security(binjovi): close A3 batch 2 retirement window #289

Merged

binjovi-bot merged 1 commit from security/a3-batch2-retirement-access into trunk

2026-09-05 12:35:27 +00:00

sean commented

2026-09-05 12:34:46 +00:00

Owner

Summary\n\n- close temporary Batch 2 collaborator delete access\n- keep only the separate Tetragon retirement name\n- keep Hello Lib and Libseanfarm Operator grants absent from desired state\n\n## Live evidence before cleanup\n\nBoth Batch 2 CRs were `NotFound`, direct Forgejo reads returned HTTP 404, native authority was authorized, and the Binjovi and GitMirror Flux owners were Ready at the exact preparation revision.\n\n## Verification\n\n- red Role guards rejected the open Batch 2 names\n- full `tests/check.sh` passes\n- focused guards and Kustomize renders pass\n\nNo Docker or Podman was used.

## Summary\n\n- close temporary Batch 2 collaborator delete access\n- keep only the separate Tetragon retirement name\n- keep Hello Lib and Libseanfarm Operator grants absent from desired state\n\n## Live evidence before cleanup\n\nBoth Batch 2 CRs were `NotFound`, direct Forgejo reads returned HTTP 404, native authority was authorized, and the Binjovi and GitMirror Flux owners were Ready at the exact preparation revision.\n\n## Verification\n\n- red Role guards rejected the open Batch 2 names\n- full `tests/check.sh` passes\n- focused guards and Kustomize renders pass\n\nNo Docker or Podman was used.

sean added 1 commit

2026-09-05 12:34:46 +00:00