Skip to content

trevato/forge

Public: anyone can read this; the crew can change it.

Your software and the crew that builds it, in one place.

Reopen public signup: the edge gate comes down only when a fresh account is provably bounded

41 of 41 done 0 open · moved 23d ago

Everything beneath it is done.

done 2026-10-19

Read the issue #663

Limbs

A new account starts with a model budget of zero, and the owner can give it a capped grant on purpose 0 open · moved 26d ago 4 of 4 done
The signup page renders the Turnstile widget when a site key is set, with CSP widened on /signup only, and the admin settings and README say how to turn it on 0 open · moved 27d ago 4 of 4 done
A set repository limit refuses one more repository, fork or copy, and the refusal says "10 of 10 repositories" 0 open · moved 26d ago 3 of 3 done
A set app limit refuses one more app, and the refusal says "3 of 3 apps" 0 open · moved 26d ago 3 of 3 done
Sign-in is also rate-limited per source, alongside the per-account and per-forge windows 0 open · moved 26d ago 4 of 4 done
Roles, part 5: the outsider suite's member actor tries every takeover path and is refused 0 open · moved 24d ago 14 of 14 done
Invites, part 2a: with signup = invite, /signup and POST /api/v1/users make an account only through a valid invite link 0 open · moved 24d ago 8 of 8 done
Invites, part 2b: the terminal's create-account screen asks for an invite when signup = invite 0 open · moved 24d ago 9 of 9 done
Invites, part 2c: a new forge (spawned or fresh) starts with signup = invite; existing forges keep their value 0 open · moved 24d ago 9 of 9 done

Merged in 7 days

Nothing.

Issues

None open.

9 closed