feat: keep reconciliation audits read-only unless cleanup authorized (Closes #419) #421

Merged

sysadmin merged 3 commits from feat/issue-419-audit-readonly-mode into master

2026-07-08 04:16:46 -05:00

Author	SHA1	Message	Date
sysadminandClaude Opus 4.8	182fcbf598	fix: resolve conflicts for PR #421 Merge prgs/master; keep audit-readonly gate (#419) and explicit delete_branch preflight task binding from master. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-07-08 04:08:07 -04:00
sysadmin	551ee7d70c	fix: resolve conflicts for PR #421	2026-07-07 17:20:53 -04:00
sysadmin	ddaf380db2	feat: gate reconciliation audit mode from unauthorized cleanup (Closes #419 ) Add audit vs cleanup phase tracking so reconciliation audits stay read-only unless cleanup is explicitly authorized with delete capability proof, safety proof, and before/after snapshots. Block gitea_delete_branch and merged-cleanup execution during audit phase, validate final reports for false no-mutations claims, and document the boundary in the reconcile-landed-pr workflow.	2026-07-07 17:20:36 -04:00

Author

SHA1

Message

Date

sysadminandClaude Opus 4.8

182fcbf598

fix: resolve conflicts for PR #421

Merge prgs/master; keep audit-readonly gate (#419) and explicit delete_branch
preflight task binding from master.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-08 04:08:07 -04:00

sysadmin

551ee7d70c

fix: resolve conflicts for PR #421

2026-07-07 17:20:53 -04:00

sysadmin

ddaf380db2

feat: gate reconciliation audit mode from unauthorized cleanup (Closes #419 )

Add audit vs cleanup phase tracking so reconciliation audits stay read-only
unless cleanup is explicitly authorized with delete capability proof, safety
proof, and before/after snapshots. Block gitea_delete_branch and merged-cleanup
execution during audit phase, validate final reports for false no-mutations
claims, and document the boundary in the reconcile-landed-pr workflow.

2026-07-07 17:20:36 -04:00