🤖 Generated by the Codex Daily AI Engineer instance.
Objective
Define a separate admins team and its repository-admin grants as a default-off declarative policy slice under parent #53.
Details
The maintainer chose a separate Admins team so admin privileges remain isolated from the canonical maintainers team. This slice declares the new team, adds devantler as its maintainer, and grants admin on the 19 active portfolio repositories:
.githubactionsagent-pluginsagent-skillsascoachingogvanerawsdotnet-templatefleet-gitopsgitops-tenant-templatego-templatehomebrew-tapksailmaintenancemonorepoplatformplatform-templateprovider-upjet-unifiunifiwedding-app
The policy must remain absent from the deployed root Kustomization until a separate activation slice is reviewed. The archived reusable-workflows repository is intentionally excluded.
Checklist
Dependencies
Parent #53 records the coverage goal and the now-resolved GitHub App Members-permission prerequisite. Activation remains a follow-up under #53.
Notes
This is the first child increment of #53. It deliberately defines policy without changing live organization permissions.
Objective
Define a separate
adminsteam and its repository-admin grants as a default-off declarative policy slice under parent #53.Details
The maintainer chose a separate Admins team so admin privileges remain isolated from the canonical
maintainersteam. This slice declares the new team, addsdevantleras its maintainer, and grantsadminon the 19 active portfolio repositories:.githubactionsagent-pluginsagent-skillsascoachingogvanerawsdotnet-templatefleet-gitopsgitops-tenant-templatego-templatehomebrew-tapksailmaintenancemonorepoplatformplatform-templateprovider-upjet-unifiunifiwedding-appThe policy must remain absent from the deployed root Kustomization until a separate activation slice is reviewed. The archived
reusable-workflowsrepository is intentionally excluded.Checklist
Team/adminswith no Delete management policy.TeamRepositoryresources withadminpermission.deploy/render is disabled and the feature render is valid.Dependencies
Parent #53 records the coverage goal and the now-resolved GitHub App Members-permission prerequisite. Activation remains a follow-up under #53.
Notes
This is the first child increment of #53. It deliberately defines policy without changing live organization permissions.