Skip to content

chore: persist NightOwl ruleset rollout artifacts - #81

Merged
twistedmelonman merged 1 commit into
mainfrom
chore/persist-nightowl-rollout-artifacts
May 1, 2026
Merged

chore: persist NightOwl ruleset rollout artifacts#81
twistedmelonman merged 1 commit into
mainfrom
chore/persist-nightowl-rollout-artifacts

Conversation

@twistedmelonman

Copy link
Copy Markdown
Member

Summary

  • Adds postscript to docs/plans/2026-04-30-required-workflows-nightowlstudiollc.md documenting today's rollout attempt and why it was paused. Captures empirical findings (Team-plan downgrades evaluate; cleanup-PR chicken-and-egg; --admin doesn't bypass rulesets; scope expansion doesn't fire workflows on existing PRs) and the open questions to answer before any future re-attempt.
  • Persists three operational scripts from /tmp so they survive next reboot:
    • nightowl-ruleset-setup.sh — Phase 1+2 setup (works)
    • nightowl-restore-blocking-review.sh — emergency restore (works)
    • nightowl-ruleset-rollout.sh.broken — Phase 4 rollout with known re-arm bug. The .broken suffix means it can't be accidentally executed and shell-lint hooks ignore it. Header inside documents the bug and the fix needed before reuse.

Test plan

🤖 Generated with Claude Code

Adds postscript to the required-workflows plan documenting the 2026-04-30
attempt: paused after multiple failure modes the original plan didn't
anticipate (Team-plan downgrades evaluate; cleanup-PR chicken-and-egg;
--admin doesn't bypass rulesets; scope expansion doesn't fire workflows on
existing PRs). Captures empirical findings and open questions.

Persists three operational scripts from /tmp:
- nightowl-ruleset-setup.sh: Phase 1+2 setup (works)
- nightowl-restore-blocking-review.sh: emergency restore that put per-repo
  files back after the cleanup attempt left repos uncovered (works)
- nightowl-ruleset-rollout.sh.broken: Phase 4 rollout script with known
  re-arm bug (step 1 unconditionally sets enforcement=active, overrides
  intentional disables). Saved with .broken suffix so it cannot be
  accidentally re-run and so shell-lint hooks ignore it. Header inside
  documents the bug and the fix needed before reuse.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@claude

claude Bot commented May 1, 2026

Copy link
Copy Markdown

<!-- claude-blocking-review sha=aebf48469e2bb3da5f136050ac36a737d15b1cd2 run=25198930138 -->

No changes to workflow files, verdict parsing, allowed-tools, or the escape-hatch path. The diff is limited to a documentation postscript and two operational bash scripts (nightowl-restore-blocking-review.sh and nightowl-ruleset-rollout.sh.broken). The .broken file is intentionally non-executable. No shell-injection vectors, no hardcoded credentials, no reliability regression to the CI pipeline.

VERDICT: PASS

@twistedmelonman
twistedmelonman merged commit e531d0d into main May 1, 2026
3 checks passed
@twistedmelonman
twistedmelonman deleted the chore/persist-nightowl-rollout-artifacts branch May 1, 2026 02:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant