Single sign-on and fail-closed repos

Sign in through your identity provider, and make a repo require Comity before agents can edit it. Update the CLI with comity update.

New

Single sign-on. Business and Enterprise orgs can sign in with Okta, Microsoft Entra ID, Google Workspace, Auth0 or any OpenID Connect provider, and require it for their team. Set it up in Settings → Single sign-on. Docs

Fail-closed repos. Set Settings → Policy → When Comity is unreachable to Block edits, and agents won't edit that repo while Comity can't be reached. comity fail-open is the emergency override, and every use shows up in the audit log. Docs

Fixed

Repo policy overrides. Saving a repo's policy now stores only the rules you changed, so everything else keeps following the org default. Docs