Initial research and build
Cut-off: 29 July 2026, Asia/Kolkata. The repository began with Git metadata only.
Primary legal pass
Section titled “Primary legal pass”Downloaded and text-extracted the DPDP Act, G.S.R. 843(E), G.S.R. 844(E) and G.S.R. 846(E) from MeitY. Verified the exact three Act and Rules commencement cohorts, Board establishment/head office, Rule 6 safeguards, Rule 7 breach sequence, Rule 13 SDF obligations, Rule 14 rights routes, Rule 15 transfer condition and First Schedule Consent Manager conditions/obligations.
Verified the 6 May 2026 Board recruitment notice and the MeitY Aadhaar Good Governance use-case listing as of 26 July 2026, including the 20 July approval. These prove recruitment/approval, not appointments or portal production status.
Adjacent/sector pass
Section titled “Adjacent/sector pass”Captured official CERT-In Directions page, RBI IT outsourcing/governance, SEBI CSCRF/FAQ, IRDAI cyber, UIDAI consolidated authentication/offline verification, TRAI consolidated TCCCPR and ABDM Health Data Management Policy. Pages label sector/programme scope and unresolved entity-specific work.
Technical pass
Section titled “Technical pass”Verified current npm releases Astro 7.1.6 and Starlight 0.41.5 and official Starlight setup/content/
sidebar documentation. Selected astro-mermaid 2.1.0 because it documents Astro 7/Starlight
compatibility and bundles local client rendering. Mermaid uses strict security configuration.
Initial dependency audit exposed advisories in older Mermaid/YAML transitive paths. Direct pins were
updated to Mermaid 11.16.0 and YAML 2.9.0; npm audit --omit=dev then reported zero
vulnerabilities. Revalidate on every build.
Design decision
Section titled “Design decision”Index-first technical documentation for privacy/legal/engineering/audit/buying audiences. Cool paper/ink palette with restrained cobalt signal, typography and structured data rather than decorative images, native Starlight search/navigation/dark mode, print support and accessible status components.
Limitations
Section titled “Limitations”G.S.R. 892(E)’s seven Rules corrections are captured, but an official consolidated Rules text was not located. Board appointments/portal, CM standards/registrations, SDF/localisation/country/ exemption notifications and deep entity-specific sector consolidation remain open. Market product pages are vendor claims, not independent comparisons.