3 Commits

Include renames

Author	SHA1	Message	Date
sysadmin	4a63578003	fix(profiles): canonical reconciler ops and guard raw branch delete (#687) ... Address REQUEST_CHANGES on PR #688: - migrate_profiles: emit fully canonical reconciler/author/reviewer defaults; canonicalize explicit ops; fail if reconciler loses required pr.close/read - gitea_delete_branch: deny reconciler (and non-author roles); refuse preservation/protected branches before any API call - gitea_cleanup_merged_pr_branch: require reconciler role only; block preservation/evidence branches via branch_cleanup_guard - docs: end-to-end operator runbook for profile migrate/apply/reconnect/cleanup - tests: migration canonicalization, idempotency, raw-delete denial, guarded cleanup success and unmerged/preserve rejections Closes #687.	2026-07-12 22:35:14 -04:00
sysadmin	32fc1719aa	feat: allow reconciler profile to run merged cleanup directly (Closes #523)	2026-07-08 22:49:19 -04:00
sysadmin	ddaf380db2	feat: gate reconciliation audit mode from unauthorized cleanup (Closes #419) ... Add audit vs cleanup phase tracking so reconciliation audits stay read-only unless cleanup is explicitly authorized with delete capability proof, safety proof, and before/after snapshots. Block gitea_delete_branch and merged-cleanup execution during audit phase, validate final reports for false no-mutations claims, and document the boundary in the reconcile-landed-pr workflow.	2026-07-07 17:20:36 -04:00