feat(coord): add SHA-bound reviewer verdict resource and authorization
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- Avg merge
- 1h 7m
- Merged PRs (30d)
- 969
Description
Parent: #384 (P0-3a). Depends on identity closure P0-2a/P0-2b.
## Scope
Add a verdict resource to RepoHub/gateway, bound to repo, PR, head SHA, check kind, reviewer identity, and role.
## Acceptance
- Worker and unregistered reviewer verdicts return 403.
- Stale SHA and same-SHA conflicting verdicts return 409/422.
- Exact replay is idempotent.
- Required reviewers derive from PlatformDirectory roles.
- Tests cover authorization, SHA invalidation, conflict, and idempotency.
Delivery discipline: one issue, one worker branch, one PR.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start in the RepoHub/gateway entry points and read parent issue #384 plus the identity-closure dependencies P0-2a/P0-2b. Trace how PlatformDirectory roles determine required reviewers, then add tests covering authorization, SHA invalidation, conflicts, and idempotency. Done means the listed 403, 409/422, and exact-replay acceptance cases pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authorization, backend-api-design
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100