@rmyndharis/aimhooman 0.1.0

package/docs/design/agent-portability.md

@@ -0,0 +1,73 @@
+# Agent portability
+
+aimhooman is a vendor-neutral guard: one rule set, shipped as Node source, with a thin
+adapter per host. An activated plugin-tier adapter runs the live `PreToolUse` guard;
+instruction-tier hosts load the ruleset. The Git-boundary guard comes from
+`aimhooman init`, independent of the host.
+
+## Prerequisite
+
+Install once so hooks can call it (Node 22.8+ and Git 2.28+):
+
+```sh
+npm install -g @rmyndharis/aimhooman
+```
+
+Claude Code and Codex plugin bundles ship the `.mjs` source and run it with the
+`node` already on your machine. The Copilot repository hook calls the installed
+`aimhooman` binary and otherwise fails open with no live guard.
+
+## Supported hosts
+
+The registry in `docs/hosts.json` records the adapter, activation contract,
+official specification, and last verification date. The table below is generated
+from that registry.
+
+<!-- aimhooman:host-table-start -->
+| Host | Tier | Files | Activation | Version checked | Evidence |
+| --- | --- | --- | --- | --- | --- |
+| Claude Code | plugin | `.claude-plugin/plugin.json`, `.claude-plugin/marketplace.json`, `hooks/hooks.json`, `skills/aimhooman/SKILL.md` | Install the marketplace plugin; Git hooks still require aimhooman init. | web spec (unversioned) | static (2026-07-15) |
+| OpenAI Codex | plugin | `.codex-plugin/plugin.json`, `hooks/hooks.json`, `skills/aimhooman/SKILL.md` | Install the plugin, start a new session, then review and trust its hooks with /hooks. | 0.144.3 minimum contract | static (2026-07-15) |
+| GitHub Copilot CLI | plugin | `.github/hooks/aimhooman.json` | The repository hook calls aimhooman from PATH and is advisory until Git hooks are installed. | web spec (unversioned) | static (2026-07-15) |
+| GitHub Copilot editor | instruction | `.github/copilot-instructions.md` | Loaded from the repository by supported Copilot editors. | web spec (unversioned) | static (2026-07-15) |
+| Cursor | instruction | `.cursor/rules/aimhooman.mdc` | Loaded as an always-on project rule. | web spec (unversioned) | static (2026-07-15) |
+| Cline | instruction | `.clinerules/aimhooman.md` | Loaded from the project clinerules directory. | web spec (unversioned) | static (2026-07-15) |
+| Windsurf | instruction | `.windsurf/rules/aimhooman.md` | Loaded through the supported legacy .windsurf/rules workspace fallback; current hosts prefer .devin/rules. | web spec (unversioned) | static (2026-07-15) |
+| Kiro | instruction | `.kiro/steering/aimhooman.md` | Loaded as always-included steering by default. | web spec (unversioned) | static (2026-07-15) |
+| Gemini CLI | instruction | `.gemini/settings.json`, `GEMINI.md` | The repository setting loads AGENTS.md; GEMINI.md is also shipped as default context. | 0.50.0 source contract | static (2026-07-15) |
+| Gemini Code Assist | instruction | `GEMINI.md` | Loaded as agent-mode context in supported editors. | web spec (unversioned) | static (2026-07-15) |
+| Google Antigravity | instruction | `.agents/rules/aimhooman.md` | Add the workspace rule in Antigravity and set it to Always On. | web spec (unversioned) | static (2026-07-15) |
+<!-- aimhooman:host-table-end -->
+
+## Adapter rule
+
+Keep adapters thin. Claude and Codex share `hooks/hooks.json`; the Copilot CLI uses
+`.github/hooks/aimhooman.json`. Both hook formats call `aimhooman hook ...`.
+Instruction-tier adapters carry the ruleset text verbatim from `AGENTS.md`; the test
+`tests/copies.test.mjs` fails if any copy drifts.
