1---2name: nw-authoritative-sources3description: Domain-specific authoritative source databases, search strategies by topic category, and source freshness rules4---567# Authoritative Sources89## Domain Authority Database1011Supplements general reputation tiers in `source-verification` with domain-specific authorities.1213### Software Architecture14| Source | Authority | Notes |15|--------|-----------|-------|16| martinfowler.com | Primary | Patterns, refactoring, enterprise architecture |17| c2.com/wiki | Historical | Original wiki; pattern language origins |18| microservices.io | Domain-specific | Chris Richardson's microservices patterns |19| architecturenotes.co | Curated | ADRs and trade-off analysis |20| infoq.com | Industry reporting | Conference talks, practitioner reports |21| thoughtworks.com/radar | Trend tracking | Technology Radar adoption lifecycle |2223### Cloud Platforms24| Source | Authority | Notes |25|--------|-----------|-------|26| docs.aws.amazon.com | Official | AWS, well-architected framework |27| cloud.google.com/docs | Official | GCP services and practices |28| learn.microsoft.com | Official | Azure, .NET, Microsoft ecosystem |29| kubernetes.io/docs | Official | Container orchestration |30| docs.docker.com | Official | Container runtime |3132### Security33| Source | Authority | Notes |34|--------|-----------|-------|35| owasp.org | Standards body | Web app security, top-10 |36| nist.gov | Government | NIST CSF, SP 800 series |37| cve.mitre.org | Vuln database | CVE identifiers |38| nvd.nist.gov | Vuln database | NVD with scoring |39| csrc.nist.gov | Crypto standards | FIPS, module validation |40| cisa.gov | Government advisory | Security advisories |4142### Standards Bodies43| Source | Authority | Notes |44|--------|-----------|-------|45| ietf.org / datatracker.ietf.org | Protocol standards | RFCs: networking, HTTP, TLS, DNS |46| w3.org | Web standards | HTML, CSS, WCAG, web APIs |47| iso.org | International | Quality, security, process frameworks |48| ecma-international.org | Language standards | ECMAScript spec |49| unicode.org | Character standards | Unicode encoding |5051### Programming Languages and Frameworks52| Source | Authority | Notes |53|--------|-----------|-------|54| docs.python.org | Official | Python, stdlib, PEPs |55| go.dev/doc | Official | Go language, stdlib |56| typescriptlang.org | Official | TypeScript handbook |57| rust-lang.org/learn | Official | Rust book, reference |58| developer.mozilla.org (MDN) | Canonical web ref | JS, HTML, CSS, Web APIs |59| docs.oracle.com/javase | Official | Java spec, API docs |6061### Data and Databases62| Source | Authority | Notes |63|--------|-----------|-------|64| postgresql.org/docs | Official | PostgreSQL |65| dev.mysql.com/doc | Official | MySQL |66| redis.io/docs | Official | Redis |67| mongodb.com/docs | Official | MongoDB |68| cassandra.apache.org/doc | Official | Cassandra |6970### DevOps and SRE71| Source | Authority | Notes |72|--------|-----------|-------|73| sre.google | Industry | Google SRE books |74| 12factor.net | Methodology | Twelve-factor app |75| dora.dev | Research | DORA metrics |76| openpolicyagent.org | Policy-as-code | OPA docs |7778## Domain-Specific Search Strategies7980### Architecture Topics811. Canonical authors: `{topic} site:martinfowler.com` or `site:microservices.io`822. Conference talks: `{topic} QCon OR StrangeLoop OR GOTO conference`833. Books/papers: `{topic} book OR paper architecture`844. Adoption status: `{topic} site:thoughtworks.com/radar`855. Local docs: Grep in `docs/research/` and `nWave/skills/`8687### Security Topics881. Vuln databases: `{topic} site:cve.mitre.org` or `site:nvd.nist.gov`892. Advisories: `{topic} site:cisa.gov` or `site:owasp.org`903. NIST frameworks: `{topic} site:nist.gov`914. Vendor advisories if product-specific925. Prioritize last 6 months9394### Framework and Library Topics951. Official docs (see database above)962. Release notes/changelogs for version-specific info973. Migration guides: `{framework} migration guide {version}`984. GitHub issues/discussions for known problems995. Stack Overflow: `{topic} site:stackoverflow.com`100101### Methodology and Process Topics1021. Original author/publication1032. Case studies: `{methodology} case study OR experience report`1043. Critiques: `{methodology} criticism OR alternative OR comparison`1054. Academic: `{topic} site:arxiv.org` or Google Scholar1065. Practitioner adaptations vs original definitions107108## Source Freshness Rules109110| Category | Max Age | Rationale |111|----------|---------|-----------|112| Security vulnerabilities | 6 months | Rapid threat evolution |113| Framework versions | 1 year | API/practice changes |114| Cloud service docs | 1 year | Frequent deprecation/launch |115| API references | 1 year | Breaking changes common |116| Architecture patterns | Evergreen | Core patterns stable |117| Methodology references | Evergreen | Foundational works stable |118| Language specs | Evergreen per version | Per-version permanent |119| Research papers | 3 years | Check for follow-up work |120| Industry trend reports | 1 year | Cite current edition only |121122### Handling Outdated Sources1231. Check if newer version exists1242. Stable concept: cite with "[Published {year}; concept remains current]"1253. Time-sensitive: find current source or document age limitation in Knowledge Gaps1264. Never cite outdated security advisories as current threat intelligence127128---129130**Source:** [`nWave-ai/nWave`](https://github.com/nWave-ai/nWave) → `nWave/skills/nw-authoritative-sources/SKILL.md`131132**Also appears in:** `nWave-ai/nWave/plugins/nw/skills/nw-authoritative-sources/SKILL.md`
thedixitjain