r6410418 GitHub Sync Gate
Remote writes are forbidden until the user sends exactly:
同步
Do not treat any other approval phrase as sync approval.
Before Sync
After exact approval and before any remote write:
- Re-run privacy scans.
- Re-run repository-relative Markdown link validation.
- Re-run syntax checks.
- Re-run
git diff --check. - Inspect staged files for tokens, private paths, private SSH aliases, logs, caches, datasets, model weights, GGUF files, safetensors files, and checkpoints.
- Fetch the latest remote state and handle divergence safely.
Push Policy
- Never force-push.
- Prefer a direct push to
mainonly when the local integration can be applied safely and the remote branch has not diverged. - If direct push is unsafe or blocked, push the feature branch and open a pull request.
- Report the pushed branch, commit hash, and remote result.
- Never publish Hugging Face models merely because GitHub sync was approved.