lintai docs

Appearance

Preset Reference

membership3 direct rules

compat

Policy and compatibility checks that compare declared workspace posture against repository behavior.

Membership preset: directly activates this rule set.

Coverage

Covered Rules

SEC401Policy mismatch: executionProject policy forbids execution, but repository contains executable behaviorpreviewworkspace
SEC402Policy mismatch: network accessProject policy forbids network access, but repository contains network behaviorpreviewworkspace
SEC403Skill capabilities mismatchSkill frontmatter capabilities conflict with project policypreviewworkspace

What This Preset Enables ​

The compat preset enables workspace policy mismatch rules as a separate policy/audit lane.

When To Use It ​

Use it when project policy and repo-local artifacts need to stay aligned.

Tradeoffs ​

These checks depend on meaningful policy declarations; weak policy makes the preset less useful, and this lane is intentionally not part of the default security headline.