writing, qualified review, authorized pilots, documented outcomes, maintained releases and external feedback. References below are bibliographic; no clause-by-clause conformance is currently asserted.
- ISO/IEC/IEEE 42010:2022
Architecture description; planned comparison of documentation structure.
- TOGAF Standard — example template deliverables
Reference for architecture work-product organisation.
- NIST Cybersecurity Framework 2.0
Reference for cybersecurity risk and governance concerns.
7. Next authoring step
Review Book I / Sections 01–03, then develop Section 04. Progress to Book II follows the Book I authoring sequence; the collection is not expanded by automatically filling every volume.