ci: separate trusted policy from repository verification - #16

Merged

openboa merged 11 commits into

mainfrom

codex/bench-admission-contract

Sep 8, 2026

Commits on Aug 28, 2026

fix: admit research benchmark layout safely
openboa
committed
4522494

Commits on Sep 8, 2026

ci: separate trusted policy from isolated repository verification
openboa
committed
a61d41c
fix: close ownership review bypasses and run PR regressions
openboa
committed
2b9e474
fix: recognize routine Dependabot version updates
openboa
committed
ae10f86
fix: preserve raw Git paths when validating verification snapshots
openboa
committed
49f7037
ci: lint both supported workflow extensions
openboa
committed
f18eef7
ci: remove candidate-owned central orchestration
openboa
committed
00d7a0e
ci: verify owner approval and reject effective merge queues
openboa
committed
8b48ca8
ci: keep target wrapper triggers fixed to pull requests
openboa
committed
72b8782
docs: clarify PR-only target and central main CI boundaries
openboa
committed
fc9efaf
ci: require root security policy protection
openboa
committed
23c840d