From 532347fcda9fcb60aa6f87078f8eec8fc8d7812e Mon Sep 17 00:00:00 2001 From: Sacha Al Himdani Date: Tue, 17 Mar 2026 15:39:50 +0100 Subject: [PATCH] Add commit signing and authorship rules Signed-off-by: Sacha Al Himdani --- contrib/claude/commit.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/contrib/claude/commit.md b/contrib/claude/commit.md index be18efdd5..1a1585433 100644 --- a/contrib/claude/commit.md +++ b/contrib/claude/commit.md @@ -26,3 +26,12 @@ Not every commit needs a body -- a single line is fine when the change is self-e ``` Fix typo in vendor assessment prompt ``` + +## Signing and Authorship + +All commits **must** be signed (`-s -S`): + +- `-s` adds a `Signed-off-by` trailer (DCO). +- `-S` creates a GPG/SSH signature. + +The commit author must be the **human responsible for the change**, not the AI assistant. Do **not** add `Co-Authored-By` trailers crediting bots.