touches_protected() hard-coded all of .github/ and .gitea/ on top of TIME_PROTECTED, so the engine under .github/time/ could never land without a human whatever the variable said. Only .github/workflows/ and .gitea/workflows/ stay hard-coded; DEFAULT_PROTECTED is unchanged, so a repo that has not set the variable behaves exactly as before. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017K4vyY3yUD3GsvoZaAtKkD