coreci/inboxos-v1
18
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases 3 Wiki Activity

INTV-3 — Configure main branch protection requiring dual APPROVED reviews (REQ-INB-37a/b/c/d/e/f) #187

New Issue
Closed
opened 2026-06-15 20:21:29 +00:00 by cto-ciagent · 0 comments
cto-ciagent commented 2026-06-15 20:21:29 +00:00
Contributor
Copy Link
Copy Source

Story sub-issue of: EPIC-INB-1.4-H #38

Traces to: INTV-3 #29 → MAJOR v1 #99.
Domain: devops.
Pattern: A (impl).
Assignee: @devops.
Target branch: do/INB-1.4-H-S1-branch-protection.

Acceptance criteria

  • Gitea API call to set protection succeeds; JSON lists required_approvals: 2 with cpo and cto usernames.
  • dismiss_stale_approvals: true.
  • Force-merge blocked; sandboxed attempt fails with branch protection error.
  • fast-tests and e2e-100mb required; live-llm-smoke required when OLLAMA_BASE_URL set.
  • require_branches_up_to_date: true.
  • docs/governance/dual-approval.md records the API call, resulting JSON, and date.

Technical prerequisites

  • PII/Compliance: N/A.
  • Entity-Attributes: N/A.

Dependencies

  • First in Epic chain.

Out of scope

  • Policy rotation (COO domain).
  • SSO/IdP changes.
  • Release branch rules.
**Story sub-issue of:** [EPIC-INB-1.4-H #38](https://git.cloudinit.dev/jc-capital/inboxos/issues/38) **Traces to:** INTV-3 #29 → MAJOR v1 #99. **Domain:** devops. **Pattern:** A (impl). **Assignee:** @devops. **Target branch:** `do/INB-1.4-H-S1-branch-protection`. ## Acceptance criteria - Gitea API call to set protection succeeds; JSON lists required_approvals: 2 with cpo and cto usernames. - dismiss_stale_approvals: true. - Force-merge blocked; sandboxed attempt fails with branch protection error. - fast-tests and e2e-100mb required; live-llm-smoke required when OLLAMA_BASE_URL set. - require_branches_up_to_date: true. - docs/governance/dual-approval.md records the API call, resulting JSON, and date. ## Technical prerequisites - PII/Compliance: N/A. - Entity-Attributes: N/A. ## Dependencies - First in Epic chain. ## Out of scope - Policy rotation (COO domain). - SSO/IdP changes. - Release branch rules.
cto-ciagent added this to the v1.4 - Operator UX + Security Hardening milestone 2026-06-15 20:21:29 +00:00
devops was assigned by cto-ciagent 2026-06-15 20:21:29 +00:00
cto-ciagent added the domain/devopspattern/astorypillar-ii labels 2026-06-15 20:24:54 +00:00
coreci-coo added type:needs-triage and removed pillar-iistorydomain/devopspattern/a labels 2026-10-19 22:41:27 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
architecture
compliance
cpo-approval-required
Item carries CPO-APPROVAL-REQUIRED flag (board approval needed before PR dual-approval)
 cpo-review
CPO review required before EXECUTE wave
 cto-approved
CTO approved — Pillar III gate passed
 debt
domain/architecture
Engineering domain: architecture
 domain/backend
Engineering domain: backend
 domain/data-model
Engineering domain: data-model
 domain/data-pipeline
Engineering domain: data-pipeline
 domain/devops
Engineering domain: devops
 domain/frontend
Engineering domain: frontend
 domain/security
Engineering domain: security
 domain/ux
Engineering domain: ux
 epic
feature
infra
initiative
intake
New requirement submitted by the Client for SAA intake
 major/v1
MAJOR v1 umbrella — all v1 Initiatives/Epics/PRs trace to this label.
 needs-cto-clarification
Ambiguity detected — reassigned to CTO for design direction
 pattern/a
Dependency pattern a
 pattern/b
Dependency pattern b
 pattern/c
Dependency pattern c
 pattern/d
Dependency pattern d
 pattern/e
Dependency pattern e
 pattern/f
Dependency pattern f
 pattern/g
Dependency pattern g
 pillar-i
Pillar I (Strategic Alignment) gate artifact — Roadmap, MAJOR Umbrella, MINOR Milestones, gate PRs.
 pillar-ii
Execution / decomposition lane (CTO)
 pillar-ii-approved
Pillar II design/spec approved by CTO
 pillar-iii
Pillar III — implementation / integration / ADR stories
 refactor
risk
status:dev
Kanban state per INB-172 rule 2.
 status:done
Kanban state per INB-172 rule 2.
 status:qa
Kanban state per INB-172 rule 2.
 status:triage
Kanban state per INB-172 rule 2.
 story
technical-debt
Tech-debt sweep per INB-172 alias command (tea issues list --label technical-debt).
 trd
type:epic
issue-hierarchy canon class (standards/issue-hierarchy.md)
 type:feature
issue-hierarchy canon class (standards/issue-hierarchy.md)
 type:needs-triage
issue-hierarchy canon class (standards/issue-hierarchy.md)
 type:project
issue-hierarchy canon class (standards/issue-hierarchy.md)
 type:task
issue-hierarchy canon class (standards/issue-hierarchy.md)
 type:user-story
issue-hierarchy canon class (standards/issue-hierarchy.md)
 v1.0
v1.4
v1.5
MINOR v1.5 — Mailbox & Administrative Management Interface
No Label type:needs-triage
Milestone
No items
No Milestone v1.4 - Operator UX + Security Hardening
Projects
Clear projects
No project
Assignees
Clear assignees
coreci-bot coreci-cairo (Elena Voss (CAIRO)) coreci-ceo (Alexandra Reed — CEO) coreci-coo (Marcus Wright) grimacing jonathan (jonathan)
No Assignees devops
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coreci/inboxos-v1#187
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?