From 9a0e68d2e7677ac460d668c38706c9ccfac1a53d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?T=C3=B5nis=20Ormisson?= Date: Tue, 4 Aug 2026 21:11:01 +0300 Subject: [PATCH] docs: record release controls --- ROADMAP.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/ROADMAP.md b/ROADMAP.md index 1a84537..58e8ed4 100644 --- a/ROADMAP.md +++ b/ROADMAP.md @@ -110,4 +110,9 @@ These are maintainer actions, not implementation tasks for the specification rep still needs release-process verification. - [x] Define the specification release tag convention and maintainer checklist in [RELEASING.md](RELEASING.md); the repository release maintainer with repository-admin responsibility owns release-process controls. -- [ ] Protect the default branches and ensure release tags are created only by the agreed release workflow; `main` is currently unprotected. +- [x] Protect the default branch and release tags. main requires pull requests, + successful specification CI, and resolved conversations; force pushes and + deletion are disabled, and these controls apply to administrators. The active + v* tag ruleset permits bypass only to repository administrators. GitHub + Actions use full-SHA, GitHub-owned actions, and merged head branches are + automatically deleted.