sysadminandClaude Opus 4.8
f58317d079
Bootstrap repo-tracked wiki pages (10 required pages), the operator- confirmed sync script, PR template publication gate, and safety tests so Gitea-Tools can publish to the live Gitea Wiki per issue #224. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
1.5 KiB
1.5 KiB
Safety and Gates
Navigation
- Home | Operator Guide | Repositories Map | Identity and Profiles | Workflow Model | Safety and Gates | MCP Tools Reference | Operator Runbooks | Open Decisions | Project History
Prompts express intent; MCP tools enforce safety.
Primary gates
- Fail closed — Unknown tasks, missing capability resolution, or profile mismatches block mutations.
- Task capability map —
gitea_resolve_task_capabilitymust precede gated issue/PR mutations. - Issue lock —
gitea_lock_issuerequired before author implementation on a tracked issue. - Head SHA pinning — Reviews and merges refuse when the PR head moved.
- Explicit merge confirmation —
gitea_merge_prrequiresconfirmation="MERGE PR <n>". - No self-review / self-merge — Authenticated user must differ from PR author for approve/merge.
- Review decision lock — Live review mutations require validation-phase dry-run and
gitea_mark_final_review_decision. - Redaction — Tokens, passwords, and keychain material never appear in tool output.
- Wiki publication (#224) —
docs/wiki/and the sync helper are prerequisites only. Closing a wiki issue requires live Gitea Wiki proof on the repo Wiki tab. See Runbooks.