Skip to content

Commit a8f757d

Browse files
[STYLE] Improved style of new AI policy slightly (- WIP #367 -)
Changes in file .github/AI_USAGE_POLICY.md: * removed extra comma * added note to better clearify 4.3.A * fixed large PR threshold at more than 99 changed files for consistancy * realated work
1 parent 5be3472 commit a8f757d

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

.github/AI_USAGE_POLICY.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@ integrity.
7878
### 3.3 Large PR Handling
7979

8080
* 3.3.A Less is More
81-
* PRs with more than 100 changed files should be split into smaller PRs when possible.
81+
* PRs with more than 99 changed files should be split into smaller PRs when possible.
8282
* When splitting is not feasible, PR authors must provide a summary highlighting the most
8383
critical changes for human reviewers.
8484

@@ -116,9 +116,15 @@ integrity.
116116
* The project implements a dual-approval system to help prevent single points of failure.
117117
* AI approvals are tracked separately from human approvals in the review process. Humans
118118
must be responsible for the actual merge of pull-requests.
119-
* Every user (e.g., AI, or human) must have a distinct code-signing identity (see 4.1.B).
119+
* Every user (e.g., AI or human) must have a distinct code-signing identity (see 4.1.B).
120120
* Only human controlled identities may merge branches, or commit to the default branch directly.
121121

122+
> [!NOTE]
123+
> Historicly @dependabot (a simple bot, not a LLM-based AI) had been allowed to merge to the
124+
> default branch; this policy considers such actions in the past to now be violations of § 4.3.A
125+
> because the code-signing identity was not controlled by a human. Fortunately these changes had
126+
> been limited to improving supply-chain security and required approval from the project admin.
127+
122128
## 5. Implementation and Compliance
123129

124130
### 5.1 Configuration Management

0 commit comments

Comments
 (0)