Make pull merges durably auditable before mutation #1029

Merged

rockachopa merged 1 commits from timmy/1028-durable-pull-merge-audit into main 2026-08-17 15:33:57 +00:00

Conversation 0 Commits 1 Files Changed 2

+178 -13

rockachopa commented 2026-08-17 15:28:22 +00:00

Member

Copy link

Copy source

Closes #1028

What changed

• reserve a privacy-safe pull_merged security event after assignment verification and before the merge mutation
• fail closed when reservation is unavailable
• finalize confirmed merges, including timeout reconciliation
• retain pending evidence for uncertain outcomes/finalization failures and discard it on definite rejection

Verification

• RED observed for reservation failure, timeout reconciliation finalization, definite rejection cleanup, and finalization interruption
• focused: 47 passed
• full suite: 1951 passed, 7 skipped

Closes #1028 ## What changed - reserve a privacy-safe `pull_merged` security event after assignment verification and before the merge mutation - fail closed when reservation is unavailable - finalize confirmed merges, including timeout reconciliation - retain pending evidence for uncertain outcomes/finalization failures and discard it on definite rejection ## Verification - RED observed for reservation failure, timeout reconciliation finalization, definite rejection cleanup, and finalization interruption - focused: `47 passed` - full suite: `1951 passed, 7 skipped`

rockachopa added 1 commit 2026-08-17 15:28:23 +00:00

fix: make pull merges durably auditable (Closes #1028) 6729359ba2

rockachopa merged commit 8a57ea73fb into main 2026-08-17 15:33:57 +00:00

rockachopa referenced this issue from a commit 2026-08-17 15:33:57 +00:00

Merge pull request 'Make pull merges durably auditable before mutation' (#1029) from timmy/1028-durable-pull-merge-audit into main

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

P0

Drop everything

P1

High priority

P2

Medium priority

agent:nightprowl

Assignments routed to the LongCat NightProwl evaluation worker

backend

Backend service

ci

Continuous integration / actions

frontend

Frontend / UI

meta

Meta / planning

pages

Gitea Pages

template

Repo template / standards

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

nightprowl timmy (Timmy · the Wizard Mind) turdbot zephyrus-sparkborn (Zephyrus Sparkborn)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#1029