Sign in with GitHub

q1 / multiple choice

This PR moves auth state to an edge Worker. What must stay true before merge?

State cookies are verified and redirects stay local.The PR title mentions the auth route.The author refreshes the check page.

q2 / free text

Explain the architectural risk this change introduces.

Moving auth state to the Worker means state cookies still need to be verified, redirects must stay local, and the Check Run should remain action_required until those guarantees hold.

Submit answer