taigrrRefuse writes and payments from accounts without a verified email (AUTH-B1): one shared guard gates limitWrite, every non-self-service REST route, MCP write tools, git and LFS pushes, release uploads, OAuth consent and Stripe checkout, while profile, email, password, 2FA, stars, follows and deletion stay open. The password-reset handover now also strips grants, agents, webhooks, secondary emails and invitations, and the web app shows a verify banner and hides write CTAs.
70b0ad2 ·
- ..
- use-action.ts
- use-attachment-upload.ts
- use-avatar-upload.ts
- use-bootstrap-token.ts
- use-branch-push-suggestions.ts
- use-commit-signatures.ts
- use-copy.ts
- use-data-export.ts
- use-demo-timeline.ts
- use-dismiss.ts
- use-editor-hotkey.ts
- use-feature-flag.ts
- use-fuzzy-finder.ts
- use-hovercards.ts
- use-job-log.ts
- use-last-commits.ts
- use-markdown-preview.ts
- use-merge-fix.ts
- use-optimistic-mutation.ts
- use-passkey.ts
- use-poll-while.ts
- use-project-live.ts
- use-pull-code-alerts.ts
- use-pull-suggestion.ts
- use-pull.ts
- use-reactors.ts
- use-reduced-motion.ts
- use-release-asset-upload.ts
- use-repo.ts
- use-review-draft.ts
- use-sign-in-href.ts
- use-suggestion-batch.ts
- use-thread-subscription.ts
- use-turnstile.tsx
- use-viewer.ts