[project]
	description = Access inherited by all other projects.
[receive]
	requireContributorAgreement = true
	requireSignedOffBy = false
	requireChangeId = true
	enableSignedPush = false
	rejectImplicitMerges = true
[submit]
	mergeContent = true
	action = rebase always
[access "refs/*"]
	read = group Administrators
	read = group Anonymous Users
	read = group Google Tools
	read = group Googlers
	read = group Registered Users
	exclusiveGroupPermissions = editTopicName
	editTopicName = group Nobody
	toggleWipState = group Toggle WIP
[access "refs/for/*"]
	addPatchSet = group Registered Users
[access "refs/for/refs/*"]
	push = group Registered Users
	pushMerge = group Registered Users
[access "refs/heads/*"]
	create = group Administrators
	create = group Project Owners
	forgeAuthor = group Registered Users
	forgeCommitter = group Administrators
	forgeCommitter = group Project Owners
	label-Code-Review = -2..+2 group Administrators
	label-Code-Review = -2..+2 group Googlers
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -1..+1 group Registered Users
	read = group Anonymous Users
	read = group SLSA Policy Verification Service Accounts
	read = group autoupdate-onboarding-service-accounts
	read = group autoupdate-service-accounts
	read = group autoupdate-vigil-service-accounts
	revert = group Registered Users
	submit = group Administrators
	submit = group Googlers
	submit = group Project Owners
	submit = group autoupdate-service-accounts
	submit = group autoupdate-vigil-service-accounts
	labelAs-Code-Review = -2..+2 group Administrators
	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
	Push = group autoupdate-service-accounts
	Push = group autoupdate-vigil-service-accounts
[access "refs/meta/config"]
	exclusiveGroupPermissions = read
	create = group Administrators
	create = group Project Owners
	label-Code-Review = -2..+2 group Administrators
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group mdb/pigweed-gerrit-configplustwo-acl
	label-Code-Review = -2..+2 group mdb/pigweed-gob-admin
	push = group Project Owners
	push = group mdb/pigweed-gob-admin-acl
	read = group Administrators
	read = group Google Tools
	read = group Googlers
	read = group Project Owners
	submit = group Administrators
	submit = group Project Owners
[access "refs/meta/version"]
	read = group Anonymous Users
[access "refs/tags/*"]
	create = group Administrators
	create = group Project Owners
	createSignedTag = group Administrators
	createSignedTag = group Project Owners
	createTag = group Administrators
	createTag = group Project Owners
[label "Code-Review"]
	function = NoBlock
	defaultValue = 0
	value = -2 This shall not be merged
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me, but someone else must approve
	value = +2 Looks good to me, approved
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE OR (has:unchanged-files AND uploaderin:ldap/eng) OR is:ANY OR is:MIN
[label "Bot-Commit"]
	defaultValue = 0
	value = 0 No score
	value = +1 Bot Commit
	function = NoBlock
	copyCondition = changekind:NO_CHANGE
[accounts]
	sameGroupVisibility = deny group google/google-union:signcla
[contributor-agreement "Google CLA"]
	description = Google Contributor License Agreement
	agreementUrl = static/cla.html
	accepted = group google/google-union:signcla
	accepted = group mdb/google-cla-gerrit-robot-accounts
[capability]
	administrateServer = group Administrators
	runAs = group Gerrit Flows
	viewAllAccounts = group Gerrit Flows
	viewAllAccounts = group Tagging Hat
	viewAllAccounts = group autoupdate-onboarding-service-accounts
	viewAllAccounts = group autoupdate-service-accounts
	viewAllAccounts = group autoupdate-vigil-service-accounts
[plugin "jwtservice"]
	audience = https://api.cr.dev
[submit-requirement "Code-Review"]
	description = The Code-Review label is required.
	submittableIf = -label:Code-Review=MIN AND label:Code-Review=MAX,user=non_uploader
	overrideIf = label:Bot-Commit=MAX AND -label:Code-Review=MIN
	canOverrideInChildProjects = true
[submit-requirement "No-Patches-File"]
	description = Patches are not submittable if they have patches.json in the root of the repo.
	applicableIf = file:\"^patches\\.json$\"
	submittableIf = is:false
	canOverrideInChildProjects = true
[submit-requirement "No-Changed-Files"]
	description = This change does not modify any files.
	applicableIf = -path:\"^.*$\"
	submittableIf = is:false
	canOverrideInChildProjects = false
[submit-requirement "Topics-Not-Supported"]
	description = A topic is set on this change but topics are not supported on this host.
	applicableIf = -topic:\"\"
	submittableIf = is:false
	canOverrideInChildProjects = false
[submit-requirement "Want-Review-From-All"]
	description = A 'Code-Review' vote is required from all reviewers.
	applicableIf = footer:\"Want-Review: all\" -label:Code-Review>=1,users=human_reviewers
	submittableIf = label:Code-Review>=1,users=human_reviewers
	canOverrideInChildProjects = false