Repository navigation
ci(governance): adopt the canonical risk gate - #519
Conversation
The organization copy publishes no ai-review context, so the Codex receipt is decorative. Replace it with the tested canonical gate: approver from RISK_GATE_OWNER, ai-review on the current head, ancestry drift, shared-head fail-closed and protected paths.
|
@codex review |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 7ac2725d24
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
The canonical gate dispatches a per-PR evaluation after a base push and on its schedule. Each dispatch completes as a run on the default branch, where the dot review selector cannot resolve a pull request head and fails with missing_pr_association_use_manual_dispatch. Automatic submission now follows pull_request_target runs only; a receipt refresh stays available through the manual dispatch inputs.
|
@codex review |
|
Codex Review: Didn't find any major issues. Swish! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
A synchronize can move one pull request off a shared head even when its own evaluation fails, which leaves the released sibling on a stale collision error until another event or the six-hour sweep. Run the sibling refresh in a finally block and keep a refresh failure from masking the evaluation error.
|
@codex review |
|
Codex Review: Didn't find any major issues. 🚀 Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Pigbibi
added
the
owner-approved
AI assistance
Qoder (AI agent) wrote this change from the owner's instruction; a Codex review is requested on this head.
What changed
Replaces
.github/workflows/risk-gate.ymlwith the canonical hardened gate and updates the approval paragraph inAGENTS.md.The gate now:
RISK_GATE_OWNERinstead of a literal;ai-reviewfrom thecodex-review-state:v1receipt on the current head;.github/workflows/dot-review-submit.ymlnow submits an automatic dot review only forpull_request_targetruns. The gate's new post-push and scheduled sweeps dispatch per-PR evaluations that complete as runs on the default branch, where the selector cannot recover a PR head.How verified
actionlintand the repository's normal checks run on this head.Why
The organization copy publishes no
ai-review, so a Codex review is decorative: no required context reads the receipt. Its approver login is hard-coded, and it has no ancestry or shared-head protection.Risk
Risk tier R1. The blast radius is this repository's pull-request status publication only. Revert this pull request to roll back. No merge, deploy, secret or settings change is included.
Breaking changes
None.
risk-gateandpr-templateremain the required contexts, andowner-approvedstill clears protected paths;risk-gateadditionally requires a completed Codex review on the current head.