+
+## Enforcement matrix
+
+| Host kind | Agent ruleset | Agent PreToolUse guard | Git commit / reference guards |
+| --- | --- | --- | --- |
+| Plugin-tier (after host activation) | yes | yes | yes (after `aimhooman init`) |
+| Instruction-tier | yes | no | yes (after `aimhooman init`) |
+| No host / CI | no | no | yes (git hooks, or `aimhooman check` in CI) |
+
+## Hook output
+
+aimhooman emits one JSON object that satisfies every host: Claude and Codex read
+`hookSpecificOutput.permissionDecision`, Copilot reads the top-level
+`permissionDecision`. No host detection is needed.
+
+## The `--no-verify` gap
+
+`git commit --no-verify` skips the ordinary `pre-commit` and `commit-msg` hooks.
+On `strict`, the agent-tier `PreToolUse` guard rejects that flag before Git runs
+for supported plugin hosts. The prepared `reference-transaction` hook is not a
+verify hook and checks the resulting commit before the branch ref changes, but
+it cannot provide clean-profile auto-repair after the earlier hooks were skipped.
+Local tooling is still not a server boundary; for team-wide enforcement, scan
+the actual PR range in CI rather than the normally empty CI index:
+`aimhooman check --range origin/main...HEAD --profile strict`. A shallow checkout
+may not contain the merge base; use `fetch-depth: 0` or deepen it first.

package/docs/design/frictionless-enforcement.md

@@ -0,0 +1,135 @@
+# aimhooman: Repair-First, Layered Enforcement
+
+This document describes aimhooman's enforcement model. aimhooman is designed to
+prevent known AI-tool residue from leaking into Git history **without editing
+`.gitignore`, and with repair before rejection on the default ordinary commit path.**
+Plugin startup provides best-effort prevention without `init`; complete Git-boundary
+enforcement requires local or global hook setup.
+
+## Goals
+
+- **Zero-activation for Claude Code:** the plugin is active every session
+  (SessionStart), no `init`.
+- **No `.gitignore` burden:** known AI artifacts are auto-excluded via
+  `.git/info/exclude` (local, never committed, never the user's `.gitignore`).
+- **Repair-first for hygiene by default:** AI artifacts are excluded before
+  staging or unstaged at commit. If a block cannot be repaired, remains in the
+  pinned tree, or cannot be scanned completely, the operation stops.
+- **Broad, community-updatable rule catalog:** covers many AI tools; extendable
+  via PR (core) and local rules (personal).
+- **Block remains available as opt-in** (`strict` profile) for teams that want
+  hard enforcement.
+
+## Non-goals
+
+- Rewriting existing git history (out of scope; this prevents future leaks only).
+- Catching truly novel AI tools that have no rule yet (coverage is
+  rule-dependent; cannot be 100%).
+- A live community registry fetched over the network (rejected: breaks offline /
+  zero-dependency ethos, introduces supply-chain risk).
+
+## Constraints (honest)
+
+1. **Git has no universal "guard every repo" hook.** `npm install -g` only places a
+   binary on PATH. Auto-activation is achieved via (a) the Claude Code plugin
+   (SessionStart, zero-init) and (b) an optional one-time `aimhooman init --global`
+   that sets `core.hooksPath` for eligible non-bare repositories without a local
+   or worktree-scoped override.
+2. **"Prevent leak without blocking" requires exclusion, not just warning.**
+   Either exclude before staging (`.git/info/exclude`) or unstage at commit
+   (`pre-commit` hook). Pure warnings do not prevent leaks.
+3. **PreToolUse cannot unstage.** It runs before the tool executes; at `git add X`,
+   X is not staged yet. So unstage is a git-tier (`pre-commit`) capability; the
+   plugin tier does prevention (excludes) plus advisory (warn).
+4. **`.gitignore` stays clean** because aimhooman writes `.git/info/exclude`
+   (local, not committed, not `.gitignore`).
