claude-ceo-assistant 558e4fee48 chore(ci): document #192 root cause — workspace-template repos public per OSS-first ... 5 of 9 workspace-template repos (openclaw, codex, crewai, deepagents, gemini-cli) had been marked private with no team grant for AUTO_SYNC_TOKEN bearer (devops-engineer persona). Pre-clone manifest deps step 404'd on the first private repo encountered, failing every Harness Replays run. Resolution path taken: 1. Flipped the 5 to public per `feedback_oss_first_repo_visibility_default` — runtime/template/plugin repos default public; that's what makes them OSS surface. 2. Scoped existing `ci-readonly` org team to legitimately-internal repos only (compliance docs, RFCs-in-flight). Workspace templates removed from it. 3. Filed internal#102 RFC for Layer-3 (customer-owned + marketplace third-party private repos) — that's a different shape entirely; needs per-tenant credential-resolver, not org-team grants. This commit is a documentation-only touch on the workflow file to (a) record the root cause inline next to the existing pre-clone-fail narrative, (b) trigger a fresh Harness Replays run that should now pass the clone step. Closes #192. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-08 11:50:55 -07:00
..
auto-tag-runtime.yml	fix(ci): replace gh pr CLI with Gitea v1 REST in workflows + scripts (#75 class A)	2026-05-07 15:29:26 -07:00
block-internal-paths.yml	fix(ci): lowercase 'molecule-ai/' in cross-repo workflow refs	2026-05-07 01:00:10 -07:00
branch-protection-drift.yml	ci(branch-protection): check-name parity gate (#144)	2026-05-07 14:42:50 -07:00
canary-staging.yml	fix(ci): canary alerting — drop Gitea-incompatible actions API call	2026-05-08 10:52:09 -07:00
canary-verify.yml	fix(post-suspension): migrate github.com/Molecule-AI refs to git.moleculesai.app (Class G #168)	2026-05-07 13:08:15 -07:00
cascade-list-drift-gate.yml
check-merge-group-trigger.yml
check-migration-collisions.yml
ci.yml	fix(ci): pin actions/upload-artifact + download-artifact to @v3 for Gitea compatibility	2026-05-07 16:54:44 -07:00
codeql.yml	fix(ci): convert CodeQL workflow to no-op stub on Gitea (#156)	2026-05-07 14:26:57 -07:00
continuous-synth-e2e.yml
e2e-api.yml	fix(ci): e2e-api — parallel-safe postgres/redis containers + provisioner setup	2026-05-07 18:59:56 -07:00
e2e-staging-canvas.yml	chore(workflows): drop staging-branch triggers (Phase 3b of internal#81)	2026-05-08 13:08:51 +00:00
e2e-staging-external.yml	chore(workflows): drop staging-branch triggers (Phase 3b of internal#81)	2026-05-08 13:08:51 +00:00
e2e-staging-saas.yml	chore(workflows): drop staging-branch triggers (Phase 3b of internal#81)	2026-05-08 13:08:51 +00:00
e2e-staging-sanity.yml
handlers-postgres-integration.yml	chore(ci): retrigger Handlers Postgres Integration for second-green proof	2026-05-07 18:23:05 -07:00
harness-replays.yml	chore(ci): document #192 root cause — workspace-template repos public per OSS-first	2026-05-08 11:50:55 -07:00
lint-curl-status-capture.yml
pr-guards.yml	fix(ci): close 3 chronic Gitea-Actions workflow flakes (closes #88)	2026-05-07 17:06:09 -07:00
promote-latest.yml
publish-canvas-image.yml
publish-runtime.yml	chore: reconcile main → staging post-suspension divergence	2026-05-07 14:24:37 -07:00
publish-workspace-server-image.yml	chore(ci): retrigger publish-workspace-server-image after ECR repo create (#173)	2026-05-07 13:54:11 -07:00
railway-pin-audit.yml
redeploy-tenants-on-main.yml	fix(ci): lowercase 'molecule-ai/' in cross-repo workflow refs	2026-05-07 01:00:10 -07:00
redeploy-tenants-on-staging.yml	chore(workflows): drop staging-branch triggers (Phase 3b of internal#81)	2026-05-08 13:08:51 +00:00
runtime-pin-compat.yml
runtime-prbuild-compat.yml
secret-pattern-drift.yml
secret-scan.yml	fix(ci): lowercase 'molecule-ai/' in cross-repo workflow refs	2026-05-07 01:00:10 -07:00
sweep-aws-secrets.yml
sweep-cf-orphans.yml
sweep-cf-tunnels.yml
sweep-stale-e2e-orgs.yml	chore(sweep): add orphan-tunnel cleanup step (#2987 / #340)	2026-05-05 19:36:20 -07:00
test-ops-scripts.yml