taigrrRefuse writes and payments from accounts without a verified email (AUTH-B1): one shared guard gates limitWrite, every non-self-service REST route, MCP write tools, git and LFS pushes, release uploads, OAuth consent and Stripe checkout, while profile, email, password, 2FA, stars, follows and deletion stay open. The password-reset handover now also strips grants, agents, webhooks, secondary emails and invitations, and the web app shows a verify banner and hides write CTAs.
70b0ad2 ·
- ..
- deliver.ts
- env.d.ts
- format.ts
- github-app.ts
- github-import.ts
- github-sync.ts
- hooks.ts
- http.ts
- integrations.test.ts
- linear-keys.ts
- linear.ts
- manage.ts
- metering.ts
- mirror-screen.ts
- oauth.ts
- outbound.test.ts
- outbound.ts
- ownership.ts
- queue.ts
- retention.ts
- round2.test.ts
- scope.ts
- security-fixes.test.ts
- signatures.ts
- store.ts
- summarize.ts