Labels

Fully specified and briefed; eligible for autonomous pickup from the frontier.

Security-relevant: vulnerability, hardening, or disclosure follow-up.

Opened by automation.

Annual recurring maintenance cadence.

Biweekly recurring maintenance cadence.

Monthly recurring maintenance cadence.

Quarterly recurring maintenance cadence.

Semi-annual recurring maintenance cadence.

Weekly recurring maintenance cadence.

Dependency updates (Dependabot / Renovate).

Hard merge gate: do not merge while applied.

Triage suspects an open issue asks for the same thing; admission refuses it (admission-rules.json).

Good entry point for new contributors.

Label taxonomy managed by github-iac/Labels.cs; hand edits are pruned on the next apply.

Maintainer would welcome help.

Needs a host or attended run; the host runner takes it, not a person or the issue lane.

Operator ratified the work-loop's first drain; read by first-drain-ratified.sh. Person-applied only.

Human-in-the-loop required; autonomous sessions must not resolve items carrying this.

Needs a Brief or plan before anyone can build it.

Not yet classified. Floor until a type and one priority tier are set.

Production broken, data loss, active exploit, or release blocker.

Significant impact, or blocks an imminent release; staff this cycle.

Nice-to-have, cosmetic, or speculative; opportunistic.

Real value, no hard deadline; normal backlog flow.

Filed from an alert or page signal; a person merges any PR that closes it.

Needs more information or is a support/discussion request; not actionable work yet.

Scheduled maintenance item reconciled against .github/recurring-schedule.json.

Inactive; managed by the stale workflow.