C1-A04 — Reject Git-equivalent protected/repair refs - #21

Merged

LogicDuke merged 17 commits into

cockpit/c1-job-authorityfrom

repair/c1-a04-ref-alias

Aug 21, 2026

Commits on Aug 16, 2026

fix: reject Git-equivalent repair refs
LogicDuke
committed
52f1a79

Commits on Aug 19, 2026

docs: clarify symbolic ref resolution boundary
LogicDuke
committed
c743b65
docs: complete execution boundary ref contract
LogicDuke
committed
fc49e9a

Commits on Aug 20, 2026

docs: make protected parent role-aware
LogicDuke
committed
afba343
Merge pull request #37 from LogicDuke/repair/c1-a04-change-request-target-role
LogicDuke
authored
c8fde78
docs: bind change requests at provider boundary

LogicDuke
and
claude
committed
bf78cf6
docs: allow identity-preserving provider resolution

LogicDuke
and
claude
committed
7810d6e
Merge pull request #39 from LogicDuke/repair/c1-provider-resolution-identity
LogicDuke
authored
0bef03c
Merge pull request #38 from LogicDuke/repair/c1-change-request-provider-binding
LogicDuke
authored
838d8ed
C1: bind repair.push source to authorized ref
LogicDuke
committed
077933d
C1: distinguish repair.push source role

LogicDuke
and
claude
committed
6812607
Merge pull request #41 from LogicDuke/repair/pr040-push-source-role-wording
LogicDuke
authored
1fa4cf6
Merge pull request #40 from LogicDuke/repair/c1-push-source-binding
LogicDuke
authored
6fa3e95
Merge pull request #36 from LogicDuke/repair/c1-a04-exec-boundary-contract
LogicDuke
authored
7444080

Commits on Aug 21, 2026