Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/pull_request_template.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
## Agentic Git Evidence
## Evident Evidence

- [ ] Evidence envelope generated
- [ ] Evidence envelope validated
Expand All @@ -11,7 +11,7 @@ Evidence summary:

```json
{
"schemaVersion": "agentic-git-evidence/v0.1",
"schemaVersion": "evident-evidence/v0.1",
"runId": "",
"baseRef": "",
"headRef": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: Agentic Git Evidence
name: Evident Evidence

on:
pull_request:
Expand All @@ -8,7 +8,7 @@ on:
evidence_path:
description: Path to the evidence envelope.
required: false
default: agentic-pr-evidence.json
default: evident-pr-evidence.json
type: string
validation_command:
description: Command to run before writing evidence.
Expand All @@ -21,18 +21,18 @@ permissions:

jobs:
evidence:
name: Agentic evidence
name: Evident evidence
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v5
with:
fetch-depth: 0

- name: Setup Node
uses: actions/setup-node@v4
with:
node-version: "24"
node-version: "20"

- name: Optional validation command
id: validation
Expand All @@ -41,27 +41,27 @@ jobs:

- name: Write evidence envelope
if: always()
run: node scripts/write-agentic-evidence-envelope.mjs --out "${EVIDENCE_PATH}"
run: node scripts/write-evident-evidence-envelope.mjs --out "${EVIDENCE_PATH}"
env:
EVIDENCE_PATH: ${{ inputs.evidence_path || 'agentic-pr-evidence.json' }}
AGENTIC_VALIDATION_COMMAND: ${{ inputs.validation_command || '' }}
AGENTIC_VALIDATION_STATUS: ${{ steps.validation.outcome || 'skipped' }}
EVIDENCE_PATH: ${{ inputs.evidence_path || 'evident-pr-evidence.json' }}
EVIDENT_VALIDATION_COMMAND: ${{ inputs.validation_command || '' }}
EVIDENT_VALIDATION_STATUS: ${{ steps.validation.outcome || 'skipped' }}

- name: Validate evidence envelope
if: always()
run: node scripts/check-agentic-evidence-envelope.mjs --evidence "${EVIDENCE_PATH}"
run: node scripts/check-evident-evidence-envelope.mjs --evidence "${EVIDENCE_PATH}"
env:
EVIDENCE_PATH: ${{ inputs.evidence_path || 'agentic-pr-evidence.json' }}
EVIDENCE_PATH: ${{ inputs.evidence_path || 'evident-pr-evidence.json' }}

- name: Check external action policy
if: always()
run: node scripts/check-agentic-external-actions.mjs --evidence "${EVIDENCE_PATH}"
run: node scripts/check-evident-external-actions.mjs --evidence "${EVIDENCE_PATH}"
env:
EVIDENCE_PATH: ${{ inputs.evidence_path || 'agentic-pr-evidence.json' }}
EVIDENCE_PATH: ${{ inputs.evidence_path || 'evident-pr-evidence.json' }}

- name: Upload evidence artifact
if: always()
uses: actions/upload-artifact@v4
with:
name: agentic-pr-evidence
path: ${{ inputs.evidence_path || 'agentic-pr-evidence.json' }}
name: evident-pr-evidence
path: ${{ inputs.evidence_path || 'evident-pr-evidence.json' }}
68 changes: 37 additions & 31 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Contributing

## Development Principles
## Principles

Keep the workflow:

Expand All @@ -9,38 +9,41 @@ Keep the workflow:
- dependency-light
- deterministic before AI-assisted
- default-deny for external side effects
- clear about what is evidence and what is only a claim
- clear about evidence versus claims

## Local Checks

Run:
Run the full local check:

```bash
node scripts/check-agentic-evidence-envelope.mjs --evidence examples/agentic-evidence/minimal-evidence.json
node scripts/check-agentic-external-actions.mjs --evidence examples/agentic-evidence/minimal-evidence.json
node scripts/write-agentic-evidence-envelope.mjs --out /tmp/agentic-pr-evidence.json
node scripts/check-agentic-evidence-envelope.mjs --evidence /tmp/agentic-pr-evidence.json
node scripts/check-agentic-external-actions.mjs --evidence /tmp/agentic-pr-evidence.json
npm run check
```

When package scripts are available:
Generate and validate a fresh evidence packet:

```bash
bun run agentic:evidence:example:check
bun run agentic:evidence:write
bun run agentic:evidence:check
bun run agentic:external-actions:check
node scripts/write-evident-evidence-envelope.mjs --out /tmp/evident-pr-evidence.json
node scripts/check-evident-evidence-envelope.mjs --evidence /tmp/evident-pr-evidence.json
node scripts/check-evident-external-actions.mjs --evidence /tmp/evident-pr-evidence.json
```

## Pull Request Expectations
Check script syntax:

```bash
node --check scripts/check-evident-evidence-envelope.mjs
node --check scripts/check-evident-external-actions.mjs
node --check scripts/write-evident-evidence-envelope.mjs
```

## Pull Requests

Each PR should include:

- evidence envelope path
- evidence envelope path or artifact
- commands run
- check result summary
- external-action policy summary
- explicit note for any skipped checks
- skipped-check notes, if any

Do not include:

Expand All @@ -50,25 +53,28 @@ Do not include:
- provider account data
- unredacted credentials

## External Action Changes

Changes that weaken approval requirements need extra review.
## Sensitive Changes

Examples:
Ask for extra review when changing:

- marking an external action as approved by default
- removing a required action class
- allowing attempted action without approval
- hiding failed checks
- making evidence optional for agentic PRs
- required evidence fields
- required action classes
- default-deny behavior
- approval handling
- CI workflow permissions
- SARIF or security reporting

## Documentation Style

Use direct wording. Separate:
Prefer:

- short sections
- tables for comparisons
- code blocks for commands
- direct current-state wording

- current behavior
- planned behavior
- non-goals
- security boundary
Avoid:

Avoid compliance claims unless the implementation directly satisfies the referenced standard.
- compliance claims not implemented by code
- long roadmap text in the README
- burying security boundaries in prose
4 changes: 2 additions & 2 deletions NOTICE
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
Agentic Git Workflow
Evident
Copyright 2026 IntelIP

This product includes software developed for the Agentic Git Workflow project.
This product includes software developed for the Evident project.
Loading
Loading