Repository navigation
docs: add an AI contribution policy - #278
Conversation
Add AI_POLICY.md, based on the AI Allowed policy 1.0.0: AI may be used for any contribution, contributors must understand what they submit, and disclosing AI usage is a courtesy rather than a requirement. The contributing guide and the pull request template now point to it instead of the old AI ground rules. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016cicF2RTpqGSLXDsGJHiby
The change touches no package, so nothing is released. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016cicF2RTpqGSLXDsGJHiby
|
Note The title starts with
|
There was a problem hiding this comment.
ℹ️ No critical issues — one small cleanup on the PR description.
Reviewed changes
Reviewed all 6 changed files in full. Every link and anchor resolves (AI_POLICY.md#disclosure, .github/SECURITY.md, ../AI_POLICY.md from .github/), and no stale references to the old CONTRIBUTING.md#ai-assisted-contributions disclosure definition remain in the repo outside changelogs.
AI_POLICY.md— new policy that allows AI for all contribution types, requires understanding of every change, makes disclosure a courtesy, and keeps the disclosure line mandatory for autonomous agents..github/CONTRIBUTING.mdand PR template — the AI section is shortened to a summary and a link, and the template comment points to the policy.AGENTS.mdandimplement-issueskill — the disclosure rule now points toAI_POLICY.md#disclosure, with the agent obligation unchanged..changeset/ai-contribution-policy.md— empty changeset, so no release.
ℹ️ PR description carries a second AI attribution after the disclosure line
The PR body ends with the disclosure line followed by --- and _Generated by [Claude Code](https://claude.ai/code/session_…)_. AGENTS.md (line 79, retained by this PR) and the new AI_POLICY.md both say the disclosure line is the only AI attribution a body may carry, with nothing after it. This PR should follow the rule it introduces.
Technical details
# Remove the default tool footer from the PR body
## Affected sites
- PR #278 description — trailing `---` and `_Generated by Claude Code_` session link after the `🤖 AI disclosure` line.
## Required outcome
- The body ends with exactly one disclosure line and nothing after it.claude-sonnet-5-5 | 𝕏
AI_POLICY.md said to report vulnerabilities "not through a public issue", but SECURITY.md allows the issue tracker for vulnerabilities users cannot exploit. Point to SECURITY.md for the channel and keep only the AI service rule. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016cicF2RTpqGSLXDsGJHiby
@wolfstar/plugin-api
@wolfstar/plugin-broker
@wolfstar/plugin-cache
@wolfstar/plugin-gateway
@wolfstar/plugin-i18next
@wolfstar/plugin-logger
@wolfstar/plugin-opentelemetry
@wolfstar/plugin-scheduled-tasks
@wolfstar/plugin-sharder
@wolfstar/plugin-subcommands-advanced
commit: |
There was a problem hiding this comment.
✅ No new issues found.
Reviewed changes
Reviewed the one commit pushed since the prior pullfrog review.
AI_POLICY.mdsecrets section — reworded vulnerability reporting to defer to.github/SECURITY.mdwithout restating how to report; the link still resolves.- PR description — the earlier concern is resolved: the body now ends with the single disclosure line and no second attribution.
claude-sonnet-5-5 | 𝕏

🔗 Linked issue
None.
🧭 Context
Each wolfstar-project repository handled AI contributions its own way; here the contributing guide made a disclosure line mandatory for everyone. This gives every repository the same policy, built on the AI Allowed policy 1.0.0 and on the direction Eden took when it replaced its long AI policy with a short, permissive rule (eden-nx2@a2aa4d9).
📚 Description
AI_POLICY.mdallows AI for any kind of contribution. Contributors must understand what they submit, and maintainers may close or rework a PR whose author does not. The policy also asks to keep secrets and unreported vulnerabilities out of AI services, and treats bulk automated submissions as spam.This relaxes one rule: disclosing AI usage becomes a courtesy for people instead of a requirement. It stays mandatory for agents through
AGENTS.md, with the same disclosure line as before.Key changes
AI_POLICY.md, which now defines the disclosure line..github/CONTRIBUTING.md: "AI-assisted contributions" shortened to a summary and a link (same anchor).AGENTS.mdand theimplement-issueskill: refer toAI_POLICY.md#disclosure..github/PULL_REQUEST_TEMPLATE.md: the AI comment points to the policy instead of asking for hand-written text.Type of Change
Pre-flight Checklist
pnpm changeset(orpnpm changeset add --emptyif no release is needed). See .changeset/README.md.Markdown only, no code. Dependencies were not installed, so
pnpm lintwas not run.