On 2026‑10‑27 I learned that a private GitHub repository was deleted by an actor with no visible permissions, raising a serious security mystery.
- External actor had 0 memberships, invites, or roles.
- Audit logs contained 0 relevant entries.
- A single
repo.destroycommand was observed via the GitHub CLI. - The repository does not appear in the Deleted repositories list.