Repository navigation
ci(governance): adopt the shared PR governance action - #723
Merged
Merged
Conversation
Replace the inline gate with the pinned v2 composite action, move the repo policy into .github/governance/policy.json, and relay fork review events through the permissionless signal workflow. Status check contexts are unchanged: risk-gate, ai-review, pr-template, clearing-label.
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Pigbibi
added
the
agent-approved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
AI assistance
Qoder agent (Claude) performed the migration and the checks below.
What changed
Replace the inline gate with the organization's shared
QuantStrategyLab/.github/pr-governanceaction pinned to873eb5afc59a56a394dabe8261e0e2ab5b8f769f(tagv2):.github/workflows/risk-gate.ymlis now the rendered shared template..github/governance/policy.jsonholds the repo policy (r0_paths,r2_paths, reviewer identity)..github/workflows/pr-review-signal.ymlrelays fork review events to the trusted run..github/dot-review/treats the gate's relayedworkflow_runruns like sweeps, so thereviewer is not started without a single linked pull request.
Required status contexts are unchanged:
risk-gate,ai-review,pr-template,clearing-label.How verified
The rendered gate differs from the shared template only by the repo name and the pinned SHA.
actionlintpasses on both workflows.Classification stays at least as strict: every
.github/**path, manifests, and credential/runtime/strategy paths are R2; prose indocs/andREADMEis R0; the Codex receipt and clearing-label binding are unchanged.node .github/dot-review/test-review.cjspasses (11 tests) with the relayed-run guard.