Skip to content

A standing rule for owner settings never approves kit files - #123

Merged
hhff merged 1 commit into
mainfrom
kit-not-by-bundle-rule
Nov 6, 2026
Merged

hhff merged 1 commit into
mainfrom
kit-not-by-bundle-rule

Conversation

@hhff

@hhff hhff commented Nov 6, 2026

Copy link
Copy Markdown
Member

What

  • devteam.mjs (merge): only the upstream-sync and CI-fix standing rules, which judge the kit files themselves, satisfy the kit-file check (a chore touching files outside project/). The standing rule that settles a PR's owner settings no longer does.
  • Test: under a class:gate-change rule, a chore that adds a gate and edits constitution.md is refused with "touches files outside project/".

Why

An independent review of #106 found this hole on main, introduced with #115 and shipped in v0.20.1. With the owner's class:gate-change rule in place, the supervisor could merge a chore that added a gate and removed governance-edit from owner_only in the constitution, with no owner answer. The reviewer merged it for real in a fixture.

Migration

None. A chore that changes kit files needs the owner's answer, as documented.

🤖 Generated with Claude Code

merge's kit-file check (a chore touching files outside project/ needs the
owner's answer) accepted any standing rule, including the one that settled the
PR's owner settings. So with a class:gate-change rule (owner_rules, #115), a
chore that added a gate could also edit the constitution, dropping
governance-edit from owner_only, with no answer. Only the upstream-sync and
CI-fix rules, which judge the kit files themselves, now satisfy the check.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@hhff

hhff commented Nov 6, 2026

Copy link
Copy Markdown
Member Author

Merging (upstream loop). Local Node 24.14.1 main suite passed 49/49, including the new constitution-edit refusal. CI 18/20/22/24 is green at this head.

@hhff
hhff merged commit 70faaed into main Nov 6, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant