orrery/migration-git-handoff

Digest-only Git/PR handoff receipt for a sealed migration change bundle in a caller-authorized checkout.

/resolve?name=orrery/migration-git-handoff

Use this when

You applied a sealed migration bundle locally and need a reviewable receipt
You have pinned profile + validation digests and explicit checkout authority
You want fail-closed verification without Orrery holding repo tokens

Not for

Production merges or Orrery-held GitHub credentials
Reimplementing docs/api-spec migration constellation graphs
Applying patches inside Orrery

Inputs / Outputs

Inputs

Name	Type	Notes
`profile` required	object	pinned MigrationProfile v1
`change_bundle` required	object	sealed apply artifact
`repo_identity_policy` required	object	checkout root allowlist
`checkout_root` required	string	—
`authority` required	object	—
`local_validation` required	object	—
`branch_or_pr_ref` required	object	—

Outputs

Name	Type	Notes
`handoff_receipt`	object	—
`authorized`	boolean	—
`envelope`	signed-envelope	—

Example

{
  "method": "tools/call",
  "params": {
    "name": "handoff",
    "arguments": {
      "profile": {},
      "change_bundle": {},
      "repo_identity_policy": {},
      "checkout_root": "example",
      "authority": {},
      "local_validation": {},
      "branch_or_pr_ref": {}
    }
  }
}

Tools

handoff Verify a sealed migration bundle and emit a digest-only Git/PR handoff receipt (no repo credentials or source bodies) · schema

{
  "type": "object",
  "properties": {
    "profile": {
      "type": "object"
    },
    "change_bundle": {
      "type": "object"
    },
    "repo_identity_policy": {
      "type": "object"
    },
    "checkout_root": {
      "type": "string",
      "minLength": 1,
      "maxLength": 512
    },
    "authority": {
      "type": "object"
    },
    "local_validation": {
      "type": "object"
    },
    "branch_or_pr_ref": {
      "type": "object"
    },
    "sealed_validation_digest": {
      "type": "string",
      "minLength": 64,
      "maxLength": 64
    },
    "composite_receipt_digest": {
      "type": "string",
      "minLength": 64,
      "maxLength": 64
    }
  },
  "required": [
    "profile",
    "change_bundle",
    "repo_identity_policy",
    "checkout_root",
    "authority",
    "local_validation",
    "branch_or_pr_ref"
  ],
  "additionalProperties": false
}

In constellations

No constellation references this Star yet.