Skip to content

v0.11.6: supporter-loop — sweep-only stars job lists stargazers, per-workflow runs listing, workflow_dispatch sweep (#89, PR #90)

Choose a tag to compare

View all tags
@shojikumaru shojikumaru released this 07 Sep 13:59
· 4 commits to main since this release
v0.11.6
ee7dcfa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first live weekly sweep (caty-ai/x-collector run 34100523613) failed closed. Measured: GET /repos/{source}/stargazers is accepted only for a GITHUB_TOKEN with contents: write (403 under none/read, GraphQL FORBIDDEN, unauthenticated 401, ledger PAT 403).

  • New sweep-only stars job: contents: write and nothing else, no secret, no checkout, one paginated GET, numeric ids out; decide consumes the handoff and fails closed on any defect; decide/act stay contents: none.
  • Precondition (a) lists actions/workflows/supporter-loop.yml/runs (repository-wide listing exceeded the 1,000 cap).
  • Sweep guard accepts schedule|workflow_dispatch; alert names a failed stars; header invariants mirror contract §13 v1.11.
  • Tests pin four jobs with exact per-job permissions, the stars shape, the handoff, the event guard; the fake gh aborts on any stargazer listing from decide.

Contract: caty-ai/x-collector v0.6.3 (CONTRACT.md v1.11). Review: 5 heterogeneous seats × 3 rounds, zero blocking. Tracked in #89; follow-up caty-ai/x-collector#141.

Assets 2
Loading