i like the idea of the bot that adds the comments, but i prefer the idea of adding labels. similar to what ghostty does since i care less about who's vouched for who but rather if they have been vouched for. maybe a tiering system could go with that like C-vouch for 3 vouches and A-vouch for like 10 or something.
dev vouch dev on at. thats about it
atvouch.dev
tangled labels #1
open
opened by
isabelroses.com
isabelroses.com
(author)
my personal take here is that I don't particularly care whom has vouched for whom as long as they are not entirely removed from my own tree. like friends of friends on steam or akin. not sure on the complexity of that however
the problem here though is that the amount of remote vouches someone has is completely useless from a trust perspective, it has to be computed from the maintainer dids. from the
design decisionspart of https://atvouch.devdo you think it would still be useful in that case? there isn't a lot of scale at the moment
second question is how to attach labels to a pr. i would prefer tangled to get their ingester bits working properly in a way where if someone adds atvouch.dev as a collaborator (very risky op but it would be the requirement here!) it would be able to create some record that would add the label on a pr, rather than doing the current integration with the appview requiring simulated oauth flow