.github/maintainer/policy.json

{
  "schema": "opstruth.maintainer-policy",
  "schemaVersion": "1.0.0",
  "botVersion": "0",
  "authority": {
    "contents": "read",
    "pullRequests": "metadata-only",
    "comments": "none",
    "labels": "none",
    "merge": "none"
  },
  "protectedFiles": [
    "AGENTS.md",
    "SECURITY.md",
    "package.json",
    "wrangler.jsonc",
    ".github/CODEOWNERS",
    ".github/maintainer/policy.json",
    "test/governance.test.js"
  ],
  "protectedPrefixes": [
    ".github/workflows/",
    "contracts/",
    "governance/",
    "schemas/",
    "docs/architecture/",
    "docs/adr/",
    "scripts/check-boundaries.mjs",
    "scripts/generate-signing-key.mjs",
    "scripts/maintainer-review.mjs",
    "scripts/validate-contracts.mjs",
    "scripts/generate-contract-vectors.mjs",
    "scripts/verify-vectors-standalone.mjs",
    "src/canonical.js",
    "src/evidence-graph.js",
    "src/post-execution.js",
    "src/protocol.js",
    "src/schema-validation.js",
    "test/architecture-boundary.test.js",
    "test/contracts.test.js",
    "test/maintainer-review.test.js"
  ],
  "authoritySensitivePrefixes": [
    "src/tools.js",
    "src/github.js",
    "src/deployment.js",
    "src/receipt.js",
    "src/sandbox.js",
    "src/worker.js",
    "skills/",
    ".github/",
    "contracts/",
    "governance/",
    "schemas/",
    "src/canonical.js",
    "src/evidence-graph.js",
    "src/post-execution.js",
    "src/protocol.js",
    "src/schema-validation.js"
  ],
  "minorImpactPrefixes": [
    "src/tools.js",
    "skills/",
    "contracts/",
    "schemas/"
  ],
  "patchImpactPrefixes": [
    "src/",
    "test/",
    "scripts/",
    "benchmarks/",
    "evals/",
    "worker-ui/"
  ]
}