From 6614e87d61b2162eabe12df6a281871ce48db4bc Mon Sep 17 00:00:00 2001 From: anandgupta42 Date: Thu, 11 Jun 2026 16:14:37 -0700 Subject: [PATCH] =?UTF-8?q?chore:=20adopt=20receipts=20=E2=80=94=20zero-in?= =?UTF-8?q?stall=20agent-work=20verification?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .claude/.gitignore | 3 +++ .claude/settings.json | 15 +++++++++++++++ .codex/hooks.json | 15 +++++++++++++++ .github/workflows/receipts.yml | 26 ++++++++++++++++++++++++++ .receipts/.gitattributes | 1 + 5 files changed, 60 insertions(+) create mode 100644 .claude/.gitignore create mode 100644 .claude/settings.json create mode 100644 .codex/hooks.json create mode 100644 .github/workflows/receipts.yml create mode 100644 .receipts/.gitattributes diff --git a/.claude/.gitignore b/.claude/.gitignore new file mode 100644 index 0000000..4d2f405 --- /dev/null +++ b/.claude/.gitignore @@ -0,0 +1,3 @@ +* +!settings.json +!.gitignore diff --git a/.claude/settings.json b/.claude/settings.json new file mode 100644 index 0000000..3547cec --- /dev/null +++ b/.claude/settings.json @@ -0,0 +1,15 @@ +{ + "hooks": { + "PreToolUse": [ + { + "matcher": "Bash", + "hooks": [ + { + "type": "command", + "command": "npx -y altimate-receipts@latest hook pre-push" + } + ] + } + ] + } +} diff --git a/.codex/hooks.json b/.codex/hooks.json new file mode 100644 index 0000000..7bfa2db --- /dev/null +++ b/.codex/hooks.json @@ -0,0 +1,15 @@ +{ + "hooks": { + "PreToolUse": [ + { + "matcher": "Bash", + "hooks": [ + { + "type": "command", + "command": "npx -y altimate-receipts@latest hook pre-push --agent codex" + } + ] + } + ] + } +} diff --git a/.github/workflows/receipts.yml b/.github/workflows/receipts.yml new file mode 100644 index 0000000..3a6976d --- /dev/null +++ b/.github/workflows/receipts.yml @@ -0,0 +1,26 @@ +name: Verified by Receipts + +# Deterministic "what did the coding agent actually do?" check on PRs. Quiet + non-blocking +# pilot: acts only when a branch commits an agent Receipt (.receipts/.json); +# otherwise silent. Adds a new "Receipts" check only — touches no existing workflow. +# Docs: https://github.com/AltimateAI/altimate-receipts/blob/main/docs/onboarding-internal.md + +on: + pull_request: + +permissions: + contents: read + id-token: write # Sigstore keyless signing of the receipt + attestations: write # record the attestation + pull-requests: write # post the Receipts comment + checks: write # post the Receipts check + +jobs: + receipts: + # Tracks the v0 major tag (auto-gets minor/patch features). Pin a full version + # (e.g. @v0.6.1) or a commit SHA for immutability. + uses: AltimateAI/altimate-receipts/.github/workflows/receipts.reusable.yml@v0 + with: + require-receipt: false # never fail a PR that has no receipt (soft pilot) + notify-when-missing: false # stay silent unless a receipt is present + # block-on: "" # informational check; never blocks a merge diff --git a/.receipts/.gitattributes b/.receipts/.gitattributes new file mode 100644 index 0000000..aae64e2 --- /dev/null +++ b/.receipts/.gitattributes @@ -0,0 +1 @@ +* linguist-generated