Description
The Schema Consistency audit found that the on.roles enum accepts maintain and triage, but the runtime permission check never matches them (it does not consult role_name/permission hierarchy), making them schema-valid yet unreachable — the worst-of-both outcome. Either (a) remove maintain/triage from the schema enum, or (b) fix the runtime role check to consult role_name and/or a permission hierarchy, and align the test fixtures with the real API shape.
Expected Impact
Eliminates a silent foot-gun where users set a role that has no runtime effect; restores schema/runtime consistency for workflow authorization.
Suggested Agent
copilot-swe-agent
Estimated Effort
Medium (1-4 hours) if fixing runtime; Quick if removing enum values
Data Source
DeepReport 2026-06-08 analysis, source audit #37770
Generated by 🔬 DeepReport - Intelligence Gathering Agent · 148 AIC · ⌖ 18.2 AIC · ⊞ 10.8K · ◷
Description
The Schema Consistency audit found that the
on.rolesenum acceptsmaintainandtriage, but the runtime permission check never matches them (it does not consultrole_name/permission hierarchy), making them schema-valid yet unreachable — the worst-of-both outcome. Either (a) removemaintain/triagefrom the schema enum, or (b) fix the runtime role check to consultrole_nameand/or a permission hierarchy, and align the test fixtures with the real API shape.Expected Impact
Eliminates a silent foot-gun where users set a role that has no runtime effect; restores schema/runtime consistency for workflow authorization.
Suggested Agent
copilot-swe-agent
Estimated Effort
Medium (1-4 hours) if fixing runtime; Quick if removing enum values
Data Source
DeepReport 2026-06-08 analysis, source audit #37770