{
  "actions": [
    {
      "capability": "cap:github-propose-pr",
      "decision": "allow",
      "effect": "github.propose_pr",
      "receipt_required": true
    },
    {
      "approval_required": true,
      "capability": "cap:github-merge-pr",
      "decision": "escalate",
      "effect": "github.merge_pr",
      "postcondition": {
        "verify": "merged_by == \"github-app:wauth-doorkeeper\"",
        "webhook": "github.pull_request.closed"
      },
      "receipt_required": true
    },
    {
      "decision": "deny",
      "effect": "github.force_push",
      "receipt_required": false
    }
  ],
  "credential_custody": "server_side_only",
  "default_decision": "deny",
  "gate_id": "gate:github",
  "target": "github",
  "version": "0.1.0"
}