A defect goes to the repository that owns it

Code merged in from the repository your product descends from looks like your own. Before changing it, the run checks whose lines are wrong, so the fix lands where every product built on it receives it instead of being overwritten by the next merge.