Who may read a repository without an explicit grant.
⚠ The meaning of Visibility::Public changed on 2026-08-03.
It used to mean “any authenticated principal may read”, because gunnar
had no unauthenticated path at all and the field therefore honoured
nothing a private repository did not already get from a grant. It now
means what the word says: readable by anyone, with no key. An operator
who marked a repository public under the old reading has published it
under the new one. Visibility::Private is still the default and is
unchanged, and an appliance that must never serve a stranger turns the
anonymous path off at the listener
(SshConfig::without_anonymous_access).
Only principals with a grant. The default, and the only safe one.
A private repository is indistinguishable from one that does not
exist to a caller who may not read it. The SSH dispatch answers both
with the same string, so a stranger cannot enumerate private
repositories one guess at a time.