Artifact bcbe1640b0266b98e5fefb5d6511d967bde44b15e2d910d0103eb2a5f6503d2d:
- File
internal/oltp/repo.go
-
2026-08-26 22:54:53
— part of check-in
[70d043b2e7]
on branch protect-1
— RFC 0007 phase 1: branch_protection and MayJoin
Forge policy beside repo_caps: a repository names protected branches (name or glob) and their owners. No trace in the repository; edited under 'a'; empty by default so an imported store behaves as it did.
MayJoin answers may-this-account-change-this-branch's-membership. Every matching rule applies, so a glob and a narrower name on one branch can only narrow. Refused lists the globs an account does not own — the per-request rule the sync gate will hand its child. A store that cannot answer says no: silence is not consent. (user: dmestas, size: 9025) [annotate] [blame] [check-ins using]
- 2026-08-26 23:51:49 — part of check-in [4742a00a65] on branch trunk — Landed phase 1: the policy table and the decision function. (user: ai-local, size: 9025) [annotate] [blame] [check-ins using]
-
2026-08-26 22:54:53
— part of check-in
[70d043b2e7]
on branch protect-1
— RFC 0007 phase 1: branch_protection and MayJoin