From 41e4e2d79416bf4f0584f9c5cab07c3d3c7a24f2 Mon Sep 17 00:00:00 2001
From: "user.email" <sawyer@dirtroad.dev>
Date: Fri, 30 Oct 2026 12:20:19 -0700
Subject: [PATCH 1/2] ci(policy): add convention checks without code review

---
 .corbits-triage.yml | 125 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 125 insertions(+)
 create mode 100644 .corbits-triage.yml

diff --git a/.corbits-triage.yml b/.corbits-triage.yml
new file mode 100644
index 000000000..9f6e7dda5
--- /dev/null
+++ b/.corbits-triage.yml
@@ -0,0 +1,125 @@
+# Corbits Triage policy.
+rules:
+  - check: max-files-changed
+    text: Flag pull requests over 30 files changed.
+    max: 30
+    onFail: label
+    reason: A large change is a risk signal, not a hold.
+    evidence:
+      - maintainer-stated
+  - check: max-lines-changed
+    text: Flag pull requests over 5,000 lines changed.
+    max: 5000
+    onFail: label
+    reason: A large change is a risk signal, not a hold.
+    evidence:
+      - maintainer-stated
+  - check: no-merge-conflicts
+    text: Flag merge conflicts with the base branch.
+    reason: A pull request with conflicts cannot be merged as it is.
+    evidence:
+      - maintainer-stated
+  - check: ci-green
+    text: CI must pass before merge.
+    reason: A change is not ready until CI passes.
+    evidence:
+      - maintainer-stated
+  - check: conventional-commits
+    text: Titles and commits follow Conventional Commits.
+    reason: Titles and commits use the conventional form.
+    evidence:
+      - maintainer-stated
+  - check: hidden-content
+    text: Flag text hidden in the pull request.
+    reason: Hidden text can steer a review.
+    evidence:
+      - maintainer-stated
+  - check: no-duplicate
+    text: Flag a pull request whose diff or commits match another open one.
+    reason: Two pull requests for the same change waste a review.
+    evidence:
+      - maintainer-stated
+  - check: sensitive-paths
+    text: Route schema, auth, CI and lockfile changes to a person.
+    reason: Those changes reach beyond what the diff shows.
+    evidence:
+      - maintainer-stated
+  - check: no-forbidden-paths
+    text: Never accept changes to node_modules/**.
+    paths:
+      - node_modules/**
+    reason: Dependencies are not edited by hand.
+    evidence:
+      - maintainer-stated
+  - id: no-ai-attribution
+    check: text
+    text: Titles, descriptions and commits carry no AI attribution.
+    fields: [title, description, commits]
+    failWhen: contains
+    phrases:
+      - "Co-Authored-By:"
+      - "Claude-Session:"
+      - "claude.ai/code/session"
+      - "noreply@anthropic.com"
+      - "Generated with Claude"
+      - "Generated with [Claude"
+    onFail: label
+    reason: No AI co-author lines, session trailers, or generated-with footers.
+    evidence:
+      - maintainer-stated
+  - id: conventions
+    check: code-patterns
+    text: Added code follows the repository's conventions.
+    presets:
+      - convention
+    onFail: label
+    reason: No invented fallbacks, nested ternaries, immediately invoked functions, promise chains, empty catches, or suppression comments.
+    evidence:
+      - maintainer-stated
+  - id: no-process-env-in-tests
+    check: code-patterns
+    text: Tests do not read process.env.
+    onFail: label
+    reason: A test must not depend on the environment.
+    evidence:
+      - maintainer-stated
+    patterns:
+      - id: no-process-env-in-tests
+        language: typescript
+        message: Reads process.env in a test.
+        files: ["**/*.test.ts", "**/*.test.tsx", "**/*.test.js", "**/*.test.jsx", "**/*.test.mjs", "**/*.test.cjs"]
+        rule:
+          pattern: process.env
+      - id: no-process-env-in-tests
+        language: javascript
+        message: Reads process.env in a test.
+        files: ["**/*.test.ts", "**/*.test.tsx", "**/*.test.js", "**/*.test.jsx", "**/*.test.mjs", "**/*.test.cjs"]
+        rule:
+          pattern: process.env
+actions:
+  pass:
+    - do: approve
+      when:
+        author:
+          - users:
+              - thegreataxios
+              - brianjfox
+    - do: request-review
+      target:
+        to: users
+        users:
+          - thegreataxios
+      when:
+        author:
+          - external
+  fail:
+    - do: request-changes
+  unsure:
+    - do: assign
+      target:
+        to: users
+        users:
+          - thegreataxios
+      when:
+        author:
+          - maintainers

From d1696fd361c803b963101be342fc1bb349f347c7 Mon Sep 17 00:00:00 2001
From: Sawyer Cutler <sawyer@dirtroad.dev>
Date: Sat, 31 Oct 2026 16:27:33 -0700
Subject: [PATCH 2/2] style: format .corbits-triage.yml

---
 .corbits-triage.yml | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/.corbits-triage.yml b/.corbits-triage.yml
index 9f6e7dda5..5dd0d1f69 100644
--- a/.corbits-triage.yml
+++ b/.corbits-triage.yml
@@ -87,13 +87,29 @@ rules:
       - id: no-process-env-in-tests
         language: typescript
         message: Reads process.env in a test.
-        files: ["**/*.test.ts", "**/*.test.tsx", "**/*.test.js", "**/*.test.jsx", "**/*.test.mjs", "**/*.test.cjs"]
+        files:
+          [
+            "**/*.test.ts",
+            "**/*.test.tsx",
+            "**/*.test.js",
+            "**/*.test.jsx",
+            "**/*.test.mjs",
+            "**/*.test.cjs",
+          ]
         rule:
           pattern: process.env
       - id: no-process-env-in-tests
         language: javascript
         message: Reads process.env in a test.
-        files: ["**/*.test.ts", "**/*.test.tsx", "**/*.test.js", "**/*.test.jsx", "**/*.test.mjs", "**/*.test.cjs"]
+        files:
+          [
+            "**/*.test.ts",
+            "**/*.test.tsx",
+            "**/*.test.js",
+            "**/*.test.jsx",
+            "**/*.test.mjs",
+            "**/*.test.cjs",
+          ]
         rule:
           pattern: process.env
 actions: