test(forge): live-oracle GitHub legs authenticate as Apps, not PATs (RIG-3096) - #837
test(forge): live-oracle GitHub legs authenticate as Apps, not PATs (RIG-3096)#837rigel-mintaka wants to merge 2 commits into
Conversation
…RIG-3096) Swap the forge live-contract oracle's author + reviewer identities from fine-grained bot PATs to GitHub App installation-token sources, exercising the production mint path (RS256 App JWT -> installation access token) the deployed server uses after the RIG-3090 credential cutover. The Linear legs stay on the app-actor token (client_credentials mint); the retained-Linear-user-cred plan from the frozen record is dropped per Matt (agent delegation only, moving off the user model). Refs RIG-3096 Co-authored-by: Matt Wilkinson <matt@rigel.build>
|
Merging to
After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here |
|
Compass engineering docs preview: https://compass-forge-rig-3096-live.compass-eng-docs.pages.dev Deployed from |
…docs (RIG-3096) Review low-severity doc-precision fixes on PR #837: - Note requireLive eagerly builds BOTH App identities regardless of which the caller uses, so a reviewer-only misconfig still fails an author-only test loud (the intended all-creds-or-skip gate). - Clarify a malformed PEM is caught at first mint on a live leg (lazy key resolution), not at liveAppSource setup \u2014 still red, never silent-green. Comment-only; no behavior change. Refs RIG-3096 Co-authored-by: Matt Wilkinson <matt@rigel.build>
|
Status: review-clean; held draft on purpose; unblock is RIG-3151. Swaps the forge live-oracle's GitHub author+reviewer identities from bot PATs to GitHub App installation-token sources (RIG-3096, frozen design section T5). Linear legs stay app-actor (no user credential, per the pivot off the user model). Why the Unblock chain:
Held draft precisely so it cannot land before step 2: landing with the secrets unset would red main's |
1 participant
Swap the forge live-contract oracle's author + reviewer identities from
fine-grained bot PATs to GitHub App installation-token sources, exercising
the production mint path (RS256 App JWT -> installation access token) the
deployed server uses after the RIG-3090 credential cutover.
The Linear legs stay on the app-actor token (client_credentials mint); the
retained-Linear-user-cred plan from the frozen record is dropped per Matt
(agent delegation only, moving off the user model).
Refs RIG-3096
Co-authored-by: Matt Wilkinson matt@rigel.build