apiVersion: ai-sdlc.io/v1alpha1
kind: <ResourceType>
metadata:
  name: <unique-name>
  namespace: <team-or-project>
  labels: {}
  annotations: {}
spec: {}
status: {}

apiVersion: ai-sdlc.io/v1alpha1
kind: Pipeline
metadata:
  name: feature-delivery
  namespace: team-alpha
spec:
  triggers:
    - event: issue.assigned
      filter: { labels: ["ai-eligible"] }
  providers:
    issueTracker:
      type: linear
      config: { teamId: "ENG" }
    sourceControl:
      type: github
      config: { org: "reliable-genius" }
  stages:
    - name: implement
      agent: code-agent
      qualityGates: [test-coverage, security-scan]
      timeout: PT30M
      credentials:
        scope: ["repo:read", "repo:write"]
        ttl: PT15M
        revokeOnComplete: true
      onFailure:
        strategy: retry
        maxRetries: 2
        retryDelay: PT1M
        notification: agent-failure
    - name: review
      agent: reviewer-agent
      qualityGates: [human-approval]
      approval:
        required: true
        blocking: true
        timeout: PT24H
        onTimeout: abort
    - name: deploy
      agent: deploy-agent
      qualityGates: [staging-verification]
      onFailure:
        strategy: abort
  routing:
    complexityThresholds:
      low: { min: 1, max: 3, strategy: "fully-autonomous" }
      medium: { min: 4, max: 6, strategy: "ai-with-review" }
      high: { min: 7, max: 8, strategy: "ai-assisted" }
      critical: { min: 9, max: 10, strategy: "human-led" }
  branching:
    pattern: "ai-sdlc/issue-{issueNumber}"
    targetBranch: main
    cleanup: on-merge
  pullRequest:
    titleTemplate: "fix: {issueTitle} (#{issueNumber})"
    descriptionSections: [summary, changes, closes]
    includeProvenance: true
    closeKeyword: Closes
  notifications:
    templates:
      agent-failure:
        target: issue
        title: "AI-SDLC: Agent Failed"
        body: "Error during {stageName}: {details}"
      pr-created:
        target: issue
        title: "AI-SDLC: PR Created"
        body: "Pull request: {prUrl}"
status:
  phase: Running
  activeStage: implement
  stageAttempts:
    implement: 1
  conditions:
    - type: Healthy
      status: "True"
      lastTransitionTime: "2026-02-07T10:00:00Z"

apiVersion: ai-sdlc.io/v1alpha1
kind: AgentRole
metadata:
  name: code-agent
spec:
  role: "Senior Software Engineer"
  goal: "Implement features from specifications with clean, tested code"
  backstory: "Expert in TypeScript and Python with focus on testable architecture"
  tools: [code_editor, terminal, git_client, test_runner]
  constraints:
    maxFilesPerChange: 20
    requireTests: true
    allowedLanguages: [python, typescript]
    blockedPaths: ["**/secrets/**", "**/.env*"]
  handoffs:
    - target: reviewer-agent
      trigger: "implementation_complete"
      contract:
        schema: "handoff-schemas/impl-to-review-v1.json"
        requiredFields: [prUrl, testResults, coverageReport, changeSummary]
    - target: tester-agent
      trigger: "implementation_complete"
  skills:
    - id: implement_feature
      description: "Implements features from ticket specifications"
      tags: [coding, implementation]
      examples:
        - input: "Implement user authentication with OAuth2"
          output: "PR with auth module, tests, and documentation"
  agentCard:
    endpoint: "https://agents.internal/code-agent"
    version: "1.0.0"
    securitySchemes: [bearer_token]
status:
  autonomyLevel: 2
  totalTasksCompleted: 142
  approvalRate: 0.94
  lastActive: "2026-02-07T09:45:00Z"

apiVersion: ai-sdlc.io/v1alpha1
kind: QualityGate
metadata:
  name: ai-code-standards
spec:
  scope:
    repositories: ["org/service-*"]
    authorTypes: ["ai-agent"]
  gates:
    - name: test-coverage
      enforcement: soft-mandatory
      rule:
        metric: line-coverage
        operator: ">="
        threshold: 80
      override:
        requiredRole: engineering-manager
        requiresJustification: true
    - name: security-scan
      enforcement: hard-mandatory
      rule:
        tool: semgrep
        maxSeverity: medium
        rulesets: ["owasp-top-10"]
    - name: human-review
      enforcement: hard-mandatory
      rule:
        minimumReviewers: 2
        aiAuthorRequiresExtraReviewer: true
    - name: documentation
      enforcement: advisory
      rule:
        changedFilesRequireDocUpdate: true
    - name: provenance
      enforcement: hard-mandatory
      rule:
        requireAttribution: true
        requireHumanReview: true
  evaluation:
    pipeline: pre-merge
    timeout: 300s
    retryPolicy:
      maxRetries: 3
      backoff: exponential
status:
  compliant: false
  conditions:
    - type: TestCoverage
      status: "False"
      reason: "3 PRs below threshold"
      lastEvaluated: "2026-02-07T09:30:00Z"
    - type: SecurityScan
      status: "True"
    - type: HumanReview
      status: "True"

