From 68c865b1cc7457b3e00442b4bfaaec8d33af6fd0 Mon Sep 17 00:00:00 2001 From: Zack Whitson Date: Fri, 7 Aug 2026 10:11:44 -0500 Subject: [PATCH] Say plainly that this repo is a generated mirror A newcomer landing here cannot tell that packages/ and pnpm-lock.yaml are copied from the monorepo by the release train, so a hand edit here looks reasonable and is silently overwritten by the next release. Name that at the top, and point contributions at the monorepo, while noting the workflows and release tags are genuinely owned here. --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 7cc7c11..0814f2d 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,13 @@ The deterministic first-pass verification gate for AI-written code. +> **This repository is a generated mirror.** Development happens in the private +> CodeTruss monorepo. The `packages/` tree and `pnpm-lock.yaml` here are copied +> from it verbatim by the release train, so hand edits to those are overwritten by +> the next release. Please open pull requests and issues against the monorepo +> instead. This repository does own its `.github/workflows/`, its release tags, and +> the attestations published from them, so changes to those belong here. + An agent finishes a change. Something has to look at it before a human does. CodeTruss Boundary is that first pass: it captures an exact before/after Git evidence pair, checks the change against the task contract you declared, runs 15