v3.6.102
What's New
Cryptographic Approval Gate (t1894)
Replaces the insecure comment-based auto-approval of needs-maintainer-review issues with SSH-signed approvals that automation cannot forge.
Problem: Workers and the pulse share the same GitHub account as the maintainer. Any worker comment would inadvertently unlock the maintainer review gate.
Solution: sudo aidevops approve issue <number> — requires system password + interactive terminal + root-protected signing key. Three layers that automation cannot bypass.
Setup (one-time)
sudo aidevops approve setupUsage
sudo aidevops approve issue 17438
sudo aidevops approve pr 456
aidevops approve verify 17438
aidevops approve statusFull changelog: v3.6.101...v3.6.102