defirisk.co
rubric v1.7.0

GitHub force-push to sensitive branch

M^0's assessment for RD-F-108 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

m0-foundation/protocol, m0-foundation/ttg, m0-foundation/m-portal are confirmed public GitHub repos (ANOMALY U6 false positive in data cache clarified: github_private=true was GitHub API rate-limit artifact, not a real private-repo finding). No GitHub force-push or non-protocol sensitive-branch push events identified in static assessment. T-09 phase-2 signal tier methodology signal tier.

Sources #

Methodology #

Detect whether the repository shows a force-push or push to a sensitive branch (main, production tag) from a non-protocol account.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol m0 factor RD-F-108 score green collected_at 2026-05-16 09:46:19