Pillar: P0 Trust. Found in the publish gate's anonymous-visitor pass (a local forge seeded with a public repository).
GET /api/v1/repos/:owner/:name/crew answers anyone who can read the repository, a stranger included, with each agent's brief (its standing instructions), model and budget. A brief is the owner's configuration, not the repository's content. On publish, every crew brief on trevato/forge would be readable by anyone.
Acceptance criteria
[ ] A reader (and a stranger on a public repository) sees the crew's names and what they do, never a brief, model or budget. Those stay with the repository's writers and the forge's owner, on the API, MCP, the web crew pages and the manifest.
[ ] Refusing test: test/crew-brief-audience.test.ts: "a stranger and a reader see the crew's names, never its brief, model or budget"; "a writer and the forge's owner still see them".
Pillar: P0 Trust. Found in the publish gate's anonymous-visitor pass (a local forge seeded with a public repository).
GET /api/v1/repos/:owner/:name/crewanswers anyone who can read the repository, a stranger included, with each agent's brief (its standing instructions), model and budget. A brief is the owner's configuration, not the repository's content. On publish, every crew brief on trevato/forge would be readable by anyone.Acceptance criteria
test/crew-brief-audience.test.ts: "a stranger and a reader see the crew's names, never its brief, model or budget"; "a writer and the forge's owner still see them".