[sjungwon03]

Summary

Project protected-environment approval rules can now replace their group by
exact shared group ID. Select an existing group-only rule, enter a different
positive group ID and the exact environment name, and acknowledge the change.
Unknown membership, user/role rules, unchanged or already represented groups,
and group-level rules cannot be edited.

Complete inventory/detail preflight precedes one non-replayed, non-redirected
PUT containing only the existing rule ID and new group ID. Response and strict
read-back preserve stable identity, approval count, membership, every other
approval/deploy record and legacy count. Only the selected group's display
description may change with its identity; both confirmed snapshots must agree
on that description too. Uncertainty requires inspection and fresh confirmation;
account replacement isolates late results.

Closes #656

Validation

• dart format --output=none --set-exit-if-changed . (1,004 files, no changes); CI English policy passes
• flutter analyze --no-pub reports no issues
• Current dev integrated; app/API suites rerun: app 4,790; API 3,309. Other package suites pass: design system 135; models 204; secure storage 5 (8,443 total).
• API, controller and UI tests observed failing before implementation
• Related new/existing approval controller/UI suite: 104 tests pass
• Generated localization with flutter gen-l10n; models unchanged
• Five locales, 320/800/1200 widths, both themes and direct/inherited membership
  preservation; invalid/unchanged/duplicate groups, stale/ambiguous rules,
  description-aware comparison, uncertainty, overlap and account replacement.
• Fixture-only widget validation; no live GitLab role/tier/version validation.

Checklist

• Targets dev; independent branch from origin/dev, then integrated the approved membership slice from current dev
• Linked issue with Closes #656
• Conventional Commits and DCO sign-off
• Behavior documentation, screenshots and MW-02 evidence updated
• Mobile/tablet/desktop and light/dark coverage
• No new dependencies, model changes or external assets; notices unchanged
• Dummy credentials, reserved example domains and fixture-only screenshots
• English repository content except supported localization resources

Screenshots

Synthetic widget captures with real local fonts, scrolled to confirmation:

Viewport	Light	Dark
Mobile
Desktop

Notes for reviewers

GitLab requires Premium/Ultimate, project CI/CD, management permission and
sharing with the new group. The app does not enumerate approvers or guarantee
the approval count can be satisfied. Group-level writes, user/role conversion,
and group discovery remain separate work. The approved membership-editing slice
from PR #655 is integrated from dev; both features are tested together.

Group descriptions are derived display metadata: changing the group can update
only the selected rule's description. No description is used as identity or
permission evidence. The new response and authoritative read-back must otherwise
exactly agree. The endpoint provides no atomic compare-and-set; another actor
can change the rule between requests. Preservation covers reported/modelled
fields, not unknown server metadata. Existing browsing and other writes are
unchanged; the existing strict approval-group reader is reused.

References: protected-environment update,
implementation notes.

[sjungwon03-ai]

Review summary

Verdict: Approved

• Reviewed: protected-environment approval-group replacement flow, transport, and test coverage
• Checks: CI passed (Flutter quality gate, iOS SDK validation, policy, and triage)