The outcome
Create useful, auditable Junie behavior for a team while keeping secrets, side effects, and final decisions controlled.
Step by step
A workflow you can repeat.
- 01
Inventory stable architecture rules, canonical commands, sensitive paths, review severity, provider policy, owners, and actions that always require a person.
- 02
Write concise .junie guidelines and .aiignore rules, linking canonical documentation and excluding credentials, generated data, and unnecessary private content.
- 03
Configure project defaults and review automation with minimal tools, read-only review intent, pinned dependencies, protected secrets, and no deployment capability.
- 04
Test normal changes, known defects, false positives, hostile repository text, forked pull requests, build-script edits, broad regex matches, and provider failures.
- 05
Require file-and-line evidence, keep merge decisions human-owned, audit logs and usage, and review trust, allowlists, guidelines, and workflows after each upgrade.
Working standard
What good use looks like.
- Keep durable guidance concise.
- Give review automation no release authority.
- Test hostile repository content.
Official references