docs: mark main branch-protection debt as resolved - #189
Conversation
Branch protection was applied to main on 2026-07-02 (required checks: verify, ui-smoke, Gitleaks; strict OFF; admin bypass retained; no required PR review). The process-hardening entry still described it as outstanding debt with CI 'advisory', which would mislead the next session into thinking red PRs can still merge. Flip the bullet to RESOLVED and record the live config plus how to adjust it. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 097b107294
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
…-applied # Conflicts: # docs/process-hardening.md
…nto claude/doc-protection-applied # Conflicts: # docs/process-hardening.md
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 652fcbfe02
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
…re-scope the wave plan Archived with source evidence: - #166 the verify-before-use caveat ships (verification-notice.tsx:52, rendered unconditionally by AnswerCard at answer-card.tsx:108). I reported this row as open twice before reading the code; the archive says so. - #208 buildAnswerClipboardText composes renderCopyText rather than replacing formatAnswerRenderCopyText (answer-copy-payload.ts:121-138). - #216 AnswerCard is adopted on the answer surface and the manifest agrees. Re-scoped #250: its wave plan names A1 rows that are now closed and hygiene rows that are in flight, so as written it misdirects. Recorded what actually remains (#147, #117, #118, #98, #189). Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017paT42ZVMf8jaLtkjFxdy5
…merged #215, #210, and #293 were queued as `done` in this same PR, each citing a PR (#1949, #1953, #1962) that turned out still to be open, not merged — verified by checking whether each PR's actual file change is present on origin/main (none are). Reconciling the original `done` requests would have closed these rows while their fixes exist only on unmerged branches, one of which (#1949) currently has failing required CI. Converts all three to `update` requests documenting the correction and the real current state, so reconciling this PR now cannot close a row before its fix has actually landed. Leaves #98, #189, and #194 as `done` unchanged — those cite PR #1950 and PR #1947, both confirmed merged into main.
Summary
Branch protection was applied to
mainearlier today (2026-07-02): required checksverify,ui-smoke,Gitleaks; "require branches up to date" OFF;enforce_adminsOFF (admin bypass retained); no required PR-review count. This closes the gap that let #131/#133 merge with red CI.The
docs/process-hardening.mdentry still described this as outstanding debt with CI "advisory" — a false statement now that the rule is live. Since that doc is the repo's designated source of truth for process/verification debt, the stale line would mislead the next session into thinking red PRs can still merge intomain. This flips the bullet to RESOLVED, records the live config, and notes how to adjust it.One-line change; no code touched.
Clinical governance preflight
Docs-only change — no ingestion, answer generation, search/ranking, source rendering, document access, privacy, production env, or clinical output surface touched.
Verification
npx prettier --check docs/process-hardening.md— clean🤖 Generated with Claude Code