# Organizational Policies and Standards

This context defines company-wide policies and standards that apply to all work regardless of the specific profile being used.

## Code and Documentation Standards

### Code Quality
- All code must be reviewed before merging
- Maintain minimum 80% test coverage
- Follow language-specific style guides (PEP 8 for Python, etc.)
- Use meaningful variable and function names
- Include comprehensive documentation

### Version Control
- Use semantic versioning (MAJOR.MINOR.PATCH)
- Write clear, descriptive commit messages
- Create feature branches for all changes
- Squash commits before merging to main

### Documentation Requirements
- All APIs must have OpenAPI/Swagger documentation
- README files required for all repositories
- Architecture decisions must be documented (ADRs)
- Keep documentation up-to-date with code changes

## Communication and Collaboration

### Meeting Standards
- All meetings must have an agenda
- Document action items and owners
- Share meeting notes within 24 hours
- Respect time zones for global teams

### Project Management
- Use standardized project templates
- Update project status weekly
- Escalate blockers within 48 hours
- Maintain risk registers for all projects

## Compliance and Legal

### Data Handling
- Follow GDPR/CCPA requirements for personal data
- Classify data according to sensitivity levels
- Implement data retention policies
- Obtain proper approvals for data sharing

### Intellectual Property
- All work product belongs to the organization
- Use approved open source licenses only
- Document third-party dependencies
- Respect copyright and licensing terms

### Export Control
- Review export control regulations for international work
- Obtain necessary licenses for restricted technologies
- Document compliance measures

## Resource Management

### Cost Optimization
- Implement cost monitoring and alerting
- Regular review of resource utilization
- Use reserved instances for predictable workloads
- Tag all resources for cost allocation

### Environmental Responsibility
- Choose energy-efficient services when possible
- Implement auto-scaling to reduce waste
- Consider carbon footprint in architecture decisions
- Participate in sustainability initiatives

## Quality Assurance

### Testing Standards
- Unit tests for all business logic
- Integration tests for API endpoints
- Performance testing for critical paths
- Security testing for all applications

### Deployment Standards
- Use infrastructure as code
- Implement blue-green or canary deployments
- Maintain rollback procedures
- Monitor deployments actively

---
*These policies apply to all work and should be considered in all recommendations and implementations across all profiles.*
