Repository navigation
docs: github_tokens policy — RAL and Colab need no headless token - #515
Merged
Merged
Conversation
Checked 2026-10-23: RAL holds no GitHub credential and its checkouts are anonymous HTTPS clones of public repos; the Colab bootstrap clones only public workspaces. Record that, drop the Owed item, and point the autocti proof item at its issue (PyAutoMind#514). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011bYAcXWovLT3xMivBiMb32
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
#514. The token policy page recorded the headless RAL/Colab PAT as "state unknown". Checked 2026-10-23:
credential.helper, no~/.git-credentials, noghand no token env vars; its SSH keys are not registered with GitHub; every checkout is an anonymous HTTPS clone of a public repo; no job script pushes.autonerves/setup_colab.pyclones only the six public workspace and HowTo repos.So no headless token exists or is needed. The Local paragraph now says so and gives the rule if one is ever needed. The Owed item is dropped, and the autocti proof item points at autocti_visualization#7 instead of a moved draft path.
Scripts Changed
policy/github_tokens.md: Local paragraph, Owed listTest Plan
Tier: glance, witness passed, so this auto-merges on green per the approved plan.
Generated by the PyAutoLabs agent workflow.
🤖 Generated with Claude Code
https://claude.ai/code/session_011bYAcXWovLT3xMivBiMb32