BT6 Merge Train
Use only after bt6-queue-audit. Apply bt6-maintainer-guardrails.
Authorization preflight
Confirm the current operator explicitly authorized merging in the resolved
repository. Record:
- canonical repository/tracker and expected actor;
- candidate PR numbers and audited head SHAs;
- base branch and permitted merge method;
- whether this is dry-run or live;
- current queue-audit reference and expiration conditions.
Approval to inspect, plan, review, fix, or prepare is not merge authorization.
Never merge
- requested-changes, draft, conflict/dirty, or ambiguous PR state;
- missing/failing required checks;
- head SHA different from the audited SHA;
- policy-disallowed merge method or unexpected base branch;
- unresolved security, privacy, citation, provenance, corpus, schema, data-loss,
compatibility, or research-integrity finding;
- missing profile-required risk-surface verification;
- missing PR-tier core checks, applicable 50% changed-line coverage, or relevant
tests for changed behavior;
- missing, stale, incomplete, or non-merge-ready external-provider assessment;
- a PR whose target repository/tracker/actor cannot be proven.
Candidate ordering
Respect dependencies and gate-critical fixes first. For otherwise independent
work, prefer narrowly scoped docs/config, small verified defects, integrity and
compatibility fixes, then larger features. Recompute ordering after each merge.
Per-PR procedure
- Re-fetch PR metadata, exact head SHA, base, mergeability, reviews, required
checks, linked issues, dependencies, and new human feedback.
- Compare the head with the queue audit and PR-audit evidence.
- Confirm hostile-input and all matched risk-surface checks are current.
- Run any PR-tier
quick or risk-surface validation invalidated by base-branch
movement. Do not require tagged-release full validation for an ordinary
merge candidate.
- For external-provider changes, confirm the provider assessment matches the
exact head and its integration-complete and merge-ready verdicts are
yes.
- Verify the merge method is allowed and dry-run is false.
- Merge exactly one PR through the canonical tracker.
- Verify the resulting canonical-branch commit and post-merge CI.
- Reconcile linked issues by observed state. Comment/close only when separately
authorized; do not assume closing keywords worked.
- Refresh base branch, open queue, reviews, checks, dependencies, and candidate
ordering before considering another PR.
Stop conditions
Stop on any merge conflict, check failure, unexpected commit, issue mismatch,
new feedback, stale audit, changed profile/policy, or ambiguous external state.
Do not skip a failed candidate and continue unless the operator's authorization
explicitly covers that behavior and remaining candidates are independent.
Use templates/bt6-merge-train-report.md. Record every attempted/merged PR,
exact SHA, method, checks, authorization, linked-issue outcome, and stop reason.
1---2name: bt6-merge-train3description: Run an explicitly authorized, conservative BT6 merge train that processes validated pull requests one at a time and reconciles repository, CI, evidence, and issue state after each merge.4---56# BT6 Merge Train78Use only after `bt6-queue-audit`. Apply `bt6-maintainer-guardrails`.910## Authorization preflight1112Confirm the current operator explicitly authorized merging in the resolved13repository. Record:1415- canonical repository/tracker and expected actor;16- candidate PR numbers and audited head SHAs;17- base branch and permitted merge method;18- whether this is dry-run or live;19- current queue-audit reference and expiration conditions.2021Approval to inspect, plan, review, fix, or prepare is not merge authorization.2223## Never merge2425- requested-changes, draft, conflict/dirty, or ambiguous PR state;26- missing/failing required checks;27- head SHA different from the audited SHA;28- policy-disallowed merge method or unexpected base branch;29- unresolved security, privacy, citation, provenance, corpus, schema, data-loss,30 compatibility, or research-integrity finding;31- missing profile-required risk-surface verification;32- missing PR-tier core checks, applicable 50% changed-line coverage, or relevant33 tests for changed behavior;34- missing, stale, incomplete, or non-merge-ready external-provider assessment;35- a PR whose target repository/tracker/actor cannot be proven.3637## Candidate ordering3839Respect dependencies and gate-critical fixes first. For otherwise independent40work, prefer narrowly scoped docs/config, small verified defects, integrity and41compatibility fixes, then larger features. Recompute ordering after each merge.4243## Per-PR procedure44451. Re-fetch PR metadata, exact head SHA, base, mergeability, reviews, required46 checks, linked issues, dependencies, and new human feedback.472. Compare the head with the queue audit and PR-audit evidence.483. Confirm hostile-input and all matched risk-surface checks are current.494. Run any PR-tier `quick` or risk-surface validation invalidated by base-branch50 movement. Do not require tagged-release `full` validation for an ordinary51 merge candidate.525. For external-provider changes, confirm the provider assessment matches the53 exact head and its integration-complete and merge-ready verdicts are `yes`.546. Verify the merge method is allowed and dry-run is false.557. Merge exactly one PR through the canonical tracker.568. Verify the resulting canonical-branch commit and post-merge CI.579. Reconcile linked issues by observed state. Comment/close only when separately58 authorized; do not assume closing keywords worked.5910. Refresh base branch, open queue, reviews, checks, dependencies, and candidate60 ordering before considering another PR.6162## Stop conditions6364Stop on any merge conflict, check failure, unexpected commit, issue mismatch,65new feedback, stale audit, changed profile/policy, or ambiguous external state.66Do not skip a failed candidate and continue unless the operator's authorization67explicitly covers that behavior and remaining candidates are independent.6869Use `templates/bt6-merge-train-report.md`. Record every attempted/merged PR,70exact SHA, method, checks, authorization, linked-issue outcome, and stop reason.