feat(authority): add fail-closed authority bootstrap - #42
Conversation
|
Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here. |
mindburnlabs
changed the title
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9a8b00c626
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| "protected_files": { | ||
| ".github/workflows/ci.yml": "a4e14a559ed51489d4afa39cceb24fee4a4ad2adf8ceebb3ee3255c9d66717e9", | ||
| ".github/workflows/promote-authority.yml": "097460ffa3f2673f7f2d67a45a57bbb963acb231da3131a929a48d84aa6c6c39", | ||
| ".github/workflows/ci.yml": "2ccbbddabad6ff82a5e6ff9f04281c849267e7fd79b1fdd81a213fbe4b6da62e", |
There was a problem hiding this comment.
The .github gate profile now contains digests that do not match the committed protected files; for example, this line records 2ccbb... while sha256sum .github/workflows/ci.yml at this commit is 161c45a6.... Running python3 scripts/run_autonomous_release_gates.py --repository Mindburn-Labs/.github --target . --profiles config/autonomous-release-gates.json fails immediately with protected gate-definition file changed before its source-owned profile, and the CI repository-gates job invokes this exact profile, so autonomous permits for this repo will be blocked until the hashes are regenerated.
Useful? React with 👍 / 👎.
97e558d
into
codex/autonomous-release-recovery
1 participant
Stack 4 of 6. Adds the fail-closed authority bootstrap. Depends on #45; followed by #43 and #36.