Security: see references/scanner-notes.md and upstream SECURITY.md for expected scanner signals and trust model.

Verasic Git Commits — Convention

Write path — composing any commit

1. Read references/conventions.md (the spec) and references/commit-protocol.md (workflow, verify step, trailer escape hatch) before composing your first commit message of the session.
2. Draft, commit, then always run the post-commit trailer verify from the protocol.

Source of truth

The full convention lives in references/:

• references/conventions.md — the spec: message style, forbidden AI-session patterns + allowlist, trailer policy
• references/commit-protocol.md — write path: workflow, verify, escape hatch