+
+## Design
+
+### Layered enforcement (default ordinary path = repair-first)
+
+| Layer | Mechanism | Tier | Blocking? |
+| --- | --- | --- | --- |
+| 0. Prevention | Auto-write `.git/info/exclude` from unambiguous residue rules | plugin SessionStart + init/agent hook refresh | none (best effort) |
+| 1. Catch-all | `pre-commit` hook unstages AI artifacts from the index | git hook | proceeds after repair; stops if repair fails |
+| 2. Agent guard | PreToolUse reports paths and rejects unprovable protected Git mutations | plugin | advisory for paths; fail-closed for boundary bypass |
+| 3. Strict policy | `strict` profile blocks instead of repairing (exit 10) | both | block |
+| 4. Pinned tree | `commit-msg` checks the exact would-be tree and message | git hook | blocks a remaining violation or incomplete scan |
+| 5. Final ref check | prepared `reference-transaction` full-scans every commit introduced to `HEAD` or a branch | git hook | blocks a violation or incomplete scan |
+
+Default profile `clean` uses layers 0, 1, 2, 4, and 5. Successful repair keeps the
+ordinary path low-friction. The pinned-tree and final-ref scans deliberately stop if
+a block remains, including a pre-existing tracked block that was not part of the
+current diff, or if any scan is incomplete.
+Git 2.54 also emits an earlier `preparing` reference-transaction callback. The
+hook checks dispatcher integrity there without scanning unresolved references,
+then keeps the full-scan veto at `prepared`, after Git has locked them.
+
+### Components
+
+1. **Rule catalog** — `rules/paths.json`, `rules/attribution.json`,
+   `rules/markers.json`, `rules/secrets.json`. Covers Claude, Codex, Copilot, Cursor, Aider, SpecStory,
+   Continue, Playwright MCP, Remember, Superpowers, and a generic agent dir.
+   Community extends via PR (core); personal extensions via
+   `<common-git-dir>/aimhooman/rules/*.json` (local, shared by linked worktrees,
+   loaded after core, and only able to add restrictions).
+2. **Auto-exclude** — `applyExclude` writes patterns derived from unambiguous
+   `ephemeral-state` and `local-settings` rules to `.git/info/exclude` from
+   SessionStart, init, and the agent guard. Secrets and review paths remain visible.
+3. **Git boundary** — the `pre-commit` hook scans staged paths; for any AI
+   artifact it removes it from the index, then lets the commit proceed only when
+   that repair succeeds. `commit-msg` removes complete exact high-confidence attribution lines
+   (on `clean`), keeps them (on `compliance`), or blocks (on `strict`). An unterminated
+   exact final line stops unchanged; broader attribution candidates remain review notices.
+   `commit-msg` evaluates the message and full snapshot against a pinned would-be
+   tree. The `reference-transaction` hook checks guard integrity during Git
+   2.54's early `preparing` callback, then independently scans every introduced
+   commit at `prepared` before Git changes `HEAD` or a branch ref; it does not trust
+   an attestation from an earlier hook. This covers ordinary commits, sequencers,
+   fetch/worktree branch creation, and direct ref commands.
+4. **Auto-activation** — the plugin's SessionStart ensures excludes + injects the
+   ruleset (no `init`). `aimhooman init --global` sets `core.hooksPath` once for
+   terminal git.
+5. **Strict policy** — the `strict` profile blocks findings instead of attempting
+   the clean/compliance repairs.
+6. **Team baseline** — an optional, versioned `.aimhooman.json` selects the
+   repository profile and takes precedence over per-clone defaults. Invalid
+   project policy fails closed; local exceptions remain in Git state.
+
+### Local rule loading
+
+`loadRules(stateDir?)` reads `<stateDir>/rules/*.json` using the published local-pack
+schema, the stricter regex subset, and a bounded path-glob matcher when a repo context
+exists, merged after core packs. Core-first ordering
+means local rules only add restrictions and can never override a core block.
