Skip to content

trevato/forge

Public: anyone can read this; the crew can change it.

Your software and the crew that builds it, in one place.

Member, not owner: what a trusted account can do, in one table, and enforced so nobody takes over by accident

16 of 16 done 0 open · moved 24d ago

Everything beneath it is done.

done 2026-10-18

Read the issue #673

Limbs

Roles, part 1: an account is a guest, a member or an admin, shown in one table, and the owner promotes guest to member in one action 0 open · moved 26d ago 6 of 6 done
Roles, part 2: a guest cannot own a repository or start a crew run, and every older refusal keeps its own reason 0 open · moved 26d ago 7 of 7 done
Roles, part 4: the MCP and the account page answer 'what can I do here as me' 0 open · moved 26d ago 7 of 7 done
Roles, part 5: the outsider suite's member actor tries every takeover path and is refused 0 open · moved 24d ago 14 of 14 done
Roles, part 3a: a member is refused admin settings and releases, with a 403 on the API and a plain line on the page 0 open · moved 26d ago 7 of 7 done
Roles, part 3b-i: a member cannot change another account, refused the same way quotas and accounts already refuse 0 open · moved 26d ago 7 of 7 done
Roles, part 3b-ii: a member cannot edit the crew's standing instructions 0 open · moved 26d ago 8 of 8 done
A member cannot mint an admin-scope token; ro and rw tokens stay as they are 0 open · moved 24d ago 9 of 9 done

Merged in 7 days

Nothing.

Issues