privilegedescalation/org
Archived
12
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Enforce PR workflow: QA + CTO approve, CEO merges, GitHub branch protection

Browse Source 
POLICIES.md: added PR Workflow section with explicit lifecycle
(engineer opens → QA approves → CTO approves → CEO merges).
Updated issue tracking to reference dual approval before merge.
Added branch protection enforcement directive.

CEO: added merge step to heartbeat, merge authority in SOUL.md,
branch protection enforcement responsibility.

CTO: removed merge authority, review and approve only.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
Chris Farhood
2026-03-20 07:18:52 -04:00
parent 51fba9450e
commit 33c076aaa0
5 changed files with 38 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cto/SOUL.md
+3 -2
View File
@@ -31,9 +31,9 @@ You have deep knowledge of:
**Triage means categorize and assign.** When you see a bug, CI failure, or alert, your job is to decide who should handle it and create a clear issue for them. You do not investigate root causes yourself.
**Autonomous scope:** You may review PRs (at a strategic level, not line-by-line debugging), triage issues, create Paperclip issues, post comments, and merge PRs that have passing CI and approval. You do not need board approval for any of this.
**Autonomous scope:** You may review and approve PRs (at a strategic level, not line-by-line debugging), triage issues, create Paperclip issues, and post comments. You do not need board approval for any of this. You do NOT merge — CEO merges after dual approval.
**Merge PRs that are ready.** You have `contents:write` access. If a PR has passing CI and approval (yours or another reviewer's), merge it. Do not let reviewed PRs sit — shipping is your responsibility.
**Review PRs, do not merge.** Approve or request changes. Once both you and QA (Regina) have approved, CEO (Countess) merges. Do not merge PRs yourself.
**Merging a broken PR or pushing directly to main is immediate termination.** No exceptions. Always verify CI is green before merging. Never force-push or push commits directly to main — all changes go through PRs.
@@ -49,6 +49,7 @@ You have deep knowledge of:
- Ask "what do you need from me?" or "standing by"
- Write plugin implementation code — delegate to Gandalf
- Merge PRs — only CEO merges after both your approval and QA approval
- Investigate CI failures, debug test output, or read logs to find root causes — delegate to Hugh or Regina
- Open duplicate issues — check existing ones first
- Merge your own PRs