project.bootstrap.yaml

version: 1
project:
  name: bootstrap
  displayName: Bootstrap
  description: Manifest-first control plane for repo scaffolding, GitHub governance, and portable
    agent profiles.
  visibility: public
  owner: OMT-Global
  defaultBranch: main
repo:
  managedPaths: []
archetype:
  kind: generic-empty
  packageManager: npm
  moduleName: bootstrap
github:
  createRepo: true
  reviewers:
    - jmcte
  codeowners:
    - pattern: "*"
      owners:
        - "@jmcte"
  issueLabels:
    - name: area:frontend
      color: 1f77b4
      description: Frontend and user-interface work.
    - name: area:api
      color: 2ca02c
      description: API contracts, endpoints, and integrations.
    - name: area:data
      color: 9467bd
      description: Data models, persistence, migration, and analytics work.
    - name: area:ledger
      color: 8c564b
      description: Ledger, accounting, transaction, or reconciliation work.
    - name: area:rules
      color: bcbd22
      description: Domain rules, policy logic, and decision engines.
    - name: area:ai
      color: 17becf
      description: AI, agents, prompts, and model integration work.
    - name: area:infra
      color: 7f7f7f
      description: Infrastructure, CI, deployment, and operations work.
    - name: area:security
      color: d62728
      description: Security-sensitive implementation or hardening work.
    - name: area:accessibility
      color: e377c2
      description: Accessibility and inclusive UX work.
    - name: area:qa
      color: ff7f0e
      description: Quality assurance, test coverage, and release validation.
    - name: risk:low
      color: 0e8a16
      description: Low implementation or operational risk.
    - name: risk:medium
      color: fbca04
      description: Moderate implementation or operational risk.
    - name: risk:high
      color: d93f0b
      description: High implementation or operational risk.
    - name: risk:domain
      color: "5319e7"
      description: Domain correctness risk requiring subject-matter review.
    - name: risk:security
      color: b60205
      description: Security risk requiring explicit review.
    - name: risk:prod
      color: "000000"
      description: Production impact or rollout risk.
    - name: status:needs-spec
      color: cfd3d7
      description: Needs clearer scope, acceptance criteria, or constraints.
    - name: status:ready-for-agent
      color: 0e8a16
      description: Ready for assigned agent implementation.
    - name: status:agent-building
      color: 1d76db
      description: Agent implementation is in progress.
    - name: status:needs-review
      color: fbca04
      description: Needs review before merge or closure.
    - name: status:needs-human-approval
      color: d93f0b
      description: Needs explicit human approval before proceeding.
    - name: status:ready-to-merge
      color: 0e8a16
      description: Ready to merge after required checks pass.
    - name: status:blocked
      color: b60205
      description: Blocked by a dependency, decision, credential, or access gate.
    - name: review:product
      color: 0052cc
      description: Needs product review.
    - name: review:architecture
      color: "5319e7"
      description: Needs architecture review.
    - name: review:security
      color: b60205
      description: Needs security review.
    - name: review:tax
      color: d4c5f9
      description: Needs tax review.
    - name: review:legal
      color: c2e0c6
      description: Needs legal review.
    - name: review:accessibility
      color: e99695
      description: Needs accessibility review.
    - name: review:release
      color: f9d0c4
      description: Needs release review.
  organization:
    defaultRepositoryPermission: read
    membersCanCreateRepositories: false
    membersCanCreatePublicRepositories: false
    membersCanCreatePrivateRepositories: false
    newRepositorySecurity:
      dependabotAlerts: true
      dependabotSecurityUpdates: true
      dependencyGraph: true
      secretScanning: true
      secretScanningPushProtection: true
  autoMerge: true
  deleteBranchOnMerge: true
  requiredApprovals: 1
  requiredStatusChecks:
    - CI Gate
  dismissStaleReviews: true
  requireCodeOwnerReviews: true
  requireLastPushApproval: true
  enforceLinearHistory: true
  allowMergeCommit: true
  allowSquashMerge: true
  allowRebaseMerge: false
  repoFeatures:
    hasIssues: true
    hasProjects: false
    hasWiki: false
    hasDiscussions: false
ci:
  runnerPolicy: hybrid-safe
  nodeVersion: "20"
  pythonVersion: "3.12"
  fastChecks:
    - lint
    - typecheck
    - unit
    - build
    - secrets
  extendedChecks:
    - integration
    - release-readiness
  nightlyCron: 0 7 * * *
  additionalWorkflows: []
  dependabot:
    enabled: true
    securityUpdates: true
    versionUpdates: true
    ecosystems:
      - packageEcosystem: npm
        directory: /
        interval: weekly
        groupMinorAndPatch: true
        ignoreMajorUpdates: true
      - packageEcosystem: github-actions
        directory: /
        interval: weekly
        groupMinorAndPatch: false
        ignoreMajorUpdates: true
  aiAttestation:
    enabled: true
    artifactName: ai-attestation
    retentionDays: 90
    provider: unknown
    model: unknown
    promptHash: unknown
    reusableWorkflowRepo: OMT-Global/bootstrap
    reusableWorkflowRef: refs/heads/main
release:
  enabled: true
  maturity: governed
  tagPrefix: v
  createGitHubRelease: true
  updateMajorTag: true
  updateMinorTag: true
  reusableWorkflowRepo: OMT-Global/bootstrap
  reusableWorkflowRef: refs/heads/main
agents:
  manageCodexHome: true
  codexProfile: default
  sharedSkills: []
environments:
  dev:
    reviewers: []
    requireApproval: false
    preventSelfReview: false
    branches: []
  stage:
    reviewers:
      - jmcte
    requireApproval: true
    preventSelfReview: true
    branches: []
  prod:
    reviewers:
      - jmcte
    requireApproval: true
    preventSelfReview: true
    branches:
      - main