From 17b9c1f1924cb04841f3173d91f2550737100805 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 04:56:02 +0000
Subject: [PATCH] Add min-integrity/lockdown tips to pr-review and
 content-moderation archetypes

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 patterns/archetypes/content-moderation.json | 3 ++-
 patterns/archetypes/pr-review.json          | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/patterns/archetypes/content-moderation.json b/patterns/archetypes/content-moderation.json
index e62a679..d0e1df1 100644
--- a/patterns/archetypes/content-moderation.json
+++ b/patterns/archetypes/content-moderation.json
@@ -45,7 +45,8 @@
   "tips": [
     "Never auto-close or lock \u2014 label and comment only",
     "Include explicit rules for what IS legitimate to reduce false positives",
-    "Use DO NOT constraints for actions the agent should never take"
+    "Use DO NOT constraints for actions the agent should never take",
+    "Enable tools.github.lockdown to restrict surfaced content from public repos to authors with push access"
   ],
   "anti_patterns": []
 }
diff --git a/patterns/archetypes/pr-review.json b/patterns/archetypes/pr-review.json
index 1ac92d1..dc5b02e 100644
--- a/patterns/archetypes/pr-review.json
+++ b/patterns/archetypes/pr-review.json
@@ -55,7 +55,8 @@
   "tips": [
     "Focus on specific review criteria (security, performance, style)",
     "Use pull_request triggers focused on ready-to-review activity",
-    "Include DO NOT constraints to avoid false positive comments"
+    "Include DO NOT constraints to avoid false positive comments",
+    "Set tools.github.min-integrity (e.g. approved) so the agent only acts on content from trusted authors"
   ],
   "anti_patterns": [
     "supply-chain-review",