Well, you misunderstood me.
I meant to offer the constitutional reasoning as a source for why retroactive punishment is problematic. Not as the binding legal principle.
I agree GitHub CAN do this.
My post offered the opinion GitHub should NOT do this.