Prepare the branch-protection handoff for a repository admin (do not attempt to enable protection without admin rights).
After gate is green on a real PR, add .github/branch-protection/ containing a ruleset that extends the existing default-branch ruleset: require a pull request and the observed gate status check, and set enforcement to active. Include an idempotent apply script with a --dry-run mode and a short admin note. Also flag that the root CODEOWNERS is currently down to a single owner.
Acceptance: the ruleset, apply script, and note are committed; an admin applies protection requiring only the gate check.
Part of the CI + Test Infrastructure track.
Prepare the branch-protection handoff for a repository admin (do not attempt to enable protection without admin rights).
After
gateis green on a real PR, add.github/branch-protection/containing a ruleset that extends the existing default-branch ruleset: require a pull request and the observedgatestatus check, and set enforcement to active. Include an idempotent apply script with a--dry-runmode and a short admin note. Also flag that the root CODEOWNERS is currently down to a single owner.Acceptance: the ruleset, apply script, and note are committed; an admin applies protection requiring only the
gatecheck.Part of the CI + Test Infrastructure track.