@openvtc/trust-tasks 0.23.2 → 0.23.4

package/CHANGELOG.md

@@ -11,6 +11,55 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.23.4 — 2026-10-03
+
+
+### Documentation
+
+- **git-ns**: Single-administrator mode may waive the self-grant rule (#725)
+
+Fixed rule 7 of git-ns/right/grant 0.3 named break-glass as the one way
+  an actor records an elevated right for themselves. In a community run by
+  one person there is nobody to make those grants or to ratify a
+  break-glass, so the rule left its administrator unable to own what they
+  create or adopt, or to reseat a namespace to themselves.
+
+  Add a narrowly scoped exception in git-ns/right/grant 0.3 (new section
+  "The single-administrator waiver"): a VTC its host operator has
+  configured for single-administrator operation (a host-level setting
+  outside community policy; VTI-APV-022 in the VTI specification) MAY
+  waive rule 7 for one operation when no other party is eligible to make
+  the grant. When it does it MUST require an operation-bound step-up,
+  MUST record a highest-severity audit event before the record (refusing
+  if it cannot), and MUST mark the record and the response (payload ext);
+  the record counts toward the last-owner and last-admin invariants. With
+  any other eligible party the rule applies unchanged.
+
+  repo/create 0.3, namespace/reseat 0.3 and drift/resolve 0.3 refer to
+  the waiver where they apply rule 7. Prose only, in place on draft specs
+  (SPEC 5.2); no schema change, since every affected response already
+  carries the open ext member.
+
+## 0.23.3 — 2026-10-03
+
+
+### Added
+
+- **git-ns**: Bridge event 0.4 pullRequestOpened and job 0.5 closePullRequest (#723)
+
+A VTC community can restrict who may open pull requests on its governed
+  repositories. The bridge reports each pull request opened or reopened
+  (git-ns/bridge/event 0.4, new pullRequestOpened variant); when the VTC's
+  pull-request policy does not allow the author, it sends the bridge a
+  closePullRequest job (git-ns/bridge/job 0.5), which posts the community's
+  message as a comment and closes the pull request, idempotently.
+
+  Owners, maintainers and the bridge are always allowed; a reopen by an
+  owner or maintainer is an override. The gate is hygiene, not the merge
+  gate: the required commit-trust check remains the security control.
+
+  Regenerated Rust, TypeScript, Go and Dart bindings.
+
 ## 0.23.2 — 2026-10-03