Repository navigation
docs(compliance): branch-protection claim says enforce_admins is on for main (#2014) - #2016
Open
olafkfreund wants to merge 10 commits into
Open
olafkfreund wants to merge 10 commits into
olafkfreund wants to merge 10 commits into
Conversation
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
…claim (#2014) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Approved unseen by user 2026-11-07, bulk run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
…aim (#2014) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Approved unseen by user 2026-11-07, bulk run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
…dmins-claim (#2014) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Approved unseen by user 2026-11-07, bulk run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
…or main (#2014) Plan 2026-11-07-2014-enforce-admins-claim, steps 1-2 (coder): replace the claim on the six policy.tier.* and gate.* controls, update its provenance comment, regenerate the autonomy matrix page and JSON. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Owner
Author
|
Companion hub fix: olafkfreund/Factory#3677 |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes nothing on merge by itself: refs #2014, part of Factory#1958.
The control mapping's branch-protection claim on six controls (
policy.tier.*,gate.*) still saidenforce_adminsis false. Since 2026-10-22 (Factory#943) it is on formainin AIFactory, PFactory, TFactory, CFactory and Factory. It stays off on everydevbranch and on factory-gitopsmain, and a read-only re-read on 2026-11-07 confirmed that. The claim now states that scope. The page and JSON are regenerated, not hand-edited.All three were approved unseen by the user on 2026-11-07 (bulk run), after codex and agy reviews.
Who did what: plan steps 1 (the TOML claims and comment) and 2 (regenerate) were done by the
coderagent. I wrote the artifacts and ran the reviews and the commits.Checks:
gen_autonomy_matrix.py --checkexits 0 (ok: tiers=10 overlay=12 val=8 paths=28 git_pins=11 gates=3 controls=14).git grep "while enforce_admins is false"outside intent/spec/plan finds nothing. The diff is limited to the TOML and the two generated outputs, and in the JSON only the six claims and the six matching rows changed.Final review: a fresh Opus agent, codex and agy each reviewed the plan against the diff. None found anything.
Companion one-line hub fix: Factory PR (linked in a comment).
🤖 Generated with Claude Code
https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1