Skip to content

The controls for the checks that already run - #288

Merged
robertblust merged 2 commits into
mainfrom
controls-for-the-checks-that-already-run
Oct 14, 2026
Merged

robertblust merged 2 commits into
mainfrom
controls-for-the-checks-that-already-run

Conversation

@robertblust

Copy link
Copy Markdown
Owner

companygraph/mental-model#139 gave the model a control for each mechanism that already refused something in our repositories and was named nowhere, and the three rules those controls needed: what is cited from outside the model is not rewritten, a secret is never written into a repository, and a worktree is removed only once its plan is done. The Owner reviewed each entry there on its own. This instance takes the same ten entries, adapted where its mechanism differs: mcp.blust.ch in the registry and served-commit controls; no objective for the cited rule to serve; no Contribution phase; the first person the rest of this model writes in; and, since these repositories sit under a personal account, which can restrict no push and has no default for push protection, a control that rests on no collaborator being invited and one that says push protection is turned on repository by repository. The Owner accepted the adapted lines before they were committed.

Verified: companygraph check at 0.94.0 passes, mechanical checks and the form, and each page holds to its schema's writing rules on a reading of them; the host's publish and deploy workflows and its registry environment were read from GitHub, and every link resolves.

Sibling: companygraph/mental-model#139 (merged).

🤖 Generated with Claude Code

robertblust and others added 2 commits October 14, 2026 23:14
companygraph/mental-model took a control for each mechanism that already refused something in our repositories and named nowhere, with the three rules they needed (companygraph/mental-model#139). This instance takes the same ten entries, adapted where its mechanism differs: its own MCP host in the registry and served-commit controls, no objective for the cited rule to serve, and, where the repositories sit under a personal account or the organization grants no write by default, the text that says who can push and how push protection reaches a new repository.

Verified: companygraph check at 0.94.0 passes, mechanical checks and the form, and each page holds to its schema's writing rules on a reading of them; the host's publish and deploy workflows and its registry environment were read from GitHub.

Process: Delivery
Phase: Implement
Track: Prose
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Main moved by one pull request, the film experience, while this branch waited, and the ruleset takes a branch only once it is up to date with main. No file overlaps.

Verified: companygraph check at 0.94.0 passes on the merged tree, mechanical checks and the form.

Process: Delivery
Phase: Implement
Track: Code
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@robertblust
robertblust merged commit 1690ead into main Oct 14, 2026
2 checks passed
@robertblust
robertblust deleted the controls-for-the-checks-that-already-run branch October 14, 2026 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant