feat: let anyone publish a progress report - #1

Merged

kim-em merged 17 commits into

mainfrom

feat/publishers-file

Jul 31, 2026

Commits on Jul 31, 2026

feat: make publishing a reviewed list, not one hard-coded account

kim-em
and
claude
committed
9504d13
fix: reject line breaks the allowlist's reviewer would not see

kim-em
and
claude
committed
8720c71
feat: let anyone publish a progress report, bounded by the window

kim-em
and
claude
committed
9708f52
fix: enforce the reporting cadence on the server, not only in the planner

kim-em
and
claude
committed
10347a8
fix: reports may only be added to roadmaps that already exist

kim-em
and
claude
committed
4533eaf
fix: do not parse a raw gh --jq value as JSON

kim-em
and
claude
committed
20fcfb6
fix: close eight findings from an adversarial review

kim-em
and
claude
committed
4f6593e
fix: verify a first report's start rather than refusing it

kim-em
and
claude
committed
c386f4a
fix: a stranger must not be able to decide what this operator publishes

kim-em
and
claude
committed
d2a5950
fix: grant the refusal comment its token, and only where it is used

kim-em
and
claude
committed
9d4e51b
fix: check the bootstrap cursor against history instead of trusting the API

kim-em
and
claude
committed
fa62809
fix: start a roadmap at its earliest MERGED pull request, not its lowest number

kim-em
and
claude
committed
768957a
test: fix a stub left behind by the merge-order change

kim-em
and
claude
committed
7dce7ee
fix: check a first report strands nothing, instead of recomputing where it starts

kim-em
and
claude
committed
fde6eac
fix: stop pretending to verify where a roadmap's history begins

kim-em
and
claude
committed
fb4ed6c
fix: reports are summaries, not catalogues

kim-em
and
claude
committed
3e2ac54
feat: own the writing prompts here, and serve them to the worker

kim-em
and
claude
committed
687ce45

Navigation Menu

Uh oh!

feat: let anyone publish a progress report - #1

feat: let anyone publish a progress report#1
kim-em merged 17 commits into
mainfrom
feat/publishers-file

Commits on Jul 31, 2026

feat: make publishing a reviewed list, not one hard-coded account

fix: reject line breaks the allowlist's reviewer would not see

feat: let anyone publish a progress report, bounded by the window

fix: enforce the reporting cadence on the server, not only in the planner

fix: reports may only be added to roadmaps that already exist

fix: do not parse a raw gh --jq value as JSON

fix: close eight findings from an adversarial review

fix: verify a first report's start rather than refusing it

fix: a stranger must not be able to decide what this operator publishes

fix: grant the refusal comment its token, and only where it is used

fix: check the bootstrap cursor against history instead of trusting the API

fix: start a roadmap at its earliest MERGED pull request, not its lowest number

test: fix a stub left behind by the merge-order change

fix: check a first report strands nothing, instead of recomputing where it starts

fix: stop pretending to verify where a roadmap's history begins

fix: reports are summaries, not catalogues

feat: own the writing prompts here, and serve them to the worker