Require fresh authorization for consequential pull reviews #508

Merged
timmy merged 1 commits from timmy/507-fresh-review-authorization into main 2026-08-10 19:04:01 +00:00
Owner

Closes #507

Requires a fresh, single-use authorization bound to the exact PR, head SHA, and approve/request-changes decision. Closed-app delivery now holds these reviews for explicit foreground authorization, preserves the original operation ID and feedback, exposes an Authorize & send review action, and emits a truthful private receipt. Comment-only reviews remain frictionless.

Tests: python3 -m pytest tests/ -q (1022 passed).

Closes #507 Requires a fresh, single-use authorization bound to the exact PR, head SHA, and approve/request-changes decision. Closed-app delivery now holds these reviews for explicit foreground authorization, preserves the original operation ID and feedback, exposes an Authorize & send review action, and emits a truthful private receipt. Comment-only reviews remain frictionless. Tests: `python3 -m pytest tests/ -q` (1022 passed).
timmy added 1 commit 2026-08-10 19:02:32 +00:00
feat: authorize consequential pull reviews (Closes #507)
All checks were successful
CI / lint (pull_request) Successful in 1m3s
CI / build-release (pull_request) Successful in 6s
CI / release-candidate (pull_request) Has been skipped
2a6f2ab12d
timmy merged commit 28e70f6415 into main 2026-08-10 19:04:01 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#508
No description provided.