From 7bff32183f32bd5688e2e31eeceeb4b84096478f Mon Sep 17 00:00:00 2001
From: JSONbored <49853598+JSONbored@users.noreply.github.com>
Date: Wed, 29 Jul 2026 04:16:12 -0700
Subject: [PATCH 1/2] chore(superagent): disable contributor-trust scoring,
 keep the security scan

The trustedAuthors exemption does not work (shin-core is listed and was still
flagged action_required, 10/100 'dangerous'), and the verdict now has no consumer:
LoopOver lists this check under gate.ignoredCheckRuns on all three gate repos, so
a non-passing result no longer gates, pends, or holds anything. It only produced a
permanently red check on contributor PRs that nothing acts on.

prScan stays enabled and still gates CI normally.
---
 .github/superagent.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/superagent.yml b/.github/superagent.yml
index c6f5fa4656..78b7a76d3e 100644
--- a/.github/superagent.yml
+++ b/.github/superagent.yml
@@ -3,8 +3,14 @@
 prScan:
   enabled: true
 
+# Contributor-trust scoring is DISABLED (2026-07-29). The `trustedAuthors` exemption below did NOT work --
+# shin-core is listed and was still flagged `action_required` (10/100, "dangerous") on a loopover PR. And the
+# verdict now has no consumer: LoopOver lists this check under `gate.ignoredCheckRuns` on all three gate
+# repos, so a non-passing result no longer gates, pends, or holds anything. Leaving it on only produced a
+# permanently red check on contributor PRs that nothing acts on. The SECURITY SCAN above stays enabled and
+# still gates CI normally. trustedAuthors kept (inert) so the history survives.
 contributorTrust:
-  enabled: true
+  enabled: false
   blockBelowScore: 30
   # These are established, high-volume repeat contributors (dozens of merged PRs each) who kept tripping
   # the trust scorer on volume/velocity alone, not on any real signal. Exempts them from contributor-trust

From 4a249f5ea2827b5e366235350a51e21a0f2d291f Mon Sep 17 00:00:00 2001
From: JSONbored <49853598+JSONbored@users.noreply.github.com>
Date: Wed, 29 Jul 2026 04:18:32 -0700
Subject: [PATCH 2/2] chore(superagent): drop the trustedAuthors allowlist too

It provably does not work (shin-core was listed and still flagged action_required)
and is inert with contributorTrust disabled. Keeping it would only suggest a
working exemption mechanism that does not exist.
---
 .github/superagent.yml | 20 +++++++++-----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/.github/superagent.yml b/.github/superagent.yml
index 78b7a76d3e..f097ca5f35 100644
--- a/.github/superagent.yml
+++ b/.github/superagent.yml
@@ -3,19 +3,17 @@
 prScan:
   enabled: true
 
-# Contributor-trust scoring is DISABLED (2026-07-29). The `trustedAuthors` exemption below did NOT work --
-# shin-core is listed and was still flagged `action_required` (10/100, "dangerous") on a loopover PR. And the
-# verdict now has no consumer: LoopOver lists this check under `gate.ignoredCheckRuns` on all three gate
-# repos, so a non-passing result no longer gates, pends, or holds anything. Leaving it on only produced a
-# permanently red check on contributor PRs that nothing acts on. The SECURITY SCAN above stays enabled and
-# still gates CI normally. trustedAuthors kept (inert) so the history survives.
+# Contributor-trust scoring is DISABLED (2026-07-29), matching JSONbored/loopover and
+# JSONbored/awesome-claude. It does not discriminate here: established repeat contributors with dozens of
+# merged PRs were scored "dangerous" (10/100) on volume and velocity alone. The `trustedAuthors` allowlist
+# that used to sit here was meant to fix exactly that and did NOT work -- a listed author (shin-core) was
+# still flagged `action_required` -- so it has been removed rather than carried along inert and misleading.
+#
+# The verdict also has no consumer any more: LoopOver lists this check under `gate.ignoredCheckRuns`
+# (loopover#9813) on all three gate repos, so a non-passing result no longer gates, pends, or holds
+# anything. The SECURITY SCAN above stays enabled and still gates CI normally.
 contributorTrust:
   enabled: false
-  blockBelowScore: 30
-  # These are established, high-volume repeat contributors (dozens of merged PRs each) who kept tripping
-  # the trust scorer on volume/velocity alone, not on any real signal. Exempts them from contributor-trust
-  # scoring entirely going forward.
-  trustedAuthors: [dhgoal, shin-core, andriypolanski]
 
 comments:
   mode: detailed