Skip to content

workflow: CODEOWNERS — the owner is the sole code owner (phase-3 load-bearing) - #9

Merged
ascalva merged 1 commit into
mainfrom
workflow/codeowners
Jul 28, 2026
Merged

workflow: CODEOWNERS — the owner is the sole code owner (phase-3 load-bearing)#9
ascalva merged 1 commit into
mainfrom
workflow/codeowners

Conversation

@ascalva

@ascalva ascalva commented Jul 28, 2026

Copy link
Copy Markdown
Owner

One file, one policy line: * @ascalva. Inert under ruleset phase 1 (applied today, id 19912132 — pushes to main are illegal, proven by a rejected falsifier push). Becomes load-bearing at phase 3, when required approvals + require-code-owner-review turn the tripwire into the wall: only the owner's review satisfies the gate, so a machine identity can never approve its own work (finding-0276 — "merge is not a separable permission" — answered at the review layer instead).

Phases recorded: 1 (now) pushes illegal, PRs mergeable · 2 (after PR #8 merges) required status checks on the PR surface · 3 (after the owner's identity-split ceremony) approvals + code-owner review.

🤖 Generated with Claude Code

https://claude.ai/code/session_01GTYQT2QsWskJW4HmgobyrV

…-bearing, inert until then

One line of policy: only the owner's review satisfies the code-owner
requirement once ruleset phase 3 raises required approvals. A machine identity
can never approve its own work. Inert under phase 1; harmless always.
@ascalva
ascalva merged commit 2527dce into main Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant