taigrrRefuse writes and payments from accounts without a verified email (AUTH-B1): one shared guard gates limitWrite, every non-self-service REST route, MCP write tools, git and LFS pushes, release uploads, OAuth consent and Stripe checkout, while profile, email, password, 2FA, stars, follows and deletion stay open. The password-reset handover now also strips grants, agents, webhooks, secondary emails and invitations, and the web app shows a verify banner and hides write CTAs.
70b0ad2 ·
- ..
- actions.ts
- admin-writes.test.ts
- admin-writes.ts
- agents.ts
- authz-gates.test.ts
- credential.ts
- editor.ts
- git.ts
- hosting.ts
- http.ts
- issues.ts
- mergefix.ts
- org-delete.ts
- orgs.ts
- platform.ts
- pull-review.ts
- pull-writes.test.ts
- pull-writes.ts
- pulls.test.ts
- pulls.ts
- repos.ts
- router.ts
- runners.ts
- security-advisories.ts
- security.ts
- settings.ts
- usage.ts
- user.ts
- webhooks.ts