{
  "context": "Tests whether the agent includes checksum annotations on deployments to trigger restarts on ConfigMap/Secret changes, uses conditional enablement via .Values.configMap.enabled and .Values.secret.enabled, and follows other required template patterns.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Checksum annotation present",
      "description": "deployment.yaml pod template annotations include a checksum annotation using sha256sum (e.g., checksum/config: {{ include ... | sha256sum }})",
      "max_score": 16
    },
    {
      "name": "Checksum references configmap",
      "description": "The checksum annotation uses print $.Template.BasePath \"/configmap.yaml\" or equivalent to hash the configmap template contents",
      "max_score": 10
    },
    {
      "name": "configMap enabled guard",
      "description": "configmap.yaml is wrapped in an {{- if .Values.configMap.enabled }} conditional so it is only rendered when enabled",
      "max_score": 12
    },
    {
      "name": "secret enabled guard",
      "description": "secret.yaml is wrapped in an {{- if .Values.secret.enabled }} conditional so it is only rendered when enabled",
      "max_score": 10
    },
    {
      "name": "values.yaml enabled flags",
      "description": "values.yaml contains configMap.enabled and secret.enabled boolean fields (or equivalent structure)",
      "max_score": 10
    },
    {
      "name": "Helper used for name",
      "description": "deployment.yaml uses a named template (include) for the resource name rather than a hardcoded string",
      "max_score": 8
    },
    {
      "name": "Labels via helper",
      "description": "At least one resource template references a labels helper (include \"<chart>.labels\") rather than inlining label key-value pairs",
      "max_score": 8
    },
    {
      "name": "Resources block present",
      "description": "deployment.yaml container spec includes a resources: block with at least requests or limits defined",
      "max_score": 10
    },
    {
      "name": "No hardcoded image tag",
      "description": "values.yaml image tag is empty string or references appVersion, NOT a hardcoded literal version string",
      "max_score": 8
    },
    {
      "name": "values.yaml commented",
      "description": "values.yaml contains at least 3 comment lines (starting with #) explaining individual settings",
      "max_score": 8
    }
  ]
}