Never author identity fields

majordomus://rule/project.never-author-identity@1active recordsgit

Rationale

A record that names a commit looks checkable; one whose commit was typed is not, and cannot be told apart later.

Required behaviour

repository_id, branch, head, working_tree and changed_files on any record are computed from git and never written by hand.

Failure behaviour

No command decides this rule; a reviewer does, and a change that violates it is not merged. Where a behavioural case covers part of it, that case is named below.

Verification

Review. test/cases/05_handover.sh, test/cases/20_checkpoint.sh and test/cases/61_session_envelope.sh refuse an authored identity field.

Where this comes from

canonical file: .ai/repo/rules/project/never-author-identity.v1.md
identity: project.never-author-identity@1
also served as: MCP resource majordomus://rule/project.never-author-identity@1 · majordomus entity show rule/project-never-author-identity-1 · GET /api/v1/entity?uri=majordomus://rule/project.never-author-identity@1
in the Cockpit: /cockpit/objects/rule/project-never-author-identity-1

This page is generated from the file above by scripts/generate-site-data; editing the page changes nothing, editing the file changes every surface. The relations above are edges of docs/generated/graph.json, which the executable writes from the same index.