Status: Repository governance process Date: February 13, 2026
This file defines how changes are proposed, reviewed, and accepted so project governance in the repository matches project governance in the specification.
All changes fall into one of three classes:
- Constitutional changes:
- Changes to trust rules, voting rules, governance thresholds, or constitutional authority boundaries.
- Operational changes:
- Changes to workflows, review topology, evidence schema, incident handling, or system controls.
- Documentation changes:
- Clarifications, examples, and non-constitutional wording updates.
Every pull request must include:
- Change summary in plain language.
- Risk impact statement:
- what new risk is introduced,
- what risk is reduced,
- what remains unresolved.
- Invariant impact statement:
- list affected invariants from
tools/check_invariants.py.
- Test/evidence statement:
- what was validated,
- what was not validated,
- why.
- Validation command output:
python3 tools/check_invariants.pypython3 tools/verify_examples.py
- Constitutional changes:
- Must update
TRUST_CONSTITUTION.mddirectly. - Must update the parameter matrix and design tests where relevant.
- Must include explicit migration/rollback logic.
- Must include calibration impact summary for affected thresholds.
- Operational changes:
- Must update
docs/TECHNICAL_OVERVIEW.mdif behavior changes. - Must include fail-closed behavior notes.
- Must update
config/runtime_policy.jsonwhen risk-tier mapping behavior changes.
- Documentation changes:
- Must not contradict constitutional and technical documents.
- Must avoid absolute claims ("bulletproof", "impossible", "guaranteed truth").
- Use measured language.
- Distinguish evidence from inference.
- Do not present mitigations as guarantees.
- Keep human constitutional authority explicit where relevant.
A contribution must be rejected if it:
- enables machine constitutional voting directly or indirectly,
- allows trust minting without quality-gated proof-of-trust evidence,
- weakens or bypasses quarantine/re-certification/decommission controls,
- introduces governance changes without constitutional traceability,
- adds hype claims not backed by enforceable controls.