ci(next): remove the defaults guard workflows

Merged
TE
5d ago
+6-326

Leo, 2026-10-31: "Remove all that stuff", "do it earlier if the defaults guard is bullsh*t", "I have not seen it help more than it has harmed".

Deletes the NEXT defaults guard gate on feat-cmux-next:

  • .github/workflows/cmux-next-defaults-guard.yml (the pull_request_target "defaults guard" check that waited for a call owner's approval of a default change)
  • .github/workflows/cmux-next-defaults-guard-review.yml (its review-triggered re-run)
  • tests/test_defaults_guard_review_rerun.py, plus the test and allowlist entries that read those workflows

Kept: scripts/ci/defaults_guard.py, since snapshot and source-stamp are still used by cmux-next.yml, the base autofix and the guards workflow's defaults-snapshot job. Its GUARD_FILES no longer names the deleted workflows. main still has its own copies; they are left alone.

The DEV-build label path in cmux-next.yml (cmux-scheme-compile, the dogfood publish) on this branch already gates only on same-repo, MEMBER/OWNER author and the dev-build label, with no CONFLICTING or review condition, so nothing changes there.

feat-cmux-next's rulesets require no status checks, so no required-check reference needed removing.

Tests run locally: tests/test_defaults_guard.py (58 OK) and tests/test_ci_quota_hold_gate.py (9 OK). tests/test_ci_no_github_token_polling.py has one failure that also happens on the unmodified base in the same sparse clone (stale allowlist entries for scripts the sparse clone doesn't have), not from this change.

Review: removal only, read in full by the author (Claude Opus 5.5).

Agent session: agent session

šŸ¤– Generated with Claude Code

Summary by cubic

Removes the feat-cmux-next defaults guard gate that waited for call-owner approval before default changes could merge.

Deletes the cmux-next-defaults-guard.yml and cmux-next-defaults-guard-review.yml workflows, their tests, and the test and allowlist entries that referenced them. scripts/ci/defaults_guard.py stays since snapshot and source-stamp still use it; its GUARD_FILES no longer lists the deleted workflows. The main branch keeps its own copies untouched.