# Copy to .aiwg/bt6-maintainer.yaml and replace the example values.
version: "1"
project:
  id: "bt6-example"
  displayName: "BT6 Example"
  family: "research-tool" # research-tool | support-tool | knowledge-tool | application | library | service | data-pipeline | automation | infrastructure | mixed
repository:
  canonicalRemote: "origin"
  baseBranch: "main"
  expectedSlug: "bt6/example"
  ciRemote: "origin"
tracker:
  authorityRemote: "origin"
  provider: "auto" # github | gitea | local | auto
  expectedActor: "maintainer"
delivery:
  requireCiGreen: true
  requireCurrentHead: true
  defaultMergeMethod: "squash"
  allowedMergeMethods: ["squash"]
validation:
  # Fast core-system checks required on pull requests.
  quick:
    - "<targeted check>"
  # Exhaustive certification checks required when validating a tagged release.
  full:
    - "<full test command>"
  # These values restate shared BT6 defaults and cannot be weakened per repository.
  qualityPolicy:
    pullRequestChangedLineCoverageFloor: 50
    requireBehaviorTests: true
    fullSuiteTrigger: "release-readiness-and-tagged-validation"
  documentation:
    - "<docs/link/citation check>"
  researchIntegrity:
    - "<provenance/corpus/reproducibility check>"
releaseEvidence:
  artifactType: "source-zip"
  hashAlgorithm: "sha256"
  provenanceFormat: "slsa-v1"
  attestationFormat: "in-toto"
  signingMode: "sigstore-keyless"
  sbomFormat: "cyclonedx"
  snapshotOnce: true
  verifyBeforePromotion: true
riskSurfaces:
  - id: "ingestion"
    paths: ["<ingestion or parser paths>"]
    concerns: ["untrusted-source-content", "parser-correctness", "provenance"]
    requiredChecks: ["<ingestion fixture test>"]
  - id: "provider-boundary"
    paths: ["<model/provider/API paths>"]
    concerns: ["secret-handling", "local-vs-hosted-routing", "quota-and-cost"]
    requiredChecks: ["<provider contract test>"]
research:
  corpusPaths: ["<corpus paths>"]
  evidencePaths: ["<evidence/provenance paths>"]
  provenanceRequired: true
  citationVerificationRequired: true
security:
  disclosureUrl: "https://example.invalid/security"
  sensitiveDataPaths: ["<sensitive-data paths>"]
  mutationRequiresExplicitApproval: true
support:
  requiredEnvironmentFields: ["version", "operating-system", "runtime", "provider", "reproduction"]
  translationPolicy: "validated-only"
