| Comment: | RFC 0007 phase 1: branch_protection and MayJoin
Forge policy beside repo_caps: a repository names protected branches (name or glob) and their owners. No trace in the repository; edited under 'a'; empty by default so an imported store behaves as it did. MayJoin answers may-this-account-change-this-branch's-membership. Every matching rule applies, so a glob and a narrower name on one branch can only narrow. Refused lists the globs an account does not own — the per-request rule the sync gate will hand its child. A store that cannot answer says no: silence is not consent. |
|---|---|
| Timelines: | family | ancestors | descendants | both | protect-1 |
| Files: | files | file ages | folders |
| SHA3-256: |
70d043b2e7f8be9c795344553eef1308 |
| User & Date: | dmestas on 2026-08-26 22:54:53.704 |
| Other Links: | branch diff | manifest | tags |
|
2026-08-26
| ||
| 22:55 |
protect: the purge drops the rules, and the test asks the purge
The first test called DeleteRepo, which drops the repo row and leaves per-repository state to PurgeRepo — the cascade the rule was added to. Committed red because the run gating it used a regex that matched no test; caught by the suite. closed check-in: f30535d269 user: dmestas tags: protect-1 | |
| 22:54 |
RFC 0007 phase 1: branch_protection and MayJoin
Forge policy beside repo_caps: a repository names protected branches (name or glob) and their owners. No trace in the repository; edited under 'a'; empty by default so an imported store behaves as it did. MayJoin answers may-this-account-change-this-branch's-membership. Every matching rule applies, so a glob and a narrower name on one branch can only narrow. Refused lists the globs an account does not own — the per-request rule the sync gate will hand its child. A store that cannot answer says no: silence is not consent. check-in: 70d043b2e7 user: dmestas tags: protect-1 | |
| 22:50 | Accepted. The fold reads a fact; the gate owns the guarantee. check-in: c74cc272cb user: dmestas tags: trunk | |