Require fresh authorization for consequential pull reviews #508

2026-08-10T19:02:31Z

timmy commented

2026-08-10 19:02:31 +00:00

Closes #507

Requires a fresh, single-use authorization bound to the exact PR, head SHA, and approve/request-changes decision. Closed-app delivery now holds these reviews for explicit foreground authorization, preserves the original operation ID and feedback, exposes an Authorize & send review action, and emits a truthful private receipt. Comment-only reviews remain frictionless.

Tests: python3 -m pytest tests/ -q (1022 passed).

Closes #507 Requires a fresh, single-use authorization bound to the exact PR, head SHA, and approve/request-changes decision. Closed-app delivery now holds these reviews for explicit foreground authorization, preserves the original operation ID and feedback, exposes an Authorize & send review action, and emits a truthful private receipt. Comment-only reviews remain frictionless. Tests: `python3 -m pytest tests/ -q` (1022 passed).

timmy added 1 commit 2026-08-10 19:02:32 +00:00

feat: authorize consequential pull reviews (Closes #507 )

CI / lint (pull_request) Successful in 1m3s

Details

CI / build-release (pull_request) Successful in 6s

Details

CI / release-candidate (pull_request) Has been skipped

Details

2a6f2ab12d

timmy merged commit 28e70f6415 into main

2026-08-10 19:04:01 +00:00

timmy referenced this issue from a commit

2026-08-10 19:04:03 +00:00

Merge pull request 'Require fresh authorization for consequential pull reviews' (#508) from timmy/507-fresh-review-authorization into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#508