apiVersion: ai-sdlc.io/v1alpha1
kind: AutonomyPolicy
metadata:
  name: standard-progression
spec:
  levels:
    - level: 0
      name: "Intern"
      description: "Read-only observation, no code generation"
      permissions:
        read: ["*"]
        write: []
        execute: []
      guardrails:
        requireApproval: all
      monitoring: continuous
      minimumDuration: "2w"
    - level: 1
      name: "Junior"
      description: "Recommend changes with mandatory human approval"
      permissions:
        read: ["*"]
        write: ["draft-pr", "comment"]
        execute: ["test-suite"]
      guardrails:
        requireApproval: all
        maxLinesPerPR: 200
        blockedPaths: ["**/auth/**", "**/payment/**"]
      monitoring: continuous
      minimumDuration: "4w"
    - level: 2
      name: "Senior"
      description: "Execute within guardrails with real-time notification"
      permissions:
        read: ["*"]
        write: ["branch", "pr", "comment"]
        execute: ["test-suite", "lint", "build"]
      guardrails:
        requireApproval: security-critical-only
        maxLinesPerPR: 500
        transactionLimit: "$100/day"
        blockedPaths: ["**/auth/**"]
      monitoring: real-time-notification
      minimumDuration: "8w"
    - level: 3
      name: "Principal"
      description: "Autonomous within domain, continuous validation"
      permissions:
        read: ["*"]
        write: ["branch", "pr", "comment", "merge-non-critical"]
        execute: ["test-suite", "lint", "build", "deploy-staging"]
      guardrails:
        requireApproval: architecture-changes-only
        maxLinesPerPR: 1000
      monitoring: audit-log
      minimumDuration: null
  promotionCriteria:
    "0-to-1":
      minimumTasks: 20
      conditions:
        - metric: recommendation-acceptance-rate
          operator: ">="
          threshold: 0.90
        - metric: security-incidents
          operator: "=="
          threshold: 0
      requiredApprovals: [engineering-manager]
    "1-to-2":
      minimumTasks: 50
      conditions:
        - metric: pr-approval-rate
          operator: ">="
          threshold: 0.90
        - metric: rollback-rate
          operator: "<="
          threshold: 0.02
        - metric: average-review-iterations
          operator: "<="
          threshold: 1.5
        - metric: security-incidents
          operator: "=="
          threshold: 0
        - metric: code-coverage-maintained
          operator: ">="
          threshold: 0.80
      requiredApprovals: [engineering-manager, security-lead]
    "2-to-3":
      minimumTasks: 100
      conditions:
        - metric: pr-approval-rate
          operator: ">="
          threshold: 0.95
        - metric: rollback-rate
          operator: "<="
          threshold: 0.01
        - metric: production-incidents-caused
          operator: "=="
          threshold: 0
      requiredApprovals: [engineering-manager, security-lead, vp-engineering]
  demotionTriggers:
    - trigger: critical-security-incident
      action: demote-to-0
      cooldown: "4w"
    - trigger: rollback-rate-exceeds-5-percent
      action: demote-one-level
      cooldown: "2w"
    - trigger: unauthorized-access-attempt
      action: demote-to-0
      cooldown: "4w"
status:
  agents:
    - name: code-agent
      currentLevel: 2
      promotedAt: "2026-01-15T00:00:00Z"
      nextEvaluationAt: "2026-03-15T00:00:00Z"
      metrics:
        prApprovalRate: 0.94
        rollbackRate: 0.01
        reviewIterations: 1.2

apiVersion: ai-sdlc.io/v1alpha1
kind: AdapterBinding
metadata:
  name: linear-tracker
spec:
  interface: IssueTracker
  type: linear
  version: "1.2.0"
  source: "registry.ai-sdlc.io/adapters/linear"
  config:
    apiKey:
      secretRef: linear-api-key
    teamId: "ENG"
    defaultLabels: ["ai-sdlc-managed"]
  healthCheck:
    interval: 60s
    timeout: 10s
status:
  connected: true
  lastHealthCheck: "2026-02-07T10:00:00Z"
  adapterVersion: "1.2.0"
  specVersionSupported: "v1alpha1"

1. DESIRED STATE — Read Pipeline, QualityGate, AutonomyPolicy resources
2. OBSERVE       — Watch development activity via adapters
3. DIFF          — Compare actual metrics against policy thresholds
4. ACT           — Enforce based on enforcement level
5. REMEDIATE     — Auto-heal (generate tests, assign reviewers, create tickets)
6. UPDATE STATUS — Write to resource status.conditions[]
7. REQUEUE       — Schedule next reconciliation (event-driven + periodic)