nw-authoritative-sources

Authoritative Sources

Domain Authority Database

Supplements general reputation tiers in source-verification with domain-specific authorities.

Software Architecture

| Source | Authority | Notes |

|--------|-----------|-------|

| martinfowler.com | Primary | Patterns, refactoring, enterprise architecture |

| c2.com/wiki | Historical | Original wiki; pattern language origins |

| microservices.io | Domain-specific | Chris Richardson's microservices patterns |

| architecturenotes.co | Curated | ADRs and trade-off analysis |

| infoq.com | Industry reporting | Conference talks, practitioner reports |

| thoughtworks.com/radar | Trend tracking | Technology Radar adoption lifecycle |

Cloud Platforms

| Source | Authority | Notes |

|--------|-----------|-------|

| docs.aws.amazon.com | Official | AWS, well-architected framework |

| cloud.google.com/docs | Official | GCP services and practices |

| learn.microsoft.com | Official | Azure, .NET, Microsoft ecosystem |

| kubernetes.io/docs | Official | Container orchestration |

| docs.docker.com | Official | Container runtime |

Security

| Source | Authority | Notes |

|--------|-----------|-------|

| owasp.org | Standards body | Web app security, top-10 |

| nist.gov | Government | NIST CSF, SP 800 series |

| cve.mitre.org | Vuln database | CVE identifiers |

| nvd.nist.gov | Vuln database | NVD with scoring |

| csrc.nist.gov | Crypto standards | FIPS, module validation |

| cisa.gov | Government advisory | Security advisories |

Standards Bodies

| Source | Authority | Notes |

|--------|-----------|-------|

| ietf.org / datatracker.ietf.org | Protocol standards | RFCs: networking, HTTP, TLS, DNS |

| w3.org | Web standards | HTML, CSS, WCAG, web APIs |

| iso.org | International | Quality, security, process frameworks |

| ecma-international.org | Language standards | ECMAScript spec |

| unicode.org | Character standards | Unicode encoding |

Programming Languages and Frameworks

| Source | Authority | Notes |

|--------|-----------|-------|

| docs.python.org | Official | Python, stdlib, PEPs |

| go.dev/doc | Official | Go language, stdlib |

| typescriptlang.org | Official | TypeScript handbook |

| rust-lang.org/learn | Official | Rust book, reference |

| developer.mozilla.org (MDN) | Canonical web ref | JS, HTML, CSS, Web APIs |

| docs.oracle.com/javase | Official | Java spec, API docs |

Data and Databases

| Source | Authority | Notes |

|--------|-----------|-------|

| postgresql.org/docs | Official | PostgreSQL |

| dev.mysql.com/doc | Official | MySQL |

| redis.io/docs | Official | Redis |

| mongodb.com/docs | Official | MongoDB |

| cassandra.apache.org/doc | Official | Cassandra |

DevOps and SRE

| Source | Authority | Notes |

|--------|-----------|-------|

| sre.google | Industry | Google SRE books |

| 12factor.net | Methodology | Twelve-factor app |

| dora.dev | Research | DORA metrics |

| openpolicyagent.org | Policy-as-code | OPA docs |

Domain-Specific Search Strategies

Architecture Topics

1. Canonical authors: {topic} site:martinfowler.com or site:microservices.io
2. Conference talks: {topic} QCon OR StrangeLoop OR GOTO conference
3. Books/papers: {topic} book OR paper architecture
4. Adoption status: {topic} site:thoughtworks.com/radar
5. Local docs: Grep in docs/research/ and nWave/skills/

Security Topics

1. Vuln databases: {topic} site:cve.mitre.org or site:nvd.nist.gov
2. Advisories: {topic} site:cisa.gov or site:owasp.org
3. NIST frameworks: {topic} site:nist.gov
4. Vendor advisories if product-specific
5. Prioritize last 6 months

Framework and Library Topics

1. Official docs (see database above)
2. Release notes/changelogs for version-specific info
3. Migration guides: {framework} migration guide {version}
4. GitHub issues/discussions for known problems
5. Stack Overflow: {topic} site:stackoverflow.com

Methodology and Process Topics

1. Original author/publication
2. Case studies: {methodology} case study OR experience report
3. Critiques: {methodology} criticism OR alternative OR comparison
4. Academic: {topic} site:arxiv.org or Google Scholar
5. Practitioner adaptations vs original definitions

Source Freshness Rules

| Category | Max Age | Rationale |

|----------|---------|-----------|

| Security vulnerabilities | 6 months | Rapid threat evolution |

| Framework versions | 1 year | API/practice changes |

| Cloud service docs | 1 year | Frequent deprecation/launch |

| API references | 1 year | Breaking changes common |

| Architecture patterns | Evergreen | Core patterns stable |

| Methodology references | Evergreen | Foundational works stable |

| Language specs | Evergreen per version | Per-version permanent |

| Research papers | 3 years | Check for follow-up work |

| Industry trend reports | 1 year | Cite current edition only |

Handling Outdated Sources

1. Check if newer version exists
2. Stable concept: cite with "[Published {year}; concept remains current]"
3. Time-sensitive: find current source or document age limitation in Knowledge Gaps
4. Never cite outdated security advisories as current threat intelligence