T78 — Run bep_git_credential_helper_sends_header on the macOS lane

Task

slice	size	difficulty	model	who	estimated lines
macOS lane proofs	M	routine	standard	a person	100 (0 code, 100 tests)

On the macOS lane, git in a grant box clones and pushes through the shipped credential helper, and the case records OK.

Covers:

BEP-015

Layers:

mac:
- scripts/session-e2e.sh: run on the manual macOS lane of T82 — Run the Box Egress Proxy legs on the macOS lane #2500 against main, with a GitHub sign-in and E2E_BEP_PRIVATE_REPO, unchanged
- ./scripts/session-e2e.sh bep_git_credential_helper_sends_header

Waits on:

T50 — Ship a git credential helper in grant boxes so git sends a header the proxy substitutes #2531
T111 — Accept a key the keychain made exportable in a debug build of bep, and scope the custody rule to release builds #2785

Plan block

### T78 — Run bep_git_credential_helper_sends_header on the macOS lane
  slice: S11
  kind: task
  covers: BEP-015
  size: M
  est: 0 code, 100 tests
  executor: human
  difficulty: routine
  model: standard
  diagnostics: the case prints PASS or NOT RUN with its gate
  observability: the case output, posted on #2563
  layers:
    - mac:
      - scripts/session-e2e.sh: run on the manual macOS lane of #2500 against `main`, with a GitHub sign-in and `E2E_BEP_PRIVATE_REPO`, unchanged
      test: ./scripts/session-e2e.sh bep_git_credential_helper_sends_header
  produces: none
  consumes: none
  proof: On the macOS lane, git in a grant box clones and pushes through the shipped credential helper, and the case records OK.
  depends on:
    - blocked by #2531
    - blocked by #2785

Generated by Claude Code

The epic owner added this residual to the plan on 2026-10-26 as T78 (slice S11). Its body is now the rendered task. The residual text it replaces is kept below.

Residual text

Residual from T50 #2547, arch C1 (review threads 4369632923, 4369653354, 4369841603), epic #1501. Filed under the epic owner's 2026-10-25 decision to merge the PR and run its macOS legs later against main, on the manual macOS lane of #2500. Linux runners record these legs NOT RUN because bep serve runs on macOS only (bep_live_gate in scripts/session-e2e.sh).

What closes this

On the macOS lane, with a GitHub sign-in and E2E_BEP_PRIVATE_REPO set, ./scripts/session-e2e.sh bep_git_credential_helper_sends_header records OK for the clone and the push from a grant box (Gatehouse §6.4 line 718), and the tail is posted here.

Generated by Claude Code

T78 passed on the manual macOS lane, on main at 964a71b5, against a throwaway private repository.

::group::GitHub grant box: the shipped git credential helper sends a header the proxy substitutes (BEP-015)
git clone: OK
git push: OK
git delete: OK
grant box with the shipped helper: git clone and git push against the private repository
::endgroup::
session e2e OK

The repository name is left out of the last line of the output. The script was unchanged. The run used a debug build with a device-flow GitHub sign-in.

Generated by Claude Code

Navigation Menu

Repository navigation

T78 — Run bep_git_credential_helper_sends_header on the macOS lane #2563

Task

What closes this

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

T78 — Run bep_git_credential_helper_sends_header on the macOS lane #2563

Description

Task

Activity

norrietaylor commented on Oct 26, 2026

What closes this

norrietaylor commented on Nov 4, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions