| name | github-sync-gate |
| description | Enforce this repository's local-review-first GitHub sync policy. Use when Codex is preparing, validating, staging, committing, pushing, or opening a pull request for this repository and must wait for the exact approval phrase before any remote write. |
GitHub Sync Gate
Remote writes are forbidden until the user sends exactly:
同步
Do not treat any other approval phrase as sync approval.
Before Sync
After exact approval and before any remote write:
- Re-run privacy scans.
- Re-run repository-relative Markdown link validation.
- Re-run syntax checks.
- Re-run
git diff --check.
- Inspect staged files for tokens, private paths, private SSH aliases, logs, caches, datasets, model weights, GGUF files, safetensors files, and checkpoints.
- Fetch the latest remote state and handle divergence safely.
Push Policy
- Never force-push.
- Prefer a direct push to
main only when the local integration can be applied safely and the remote branch has not diverged.
- If direct push is unsafe or blocked, push the feature branch and open a pull request.
- Report the pushed branch, commit hash, and remote result.
- Never publish Hugging Face models merely because GitHub sync was approved.
