atgc doctor local gains a push access row for the checkout's repo and acting account: it reads the owner and the knot's collaborator records, names the atgc repo fork / atgc pr create --fork route when the account is neither, and warns when the push URL is git@, where a fresh key can take an hour. atgc repo fork now notes when the account can already push upstream.
Blocked pipelines say who can unblock them in both atgc run watch and atgc pr checks, and atgc run approve says its dry run runs the fork's code at the pipeline's commit. atgc run trigger refuses a commit the knot does not hold with exit 2 and "push <commit> first", using one mirror read that resolves the object rather than a ref tip, and points at atgc run list when the spindle names no run. atgc repo create notes how to turn CI on for a repo with no spindle, and atgc release upload warns when a tag's commit is not on the default branch.
atgc --help ends with the exit-status table, built from Exit::ALL so it cannot drift from the enum. The short help is unchanged.
🤖 Generated with Claude Code