Skip to content

docs(compliance): branch-protection claim says enforce_admins is on for main (#2014) - #2016

Open
olafkfreund wants to merge 10 commits into
devfrom
docs/2014-enforce-admins-claim
Open

olafkfreund wants to merge 10 commits into
devfrom
docs/2014-enforce-admins-claim

Conversation

@olafkfreund

Copy link
Copy Markdown
Owner

Closes nothing on merge by itself: refs #2014, part of Factory#1958.

The control mapping's branch-protection claim on six controls (policy.tier.*, gate.*) still said enforce_admins is false. Since 2026-10-22 (Factory#943) it is on for main in AIFactory, PFactory, TFactory, CFactory and Factory. It stays off on every dev branch and on factory-gitops main, and a read-only re-read on 2026-11-07 confirmed that. The claim now states that scope. The page and JSON are regenerated, not hand-edited.

All three were approved unseen by the user on 2026-11-07 (bulk run), after codex and agy reviews.

Who did what: plan steps 1 (the TOML claims and comment) and 2 (regenerate) were done by the coder agent. I wrote the artifacts and ran the reviews and the commits.

Checks: gen_autonomy_matrix.py --check exits 0 (ok: tiers=10 overlay=12 val=8 paths=28 git_pins=11 gates=3 controls=14). git grep "while enforce_admins is false" outside intent/spec/plan finds nothing. The diff is limited to the TOML and the two generated outputs, and in the JSON only the six claims and the six matching rows changed.

Final review: a fresh Opus agent, codex and agy each reviewed the plan against the diff. None found anything.

Companion one-line hub fix: Factory PR (linked in a comment).

🤖 Generated with Claude Code

https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1

olafkfreund and others added 10 commits November 7, 2026 14:47
Approved unseen by user 2026-11-07, bulk run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Approved unseen by user 2026-11-07, bulk run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
…dmins-claim (#2014)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
Approved unseen by user 2026-11-07, bulk run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
…or main (#2014)

Plan 2026-11-07-2014-enforce-admins-claim, steps 1-2 (coder): replace the
claim on the six policy.tier.* and gate.* controls, update its provenance
comment, regenerate the autonomy matrix page and JSON.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WtDyDqabJ8SR4gD3ubwYx1
@olafkfreund

Copy link
Copy Markdown
Owner Author

Companion hub fix: olafkfreund/Factory#3677

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant