teahubxyzandclaude 8c6ad054b9 security: a real CI check before auto-merge; .github/ always protected (#46) ...

- checks(): the worker's own time/worker-run status can block or delay a merge but never counts as green
- dispatch_ci(): with no other check on the head, Time runs TIME_CI_WORKFLOW (ci.yml, workflow_dispatch) on the PR branch and waits; beat ci-dispatched, once
- ci.yml accepts workflow_dispatch
- touches_protected(): .github/ is always protected, whatever TIME_PROTECTED says
- labs-aicharts.yml: deploy URL via env, not ${{ }} in the script
- tests: worker-status-only no longer merges; dispatch once; real context merges


Claude-Session: https://claude.ai/code/session_01CYHXFvWMCs1GUmRmpySqQ6

Co-authored-by: claude <noreply@anthropic.com>

2026-10-13 21:33:35 -07:00

..

ci.yml

security: a real CI check before auto-merge; .github/ always protected (#46)

2026-10-13 21:33:35 -07:00

doctor.yml

venture backends on Cloudflare: a domain, a Worker, a database and AI per venture

2026-10-12 10:50:13 -07:00

heartbeat.yml

security: harden Time for a public repo (#45)

2026-10-13 21:24:42 -07:00

labs-aicharts.yml

security: a real CI check before auto-merge; .github/ always protected (#46)

2026-10-13 21:33:35 -07:00

mention.yml

mention: only owner/members/collaborators trigger seats (public repo)

2026-10-10 20:08:07 -07:00

update.yml

venture backends: accounts with passkeys

2026-10-12 18:46:56 +00:00

venture.yml

security: harden Time for a public repo (#45)

2026-10-13 21:24:42 -07:00