From 4191c6cb0f9b606065b872f4c3535f5949a1d329 Mon Sep 17 00:00:00 2001
From: shenxianpeng <xianpeng.shen@gmail.com>
Date: Sun, 5 Apr 2026 02:42:20 +0300
Subject: [PATCH 1/2] docs: Remove SLSA badge and update comparison table in
 README

---
 README.rst | 55 +++++++++++++++++++++++++++---------------------------
 1 file changed, 28 insertions(+), 27 deletions(-)

diff --git a/README.rst b/README.rst
index 4e1e50cf..e89c62e5 100644
--- a/README.rst
+++ b/README.rst
@@ -21,10 +21,6 @@ Commit Check
     :target: https://github.com/commit-check/commit-check
     :alt: commit-check
 
-.. |slsa-badge| image:: https://slsa.dev/images/gh-badge-level3.svg
-    :target: https://slsa.dev
-    :alt: SLSA
-
 .. |pypi-downloads| image:: https://img.shields.io/pypi/dm/commit-check?color=%232c9ccd
     :target: https://pypi.org/project/commit-check/
     :alt: PyPI Downloads
@@ -33,7 +29,7 @@ Commit Check
     :target: https://pypi.org/project/commit-check/
     :alt: Python Versions
 
-|ci-badge| |sonar-badge| |pypi-version| |pypi-downloads| |python-versions| |commit-check-badge| |codecov-badge| |slsa-badge|
+|ci-badge| |sonar-badge| |pypi-version| |pypi-downloads| |python-versions| |commit-check-badge| |codecov-badge|
 
 Overview
 --------
@@ -45,38 +41,43 @@ and Bitbucket's paid `Yet Another Commit Checker <https://marketplace.atlassian.
 
 **Why Commit Check?**
 
+The table below compares common approaches to commit policy enforcement.
+``commitlint`` is a specialized commit-message linter. Custom Git hooks and
+the ``pre-commit`` framework are integration mechanisms, so the last column
+reflects a DIY approach rather than built-in product features.
+
 .. list-table::
    :header-rows: 1
-   :widths: 40 20 20 20
+   :widths: 36 18 18 28
 
    * - Feature
      - Commit Check ✅
      - commitlint
-     - pre-commit hooks
+     - Custom hooks
    * - Conventional Commits enforcement
      - ✅
      - ✅
-     - ✅
+     - DIY
    * - Branch naming validation
      - ✅
      - ❌
-     - Partial
+     - DIY
    * - Author name / email validation
      - ✅
      - ❌
-     - ❌
+     - DIY
    * - Signoff / DCO check
      - ✅
-     - ❌
-     - ❌
+     - Partial
+     - DIY
    * - Co-author ignore list
      - ✅
      - ❌
-     - ❌
-   * - Organization-level config inheritance
+     - DIY
+   * - Organization-level shared config
      - ✅
-     - ❌
-     - ❌
+     - Partial
+     - DIY
    * - Zero-config defaults
      - ✅
      - ❌
@@ -84,23 +85,23 @@ and Bitbucket's paid `Yet Another Commit Checker <https://marketplace.atlassian.
    * - Works without Node.js
      - ✅
      - ❌
-     - ✅
-   * - TOML configuration
+     - Depends
+   * - Native TOML configuration
      - ✅
      - ❌
+     - Depends
+   * - Git hook / pre-commit integration
      - ✅
-   * - pre-commit framework integration
-     - ✅
-     - ✅
+     - Partial
      - ✅
-   * - CI/CD environment variables
+   * - CI/CD-friendly configuration
      - ✅
      - Partial
-     - ❌
-   * - SLSA Level 3 supply chain security
-     - ✅
-     - ❌
-     - ❌
+     - DIY
+
+``Partial`` means the capability exists but is narrower or requires extra
+wrappers/config. ``DIY`` means you can implement it with custom Git hooks or
+``pre-commit`` scripts, but it is not provided as a turnkey policy layer.
 
 Installation
 ------------

From fecadb961a12dd522e35f944684b34fb0c1aaac5 Mon Sep 17 00:00:00 2001
From: shenxianpeng <xianpeng.shen@gmail.com>
Date: Sun, 5 Apr 2026 02:47:15 +0300
Subject: [PATCH 2/2] docs: Update README to clarify signed-off-by trailer
 enforcement

---
 README.rst | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/README.rst b/README.rst
index e89c62e5..e3e61ff1 100644
--- a/README.rst
+++ b/README.rst
@@ -66,9 +66,9 @@ reflects a DIY approach rather than built-in product features.
      - ✅
      - ❌
      - DIY
-   * - Signoff / DCO check
+   * - Signed-off-by trailer enforcement
+     - ✅
      - ✅
-     - Partial
      - DIY
    * - Co-author ignore list
      - ✅
@@ -76,7 +76,7 @@ reflects a DIY approach rather than built-in product features.
      - DIY
    * - Organization-level shared config
      - ✅
-     - Partial
+     - ✅
      - DIY
    * - Zero-config defaults
      - ✅
@@ -99,9 +99,10 @@ reflects a DIY approach rather than built-in product features.
      - Partial
      - DIY
 
-``Partial`` means the capability exists but is narrower or requires extra
-wrappers/config. ``DIY`` means you can implement it with custom Git hooks or
-``pre-commit`` scripts, but it is not provided as a turnkey policy layer.
+For ``commitlint``, organization-level shared config is typically delivered via
+shareable config packages or local files. ``DIY`` means you can implement a
+capability with custom Git hooks or ``pre-commit`` scripts, but it is not
+provided as a turnkey policy layer.
 
 Installation
 ------------