covenant.yml

Covenant.yml introduces a robust policy standard for managing contributions within software repositories, ensuring deterministic evaluation for both human developers and automated agents. It operates on core principles defining clear, enforceable rules: * Deterministic evaluation, eliminating hidden defaults * Single canonical file location: `/covenant.yml` * Strict outcomes: `allow`, `warn`, or `deny` * Programmatic provenance and attestation requirements This standard functions as a `robots.txt` for codebases, providing a transparent and verifiable mechanism to control interactions. It specifies canonical actions across various actor types, from opening issues and commenting to submitting pull requests and managing reviews. Policies can be crafted to define prerequisites like specific templates, labels, or attestations, ensuring every contribution adheres to predefined project governance. The system is built for clarity and enforcement, allowing project managers to set precise expectations for branch checks, ruleset evaluations, and even human-only approval gates. It addresses key aspects like re-attestation for pull request updates and establishing reviewer policies. Covenant.yml ensures strict control over how updates, reviews, and merges are handled, promoting consistency and security in development workflows. Ideal for engineering teams, open-source projects, and organizations requiring stringent code governance, Covenant.yml helps maintain high standards for all contributions, whether from individuals or automated systems. It fosters a controlled, predictable development environment, reducing ambiguities and enforcing best practices.