{
  "context": "The agent is asked to prepare the repository collaboration docs for a new uinaf open-source project: AGENTS.md, CLAUDE.md, and SECURITY.md. This scenario tests whether the agent knows that repo docs use proper-case (Title Case) headlines rather than the lowercase product voice, that CLAUDE.md should be a symlink (not a second authored file), that AGENTS.md stays compact, and that SECURITY.md follows the private-first pattern without SLA promises.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "AGENTS.md Title Case headings",
      "description": "All H2 and H3 section headings in AGENTS.md use Title Case (e.g. 'Daily Workflow', 'Local Setup', 'Commit Rules'). They do NOT use sentence-case or all-lowercase headings such as 'daily workflow' or 'local setup'.",
      "max_score": 12
    },
    {
      "name": "AGENTS.md sentence-case body",
      "description": "Body text in AGENTS.md uses sentence-case (first word of each sentence capitalized, proper nouns capitalized). It does NOT apply all-lowercase product voice to body sentences.",
      "max_score": 10
    },
    {
      "name": "AGENTS.md compact length",
      "description": "AGENTS.md is at most 150 lines total (including headings, blank lines, and code blocks). Files over 150 lines fail this criterion.",
      "max_score": 8
    },
    {
      "name": "AGENTS.md no brand spec duplication",
      "description": "AGENTS.md does NOT paste or restate the brand spec, design tokens, color palette, or motion values. At most, it links to the relevant skill or doc. Brand guidance is not authored inline in AGENTS.md.",
      "max_score": 8
    },
    {
      "name": "CLAUDE.md is not a second authored file",
      "description": "CLAUDE.md content is byte-for-byte identical to AGENTS.md, OR a setup script / Makefile / README instruction shows `ln -s AGENTS.md CLAUDE.md`. CLAUDE.md must NOT contain different or additional content from AGENTS.md.",
      "max_score": 12
    },
    {
      "name": "SECURITY.md contact: dev@uinaf.dev",
      "description": "SECURITY.md contains the contact address dev@uinaf.dev for reporting vulnerabilities. No other contact address is the primary point of contact.",
      "max_score": 10
    },
    {
      "name": "SECURITY.md private-first",
      "description": "SECURITY.md explicitly instructs reporters NOT to open public GitHub issues for security vulnerabilities. The instruction appears in the reporting section.",
      "max_score": 10
    },
    {
      "name": "SECURITY.md no SLA promise",
      "description": "SECURITY.md does NOT promise a specific response time (no 'within 24 hours', 'within 48 hours', 'within N business days', 'we will respond in N days'). Responses are characterized as prompt or best-effort without a committed SLA.",
      "max_score": 8
    },
    {
      "name": "Conventional Commits documented",
      "description": "AGENTS.md or a referenced CONTRIBUTING.md mentions Conventional Commits format and lists at minimum: feat, fix, docs. Breaking changes notation (! or BREAKING CHANGE footer) is also present.",
      "max_score": 8
    },
    {
      "name": "Voice: no SaaS sludge, no emoji, no exclamation",
      "description": "None of the three files contain emoji, exclamation marks, or any of: 'empower', 'unlock', 'synergies', 'simply', 'just', 'mission', 'revolutionize'. All files are terse and factual.",
      "max_score": 8
    },
    {
      "name": "AGENTS.md covers repo orientation",
      "description": "AGENTS.md covers at least: what the repo is / what it does, the toolchain or language, and the key commands a contributor or agent will run. These can be brief but must be present.",
      "max_score": 6
    }
  ]
}