inbox: relay 1 decision(s) from Alexander (ids 28)

decisions/2026-10-07.md

@@ -0,0 +1,20 @@
+# Inbox decisions relayed — 2026-10-07
+
+Decisions relayed from Alexander's Inbox (artifact `inbox`) by the inbox-decision-relay cron.
+Evidence: `artifact.invoke_action` `listitems` responses (approved/rejected/deferred), run 2026-10-07 ~20:29 EDT.
+
+## Item 28 — approved
+
+- **id:** 28
+- **summary:** Cassian's push access: grant collaborator write or route PR-only
+- **escalated_by:** Zephyrus
+- **decision:** approved
+- **decided note:** Alexander ordered 'Give cassian write' (2026-10-07). Timmy had applied it 2026-10-06 ~23:49Z via Gitea API (PUT collaborators/cassian, permission: write); documented in pipe `decisions/2026-10-07-cassian-write-grant.md` (commit 3ef32bb), closing the audit gap. Cassian is now an active write collaborator — committed 7aff3c0 (Q5 recount) on 2026-10-07.
+- **created_at (UTC):** 2026-10-07T22:41:28.460Z
+- **decided_at (UTC):** 2026-10-07T23:07:32.708Z
+- **proposed_action:** Approve: grant cassian collaborator write on stackchain/troupe-standup in Gitea settings. Defer: PR-only path — Cassian works on branches and Timmy reviews/merges.
+- **evidence:** Gitea user cassian (id 45), sealed token at troupe-standup commit a5717ec (`access/cassian-forge-token.age`). Cassian was absent from the repo collaborator list, so his push attempts failed — credentialed but write-blocked; no check-ins or commits from him in the pipe as of 2026-10-07. The grant had to be made by Alexander in the Gitea settings UI and could not be made on his behalf. Note: JOIN-THE-TROUPE.md omits the collaborator grant as an onboarding step (flagged in pipe queue record 08f2d90). Separate from the broader credential-flow question for the Mac wizard and Mistral builds.
+- **queue line it answers:** WORK-QUEUE.md, new-wizard onboarding section (sixth tick, 2026-10-06): "Open, gated on Alexander — new item, his one line: add `cassian` as collaborator with **write** (finishing the provisional admission), or hold the PR-only path." Alexander chose the write grant — verbatim Telegram order "Give cassian write" 2026-10-07 21:57:02Z (chat 7635059073), 29s before the grant decision file was committed. The grant itself was applied 2026-10-06T23:49:28Z via `PUT /api/v1/repos/stackchain/troupe-standup/collaborators/cassian` (permission: write) — i.e. action-then-ratification, not prior authorization; the control-plane correction appended to `decisions/2026-10-07-cassian-write-grant.md` documents this honestly. The audit gap is closed by ratification and cassian's access stands.
+- **relayed_at (UTC):** 2026-10-08T00:30:30Z
+
+Note for the troupe: the write grant is settled — approved means the write path, not PR-only. Cassian committed 7aff3c0 (Q5 recount: 312 open issues) on 2026-10-07. No troupe action remains on the grant itself. Two related gates remain Alexander's and are NOT answered by this decision: (1) the new-wizard credential flow (local Mac wizard + Mistral builds); (2) the JOIN-THE-TROUPE.md omission of the collaborator grant as an onboarding step.