DL-308

The live-test credential model after the PAT drop: the livegithub oracle’s GitHub legs mint REAL App installation tokens via forge.NewAppTokenSource against the testbed Apps (validating the production mint path), while Linear retains exactly ONE user credential (LINEAR_FORGE_USER_TOKEN) used only for the human→app delegation setup the app-actor cannot self-assign; the Linear write/notify legs stay on the minted app token

Status: Active (Matt, 2026-08-31)

Record: ../../server/compass-forge-app-credentials/design.md