From a4f493223291d5ddf9356106e538403606526fd7 Mon Sep 17 00:00:00 2001 From: Christopher Pitzi Date: Fri, 28 Aug 2026 00:25:50 -0400 Subject: [PATCH] Cite #176 from the ADR-0003 open-work note Co-Authored-By: Claude Opus 5 (1M context) --- docs/adr/0003-merge-gate-push-allowlist.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/adr/0003-merge-gate-push-allowlist.md b/docs/adr/0003-merge-gate-push-allowlist.md index b593d43..1adedb4 100644 --- a/docs/adr/0003-merge-gate-push-allowlist.md +++ b/docs/adr/0003-merge-gate-push-allowlist.md @@ -126,4 +126,6 @@ was not before — with no team in the org, the allowlist's team dimension is un base permission itself is **not** Terraform-managed: `default_repository_permission` is live-only org state, so the invariant this ADR declares is enforced by `protection.tf` alone and does not depend on the base grant staying put. Codifying the org settings -alongside it is open work, not a gap in the gate. +alongside it is open work owned by **#176**, not a gap in the gate — that issue also +carries the decision on whether the CI apply should be able to mutate org settings at +all, which is a question about the rails rather than about this ADR.