The GitHub App now asks for commit statuses
Sinatra requests Commit statuses read and write so an agent run can publish the status a repository uses to gate merges.
Some repositories gate merges on a commit status posted by whoever verified the branch rather than on a hosted CI run. Sinatra's own repository works that way, and until now an agent run could finish the whole verification suite inside the sandbox and still fail on the last step, because the installation token could read statuses but not write one.
Existing installations will see a request to approve the new permission. Nothing changes until you approve it, and nothing that worked before stops working if you never do — this only affects repositories whose merge gate is a commit status. Sinatra still does not merge your pull requests; the status it writes is the evidence, not the decision.