Skip to content

chore(#60): grant writers and triagers access to epic-creator-eval - #61

Merged
ralphbean merged 1 commit into
mainfrom
agent/60-epic-creator-eval-access
Nov 13, 2026
Merged

ralphbean merged 1 commit into
mainfrom
agent/60-epic-creator-eval-access

Conversation

@fullsend-ai-coder

Copy link
Copy Markdown
Contributor

Summary

Adds the standard team grants for epic-creator-eval in peribolos.yaml, matching epic-creator:

  • writers → epic-creator-eval: write
  • triagers → epic-creator-eval: triage

With only the org default read, Epic Creator contributors can't dispatch the evaluation workflow or triage its issues and PRs. The change only adds access. The existing admins (formerly core) admin and maintainers maintain grants stay, as do the direct collaborators (jctanner, ravelley: admin). No other general team applies.

Security exposure (please confirm)

  • write allows running paid workflows, changing workflows, and reading repository secrets and raw evaluation artifacts.
  • triage allows reading artifacts.

Testing

  • python3 scripts/lint.py: passes (run with Python 3.14, because 3.15 isn't available in the sandbox).
  • scan-secrets: passes.
  • pre-commit: couldn't fetch the remote hook repos (TLS error in the sandbox). The applicable hooks were run directly (governance lint, plus secret scanning through scan-secrets). ruff and shuck don't apply to YAML.
  • Not run: the peribolos dry run, because the sandbox has no org token. It should plan exactly two team-repo grants on epic-creator-eval (writers: write, triagers: triage) and no other changes.

Coordination

Open PR #30 (team split for #1) edits the same triagers/writers blocks for different repos. Whichever PR merges second will probably need a small rebase.

🤖 Generated with Claude Code


Closes #60

Post-script verification

  • Branch is not main/master (agent/60-epic-creator-eval-access)
  • Secret scan passed (gitleaks — 4e2692b276c62db823d67918148981ffcc6c2c26..HEAD)
  • PR body secret scan passed (gitleaks — no-git)
  • Final PR description secret scan passed (gitleaks — no-git)

Epic Creator contributors on the writers and triagers teams can reach
epic-creator but only have the org default read on epic-creator-eval,
which does not let them dispatch the evaluation workflow or triage its
issues and PRs. Add the standard grants (writers: write, triagers:
triage) alongside epic-creator. Existing admins/maintainers grants and
the direct collaborators are unchanged; the change is additive only.

Exposure for review: write allows running paid workflows, changing
workflows, and reading secrets and raw eval artifacts; triage allows
reading artifacts.

pre-commit could not fetch remote hook repos in the sandbox (TLS
error). Ran scan-secrets and scripts/lint.py (Python 3.14; 3.15 not
available) directly; both passed. ruff/shuck do not apply to YAML.
The peribolos dry run was not run (no org token in the sandbox); it
should plan exactly two team-repo grants on epic-creator-eval.

Closes #60

Assisted-By: Claude Opus 5.5(Claude Code)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@fullsend-ai-coder
fullsend-ai-coder Bot requested a review from a team as a code owner November 13, 2026 14:56
@fullsend-ai-coder fullsend-ai-coder Bot added the ready-for-review Triggers review agent dispatch label Nov 13, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Nov 13, 2026 •

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:58 PM UTC · Completed 3:04 PM UTC

Commit: 0f9d858 · View workflow run →

Runtime: pi · Model: sonnet → claude-sonnet-5-5 · Effort: high · Cost: $0.84

@ralphbean
ralphbean merged commit ce2fd1c into main Nov 13, 2026
34 of 35 checks passed
@ralphbean
ralphbean deleted the agent/60-epic-creator-eval-access branch November 13, 2026 15:01
@fullsend-ai-review

Copy link
Copy Markdown

Review skipped — this PR is already merged.

The /fs-review command only reviews open PRs/MRs.

Posted by fullsend post-review check

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ready-for-review Triggers review agent dispatch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Grant standard team access to epic-creator-eval

1 participant