Skip to content

Feature/hww 2.0#12

Open
MWest2020 wants to merge 7 commits intomainfrom
feature/hww-2.0
Open

Feature/hww 2.0#12
MWest2020 wants to merge 7 commits intomainfrom
feature/hww-2.0

Conversation

@MWest2020
Copy link
Copy Markdown
Member

Title: HWW 2.0 — Employee handbook restructure with ISO compliance

Body:

Summary

Complete restructuring of the Docusaurus employee handbook from a flat page
list into a thematic, Valve-handbook-inspired manual. Audited against the ISO
shared drive and closed 29/30 compliance gaps.

Handbook restructure

  • Landing page reorganized into 4 themed blocks: Working at Conduction,
    Building Software, Support & Safety, Want to know more
  • Sidebar matches themes — no more "grab bag" categories
  • Homepage i18n fixed with <Translate> component + NL code.json
  • Content sourced from the HWW 2.0 Google Doc + old employee manual

New pages (EN + NL)

  • Onboarding & buddy system
  • Code of Conduct(ion) (synced with repo-root CODE_OF_CONDUCT.md)
  • Customer support flow
  • Spec-driven development (OpenSpec + Claude Code pipeline)
  • Automated development pipeline (quality gates, releases, Hydra teaser)
  • Privacy & AVG/GDPR
  • About this manual (meta-documentation)

ISO compliance (29/30 gaps closed)

  • Published quality policy + security policy (removed draft, added scope +
    measurable objectives)
  • Expanded ISO intro with: PDCA cycle, management review, internal audits,
    risk management, VvT, business continuity, supplier management, customer
    satisfaction, competence/training, document control, physical safety
  • Three-tier incident classification (incident / afwijking / tekortkoming)
  • AI tooling security controls (based on ISO-723 Claude deviation)
  • One item requires management input: organisation page review

Infrastructure

  • Centralized site-data.json for tools, emails, Slack channels, schedules —
    single source of truth
  • React components (ToolList, Val, Email) render from JSON — change
    once, updates everywhere
  • CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md synced with docs
    pages
  • CI workflow docs-sync-check.yml verifies sync on PR
  • All horizontal rules removed from docs (cleaner rendering)

Test plan

  • npx docusaurus build succeeds for both EN and NL locales
  • No merge conflicts with main
  • All internal links resolve (no broken links in build)
  • Visual review of landing page and sidebar structure
  • Verify NL locale switcher works on homepage
  • Management review of quality-policy.md and security-policy.md content

MWest2020 and others added 6 commits March 30, 2026 15:38
…golia search

- Add Dutch (NL) locale with full translations for all pages; language selector in navbar
- Restructure WayOfWork section as compact HWW core: mission, values, org, workflow, releases, vacancies, contributing
- Add ISO & Quality section: iso-intro, incident-reporting, security (external), quality-policy and security-policy (draft, pending management approval)
- Rewrite CONTRIBUTING.md and SECURITY.md to industry standards (DCO, CVSSv3, safe harbor, conventional commits)
- Include contributing and security as pages in the docs site
- Add Algolia DocSearch with contextual search and crawler reindex trigger in CI
- Remove stub/marketing pages: Products/*, Diagrams/*, knowledge/*, WayOfWork/competences, join
- Fix sidebar to use explicit doc IDs; translate sidebar category labels via i18n/nl/current.json
- Add caution admonition on organisation.md (outdated, flagged for management review)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…ntralization

Save point before ISO drive audit. All changes build successfully (EN + NL).

- Intro.md restructured into 4 thematic blocks (Working, Building, Support, About)
- Sidebar reorganized to match themes
- Homepage i18n fixed with Translate component + NL code.json
- New pages: onboarding, customer-support, code-of-conduct, spec-driven-development, development-pipeline, about-this-manual
- Security page expanded (passwords, clean desk, BYOD, ESET, NordLayer)
- Way of Working expanded (scrum ceremonies, story points)
- CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md synced with docs pages
- CI workflow for docs sync check
- Centralized site-data.json + ToolList/Val/Email components
- Incident reporting corrected (Jira label flow, not Slack)
- All horizontal rules removed from docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Audited all 19 folders on the ISO shared drive against the Docusaurus
docs site. Created TODO.md with 30 gaps (10 HIGH, 14 MEDIUM, 6 LOW).
Resolved 29 of 30 — remaining item requires management input.

HIGH priority (all resolved):
- Published quality-policy.md and security-policy.md (removed draft:true)
- Added QMS/ISMS scope statements to both policies
- Added measurable objectives with targets and responsibilities
- Created privacy-policy.md (AVG/GDPR) with processing register,
  data subject rights, breach notification, supplier data assessment
- Added AI tooling security controls (ISO-723 Claude deviation)
- Added three-tier incident classification (incident/afwijking/tekortkoming)
- Added risk management, VvT reference, business continuity to ISO intro
- Added responsibility matrix reference

MEDIUM priority (13/14 resolved):
- Expanded ISO intro with: PDCA cycle, management review, internal audits,
  supplier management, customer satisfaction, competence/training,
  document control, context of organization
- Added RCA template structure to incident-reporting
- Clarified internal vs external reporting channels and SLAs
- Added security awareness program description

LOW priority (all resolved):
- Fire safety, RI&E, BHV certification references
- Incident trend analysis section
- Certificate reference in ISO intro
- External access tracking in document control

All content in EN + NL. Build succeeds for both locales.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Mission & Values → Working at Conduction
- ISO & Quality overview → Support & Safety
- Products & Services → standalone
- About This Manual → standalone at bottom

Eliminates redundant category (the whole site is about Conduction).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Addresses all review feedback from the HWW 2.0 session:
- ESET/Linux: add workstation-security repo as alternative
- Onboarding: link to full Code of Conduct instead of inline copy
- Code of Conduct: add Conduction workplace agreements from Working@Conduction PDF
- Crisis management: add 7 vuistregels to incident-reporting
- Vacancies: switch to info@conduction.nl, add GitHub org link
- Hotfix process: clarify same branch protection rules apply
- Customer support: fix Jira to manual, remove vier-ogen section
- Quality policy: remove NPS objective, update communication text
- Security policy: add status.commonground.nu for uptime monitoring
- .gitignore: expand with secrets, build artifacts, IDE patterns

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…rences

- Remove "Crisis Management" section from WayOfWork intro (EN + NL)
- Rename "Crisis Rules of Thumb" to "Incident Escalation" (EN + NL)
- Replace "Quality & Safety Lead" with dev lead / MT member (EN + NL)
- Remove all "crisis" terminology — reword to "serious incident"
- Add red danger callout on intro page linking to incident procedure (EN + NL)
- Add offboarding section to onboarding page incl. BYOD data wipe (EN + NL)
- Add "Leaving?" one-liner on intro page (EN + NL)
- Add Passwork share-link procedure to security policy (EN + NL)
- Broaden AI policy: Claude.ai account for all employees, no data storage (EN + NL)
- Align with ISO 27001 beheersmaatregelen doc (A5.11, A5.14, A6.5, A9.5-A9.6)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant