diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index a408093..e3db39e 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -26,8 +26,8 @@ source this repository did not author. ## Review Every pull request is reviewed under `REVIEW.md` and needs one approving -review from an author who did not write it. Branch protection on -`acir-package` and `main` enforces this and the required checks. +review from an author who did not write it. Branch protection on `main` +enforces this and the required checks. ## Reporting diff --git a/REVIEW.md b/REVIEW.md index 10c01d9..de058fd 100644 --- a/REVIEW.md +++ b/REVIEW.md @@ -1,9 +1,9 @@ # Review policy -This applies to every pull request into `acir-package` and `main`, and to -every reviewer, human or automated. A review is a list of findings ranked by -severity. Approval is a separate act, by an author who did not write the -change, and branch protection requires it before a merge. +This applies to every pull request into `main`, and to every reviewer, human +or automated. A review is a list of findings ranked by severity. Approval is +a separate act, by an author who did not write the change, and branch +protection requires it before a merge. ## Three passes diff --git a/dev/PROCESS.md b/dev/PROCESS.md index 9cb19a6..0876d7c 100644 --- a/dev/PROCESS.md +++ b/dev/PROCESS.md @@ -27,7 +27,7 @@ this process applies from 2026-09-02. ## The four gates -Every pull request into `acir-package` carries these, and CI runs them again. +Every pull request into `main` carries these, and CI runs them again. 1. **Numbers.** Every fixture in `acir/inst/evidence/register.csv` at its tolerance class, and the package's stored outputs on the reference records @@ -71,7 +71,7 @@ and is a review finding in its own right. | Feedback loop before reporting done | the four gates, run locally and in CI | in use | | Continuous evaluation of agent configuration | not applicable to the repository | not used | | Review loop under a written policy | `REVIEW.md`; approval by a human author is required | in use | -| Hooks as approval gates | branch protection on `acir-package` and `main`: pull request required, one approving review, nine required checks, no force push | in use, enforced by the host | +| Hooks as approval gates | branch protection on `main`: pull request required, one approving review, ten required checks, no force push | in use, enforced by the host | | An agent inside CI/CD | not used; CI is deterministic | not used | | Control bands in maintenance | `bench.yaml` compares every run with `baseline.csv`; a breach is triaged by the authors and re-enters as an intent | in use, with a manual response | | Recurring security scans | not used; the package opens no network connection (`SECURITY.md`) | not used |