Repository navigation
ci(governance): adopt the canonical risk gate - #970
Conversation
The organization copy publishes no ai-review context, so the Codex receipt is decorative. Replace it with the tested canonical gate: approver from RISK_GATE_OWNER, ai-review on the current head, ancestry drift, shared-head fail-closed and protected paths.
|
@codex review |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Didn't find any major issues. Delightful! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
A synchronize can move one pull request off a shared head even when its own evaluation fails, which leaves the released sibling on a stale collision error until another event or the six-hour sweep. Run the sibling refresh in a finally block and keep a refresh failure from masking the evaluation error.
|
@codex review |
|
Codex Review: Didn't find any major issues. Keep it up! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
Pigbibi
added
the
owner-approved
|
@codex review |
|
Codex Review: Didn't find any major issues. Delightful! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
AI assistance
Qoder (AI agent) wrote this change from the owner's instruction; a Codex review is requested on this head.
What changed
Replaces
.github/workflows/risk-gate.ymlwith the canonical hardened gate and updates the approval paragraph inAGENTS.md.The gate now:
RISK_GATE_OWNERinstead of a literal;ai-reviewfrom thecodex-review-state:v1receipt on the current head;How verified
actionlintand the repository's normal checks run on this head.Why
The organization copy publishes no
ai-review, so a Codex review is decorative: no required context reads the receipt. Its approver login is hard-coded, and it has no ancestry or shared-head protection.Risk
Risk tier R1. The blast radius is this repository's pull-request status publication only. Revert this pull request to roll back. No merge, deploy, secret or settings change is included.
Breaking changes
None.
risk-gateandpr-templateremain the required contexts, andowner-approvedstill clears protected paths;risk-gateadditionally requires a completed Codex review on the current head.