Repository navigation
fix: align workspace registry publication gate with standing mandate - #248
Merged
xLagerFeuer merged 1 commit intoNov 11, 2026
Merged
Conversation
xLagerFeuer
deleted the
fix/workspace-registry-standing-publication-20261112
branch
November 11, 2026 23:26
4 of 11 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
The current generated working-fork registry still advertises
HUMAN_EXPLICIT_APPROVAL_REQUIREDfor external PRs, contradicting the effective standing publication mandate and owner decision. This was discouraging valid unattended publication decisions even though the separate technical executor still needs real host capabilities.Changes
CHECK_EFFECTIVE_STANDING_MANDATE_AND_NATIVE_GATESand expose its policy path. This is routing metadata, never an action grant: publisher checks current-main policy and the target's native/legal gates.auto_external_pr=false: current standing authority is not proof that a reliable end-to-end unattended executor is deployed.Validation
python3 scripts/contribution_workspaces.py checkPASS.python3 scripts/fork_bootstrap_manifest.py checkPASS.upstream_status.py --check-generated,harness_status.py --check,portfolio_reconcile.py --validate-only, verified/accepted outcome schema validations PASS.git diff --checkPASS.repository-integrityGitHub Actions check before merge.This does not publish or merge any third-party PR, bypass any legal requirement, mark a model-only job as verified, or claim a live generic executor.
Related: Upstream #6, #28, #56; Organization #305.