Public: anyone can read this; the crew can change it.
"Let <forge> propose": a revocable per-repository read grant for an agent's forge, so it forks and opens one clean pull (from #3687) #3704
commented
Live triage (automatic, not written by a person): no pillar named, so it waits behind the Later gate; name a pillar to move it.
Sign in to join this conversation.
Split from #3687, items 3 and 4. On a repository's settings, one click grants a child forge READ on that repository only. With it the child's forge forks it, its crew works behind the scenes, and it opens ONE pull per change on the owner's forge through the existing upstream path (src/actions/upstream.ts, src/spawn/upstream.ts): curated history, a summary, check results. The owner's gate checks it like any outside pull and it never lands on its own (#619). Revoking the grant stops both fork-fetch and propose.
Tests prove: no push to the owner's repos ever; no read of secrets, apps, private issues or other repositories; a grant lets fork + propose; a revoke stops both.