mirror of
https://github.com/garrytan/gstack.git
synced 2026-11-06 00:44:07 +01:00
A repo that keeps .gstack/ out of git can hold its pregate policy at <GSTACK_HOME>/projects/<slug>/pregate.json. gstack-pregate run reads it only under --policy-from base when the base carries no .gstack/pregate.json, so a reviewed base copy always wins and a PR still cannot reach the policy. A missing file falls back; any other read error, and a non-null sealed or price_file (read only from the git copies), refuse with PREGATE_CONFIG_INVALID and a fix that names the file. A new `local` key lists <workflow.yml>/<job> lanes a local run satisfies: a platform lane named there runs here (tier unit) instead of becoming a requires-remote obligation. Lane ids share one LANE_ID check with selection. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>