+
+## Implementation notes
+
+- **Category-aware failure.** On `clean`, a malformed local rule pack is skipped
+  with a warning because built-in rules remain active. Corrupt override state,
+  unreadable Git inputs, and incomplete staged-content scans stop every profile.
+  Any automatic unstage failure stops; allowing it through would only defer the
+  same block to the pinned-tree or final-ref scan. `strict` also vetoes policy
+  findings and reviews.
+- **`init --global` refuses to clobber.** It will not overwrite a pre-existing
+  global `core.hooksPath`, and `aimhooman uninstall --global` reverses it. A
+  repository-local/worktree override takes precedence; local `init` refuses a
+  shared or external effective hook directory. Global reference dispatchers are
+  transparent in unsupported bare repositories.
+- **HEAD-safe unstage.** `git restore --staged` needs HEAD; on a repository's
+  initial commit it falls back to `git rm --cached --ignore-unmatch`.
+- **Anchored attribution rules.** The AI-noreply rule is anchored to trailer
+  lines (`*-by:`) so it never strips a prose line that merely mentions the email.
+- **`compliance` keeps disclosure.** AI-attribution rules resolve to `allow`
+  under `compliance`, so nothing is stripped and the disclosure is preserved.
+
+## Testing
+
+`npm run verify` is the release-equivalent local gate. It validates generated
+artifacts and JSON, compiles every published schema, lints workflows, checks for
+dead code, runs coverage (including release-critical scripts), verifies the
+packed manifest, and exercises installed hooks. The tests cover profiles,
+overrides, commit-message repair, strict `--no-verify` rejection, local rules,
+rename/type-change detection, staged/commit/range/tracked targets, linked
+worktrees, hook ownership and chaining, sequencer/direct-ref flows, and initial
+commits.

package/docs/hosts.json

@@ -0,0 +1,164 @@
+{
+    "schema_version": 1,
+    "last_checked": "2026-07-15",
+    "hosts": [
+        {
+            "id": "claude-code",
+            "name": "Claude Code",
+            "tier": "plugin",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".claude-plugin/plugin.json",
+                ".claude-plugin/marketplace.json",
+                "hooks/hooks.json",
+                "skills/aimhooman/SKILL.md"
+            ],
+            "canonical_copy": "skills/aimhooman/SKILL.md",
+            "activation": "Install the marketplace plugin; Git hooks still require aimhooman init.",
+            "spec": "https://code.claude.com/docs/en/plugins-reference"
+        },
+        {
+            "id": "codex",
+            "name": "OpenAI Codex",
+            "tier": "plugin",
+            "minimum_version": "0.144.3",
+            "version_checked": "0.144.3 minimum contract",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".codex-plugin/plugin.json",
+                "hooks/hooks.json",
+                "skills/aimhooman/SKILL.md"
+            ],
+            "activation": "Install the plugin, start a new session, then review and trust its hooks with /hooks.",
+            "spec": "https://developers.openai.com/codex/plugins/build"
+        },
+        {
+            "id": "copilot-cli",
+            "name": "GitHub Copilot CLI",
+            "tier": "plugin",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".github/hooks/aimhooman.json"
+            ],
+            "activation": "The repository hook calls aimhooman from PATH and is advisory until Git hooks are installed.",
+            "spec": "https://docs.github.com/en/copilot/reference/hooks-reference"
+        },
+        {
+            "id": "copilot-editor",
+            "name": "GitHub Copilot editor",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".github/copilot-instructions.md"
+            ],
+            "canonical_copy": ".github/copilot-instructions.md",
