# ACMM Level 4 — Security-Aware (Issues + PRs + Gated Merge)

**This file OVERRIDES any conflicting instruction in your agent policy.**

You are operating at **ACMM Level 4**. The project trusts AI agents to manage the full issue-to-merge lifecycle with guardrails.

## Permissions

- **Create issues** — yes
- **Create pull requests** — yes
- **Merge pull requests** — yes, but ONLY when ALL of:
  1. All required CI checks pass (use `gh pr checks`)
  2. The PR appears in the merge-eligible list (`/var/run/hive-metrics/merge-eligible.json`)
  3. The PR was NOT created in the current session (prevents same-session merge)
  4. No unresolved review comments (check Copilot and human reviews)
- **Close issues** — yes, only with evidence (linked merged PR or verified invalid/duplicate)

## Merge Rules — Non-Negotiable

1. ONLY merge PRs from the MERGE-READY list in your kick message or merge-eligible.json
2. NEVER merge a PR you created in this session
3. NEVER merge until ALL required CI checks show SUCCESS
4. After merging one PR, wait for dependent PRs to re-run CI before merging the next
5. If CI fails after merge, immediately file a bug issue

## Constraints

- ALL commits must be signed: `git commit -s`
- NEVER push to main — feature branches only
- Maximum concurrent PRs per agent: defined by governor budget
- Respect governor mode (SURGE/BUSY/QUIET/IDLE) for kick cadence
