box/.github/workflows
dan-claude-bot b89ed144fe fix: pull-requests scope for the door's two PR-API calls; docs catch up
The permission-starvation blocker found on the cast twin (claude-bot,
cast#112 round 4) is identical here: a declared permissions: block zeroes
every unspecified scope, so the decide step's label read and the bump
fallback's gh pr create could only 403 — every genuine ceremony would end
red at the label check. pull-requests: write added with the consumers
named. CONTRIBUTING step 3 and the changelog entry now tell the shipped
story: push-to-main door, event.before interlock, self-re-arm with the
manual path's bump staying the operator's. Re-runs wording nit taken.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-19 16:33:41 +00:00
..
ci.yml test(release): the extraction, the resolution, and every channel — offline (#83) 2026-07-18 22:17:51 +00:00
labels.yml fix: verdict contract, head-bound approvals, serialized reconcile — and a testable state machine 2026-07-18 19:31:00 +00:00
release.yml fix: pull-requests scope for the door's two PR-API calls; docs catch up 2026-07-19 16:33:41 +00:00