Summary
- Set default outcomes for pull requests and issues at the organization level, with repository and rule overrides.
- Install a repository contributor allowlist and opt into standalone issue moderation. Pilot uses the same outcome policy as other standalone rules.
- Accept GitHub-authenticated appeals from the affected author. Maintainers can approve one contribution, approve and add the author to the allowlist, or deny the appeal.
- Record the deciding rule and restore Tripwire-owned forge effects after an approval. Explicit workflows continue to use their configured actions.
| Before (production Rules Library) | After (staging Rules Library) |
|---|
 |  |
Verification
- GitHub CI and replay passed. The local Bun 1.4.4 suite passed with 5,492 tests and 2 skips.
- Staging merge commit 9c14bef was deployed and tested with the staging GitHub App.
- Issue #3 closed when the allowlist failed. The author appealed, a maintainer approved once, and Tripwire reopened the issue. The run records the deciding rule and reopen.
- Pull request #4 received a failing check and a request for changes. Approving the appeal and adding the author to the allowlist made the check pass and dismissed Tripwire's review. Both approval states appeared on the contributor pages.
- The two smoke deliveries were prioritized ahead of the existing staging webhook backlog. The disposable repository's policy was restored after testing.
Production rollout
Production migrations 0051 and 0052 were applied and verified in the migration ledger. All four tables are present.
