defirisk.co
rubric v1.7.0

GitHub force-push to sensitive branch

Cap (cUSD / stcUSD)'s assessment for RD-F-108 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

T-09 v2-deferred signal. github.com/cap-labs-dev/cap-contracts is the production repo (749 commits, last commit 2026-05-08 per data cache). Force-push or unexpected-account push monitoring requires GitHub API permissioned access per protocol. Recent commit activity (2026-05-08) is expected and not anomalous. Monitoring not live.

Sources #

Methodology #

Detect whether the repository shows a force-push or push to a sensitive branch (main, production tag) from a non-protocol account.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol cap factor RD-F-108 score gray collected_at 2026-05-17 10:56:24