promote-permissions

To promote ephemeral permissions to versioned settings, the Skill scans local and project configurations, identifies unversioned permissions, and generates commits and PRs to propagate the changes to the appropriate git repositories.

Ephemeral permissions drift occurs when local and project configurations contain unversioned permissions, causing inconsistencies across environments. The Skill resolves this by promoting approved permissions to versioned settings for stable, auditable policy.

You can automate creating PRs for updated settings files by applying the promotion workflow, which generates commits and PRs for each repository as appropriate after comparing local ephemeral permissions against versioned files.

Yes, the permissions promotion workflow requires a git repository, as it enforces checks for git repository presence, correct file paths, and ensures changes align with destination rules before generating commits.

The best way to audit ephemeral permissions across multiple projects is to scan user-level and project-level settings, compare them against versioned settings, and propose promotions to ensure policy is stable and auditable.

If file paths are incorrect during permissions promotion, the workflow enforces checks for correct file paths and stops, ensuring changes only proceed when they align with the described destination rules for versioned settings.