Goal
Define the canonical GitHub settings every repo should converge to, and realign the stale required-check contexts that deadlock PRs estate-wide.
Do
- Specify: merge-button options, branch-protection shape, feature toggles, and the required status checks = the 🔴 Gate tier (see CI-CRITICALITY promotion issue).
- Realign stale required contexts: the
governance / * group is stale on ~190 repos (renamed/regrouped → context no longer matches emitted name). Define the rename mapping.
- Confirm true deadlocks via the farm
ci-deadlock-audit union signal before writes. Branch-protection writes are owner-gated.
Context
WS2 audit: 336/373 protected, 234 with required checks, 102 toothless. Report in dev-notes/estate-settings-audit-2026-06-22/. Execution/automation tracked in reposystem.
Goal
Define the canonical GitHub settings every repo should converge to, and realign the stale required-check contexts that deadlock PRs estate-wide.
Do
governance / *group is stale on ~190 repos (renamed/regrouped → context no longer matches emitted name). Define the rename mapping.ci-deadlock-auditunion signal before writes. Branch-protection writes are owner-gated.Context
WS2 audit: 336/373 protected, 234 with required checks, 102 toothless. Report in
dev-notes/estate-settings-audit-2026-06-22/. Execution/automation tracked in reposystem.