Skip to content

Allow self-PASS, no PASS for T0/T1, add awaiting-approval and self-test labels - #415

Merged
Birfy merged 1 commit into
ThinkFlowLab:mainfrom
Birfy:docs/self-pass-gate
Oct 19, 2026
Merged

Birfy merged 1 commit into
ThinkFlowLab:mainfrom
Birfy:docs/self-pass-gate

Conversation

@Birfy

@Birfy Birfy commented Oct 19, 2026

Copy link
Copy Markdown
Collaborator

Follow-up to #414 (already merged at 11:43 Asia/Shanghai, so its branch can no longer carry more commits). Applies the owner's decisions of 2026-10-19 and fixes the doc/config conflicts left by #414. Docs, gate rule and labels in one PR.

Owner decisions applied

  • Self-PASS counts: a PR opened by the owner's Bot/agent (Birfy) may be PASSed by the owner's own reviewer Bot/agent. No independent reviewer is required. A new commit still voids a PASS; CI green, the merge queue and "never admin-merge / bypass" stay.
  • T0/T1: merge through the queue once CI is green, mergeable and design-conformant. No PASS, no human approval. (Nothing in code demanded a PASS for T0/T1; review-gate is report-only. Only the docs said so.)
  • T2/T3: still the maintainer's approval through GitHub (a human) and a PASS at the tip (self-PASS allowed).
  • agent-ready is set by a maintainer or by the maintenance routine after triage (it runs as Birfy). The "never use a maintainer's admin login" rule now forbids admin-merge and gate bypass instead.

Changes

  • .github/agent/review-policy.json: new selfReview: ["Birfy"] (must also be in reviewers); note updated.
  • .github/scripts/review-gate.mjs: the author's own report is excluded unless the author is in selfReview. All other rules unchanged (listed reviewer, Tip SHA = head, Ran: and Not run:, newest report wins). Tests: self-PASS counts, other authors still excluded, selfReview does not unlock an unlisted login, stale tip / missing evidence / later FAIL still fail, policy consistency.
  • .github/labels.json: add awaiting-approval and self-test (also created in the repo); agent-ready description matches the new rule. sync-labels.test.mjs checks the new names. agent-working / agent-pr already existed.
  • AGENTS.md: Pipeline step 6, label line, Gates; Docs-not-needed: goes in a branch commit as well as the body (Codex finding on Document the agent operating model in AGENTS.md #414).
  • docs/autonomous-dev.md: who sets agent-ready, credentials / admin wording, per-tier rule table, self-review in "The reviewed tip", phases.
  • .github/agent/risk-rules.json: tier meaning strings only (no paths or limits). .github/workflows/review-gate.yml: comment only. .github/ISSUE_TEMPLATE/agent-task.yml: wording.
  • docs/code-standards.md, CONTRIBUTING.md, .claude/skills/{review-pr,fix-issue}/SKILL.md: dropped the "author never counts" / "OpenCode and Codex both PASS" wording so nothing conflicts.

Tier: T3 (.github/**, AGENTS.md, CONTRIBUTING.md, docs/code-standards.md, docs/autonomous-dev.md). Needs the maintainer's approval at the head. Not auto-merged.

Ran at the tip: ARCH_DOCS_BASE=origin/main TZ=UTC npm run verify (Node 24): passes (arch-docs OK, .github script tests 255/255 incl. review-gate and sync-labels). node .github/scripts/changelog.mjs check passes.
Not run: smoke test, pack check (no runtime code changed).

Docs-not-needed: policy and docs only; no subsystem-owned path changed.

…licts

Owner decisions of 2026-10-19:
- A PR opened by the owner's Bot/agent (Birfy) may be PASSed by the owner's
  own reviewer Bot/agent (review-policy.json `selfReview`); T2/T3 still need
  the maintainer's approval, green CI, the merge queue; a new commit voids a PASS.
- T0/T1 merge through the queue on green CI with no PASS and no approval.
- agent-ready is set by a maintainer or the maintenance routine (runs as Birfy).
  The admin-login sentence now forbids admin-merge and gate bypass instead.
- labels.json gains awaiting-approval and self-test.
- A Docs-not-needed: trailer goes in a branch commit too (Codex finding on ThinkFlowLab#414).