+            "activation": "Loaded from the repository by supported Copilot editors.",
+            "spec": "https://docs.github.com/en/copilot/customizing-copilot/adding-repository-custom-instructions-for-github-copilot"
+        },
+        {
+            "id": "cursor",
+            "name": "Cursor",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".cursor/rules/aimhooman.mdc"
+            ],
+            "canonical_copy": ".cursor/rules/aimhooman.mdc",
+            "activation": "Loaded as an always-on project rule.",
+            "spec": "https://cursor.com/docs/context/rules"
+        },
+        {
+            "id": "cline",
+            "name": "Cline",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".clinerules/aimhooman.md"
+            ],
+            "canonical_copy": ".clinerules/aimhooman.md",
+            "activation": "Loaded from the project clinerules directory.",
+            "spec": "https://docs.cline.bot/features/cline-rules"
+        },
+        {
+            "id": "windsurf",
+            "name": "Windsurf",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".windsurf/rules/aimhooman.md"
+            ],
+            "canonical_copy": ".windsurf/rules/aimhooman.md",
+            "activation": "Loaded through the supported legacy .windsurf/rules workspace fallback; current hosts prefer .devin/rules.",
+            "spec": "https://docs.windsurf.com/windsurf/cascade/memories"
+        },
+        {
+            "id": "kiro",
+            "name": "Kiro",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".kiro/steering/aimhooman.md"
+            ],
+            "canonical_copy": ".kiro/steering/aimhooman.md",
+            "activation": "Loaded as always-included steering by default.",
+            "spec": "https://kiro.dev/docs/steering/"
+        },
+        {
+            "id": "gemini-cli",
+            "name": "Gemini CLI",
+            "tier": "instruction",
+            "version_checked": "0.50.0 source contract",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".gemini/settings.json",
+                "GEMINI.md"
+            ],
+            "canonical_copy": "GEMINI.md",
+            "activation": "The repository setting loads AGENTS.md; GEMINI.md is also shipped as default context.",
+            "spec": "https://github.com/google-gemini/gemini-cli/blob/main/docs/cli/gemini-md.md"
+        },
+        {
+            "id": "gemini-code-assist",
+            "name": "Gemini Code Assist",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                "GEMINI.md"
+            ],
+            "activation": "Loaded as agent-mode context in supported editors.",
+            "spec": "https://developers.google.com/gemini-code-assist/docs/use-agentic-chat-pair-programmer"
+        },
+        {
+            "id": "antigravity",
+            "name": "Google Antigravity",
+            "tier": "instruction",
+            "version_checked": "web spec (unversioned)",
+            "check_level": "static",
+            "last_checked": "2026-07-15",
+            "files": [
+                ".agents/rules/aimhooman.md"
+            ],
+            "canonical_copy": ".agents/rules/aimhooman.md",
+            "activation": "Add the workspace rule in Antigravity and set it to Always On.",
+            "spec": "https://antigravity.google/docs/ide-rules"
+        }
+    ]
+}

package/hooks/hooks.json

@@ -0,0 +1,29 @@
+{
+    "description": "aimhooman: keep AI session files, secrets, and attribution out of commits",
+    "hooks": {
+        "SessionStart": [
+            {
+                "matcher": "startup|resume|clear|compact",
+                "hooks": [
+                    {
+                        "type": "command",
+                        "command": "node \"${CLAUDE_PLUGIN_ROOT}/bin/aimhooman.mjs\" hook session-start",
+                        "timeout": 60
+                    }
+                ]
+            }
+        ],
+        "PreToolUse": [
+            {
+                "matcher": "*",
+                "hooks": [
+                    {
+                        "type": "command",
+                        "command": "node \"${CLAUDE_PLUGIN_ROOT}/bin/aimhooman.mjs\" hook pre-tool-use",
+                        "timeout": 60
+                    }
+                ]
+            }
+        ]
+    }
+}

package/package.json

@@ -0,0 +1,77 @@
+{
+    "name": "@rmyndharis/aimhooman",
+    "version": "0.1.0",
+    "description": "AI works. Hoomans ship. Keep AI session files, secrets, and attribution out of your commits.",
+    "homepage": "https://github.com/rmyndharis/aimhooman#readme",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/rmyndharis/aimhooman.git"
+    },
+    "bugs": {
+        "url": "https://github.com/rmyndharis/aimhooman/issues"
+    },
+    "type": "module",
+    "bin": {
+        "aimhooman": "bin/aimhooman.mjs"
+    },
+    "files": [
+        "bin/",
+        "src/",
+        "rules/",
+        "hooks/",
+        "schemas/",
+        "docs/hosts.json",
+        "docs/design/",
+        "docs/logo/",
+        ".claude-plugin/",
+        ".codex-plugin/",
+        ".cursor/rules/",
+        ".clinerules/",
+        ".windsurf/",
+        ".kiro/",
+        ".agents/",
+        ".gemini/",
+        ".github/hooks/",
+        ".github/copilot-instructions.md",
+        "AGENTS.md",
+        "GEMINI.md",
+        "skills/",
+        "CHANGELOG.md",
+        "CODE_OF_CONDUCT.md",
+        "CONTRIBUTING.md",
+        "LICENSE",
+        "README.md",
+        "SECURITY.md"
+    ],
+    "scripts": {
+        "check": "node scripts/validate.mjs",
+        "sync:hosts": "node scripts/sync-hosts.mjs",
+        "sync:ruleset": "node scripts/sync-ruleset.mjs",
+        "test": "node --import ./tests/test-env.mjs --test",
+        "test:coverage": "node --import ./tests/test-env.mjs --experimental-test-coverage --test-coverage-include=\"src/**\" --test-coverage-include=\"bin/**\" --test-coverage-include=\"scripts/authorize-owner-paths.mjs\" --test-coverage-include=\"scripts/github-owner-authority.mjs\" --test-coverage-include=\"scripts/package-manifest.mjs\" --test-coverage-include=\"scripts/scan-ci-history.mjs\" --test-coverage-exclude=\"tests/**\" --test-coverage-lines=75 --test-coverage-branches=60 --test-coverage-functions=85 --test-reporter=spec --test-reporter=./scripts/coverage-threshold.mjs --test-reporter-destination=stdout --test-reporter-destination=stderr --test",
+        "check:static": "node scripts/static-gates.mjs",
+        "verify": "node scripts/verify.mjs"
+    },
+    "devDependencies": {
+        "ajv": "8.20.0",
+        "ajv-formats": "3.0.1",
+        "knip": "5.88.1"
+    },
+    "engines": {
+        "node": ">=22.8.0"
+    },
+    "publishConfig": {
+        "access": "public",
+        "registry": "https://registry.npmjs.org/"
+    },
+    "license": "MIT",
+    "keywords": [
+        "ai-agents",
+        "git-hooks",
+        "claude-code",
+        "codex",
+        "copilot",
+        "developer-tools",
+        "pre-commit"
+    ]
+}

package/rules/attribution.json

@@ -0,0 +1,142 @@
+[
+    {
+        "id": "attribution.claude-coauthor",
+        "version": 1,
+        "provider": "claude-code",
+        "category": "ai-attribution",
+        "confidence": "high",
+        "kind": "message",
+        "match": {
+            "content": [
+                "(?i)^\\s*co-authored-by:\\s*(?:claude|claude code)\\s*<noreply@anthropic\\.com>\\s*$"
+            ]
+        },
+        "actions": {
+            "clean": "block",
+            "strict": "block",
+            "compliance": "allow"
+        },
+        "reason": "Unwanted AI co-author attribution (Claude).",
+        "autofix": "remove-whole-line",
+        "remediation": [
+            "remove the Co-authored-by line",
