codeprobe/docs/zero-code-access/kit-contract.json at main · sourcegraph/codeprobe · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
{
  "schema_version": "codeprobe.zero-code-access.operator-kit.v1",
  "contract_id": "codeprobe.zero-code-access.operator.v1",
  "data_owner_time_budget_minutes": {
    "asynchronous_intake_maximum": 10,
    "structured_session_maximum": 45
  },
  "security_or_platform_followup": "optional",
  "minimum_paired_distinct_tasks": 10,
  "minimum_repeats_per_task_and_configuration": 3,
  "same_task_set_required": true,
  "sample_locked_before_results": true,
  "external_execution_owner": "data_owner_technical_owner",
  "provider_repository_access": "prohibited",
  "allowed_conclusions": [
    "advance_a",
    "advance_b",
    "insufficient_evidence"
  ],
  "prohibited_outbound_data": [
    "source",
    "repository_identifiers",
    "paths",
    "prompts",
    "patches",
    "traces",
    "task_level_results",
    "raw_results",
    "logs",
    "diagnostics"
  ],
  "approved_export_artifacts": [
    "run-manifest.json",
    "sample-attestation.json",
    "aggregate-results.json",
    "findings.md",
    "support-log.json"
  ],
  "roles": {
    "provider_support": "methodology_coordination_and_bounded_findings",
    "data_owner_technical_owner": "execution_data_approval_and_signoff",
    "provider_engineering": "internal_defect_repair_only"
  }
}