Feature/hww 2.0

.github/workflows/docs-sync-check.yml

@@ -0,0 +1,57 @@
+name: Docs Sync Check
+
+on:
+  pull_request:
+    paths:
+      - 'CONTRIBUTING.md'
+      - 'SECURITY.md'
+      - 'CODE_OF_CONDUCT.md'
+      - 'website/docs/WayOfWork/contributing.md'
+      - 'website/docs/ISO/security.md'
+      - 'website/docs/WayOfWork/code-of-conduct.md'
+
+jobs:
+  check-sync:
+    name: Verify repo docs match website docs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check CONTRIBUTING.md sync
+        run: |
+          # Strip frontmatter and sync comment from docs version
+          sed '1,/^---$/d' website/docs/WayOfWork/contributing.md | sed '/^{\/\*.*\*\/}$/d' | sed '/^$/N;/^\n$/d' > /tmp/docs-contributing.md
+          # Compare content sections (ignore minor whitespace)
+          # The docs version should contain all content from the repo version
+          echo "Checking CONTRIBUTING.md sync..."
+          if ! diff -q <(grep -c '^## ' CONTRIBUTING.md) <(grep -c '^## ' /tmp/docs-contributing.md) > /dev/null 2>&1; then
+            echo "::warning::CONTRIBUTING.md and website/docs/WayOfWork/contributing.md have different section counts. They may be out of sync."
+          fi
+          echo "CONTRIBUTING.md section count: $(grep -c '^## ' CONTRIBUTING.md)"
+          echo "Docs version section count: $(grep -c '^## ' /tmp/docs-contributing.md)"
+
+      - name: Check SECURITY.md sync
+        run: |
+          sed '1,/^---$/d' website/docs/ISO/security.md | sed '/^{\/\*.*\*\/}$/d' | sed '/^$/N;/^\n$/d' > /tmp/docs-security.md
+          echo "Checking SECURITY.md sync..."
+          if ! diff -q <(grep -c '^## ' SECURITY.md) <(grep -c '^## ' /tmp/docs-security.md) > /dev/null 2>&1; then
+            echo "::warning::SECURITY.md and website/docs/ISO/security.md have different section counts. They may be out of sync."
+          fi
+          echo "SECURITY.md section count: $(grep -c '^## ' SECURITY.md)"
+          echo "Docs version section count: $(grep -c '^## ' /tmp/docs-security.md)"
+
+      - name: Check CODE_OF_CONDUCT.md sync
+        run: |
+          sed '1,/^---$/d' website/docs/WayOfWork/code-of-conduct.md | sed '/^{\/\*.*\*\/}$/d' | sed '/^$/N;/^\n$/d' > /tmp/docs-coc.md
+          echo "Checking CODE_OF_CONDUCT.md sync..."
+          # Strict check for CoC — content should be nearly identical
+          repo_hash=$(sed 's/^# .*//' CODE_OF_CONDUCT.md | md5sum | cut -d' ' -f1)
+          docs_hash=$(sed 's/^# .*//' /tmp/docs-coc.md | md5sum | cut -d' ' -f1)
+          if [ "$repo_hash" != "$docs_hash" ]; then
+            echo "::warning::CODE_OF_CONDUCT.md and website/docs/WayOfWork/code-of-conduct.md content differs. Please sync them."
+            echo ""
+            echo "Diff:"
+            diff <(sed 's/^# .*//' CODE_OF_CONDUCT.md) <(sed 's/^# .*//' /tmp/docs-coc.md) || true
+          else
+            echo "CODE_OF_CONDUCT.md is in sync."
+          fi

.github/workflows/documentation.yml

@@ -72,3 +72,11 @@ jobs:
         run: |
           git fetch origin gh-pages
           echo "Deployment completed. Latest commit: $(git rev-parse origin/gh-pages)"
+
+      - name: Trigger Algolia crawler reindex
+        continue-on-error: true
+        run: |
+          curl -X POST \
+            --fail \
+            --user "${{ secrets.ALGOLIA_CRAWLER_ID }}:${{ secrets.ALGOLIA_CRAWLER_SECRET }}" \
+            "https://crawler.algolia.com/api/1/crawlers/${{ secrets.ALGOLIA_CRAWLER_ID }}/reindex"

.gitignore

@@ -1,2 +1,26 @@
-
+# IDE
 .idea/
+.vscode/
+*.swp
+*.swo
+
+# Secrets
+.env
+.env.*
+*.pem
+*.key
+*_rsa
+*.crt
+*.p12
+
+# Build artifacts
+website/build/
+website/.docusaurus/
+website/node_modules/
+node_modules/
+dist/
+*.tgz
+
+# OS
+.DS_Store
+Thumbs.db

CHANGELOG.md

@@ -0,0 +1,31 @@
+# Changelog
+
+All notable changes to the Conduction Employee Handbook are documented in this file.
+
+## 2026-04-13 — HWW 2.0 Review Feedback
+
+Processed review feedback from HWW 2.0 session. Changes across EN + NL versions.
+
+### Changed
+
+- **ESET / Linux** (`ISO/security.md`): Added Linux alternative — workstation-security repo reference, teamlead guidance, log audit notice
+- **Onboarding** (`WayOfWork/onboarding.md`): Replaced inline Code of Conduct summary with link to full `code-of-conduct` page (single source of truth)
+- **Vacatures** (`WayOfWork/Vacancies.md`): Changed primary application channel from GitHub Issues to info@conduction.nl; added GitHub org link and "About Conduction" section
+- **Hotfix process** (`WayOfWork/release-process.md`): Clarified that same branch protection rules (reviewer count, CI) apply to hotfixes — no exceptions to human-in-the-loop
+- **Customer support** (`WayOfWork/customer-support.md`): Corrected Jira ticket creation from "auto-creates" to manual; removed vier-ogen-principe section (not relevant to support page)
+- **Quality policy** (`ISO/quality-policy.md`): Removed NPS objective (not yet measured); updated communication section to reference quality sessions instead of documentation site only
+- **Security policy** (`ISO/security-policy.md`): Added status.commonground.nu link to uptime monitoring objective
+
+### Added
+
+- **Crisis management vuistregels** (`ISO/incident-reporting.md`): Added 7 rules of thumb for crisis situations (report first, communicate more, contain before fix, etc.)
+
+### Verified
+
+- **Dependency checks** (point 7): All documented checks (license compliance, vulnerability scan, SBOM/CycloneDX, composer audit, npm audit) are present in the centralized `quality.yml` reusable workflow in `.github` repo. OpenRegister calls these as a reusable workflow. Documentation is accurate.
+- **AI tooling** (point 13): Current documentation confirmed still accurate — no changes needed.
+- **Working@ / Drive assessments** (point 3): Remains Drive-specific, no handbook changes needed per review decision.
+
+### Verified & Resolved
+
+- **Code of Conduct vs Working@Conduction PDF** (points 2, 10): Compared `code-of-conduct.md` against the official Working@Conduction PDF (v1.0, 1.6.2025) punkt 29. Added "Conduction Workplace Agreements" section with all Conduction-specific rules from the PDF: data security awareness, no gifts > €25, reputation clause, mutual accountability. Contributor Covenant base preserved.