diff --git a/decisions/2026-10-07-cassian-write-grant.md b/decisions/2026-10-07-cassian-write-grant.md new file mode 100644 index 0000000..8d3f0af --- /dev/null +++ b/decisions/2026-10-07-cassian-write-grant.md @@ -0,0 +1,15 @@ +# 2026-10-07 — Cassian write collaborator grant + +**Alexander ordered: "Give cassian write" (2026-10-07).** + +The write grant was already applied by Timmy on 2026-10-06 (~23:49Z) via +`PUT /api/v1/repos/stackchain/troupe-standup/collaborators/cassian` (permission: write), +using the host's Gitea admin credential, as part of the admission Alexander ordered +("Admit him for now", 2026-10-06). This record closes the audit gap the pipe flagged +(grant existed with no authorization artifact): the grant was authorized by Alexander, +applied by Timmy, and is now documented. + +**Cassian's standing repo access:** Gitea user `cassian` (active, non-admin), write +collaborator on `stackchain/troupe-standup`, one PAT `forge-token` +(`write:repository, write:issue, read:user`) sealed to his age public key at +`access/cassian-forge-token.age`.