I know we use [FalseClass, TrueClass] elsewhere and default to false -- I wonder how we're enforcing the contract there.

I believe what is happening here (with my limited understanding of contracts), is that contracts is guarding what is passed into the initialize() method and not what it ends up being.

Here is an example:

# initialize the class but ensure all params have a value "passed in" even when they have defaults set (comments below)
Entitlements::Backend::GitHubTeam::Service.new(
  addr: nil, # value passed in
  org: "github",
  token: "secret",
  ou: "blah",
  ignore_not_found: false # value passed in
)

The code seen above will pass the checks that contracts puts in place because both addr and ignore_not_found have values assigned to them. These values that were assigned satisfy the guards that contracts has in place. However, if we look at the example below, this will raise an error as we are seeing today:

# initialize the class but use the defaults that the class defines for `addr` and `ignore_not_found`
Entitlements::Backend::GitHubTeam::Service.new(
  # addr: nil,
  org: "github",
  token: "secret",
  ou: "blah",
  # ignore_not_found: false
)

This will raise an exception on ignore_not_found but not on addr. This is because the addr variable is defined with the Maybe keyword in contracts This allows the value being passed in to "maybe" be a string, but it can also be nil (or unset). However, the ignore_not_found variable is missing this Maybe keyword. So we cannot omit it because if we do, its value is nil and nil is not an accepted value in the contracts definition. It can only be a Bool as defined prior to this pull request.

Hopefully that all makes sense and my understanding of contracts is correct here! 🙇

TL;DR: I don't think we can safely enforce the type on ignore_not_found while also allowing for it to be nil (unset) without updating everything everywhere to pass in the correct value without using defaults.