feat!: refuse workflow-changing writes unless the call allows them; remove set_status; add reassign_action - #7

Merged

baraline merged 30 commits into

feat/content-conversionfrom

feat/workflow-guard

Oct 2, 2026

Commits on Oct 2, 2026

feat(workflow): name what a write may do to a ticket's workflow

baraline
and
claude
committed
2228500
fix(workflow): refuse an encoded slash or a backslash in a path

baraline
and
claude
committed
8b32cfe
fix(workflow): judge a request by every method it names, and cite the vendor

baraline
and
claude
committed
c3605dd
feat(transport)!: refuse a workflow write unless the call allows it

baraline
and
claude
committed
cd19ec2
feat(client)!: take allow_workflow_effect on every writer; refuse a non-numeric action id

baraline
and
claude
committed
11ff68e
test(client): pin the allowed path of every writer; qualify the end-action claim

baraline
and
claude
committed
653cd17
feat(client)!: remove set_status; close_ticket requires allow_workflow_effect

baraline
and
claude
committed
4008b1b
docs(client): cite the workflow page for the status clause; fix two stale counts

baraline
and
claude
committed
0b0c079
test(live): pin WORKFLOW_ID on an action's item read, which end_action's guard needs

baraline
and
claude
committed
ab38629
test(live): scan the newest tickets for the WORKFLOW_ID probe

baraline
and
claude
committed
4fe8a36
feat(actions)!: end_action refuses to end a workflow step unless ADVANCES is allowed

baraline
and
claude
committed
09c8d04
fix(actions): end_action validates its action id and checks the read named it

baraline
and
claude
committed
9788a75
test(live): census what reassigning a workflow step does

baraline
and
claude
committed
c227d35
test(live): make the workflow census gated, safe and conclusive

baraline
and
claude
committed
fe0aadb
test(live): fail a raised census write with a label, not the exception

baraline
and
claude
committed
cc30932
docs(vendor-api-reference): the ticket workflow model, and close O-CLOSE-DEFAULT at tier 1

baraline
and
claude
committed
e8f4161
docs(workflow): re-attribute the status sentence, document workflowstart, name the guard's sets exactly

baraline
and
claude
committed
90c87be
docs(skills): there is no status setter; the workflow guard; check required keywords

baraline
and
claude
committed
7721828
docs(skills): attribute the close-request claims to their evidence; self-test the keyword check

baraline
and
claude
committed
aef541f
docs: changing a ticket's status, the guard in the guide and README, create starts the workflow

baraline
and
claude
committed
c722bc9
docs: restore the unmeasured-WORKFLOW_ID hedge; say who must pass allow_workflow_effect

baraline
and
claude
committed
38726cb
docs(changelog): 0.4.0 is breaking -- the workflow guard

baraline
and
claude
committed
302038d
docs(changelog): scope the workflow-guard claims to their evidence

baraline
and
claude
committed
0283b2f
feat(actions): add reassign_action, backed by a live census

baraline
and
claude
committed
15fd44b
docs: record the reassign_action census, and say how to escalate a step

baraline
and
claude
committed
8ab8b8e
docs: scope the reassign_action census to the tickets that carry it

baraline
and
claude
committed
e438e00
fix(workflow): name the end-action route, and classify configured override headers

baraline
and
claude
committed
99f3cc4
docs: make the 0.4.0 breaking-change list true, and hedge the absence claims

baraline
and
claude
committed
448858e
test: use a synthetic RFC where a real instance ticket number was quoted

baraline
and
claude
committed
c4b8231
Merge feat/content-conversion into feat/workflow-guard

baraline
and
claude
committed
6143c23

Navigation Menu

feat!: refuse workflow-changing writes unless the call allows them; remove set_status; add reassign_action - #7

feat!: refuse workflow-changing writes unless the call allows them; remove set_status; add reassign_action#7
baraline merged 30 commits into
feat/content-conversionfrom
feat/workflow-guard

Commits on Oct 2, 2026

feat(workflow): name what a write may do to a ticket's workflow

fix(workflow): refuse an encoded slash or a backslash in a path

fix(workflow): judge a request by every method it names, and cite the vendor

feat(transport)!: refuse a workflow write unless the call allows it

feat(client)!: take allow_workflow_effect on every writer; refuse a non-numeric action id

test(client): pin the allowed path of every writer; qualify the end-action claim

feat(client)!: remove set_status; close_ticket requires allow_workflow_effect

docs(client): cite the workflow page for the status clause; fix two stale counts

test(live): pin WORKFLOW_ID on an action's item read, which end_action's guard needs

test(live): scan the newest tickets for the WORKFLOW_ID probe

feat(actions)!: end_action refuses to end a workflow step unless ADVANCES is allowed

fix(actions): end_action validates its action id and checks the read named it

test(live): census what reassigning a workflow step does

test(live): make the workflow census gated, safe and conclusive

test(live): fail a raised census write with a label, not the exception

docs(vendor-api-reference): the ticket workflow model, and close O-CLOSE-DEFAULT at tier 1

docs(workflow): re-attribute the status sentence, document workflowstart, name the guard's sets exactly

docs(skills): there is no status setter; the workflow guard; check required keywords

docs(skills): attribute the close-request claims to their evidence; self-test the keyword check

docs: changing a ticket's status, the guard in the guide and README, create starts the workflow

docs: restore the unmeasured-WORKFLOW_ID hedge; say who must pass allow_workflow_effect

docs(changelog): 0.4.0 is breaking -- the workflow guard

docs(changelog): scope the workflow-guard claims to their evidence

feat(actions): add reassign_action, backed by a live census

docs: record the reassign_action census, and say how to escalate a step

docs: scope the reassign_action census to the tickets that carry it

fix(workflow): name the end-action route, and classify configured override headers

docs: make the 0.4.0 breaking-change list true, and hedge the absence claims

test: use a synthetic RFC where a real instance ticket number was quoted

Merge feat/content-conversion into feat/workflow-guard