AI-native, spec-driven enterprise .NET accelerator: composable NuGet libraries + templates + AI skills + guardrails + living documentation. Not a framework — a golden path: a road paved with enterprise opinion on top of Microsoft (Aspire, Extensions.*).
New here? The guide — getting started, the six concepts, the CorPay tour, proof stories. Conceptual grounding: Strategy/Foundation · Constitution: ADR-0001..0010
- ✔ Composable packages — added to an existing project in 5 minutes (L1) or scaffolded from scratch (L3)
- ✔ Spec-driven:
.goldpath/manifest.yaml+ OpenAPI/AsyncAPI as the single source of truth - ✔ AI in the development layer: skills generate, guardrails verify, humans approve
- ✔ Proof-driven: every claim below is a test/bench that runs in CI (nightly 7-shape matrix, real containers)
- ✘ Not a framework (imposes no structure), no custom DSL, no wrappers around Microsoft
dotnet new install Goldpath.Templates@0.1.0-preview.2 # preview: pin the version
dotnet tool install -g Goldpath.Cli --prerelease
dotnet tool install -g specdrift # the deterministic engine behind goldpath check/add
dotnet new goldpath-solution -n Acme.Orders --db postgresql --broker rabbitmq --features bulk
cd Acme.Orders && goldpath check # spec validate + drift + build, one verb
dotnet run --project src/Acme.Orders.AppHostGrow it feature by feature: goldpath add feature notification, goldpath add worker,
goldpath db add AddInvoices. Every admin surface (/goldpath/admin/*) is fail-closed,
audited and contract-frozen; every module ships
its Grafana board, runbooks and measured performance
on a pinned CI profile.
| Layer | Packages |
|---|---|
| Floor (Ring A) | Abstractions · ServiceDefaults · ApiDefaults · Data · Messaging |
| Cross-cutting (Ring B) | Auth · Idempotency · AuditTrail · MultiTenancy · SoftDelete · Locking (+SqlServer) · Caching · DataProtection |
| Execution ladder (L2→L4) | Jobs (clustered, checkpointed, kill-9-recoverable) · Archival · Bulk (finance-grade intake→gate→execute→repair) · Notification · Campaign (paced fan-out, live throttle) |
| Tooling | Analyzers (GP#### executable standards) · goldpath CLI · Goldpath.Templates |
| Directory | Contents |
|---|---|
docs/strategy/ · docs/adr/ · docs/rfc/ |
Strategy, the 10-ADR constitution, module RFCs + frozen contracts |
docs/guide/ · docs/stories/ |
The adopter's path (start here) · proof stories |
docs/ops/ · docs/upgrades/ |
Migrations/trace/release runbooks · per-release upgrade guides |
schemas/manifest/v1/ |
Manifest JSON Schema + valid/invalid corpus (CI corpus gate: valid must pass, invalid must fail) |
packages/ · analyzers/ |
The NuGet train (19 packages) · GP#### Roslyn rules |
templates/ · tools/ |
dotnet new pack (solution + worker) · the goldpath CLI |
tests/ |
592 unit + 34 integration proofs (Testcontainers) + bench suite |
skills/ · rulesets/ · samples/ |
pointers — the shipped skill layer and rulesets live inside templates/ · reference app (CorPay) |
Everything in this repo — documentation, code, identifiers, commits, PRs — is English. Conversation with the team may be Turkish. In customer repos, the domain-memory language is chosen per customer (Turkish by default for Turkish customers — see domain-memory-v1 §4).
Every dependency, including first-party OSS (Mediant, Mockifyr, Spec Engine — personal GitHub), is consumed as a published, pinned NuGet package (nuget.org → internal mirror where required). Source references/submodules are forbidden. Details: foundation §10.
One version train: every Goldpath.* package, the CLI and the template pack ship the
same version. SemVer with the pre-1.0 rules spelled out — 0.x.y patches are always
safe to take blind; 0.(x+1) minors may break but never silently: every break ships
with a step-by-step upgrade guide (docs/upgrades/), and the PublicAPI.*.txt ledger
diff is the mechanical proof of what changed. Support: latest release only pre-1.0;
from 1.0, previous major gets security fixes for 6 months. The full written contract:
docs/rfc/goldpath-versioning.md.