Tags and Properties for Check-in f30535d269
- branch=protect-1 inherited from [70d043b2e7]
- closed added by [697719a200] on 2026-08-26 23:51:49
- sym-protect-1 inherited from [70d043b2e7]
|
2026-08-26
| ||
| 23:51 | • Edit [f30535d269]: Mark "Closed". artifact: 697719a200 user: dmestas | |
| 22:55 |
protect: the purge drops the rules, and the test asks the purge
The first test called DeleteRepo, which drops the repo row and leaves per-repository state to PurgeRepo — the cascade the rule was added to. Committed red because the run gating it used a regex that matched no test; caught by the suite. closed check-in: f30535d269 user: dmestas tags: protect-1 | |
| 22:54 |
RFC 0007 phase 1: branch_protection and MayJoin
Forge policy beside repo_caps: a repository names protected branches (name or glob) and their owners. No trace in the repository; edited under 'a'; empty by default so an imported store behaves as it did. MayJoin answers may-this-account-change-this-branch's-membership. Every matching rule applies, so a glob and a narrower name on one branch can only narrow. Refused lists the globs an account does not own — the per-request rule the sync gate will hand its child. A store that cannot answer says no: silence is not consent. check-in: 70d043b2e7 user: dmestas tags: protect-1 | |