Repository navigation
Public-readiness: resolve CODE_OF_CONDUCT.md monitored-inbox TODO + confirm conduct contact #287
Description
Pre-public blocker. CODE_OF_CONDUCT.md (Contributor Covenant 2.1 + Federal Community Addendum) is present but carries a live maintainer HTML comment (lines ~68-71) instructing that the conduct inbox <[email protected]> be confirmed/provisioned before public, and it is NOT confirmed.
Fix
- Confirm/provision a REAL monitored conduct inbox (human dependency — do not invent), kept SEPARATE from the security queue.
- Replace the address if the placeholder is not provisioned; use
TODO(conduct-contact)until provided. - Delete the maintainer HTML comment — it leaks internal process into a public file.
- Reconcile the
[email protected]reference here with the actual channel named in SECURITY.md (currently inconsistent).
Part of the public-readiness epic. AI-assisted (OpenCode); requires human review.
Activity
wz-gsa commentedon Aug 4, 2026
BLOCKED on human action: confirm/provision the monitored conduct inbox (
[email protected]per the current CoC) via the pending Google Group, then remove the maintainer TODO HTML comment. Separate from the security queue.wz-gsa commentedon Aug 4, 2026
REVISED: CoC points to the SAME single monitored Google Group as SECURITY (no separate conduct inbox). If the group is named
[email protected]the current CoC text matches; otherwise update the address to the single group. Remove the maintainer TODO comment once provisioned.wz-gsa commentedon Aug 4, 2026
Confirmed contact address:
[email protected](single shared monitored group; request pending). Use this exact address when swapping outTODO(team-contact). Patterns CoC currently references[email protected]— update to[email protected].