Skip to content

gunbc-private - #9787

Closed
briansrls wants to merge 6 commits into
mainfrom
fleet/org-actions-standing
Closed

briansrls wants to merge 6 commits into
mainfrom
fleet/org-actions-standing

Conversation

@briansrls

Copy link
Copy Markdown
Contributor

Auto-opened by session-dashboard for session proud-pike-265.
Pushing to fleet/org-actions-standing advances this PR.

Worker attestation

Before flipping this PR to ready for review, confirm each item:

  • Title describes the change (not the session id or branch).
  • PR body summarises what and why (replace the TODO below).
  • Tests run: name the command (e.g. npm test, cargo test) and the result.
  • If this closes a work item, the body contains a Closes #N directive.
  • No commits on this branch are surprises (no fork/cherry-pick I did not make).
  • No secrets / credentials / large binaries staged.

Summary

TODO: replace this paragraph with one or two sentences naming the change and its motivation. Reviewers read this first.

Test plan

  • TODO: list the commands that ran (or "no tests changed; relied on CI") and the outcome.

Brian Searls added 6 commits August 30, 2026 12:10
…tions cites the runner-group shape, endpoints and the observed org-admin token-scope refusal; gunbc.fleet.org_actions_standing declares desired repo->fleet access and derives channel-honest standing (gunbc-private HoldsByBehavior via the srv4 run receipt, settings surface unread, public-fork toggle unobservable until the read lands); converge binding named as the next trigger with its credential precondition
…s, absence refuses - the fabricated-green control now executes and flips); observation carries the joined admitted set + public flag; converge binding moves from a String blob to a typed DissolutionCondition with rationale in annotations; count change-detectors dropped from the witness; endpoints re-modeled as github.CliOrgRunnerGroups operations in house transport style; run_id verbatim-digits ruling cited
…witness) - a test-only predicate had no business in the model surface; the remaining variant-to-Bool helpers stay as witness-local assertion instruments, the corpus-standard shape
…r-group public flag + repository list, lossless join) and public-fork exposure convicts only a group that ADMITS the repository, naming it; the read arm compares observed membership against must_reach_fleet in both directions, so a forbidden-but-admitted row derives typed divergence, never a hold - all arms witness-exercised including the forbidden-row probe and the non-serving-open-group probe
@gunbai-bot

gunbai-bot Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Superseded branch: main already contains all three files (two byte-identical; the third strictly newer on main - org_actions_settings_diff + the post-#9778 dissolution trigger landed via the merged #9746/#9778 arc). Nothing unique here to merge; closing instead of resolving a conflict into dead work.

@gunbai-bot gunbai-bot Bot closed this Aug 31, 2026
@gunbai-bot
gunbai-bot Bot deleted the fleet/org-actions-standing branch August 31, 2026 03:38
@briansrls
briansrls restored the fleet/org-actions-standing branch August 31, 2026 04:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant