Skip to content

Gate PR mutation on reviewed commits and clarify evidence contracts - #186

Merged
tzhouam merged 2 commits into
mainfrom
codex/plan-audit-implementation-20260926
Sep 25, 2026
Merged

tzhouam merged 2 commits into
mainfrom
codex/plan-audit-implementation-20260926

Conversation

@tzhouam

@tzhouam tzhouam commented Sep 25, 2026 •

Copy link
Copy Markdown
Collaborator

PR debug and rebase could approve a clean working tree without reviewing the commits about to be pushed. This change freezes an explicit committed base/head range, reviews that range, and rejects a push when HEAD has changed since approval. It also serializes mutating debug groups, requires an observed clean commit and verification evidence, honors the requested group cap, and skips checkout for debug report-only runs.

The playbook and profile stores now reject malformed inputs without losing later valid operations. Rebase advisory answers distinguish verified, problem, and inconclusive. Landed-fix evidence carries a versioned canonical repository identity when configured, while older alias-only producers remain readable by explicit legacy consumers. The SDK spec now describes the existing carried-finding recheck contract.

Validation: complete offline suite, 1,525 passed (one pre-existing Pydantic warning); focused PR/engine/knowledge tests and SPEC/doc integrity checks passed. Git diff is clean.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 25, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-25T20:03:23.358337Z 69e4688 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 69e46881b5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".



BUGFIX_RECORD_MARKER = "<!-- infermatrix-copilot:bugfix-record:v1 -->"
BUGFIX_RECORD_MARKER = "<!-- infermatrix-copilot:bugfix-record:v2 -->"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve the v1 marker for legacy records

When repo_full_names lacks an alias, the producer deliberately emits a schema-v1 record without event_id or repository, but _publish_intake_record now labels every record with the v2 marker. Legacy mailbox consumers scan for the documented v1 marker (doc/RFC-knowledge-intake.md:219), while a v2 parser may require the new identity fields, so these compatibility records are silently skipped or rejected. Select the marker from the record's schema_version rather than using one unconditional v2 constant.

Useful? React with 👍 / 👎.

@tzhouam
tzhouam merged commit e3c4827 into main Sep 25, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant