defirisk.co
rubric v1.7.0

GitHub force-push to sensitive branch

Multipli's assessment for RD-F-108 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Applicable: multipli-libs/Barebones-MultipliVault is public (github_private=false). Last commit 2026-01-16 per data cache — no recent force-push event reported in public GitHub activity. This is the bare implementation repo, not necessarily the production deployment repo. T-09 v2-deferred signal; requires GitHub API monitoring with protocol-permissioned access. T-09 phase-2 signal.

Sources #

  • Internal
    Multipli data cache — GitHub repo info.research/protocols/multipli/00-data-cache.json §sources.github.repo_url=https://github.com/multipli-libs/Barebones-MultipliVault §sources.github.last_commit_date=2026-01-16retrieved 2026-05-17
  • GitHub
    Multipli GitHub repo — Barebones-MultipliVaultmultipli-libs/Barebones-MultipliVault — public repo, last commit 2026-01-16, no recent force-pushretrieved 2026-05-17

Methodology #

Detect whether the repository shows a force-push or push to a sensitive branch (main, production tag) from a non-protocol account.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol multipli factor RD-F-108 score gray collected_at 2026-05-17 11:48:35