This repository is part of the AutoGov project. Review and merge authority is
held by @liatrio/tag-autogov (see CODEOWNERS), which currently
resolves to a single maintainer — see the review model below.
| Maintainer | GitHub | Role |
|---|---|---|
| Ian Hundere | @ianhundere | Lead maintainer |
This project is currently maintained by a single maintainer, so
@liatrio/tag-autogov effectively resolves to one person. Genuine two-party
review (SLSA Source L4) requires two trusted persons per change and is not
met today — it is aspirational until the project gains community co-maintainers.
The continuously enforced technical controls (branch protection, signed commits,
linear/retained history, required status checks) earn an honest SLSA Source
L3. AI-assisted review is used as tooling, not counted as a second review
party. Source-review attestations are produced as best-effort evidence; the
project's own releases are not gated on a human approval that did not
independently happen.
See the autogov repository for the project overview and contribution guidelines.