stack 1/5: add contribution intake firewall - #900

Closed

Wibias wants to merge 8 commits into

devfrom

agent/pr-contribution-firewall

Commits on Aug 2, 2026

chore: add contribution firewall
Wibias
committed
bbe6887

Commits on Aug 3, 2026

refactor(ci): remove unused test helper parameter
Wibias
committed
ed09e07
refactor(ci): reuse shared push-permission helper in admission gate
Wibias
committed
4a59642
fix(ci): reject closed approved issues and classify renamed and bunfig files
Wibias
committed
4d8a9d0
fix(ci): bound issue lookups, fail closed on lookup errors, support manual re-run
Wibias
committed
9e9db37
fix(ci): isolate stale label and state for author-action PRs
Wibias
committed
78817c5
docs: sync admission design record with hardened gate
Wibias
committed
7684973
fix(ci): scope stale workflow permissions to the stale job
Wibias
committed
df2b934