+            "or run: aimhooman fix --message <file>"
+        ]
+    },
+    {
+        "id": "attribution.copilot-coauthor",
+        "version": 1,
+        "provider": "copilot",
+        "category": "ai-attribution",
+        "confidence": "high",
+        "kind": "message",
+        "match": {
+            "content": [
+                "(?i)^\\s*co-authored-by:\\s*(?:github\\s+)?copilot(?:\\[bot\\])?\\s*<(?:(?:[0-9]+\\+)?copilot(?:\\[bot\\])?@users\\.noreply\\.github\\.com|copilot@github\\.com)>\\s*$"
+            ]
+        },
+        "actions": {
+            "clean": "block",
+            "strict": "block",
+            "compliance": "allow"
+        },
+        "reason": "Unwanted AI co-author attribution (Copilot).",
+        "autofix": "remove-whole-line",
+        "remediation": [
+            "remove the Co-authored-by line",
+            "or run: aimhooman fix --message <file>"
+        ]
+    },
+    {
+        "id": "attribution.codex-coauthor",
+        "version": 1,
+        "provider": "codex",
+        "category": "ai-attribution",
+        "confidence": "high",
+        "kind": "message",
+        "match": {
+            "content": [
+                "(?i)^\\s*co-authored-by:\\s*(?:openai\\s+)?codex\\s*<noreply@openai\\.com>\\s*$"
+            ]
+        },
+        "actions": {
+            "clean": "block",
+            "strict": "block",
+            "compliance": "allow"
+        },
+        "reason": "Unwanted AI co-author attribution (Codex).",
+        "autofix": "remove-whole-line",
+        "remediation": [
+            "remove the Co-authored-by line",
+            "or run: aimhooman fix --message <file>"
+        ]
+    },
+    {
+        "id": "attribution.bot-coauthor",
+        "version": 1,
+        "provider": "generic",
+        "category": "ai-attribution",
+        "confidence": "medium",
+        "kind": "message",
+        "match": {
+            "content": [
+                "(?i)^\\s*co-authored-by:.*(\\[bot\\]|bot@users\\.noreply).*$"
+            ]
+        },
+        "actions": {
+            "clean": "review",
+            "strict": "review",
+            "compliance": "allow"
+        },
+        "reason": "Unwanted bot co-author attribution.",
+        "remediation": [
+            "remove the Co-authored-by line"
+        ]
+    },
+    {
+        "id": "attribution.generated-with",
+        "version": 1,
+        "provider": "generic",
+        "category": "ai-attribution",
+        "confidence": "high",
+        "kind": "message",
+        "match": {
+            "content": [
+                "(?i)^\\s*generated\\s+(?:with|by)\\s+(?:claude(?:\\s+code)?|(?:github\\s+)?copilot|chatgpt|gpt(?:-[0-9]+(?:\\.[0-9]+)?)?|(?:openai\\s+)?codex|cursor)[.!]?\\s*$",
+                "(?i)^\\s*(?:🤖\\s*)?generated\\s+with\\s+\\[claude code\\]\\(https://claude\\.ai/code\\)\\s*$"
+            ]
+        },
+        "actions": {
+            "clean": "block",
+            "strict": "block",
+            "compliance": "allow"
+        },
+        "reason": "Unwanted AI generation attribution in the message.",
+        "autofix": "remove-whole-line",
+        "remediation": [
+            "remove the generated-with line"
+        ]
+    },
+    {
+        "id": "attribution.ai-noreply",
+        "version": 1,
+        "provider": "generic",
+        "category": "ai-attribution",
+        "confidence": "high",
+        "kind": "message",
+        "match": {
+            "content": [
+                "(?i)^\\s*[a-z-]+-by:\\s*[^<>]+\\s*<noreply@(anthropic|openai)\\.com>\\s*$"
+            ]
+        },
+        "actions": {
+            "clean": "review",
+            "strict": "review",
+            "compliance": "allow"
+        },
+        "reason": "AI service noreply email in the message.",
+        "remediation": [
+            "remove the line referencing the AI service email"
+        ]
+    }
+]