{
  "schema_version": "wheelie_community_contribution_policy/v1",
  "generated_at": "2026-05-28T00:00:00Z",
  "docs": "/docs/wheelie/community-contributions.md",
  "scope": [
    "descriptor_only_packages",
    "agent_profile_recipes",
    "example_repositories",
    "starter_apps",
    "validation_fixtures",
    "demos",
    "docs_recipes"
  ],
  "trust_labels": [
    {
      "id": "official_native",
      "support_level": "native",
      "support_state": "live",
      "claim_rule": "Name the exact supported command or workflow and link to evidence."
    },
    {
      "id": "official_preview",
      "support_level": "preview",
      "support_state": "hosted_preview",
      "claim_rule": "Say preview or allowlist; do not describe as generally available."
    },
    {
      "id": "community_reviewed_descriptor",
      "support_level": "preview",
      "support_state": "fixture_only",
      "claim_rule": "Say reviewed descriptor metadata only; do not imply executable code was audited."
    },
    {
      "id": "community_unverified",
      "support_level": "preview",
      "support_state": "requires_review",
      "claim_rule": "Say unverified and require source inspection plus dry-run receipts before use."
    },
    {
      "id": "fixture_only_demo",
      "support_level": "fixture-only",
      "support_state": "fixture_only",
      "claim_rule": "Say fixture-only; do not claim live provider access, live freshness, public pricing, or payment movement."
    },
    {
      "id": "unsupported_private_or_internal",
      "support_level": "unsupported",
      "support_state": "unsupported",
      "claim_rule": "Do not publish as a public Wheelie path."
    }
  ],
  "required_review_checks": [
    "scope_declared",
    "support_state_declared",
    "source_ref_pinned_when_consumed",
    "sha256_digest_present_when_consumed",
    "descriptor_validation_has_no_code_execution",
    "no_raw_secrets_or_private_urls",
    "authoritative_actor_source_not_spoofable",
    "unsupported_claims_removed_or_downgraded",
    "deterministic_validation_or_fixture_named",
    "dry_run_or_plan_receipt_attached",
    "maintenance_contact_and_deprecation_path_named"
  ],
  "unsupported_public_claims": [
    "arbitrary_plugin_execution_without_trust_receipts",
    "generally_available_publication_flow",
    "transitive_grants_for_all_packages",
    "private_repo_support_via_raw_provider_tokens",
    "hosted_workspace_durability_without_live_receipts",
    "fixture_only_live_provider_access",
    "fixture_only_payment_or_public_pricing",
    "descriptor_review_equals_security_audit",
    "paid_install_support",
    "provider_payment_support",
    "payment_movement_enabled"
  ],
  "safe_submission_contract": {
    "current_public_registry_submission_support_state": "requires_adapter",
    "default_mutation_mode": "dry_run_or_plan",
    "live_publish_requires": [
      "supported_command_state",
      "complete_review_checks",
      "fresh_static_or_descriptor_validation",
      "operator_or_user_apply_intent",
      "typed_operation_ref",
      "redacted_audit_receipt"
    ],
    "required_response_fields": [
      "schema_version",
      "support_state",
      "reason",
      "next_action",
      "operation_ref",
      "dry_run",
      "would_mutate_registry",
      "evidence_refs"
    ],
    "fail_closed_when": [
      "support_state_is_fixture_only",
      "support_state_is_requires_adapter",
      "evidence_missing_or_stale",
      "source_digest_missing",
      "raw_secret_or_private_url_detected",
      "private_overlay_required",
      "caller_supplied_actor_authority_detected"
    ]
  },
  "validation": {
    "recommended_markdown_check": "wheelie validation run --only markdown-hygiene --json",
    "recommended_public_claim_check": "wheelie validation run --only wheelie-public-artifact-audit --json",
    "validation_environment": "HERMETIC"
  },
  "unsupported_capability_boundary": {
    "support_state": "unsupported",
    "payment_support_state": "unsupported",
    "money_movement_enabled": false,
    "rationale": "Descriptor/gallery readback only; no live publication, install, provider mutation, or payment flow is supported."
  }
}