// Governed Forge policy. Clause IDs are stable SOURCE names.
CONTRACT ForgeLanding {
  ENFORCEMENT_MODE: enforced
  CONTEXT {
    ENTITIES LandingRequest {
      task_id: string
      author_is_agent: bool
      paths_outside_lock: int
      protected_paths_touched: int
      policy_files_touched: int
      ci_config_touched: int
      tests_deleted: int
      tests_passed: bool
      holdout_tests_passed: bool
      rebased_tests_passed: bool
      mutation_score: float
      approvals: int
      human_approvals: int
      main_contains_commit: bool
      requester_is_governor: bool
      actor_is_human: bool
      approval_is_unique: bool
      owner_authorized: bool
    }
    CONSTANTS {
      zero: int == 0 [SOURCE:FORGE-POLICY-V1]
      minimum_mutation_score: float == 0.75 [SOURCE:FORGE-POLICY-V1]
    }
  }
  TRIGGER {
    land()
    approve_landing()
    complete_landing()
  }
  GUARANTEE {
    ENSURE approve_landing() WHEN LandingRequest.actor_is_human == true [SOURCE:approval_human]
    ENSURE approve_landing() WHEN LandingRequest.approval_is_unique == true [SOURCE:approval_unique]
    ENSURE complete_landing() WHEN LandingRequest.requester_is_governor == true [SOURCE:completion_governor]
    ENSURE complete_landing() WHEN LandingRequest.main_contains_commit == true [SOURCE:completion_main]
  }
  PROHIBITION {
    FORBID land WHEN LandingRequest.paths_outside_lock != zero [SOURCE:landing_lock]
    FORBID land WHEN LandingRequest.tests_passed == false [SOURCE:landing_tests]
    FORBID land WHEN LandingRequest.holdout_tests_passed == false [SOURCE:landing_holdout]
    FORBID land WHEN LandingRequest.rebased_tests_passed == false [SOURCE:landing_retest]
    FORBID land WHEN LandingRequest.mutation_score < minimum_mutation_score [SOURCE:landing_mutation]
    FORBID land WHEN LandingRequest.protected_paths_touched > zero AND LandingRequest.owner_authorized == false [SOURCE:landing_protected]
    FORBID land WHEN LandingRequest.ci_config_touched > zero AND LandingRequest.owner_authorized == false [SOURCE:landing_ci]
    FORBID land WHEN LandingRequest.tests_deleted > zero AND LandingRequest.owner_authorized == false [SOURCE:landing_test_deletion]
    FORBID land WHEN LandingRequest.tests_deleted > zero AND LandingRequest.author_is_agent == true [SOURCE:landing_agent_test_deletion]
    FORBID land WHEN LandingRequest.policy_files_touched > zero AND LandingRequest.author_is_agent == true [SOURCE:landing_agent_policy]
    FORBID land WHEN LandingRequest.policy_files_touched > zero AND LandingRequest.owner_authorized == false [SOURCE:landing_policy_owner]
  }
  OBSERVABILITY {
    LOG "ForgeLanding evaluated" ON decision
  }
}