no pull-requests, no branch protections for `master`. i mean this works, but you probably need those rails in place.