Docs-not-needed: policy and docs only; no subsystem-owned path changed.
@Birfy Birfy added documentation Improvements or additions to documentation area:security Auth, grants, approvals, secrets area:docs Documentation labels Oct 19, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-19T03:56:11.455983Z 879e433 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@Birfy
Birfy added this pull request to the merge queue Oct 19, 2026
Merged via the queue into ThinkFlowLab:main with commit 7b9e90b Oct 19, 2026
8 checks passed
@Birfy
Birfy deleted the docs/self-pass-gate branch October 19, 2026 03:54

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 879e43320c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread docs/autonomous-dev.md
Comment on lines +131 to +132
AGENTS.md step 6 is the rule it serves. A PASS is required for **T2 and T3** (together with the maintainer's
approval); **T0 and T1 need no PASS** and merge on green CI. This report is the evidence of a PASS; it never merges anything.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Remove the documented no-PASS path for T2/T3

When a T2/T3 PR has maintainer approval but no PASS at its tip, this new rule says PASS is mandatory, but lines 162–168 in the same section still say that a PR without PASS can merge on maintainer approval. The live-rules table also says no review is required by branch protection, so the stale sentence describes an actionable bypass for the highest-risk PRs rather than merely dead prose; reword it to state that Phase 1 lacks enforcement but merging that way is forbidden.

AGENTS.md reference: AGENTS.md:L95-L95

Useful? React with 👍 / 👎.

Comment on lines 4 to 6
# Verifier PASS (`Tip SHA:` + `Verdict: PASS`, by a login in .github/agent/review-policy.json), and
# why not when it does not. It is NOT a required check: continue-on-error, never labels, comments,
# approves or merges, and it must stay out of branch protection and out of `tests-ok`'s needs.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Stop requiring a PASS in the T0/T1 workflow header

When a T0/T1 PR has green tests-ok but no PASS, lines 7–8 still tell readers that the standing delegation applies only “when a tip has a PASS.” The changed policy makes PASS unnecessary for these tiers, so this stale operational comment can leave an otherwise eligible low-risk PR waiting for review; update the header to say this report is consumed only for T2/T3.

AGENTS.md reference: AGENTS.md:L94-L94

Useful? React with 👍 / 👎.

Birfy added a commit to Birfy/FlyBot that referenced this pull request Oct 19, 2026
…ew (ThinkFlowLab#426)

Owner decision 2026-10-19 15:31 (Asia/Shanghai): stop using Codex for PR
review. The owner's own reviewer Bot, acting as `Birfy`, reviews and
PASSes (self-PASS already allowed by ThinkFlowLab#415, `selfReview: ["Birfy"]`).

How Codex was triggered: not by anything in this repo. No workflow,
script, routine, label or `@codex` comment requests it (rg of
`.github/`, skills, scripts, docs; `gh api
repos/ThinkFlowLab/FlyBot/hooks` is empty). The reviews on
ThinkFlowLab#402/ThinkFlowLab#414/ThinkFlowLab#415/ThinkFlowLab#416 come from the `chatgpt-codex-connector` GitHub App
with trigger "PR opened", i.e. Codex's automatic code review enabled for
this repo in ChatGPT Codex settings. That switch is outside the repo and
is turned off there by the owner.

This PR (wording only, no gate change):
- AGENTS.md, CONTRIBUTING.md, docs/autonomous-dev.md, LESSONS.md: the
reviewer is the owner's Bot (self-review); nothing requests or waits for
Codex.
- review-pr skill: drop the OpenCode↔Codex agreement requirement and
Verifier line; reviewer's own evidence at the tip decides.
- review-gate.test.mjs: neutral fixture login `reviewer-agent` instead
of `codex-agent`, drop the unused agreement line (the gate never parsed
it).

Unchanged: `.github/agent/review-policy.json` (reviewers
`hsliuustc0106`, `Birfy`; selfReview `Birfy`; Codex was not listed), CI,
risk tiers, T2/T3 maintainer approval.

Tip SHA: aa57d50
Ran:
- ARCH_DOCS_BASE=origin/main TZ=UTC npm run verify (Node 24.21.0) → pass
  - node --test .github/scripts/*.test.mjs → pass (88/88)
Not run:
- smoke / Desktop / live-e2e with a real model — no runtime code changed

T3 (touches AGENTS.md and .github/**): needs the maintainer's approval;
not merged by the agent.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:docs Documentation area:security Auth, grants, approvals, secrets documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant