Spencer, is there a project with a similar workflow that you believe
does this in a preferable way? We will reach resolution on this (but I
am swamped today).
I'd prefer to wait for at least one ACK before pushing. IMO an
ACK from
anyone with commit access should be sufficient for a merge/push. Thoughts?
Commits that involve moving directories or adding Makerules should
definitely be vetted by a second party. I think more minor stuff (like
adding SCAP content such as references or new Rules) is fine for direct
commit. I also need to document some rules for writing Rules (ahem) on
the wiki, to ensure proper granularity.