1---2name: nw-authoritative-sources3description: Domain-specific authoritative source databases, search strategies by topic category, and source freshness rules4---5
6# Authoritative Sources
7
8## Domain Authority Database
9
10Supplements general reputation tiers in `source-verification` with domain-specific authorities.
11
12### Software Architecture
13| Source | Authority | Notes |
14|--------|-----------|-------|
15| martinfowler.com | Primary | Patterns, refactoring, enterprise architecture |
16| c2.com/wiki | Historical | Original wiki; pattern language origins |
17| microservices.io | Domain-specific | Chris Richardson's microservices patterns |
18| architecturenotes.co | Curated | ADRs and trade-off analysis |
19| infoq.com | Industry reporting | Conference talks, practitioner reports |
20| thoughtworks.com/radar | Trend tracking | Technology Radar adoption lifecycle |
21
22### Cloud Platforms
23| Source | Authority | Notes |
24|--------|-----------|-------|
25| docs.aws.amazon.com | Official | AWS, well-architected framework |
26| cloud.google.com/docs | Official | GCP services and practices |
27| learn.microsoft.com | Official | Azure, .NET, Microsoft ecosystem |
28| kubernetes.io/docs | Official | Container orchestration |
29| docs.docker.com | Official | Container runtime |
30
31### Security
32| Source | Authority | Notes |
33|--------|-----------|-------|
34| owasp.org | Standards body | Web app security, top-10 |
35| nist.gov | Government | NIST CSF, SP 800 series |
36| cve.mitre.org | Vuln database | CVE identifiers |
37| nvd.nist.gov | Vuln database | NVD with scoring |
38| csrc.nist.gov | Crypto standards | FIPS, module validation |
39| cisa.gov | Government advisory | Security advisories |
40
41### Standards Bodies
42| Source | Authority | Notes |
43|--------|-----------|-------|
44| ietf.org / datatracker.ietf.org | Protocol standards | RFCs: networking, HTTP, TLS, DNS |
45| w3.org | Web standards | HTML, CSS, WCAG, web APIs |
46| iso.org | International | Quality, security, process frameworks |
47| ecma-international.org | Language standards | ECMAScript spec |
48| unicode.org | Character standards | Unicode encoding |
49
50### Programming Languages and Frameworks
51| Source | Authority | Notes |
52|--------|-----------|-------|
53| docs.python.org | Official | Python, stdlib, PEPs |
54| go.dev/doc | Official | Go language, stdlib |
55| typescriptlang.org | Official | TypeScript handbook |
56| rust-lang.org/learn | Official | Rust book, reference |
57| developer.mozilla.org (MDN) | Canonical web ref | JS, HTML, CSS, Web APIs |
58| docs.oracle.com/javase | Official | Java spec, API docs |
59
60### Data and Databases
61| Source | Authority | Notes |
62|--------|-----------|-------|
63| postgresql.org/docs | Official | PostgreSQL |
64| dev.mysql.com/doc | Official | MySQL |
65| redis.io/docs | Official | Redis |
66| mongodb.com/docs | Official | MongoDB |
67| cassandra.apache.org/doc | Official | Cassandra |
68
69### DevOps and SRE
70| Source | Authority | Notes |
71|--------|-----------|-------|
72| sre.google | Industry | Google SRE books |
73| 12factor.net | Methodology | Twelve-factor app |
74| dora.dev | Research | DORA metrics |
75| openpolicyagent.org | Policy-as-code | OPA docs |
76
77## Domain-Specific Search Strategies
78
79### Architecture Topics
801. Canonical authors: `{topic} site:martinfowler.com` or `site:microservices.io`
812. Conference talks: `{topic} QCon OR StrangeLoop OR GOTO conference`
823. Books/papers: `{topic} book OR paper architecture`
834. Adoption status: `{topic} site:thoughtworks.com/radar`
845. Local docs: Grep in `docs/research/` and `nWave/skills/`
85
86### Security Topics
871. Vuln databases: `{topic} site:cve.mitre.org` or `site:nvd.nist.gov`
882. Advisories: `{topic} site:cisa.gov` or `site:owasp.org`
893. NIST frameworks: `{topic} site:nist.gov`
904. Vendor advisories if product-specific
915. Prioritize last 6 months
92
93### Framework and Library Topics
941. Official docs (see database above)
952. Release notes/changelogs for version-specific info
963. Migration guides: `{framework} migration guide {version}`
974. GitHub issues/discussions for known problems
985. Stack Overflow: `{topic} site:stackoverflow.com`
99
100### Methodology and Process Topics
1011. Original author/publication
1022. Case studies: `{methodology} case study OR experience report`
1033. Critiques: `{methodology} criticism OR alternative OR comparison`
1044. Academic: `{topic} site:arxiv.org` or Google Scholar
1055. Practitioner adaptations vs original definitions
106
107## Source Freshness Rules
108
109| Category | Max Age | Rationale |
110|----------|---------|-----------|
111| Security vulnerabilities | 6 months | Rapid threat evolution |
112| Framework versions | 1 year | API/practice changes |
113| Cloud service docs | 1 year | Frequent deprecation/launch |
114| API references | 1 year | Breaking changes common |
115| Architecture patterns | Evergreen | Core patterns stable |
116| Methodology references | Evergreen | Foundational works stable |
117| Language specs | Evergreen per version | Per-version permanent |
118| Research papers | 3 years | Check for follow-up work |
119| Industry trend reports | 1 year | Cite current edition only |
120
121### Handling Outdated Sources
1221. Check if newer version exists
1232. Stable concept: cite with "[Published {year}; concept remains current]"
1243. Time-sensitive: find current source or document age limitation in Knowledge Gaps
1254. Never cite outdated security advisories as current threat intelligence
majiayu000