Skip to content

break-glass: sweep expired grants from on_call - #141

Closed
lex00 wants to merge 2 commits into
mainfrom
desk/break-glass/on-call
Closed

lex00 wants to merge 2 commits into
mainfrom
desk/break-glass/on-call

Conversation

@lex00

@lex00 lex00 commented Sep 12, 2026

Copy link
Copy Markdown
Contributor

The cloud already ended these grants at their expiry (layer 1). This PR removes the artifacts (layer 2), and the drift watch stops reporting them once it merges (layer 3).

lex00 and others added 2 commits September 12, 2026 02:09
…lure

The sweep reused whatever local branch of the same name it found. A sweep
branch holds one edit against what main declares, so a leftover from an
earlier run makes a pull request whose diff is the inverse of its title, where
the base has moved on and the stale branch reads as adding back the very grant
the sweep means to retire. It succeeds and it lies, which is worse than the
same bug in reconcile, where it at least failed.

It now starts from the base every time, forces the push under the desk prefix
guard for the reason reconcile does, and says so when a push fails instead of
sending the next command off to fail for an unrelated reason.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013JoNB9iUGjsiwRAJvyZPrt
@lex00

lex00 commented Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

Closed, empty.

@lex00 lex00 closed this Sep 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant