GitHub force-push to sensitive branch

Evidence summary #

GitHub force-push / sensitive-branch push. T-09 phase-2 signal tier. github.com/mantle-lsp/contracts: no force-push event documented at assessment time. Last commit 2026-04-15 per profile. Production monitoring requires per-protocol GitHub permissioned access per T-09 §3.3. No public evidence of unauthorized branch push.

Sources #

Methodology #

Detect whether the repository shows a force-push or push to a sensitive branch (main, production tag) from a non-protocol account.

See the full factor methodology and distribution across all protocols →