rabadon

overview / incident rules / no-release-tag-push

no-release-tag-push

.github/workflows/release.yml fires on a version tag, so pushing a tag IS the publish; CLAUDE.md leaves tag v0.2.0 push to Damla.

in the rabadon guard

the deny pattern

git\s+push[^|;&]*(--tags|--follow-tags|refs/tags/|\s+v[0-9]+\.[0-9]+\.[0-9]+)
fieldvalue
projectrabadon
kindbash
census verdictfires
probegit push --tags --force origin
probe toolBash
gate exit on the probe2
refused byno-release-tag-push

in the field

1 of the 778 records in the published field dataset (field.jsonl, 2026-07-27 to 2026-08-26) carries this id. STOP is a refusal in enforce mode; WOULD_BLOCK is the same verdict recorded in watch mode, where nothing is stopped.

eventrecords
STOP1

Counted from field.jsonl, the file the field page is built from.