Merge branch 'master' into feat/issue-604-anti-stomp-preflight

2026-07-17 10:31:22 -05:00
parent 7c77df0c52 3e78db5d28
commit 751403d12b
8 changed files with 1352 additions and 75 deletions
@@ -148,6 +148,23 @@ TASK_CAPABILITY_MAP: dict[str, dict[str, str]] = {
        "permission": "gitea.pr.review",
        "role": "reviewer",
    },
+    # #693: read-only classification of durable decision locks (incl. open PRs).
+    "diagnose_review_decision_lock": {
+        "permission": "gitea.read",
+        "role": "reviewer",
+    },
+    "gitea_diagnose_review_decision_lock": {
+        "permission": "gitea.read",
+        "role": "reviewer",
+    },
+    "authorize_review_correction": {
+        "permission": "gitea.pr.review",
+        "role": "reviewer",
+    },
+    "gitea_authorize_review_correction": {
+        "permission": "gitea.pr.review",
+        "role": "reviewer",
+    },
    # #709: truthful absence-of-proof recovery (server-side auth + record + consume).
    # Dedicated mutation capability — gitea.read is insufficient (review 434 F1).
    "issue_irrecoverable_provenance_authorization": {