DL-446

One Renovate PR carries each RigelBuild/devenv fork bump for both compass devenv locks: one packageRule matches both fork depNames, and its branch task relocks every changed lock, root first, then runs the FOD refresh once. That rule keeps tracking main HEAD daily with no soak; human review of the bump PR plus the fork’s own ruleset is the trust control. This supersedes RD-1’s independent-cadence clause for the fork input only.

Status: Active (Matt, 2026-10-10)

Record: ../../repo/compass-renovate-devenv-fork-group/design.md#resolved-decisions-matt-2026-10-10