jochen 080c113d69 Let the forge's tools never weaken protection or merge past the checks ...

gitea_api took any endpoint with a token minted for the forge's
administrator with write:admin: an agent could drop a branch's protection
or its required checks, set the merge check's status, write to main or
merge its own pull request (novox/hq ADR 0266 §7, the review of
2026-10-09). gitea_api now reads anything but the administration and
writes only what an author writes; protection is only strengthened; a
merge needs every required status a success and merges only that head; a
guarded repository is not deleted; and the token is minted without
write:admin, a kept one re-minted at the next start.

2026-10-09 11:47:36 +02:00

..

checks.test.ts

Cover a held merge only when the forge says a later delivered merge contains it (review of #150)

2026-10-09 02:57:18 +02:00

delivery.test.ts

Put the merge check back to pending before a recheck asks it (hq issue 305)

2026-10-08 10:11:26 +02:00

guard.test.ts

Let the forge's tools never weaken protection or merge past the checks

2026-10-09 11:47:36 +02:00

pages.test.ts

gitea: say which changed directories hold a module at the merge commit (hq issue 278)

2026-10-06 19:55:17 +02:00

protection.test.ts

gitea: give the controller what it maps a pull request onto the graph with; set both check statuses; protect a branch by tool (hq ADR 0237)

2026-10-06 21:56:04 +02:00

pulls.test.ts

Hold what the tools say to the glossary's retired words (hq ADR 0244)

2026-10-07 20:02:09 +02:00

token.test.ts

Let the forge's tools never weaken protection or merge past the checks

2026-10-09 11:47:36 +02:00