code-zero/.code-zero.example.yml at main · wolfstar-project/code-zero · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
version: 1

# observe and suggest can never write. fix and autonomous also require autofix.enabled below.
mode: observe

# Inspect pull-request diffs when authenticated pull_request webhooks arrive. The configured mode
# above controls whether the run reports only or requests autofix authority.
proactive:
  enabled: false

# Turn scoped GitHub issues into verified pull requests. Opt-in twice: enable it here and label
# the issue with requireLabel. Verified changes are published on a fresh branchPrefix branch and
# opened as a pull request carrying acceptance criteria and evidence; the default branch is never
# committed to.
issues:
  enabled: false
  requireLabel: code-zero
  branchPrefix: code-zero/
  # Report the validation verdict back on the issue as a comment: confirmed with evidence, not
  # confirmed with the rejection reasons, or inconclusive for a human. Report-only.
  validationComment: true

# Commands used to verify a change. Leave empty to discover this repository's own
# lint, typecheck, test, and build scripts. Commands run without a shell, so
# operators such as &&, |, ;, and $() are rejected.
checks: []

autofix:
  enabled: false
  # Confidence required before Code Zero may change files.
  minConfidence: 0.85
  # mechanical is the conservative default. behavioral may be added explicitly; high-impact
  # changes always require human approval and cannot be enabled here.
  allowedChangeRisks:
    - mechanical
  # Proactive and autonomous writes require a runner that can prove isolation.
  requireIsolated: true

# How a reviewer's claim is checked against the repository before it is acted on.
validation:
  # Below this confidence a supported claim is reported as inconclusive, never fixed.
  minConfidence: 0.6
  requireEvidence: true
  requireKnownFiles: true
  verifyQuotedEvidence: true

agent:
  # Repair attempts before a run stops and asks for a human.
  maxAttempts: 3
  timeoutMs: 1800000
  # Upper bound on files a single narrow fix may touch.
  maxChangedFiles: 10

permissions:
  # none, restricted, or full. Enforced by the container runner.
  network: restricted

runner:
  # local runs commands on the host and is for trusted development only.
  # container is required for production; set an image to enable it.
  isolation: local
  engine: docker
  # image: node:22-bookworm-slim
  workdir: /workspace
  # cpus: '2'
  # memory: 4g
  # Pre-provisioned network used when permissions.network is restricted.
  # network: code-zero
  maxOutputBytes: 200000

model:
  # ai-gateway, anthropic, google, openai, or openai-compatible.
  # Credentials are read only from the provider's documented environment variable; they are
  # never accepted from repository configuration or persisted with task evidence.
  #
  # claude-code and codex-cli spend a Claude Pro/Max or ChatGPT Plus/Pro subscription through the
  # vendor CLI installed on the host. They take no credential and stay off until the operator sets
  # CODE_ZERO_ENABLE_CLAUDE_CODE_PROVIDER or CODE_ZERO_ENABLE_CODEX_CLI_PROVIDER to true, because
  # the session is bound to one host and one personal account.
  provider: openai-compatible
  name: gpt-5
  # Optional explicit pricing enables deterministic cost accounting.
  # inputCostPerMillionTokens: 1.25
  # outputCostPerMillionTokens: 10