Follow-up to the Sept 2026 token incident: the successor-agent manual (ORCHESTRATOR.md) is now committed to the repo, but its Gitea token reference points to the gitignored local .env file (GITEA_TOKEN, rotated after the incident) — no credentials are stored in any tracked file.
Changes:
ORCHESTRATOR.md committed; header + §1 rewritten so raw REST/curl reads GITEA_TOKEN from the local .env (.env stays gitignored, line 2 of .gitignore untouched)
§9 "Version history context" replaced with durable "how to find current state" guidance — no more stale snapshots in this file
.gitignore: removed the two v0.22.1 lines that ignored ORCHESTRATOR.md
package.json 0.22.1 → 0.22.2, CHANGELOG entry
Docs only; no code changes. tsc --noEmit + full unit suite (288 tests) pass locally; e2e verified by CI on this PR.
Follow-up to the Sept 2026 token incident: the successor-agent manual (ORCHESTRATOR.md) is now committed to the repo, but its Gitea token reference points to the gitignored local `.env` file (`GITEA_TOKEN`, rotated after the incident) — no credentials are stored in any tracked file.
Changes:
- ORCHESTRATOR.md committed; header + §1 rewritten so raw REST/curl reads `GITEA_TOKEN` from the local `.env` (`.env` stays gitignored, line 2 of .gitignore untouched)
- §9 "Version history context" replaced with durable "how to find current state" guidance — no more stale snapshots in this file
- .gitignore: removed the two v0.22.1 lines that ignored ORCHESTRATOR.md
- package.json 0.22.1 → 0.22.2, CHANGELOG entry
Docs only; no code changes. `tsc --noEmit` + full unit suite (288 tests) pass locally; e2e verified by CI on this PR.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Follow-up to the Sept 2026 token incident: the successor-agent manual (ORCHESTRATOR.md) is now committed to the repo, but its Gitea token reference points to the gitignored local
.envfile (GITEA_TOKEN, rotated after the incident) — no credentials are stored in any tracked file.Changes:
GITEA_TOKENfrom the local.env(.envstays gitignored, line 2 of .gitignore untouched)Docs only; no code changes.
tsc --noEmit+ full unit suite (288 tests) pass locally; e2e verified by CI on this PR.