Repository navigation
Roll out and retire the organization-settings audit opt-in #404
Description
🤖 Generated by the Agentic Engineer
The organization-settings audit starts as a manual default-off read-only capability.
Before retiring its run-audit input, observe actual main native execution and a false-input no-credential control; decide and ship routine scheduling with sanitized issue-on-drift reporting in a separate reversible change. Confirm complete read and failure controls still hold, then remove transitional input plumbing after adoption. No configuration writes or credential expansion are implied.
Part of #85. Size: S after manual proof.
Activity
devantler commentedon Oct 3, 2026
The initial observer is merged in #405. Its actual main App audit passed with read-only permissions and completed token revocation; the false-input control skipped every audit/credential step.
This establishes the manual control required before routine activation. Scheduling and flag retirement stay open: issue #85 contains the maintainer’s earlier no-custom-workaround direction, and clarification about retaining the independent observer is pending in the interactive session. No scheduled settings observer or settings writer has been enabled.