diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml index 1bf34de..260f886 100644 --- a/.github/workflows/review.yml +++ b/.github/workflows/review.yml @@ -62,7 +62,7 @@ on: description: "Gatehouse release image tag. Bump per release." type: string required: false - default: "quay.io/crunchtools/gatehouse:0.2.0" + default: "quay.io/crunchtools/gatehouse:0.3.0" secrets: GEMINI_API_KEY: required: true diff --git a/README.md b/README.md index 282cf8a..486f005 100644 --- a/README.md +++ b/README.md @@ -45,6 +45,16 @@ gatehouse --advisory All 8 agents run concurrently. Findings below 80% confidence are filtered out. +## How Agents See Changes + +Since v0.3.0, agents do not receive raw unified diffs. Each hunk is rendered +as a structured view: a BEFORE block (the old code, removed lines marked +`[-]`) and an AFTER block (the new code with real file line numbers, added +lines marked `[+]`), plus instructions to judge the direction of a change. +Protections *added* by a change are treated as fixes, not findings; +protections *removed* by a change are flagged. Diffs that cannot be parsed +fall back to the raw unified format. + ## Exit Codes | Code | Meaning |