Skip to content

Remove personal identifiers from tracked files - #1229

Merged
REPPL merged 9 commits into
mainfrom
chore/no-member-names
Oct 29, 2026
Merged

REPPL merged 9 commits into
mainfrom
chore/no-member-names

Conversation

@REPPL

@REPPL REPPL commented Oct 29, 2026

Copy link
Copy Markdown
Collaborator

Tracked files no longer name any member of the organisation; logins appear only in commit metadata, and the licence's copyright line is the one recorded exception.

  • The code-owners file, the mailmap and the committed identity pin are removed. The paths the code-owners file listed now live in .abcd/work/publish-surface.txt, which the intake runbook's check reads.
  • The citation and the README's BibTeX name the organisation, and the plugin manifests name it as author. The README citation test now accepts an organisation author.
  • Scanner comments, test fixtures and records use personas or roles instead of names.
  • Four dated review files are redacted. The review-files append-only check (RD002) gains a narrow exception for this: a commit trailed Review-Redaction: names whose only change to review files swaps name-shaped text for one of five redaction markers passes; any other edit, deletion or rename still fails, and where a checkout keeps the private name list each removed span must be on it. Review files whose names git quotes are now checked too, where before they were skipped.

With the code-owners file gone, the forge requires no approval on its own, so abcd's build and drain lanes in this repository leave their pull requests open until the facilitator-mode merge gate lands.

Resolves: iss-2610290855523061
Refs: iss-2610290811187925
Refs: iss-2610240827243654

Assisted-by: Claude:claude-opus-5-5

REPPL added 8 commits October 29, 2026 10:29
Replaces every organisation member's login and name in tracked files with a
role, the organisation or a standard persona. Deletes the code-owners file,
the mailmap and the leftover identity pin, which carried nothing else; the
publish-surface list moves to .abcd/work/publish-surface.txt. LICENSE keeps
its copyright line by the product thinker's decision. History and commit
author fields are untouched.

Refs: iss-2610290855523061
Refs: iss-2610290811187925
Assisted-by: Claude:claude-opus-5-5
…heck

Review files stay append-only, but a person's login or name already
committed in one could not be taken out without tripping RD002. A commit
trailed Review-Redaction: names is now let through when every change it
makes to a review file is an in-place swap of a name-shaped span for one
of a fixed set of public placeholders. Rewording, added or dropped text,
re-spacing, deletes and renames are still refused. Where the private name
list exists, each removed span must also be on it. New cases cover each
refusal and both list formats.

Refs: iss-2610290855523061
Assisted-by: Claude:claude-opus-5-5
Replaces each member's name or login in four committed review files with
a fixed placeholder, under the narrow append-only exception, so tracked
files name no organisation member.

Refs: iss-2610290855523061
Review-Redaction: names
Assisted-by: Claude:claude-opus-5-5
Resolves: iss-2610290855523061
Assisted-by: Claude:claude-opus-5-5
Its fix documents a release asset that exists only once this release is
published, so the install-docs change merges right after the tag and
resolves the record then. The deferral holds for this one cycle and is
recorded as a decision.

Refs: iss-2610240827243654
Assisted-by: Claude:claude-opus-5-5
New cases prove the redaction check refuses a bare removal or a bare
insertion beside a valid swap. The marker set is cut to the ones that
read as a redaction, and the script and the reviews charter now say what
the check guarantees without the private list: any word may be swapped
for a marker, and the marker is what shows it. RD002 also stops skipping
review files whose names git quotes, such as non-ASCII names.

Refs: iss-2610290855523061
Assisted-by: Claude:claude-opus-5-5
The guard's false-positive sweep warned on the new diff line, read whole
and as part of its file, because a revision pair written as two quoted
variables before a quoted path reads as a possible launcher. The two-dot
form names the same diff and reads clean. The private-span check in the
cases now reuses the output of the run just before it instead of running
the gate a second time.

Refs: iss-2610290855523061
Assisted-by: Claude:claude-opus-5-5
The citation now names the organisation, which CFF declares as a single
name rather than family and given names, and BibTeX keeps whole in a
second pair of braces. The test derives either spelling from the file.

Refs: iss-2610290855523061
Assisted-by: Claude:claude-opus-5-5
@REPPL
REPPL enabled auto-merge October 29, 2026 14:00
@REPPL
REPPL added this pull request to the merge queue Oct 29, 2026
The rulesets README keeps both sides: the repository has no code-owners
file, so the review rule names no owner and requires no approval, and the
rule has no bypass actors, as main's settings audit found live. The
profile-link test goes with the function main removed.

Assisted-by: Claude:claude-opus-5-5
@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Oct 29, 2026
@REPPL
REPPL enabled auto-merge October 29, 2026 20:40
@REPPL
REPPL added this pull request to the merge queue Oct 29, 2026
Merged via the queue into main with commit dd023d3 Oct 29, 2026
15 checks passed
@REPPL
REPPL deleted the chore/no-member-names branch October 29, 2026 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant