Skip to content

docs(inventory): pii-gate note predates the fail-closed flip — unarmed presents RED now (backend#1409) - #146

Merged
LukasWodka merged 1 commit into
developfrom
docs/1409-pii-inventory-red-inert
Aug 4, 2026
Merged

docs(inventory): pii-gate note predates the fail-closed flip — unarmed presents RED now (backend#1409)#146
LukasWodka merged 1 commit into
developfrom
docs/1409-pii-inventory-red-inert

Conversation

@LukasWodka

@LukasWodkaLukasWodka commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bugbot caught this contradiction reviewing the staging hop (#145, finding "Fail-closed breaks parked denylist"): d2485830 (2026-08-03, #1409 defect 1) made the reusable fail closed when PII_DENYLIST is unset, while the inventory note in the same promotion still said the gate "runs green on every PR without inspecting anything".

The flip is deliberate (an inactive guard must be visible as red — RFC-1405 property 2) and blocks nothing: measured fresh today, pii-gate / pii-check is a required status check nowhere (all 7 public repos × develop/staging/main/master). Once the reusable promotes to main, the 15 public-repo callers turn red-inert until #1409 unparks — the honest presentation of "cannot verify anything".

This PR only rewrites the note to describe that reality. No behavior change.

🤖 Generated with Claude Code


Note

Low Risk
Comment-only change in repo-inventory.yml; no CI behavior or policy keys are modified.

Overview
Updates the repo-inventory.yml comment for .github’s public-pii-gate.yml entry so it no longer says an unarmed gate “runs green on every PR.”

After d2485830 (#1409), the reusable fails closed when PII_DENYLIST is unset—inactive guards show red, not green (RFC-1405). Callers still pinned @main stay green until that revision promotes; then public-repo pii-check jobs go red-inert until #1409 unparks the denylist. The note clarifies that red is intentional and does not block merges because pii-gate / pii-check is not a required status check anywhere (measured 2026-08-04).

Docs-only; no workflow or inventory schema changes.

Reviewed by Cursor Bugbot for commit 40c9d10. Bugbot is set up for automated code reviews on this repo. Configure here.

…sents RED, not green (backend#1409)
Bugbot caught the contradiction on the staging hop (#145): d248583
flipped the reusable to fail closed when PII_DENYLIST is unset, while
this note still said 'runs green without inspecting anything'. Record
how unarmed presents now, and that the red blocks nothing: pii-check
is a required status check nowhere (all 7 public repos x all branches,
measured 2026-08-04).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@LukasWodka
LukasWodka merged commit 64bbbc3 into developAug 4, 2026
9 checks passed
@LukasWodka
LukasWodka deleted the docs/1409-pii-inventory-red-inert branch August 14, 2026 13:53
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@LukasWodka@divyasinghds