From 66de51cb556ee942713a453797f7358cfb97447a Mon Sep 17 00:00:00 2001
From: don-petry <36422719+don-petry@users.noreply.github.com>
Date: Tue, 22 Sep 2026 17:11:54 +0000
Subject: [PATCH 1/4] =?UTF-8?q?feat:=20implement=20issue=20#1881=20?=
 =?UTF-8?q?=E2=80=94=20auto-rebase=20still=20merges=20main=20into=20every?=
 =?UTF-8?q?=20open=20PR=20on=20every=20push,=20though=20the=20ruleset=20no?=
 =?UTF-8?q?=20longer=20requires=20up-to-date=20branches=20=E2=80=94=20the?=
 =?UTF-8?q?=20treadmill's=20driver=20outlived=20the=20strict=20fix?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scripts/auto_rebase_health.sh | 112 +++++++++++++++++++++++--
 tests/auto_rebase_health.bats | 150 ++++++++++++++++++++++++++++++++++
 2 files changed, 255 insertions(+), 7 deletions(-)

diff --git a/scripts/auto_rebase_health.sh b/scripts/auto_rebase_health.sh
index 10bd69a98..5234b696b 100644
--- a/scripts/auto_rebase_health.sh
+++ b/scripts/auto_rebase_health.sh
@@ -28,6 +28,17 @@
 #      audit. Repo-scoped — fleet-wide would need a cross-repo PAT this report
 #      does not carry.
 #
+#   4. Base-merge necessity (#1881) — a deterministic counter that splits the open
+#      BEHIND queue into base merges that are genuinely REQUIRED (being behind
+#      blocks the PR: the ruleset requires up-to-date branches, or the PR is queued
+#      to merge, or it carries the explicit request label) vs SKIPPABLE no-ops. The
+#      required/skippable split is derived from repository configuration (the
+#      ruleset's `strict_required_status_checks_policy`), so if strict is re-armed
+#      the counter follows with no code change. `skippable` is the no-op base-merge
+#      volume #1881 removes at the source — the second input to #1864 AC #4 alongside
+#      #1865's `reviews_carried_forward`. The gate that acts on this lives in the
+#      central auto-rebase reusable; this report only measures it.
+#
 # Layout (mirrors scripts/token_report.sh):
 #   * The count_*/summarize_*/fmt_*/render_report functions are PURE — they take
 #     JSON / scalars and write to stdout. Unit-tested in tests/auto_rebase_health.bats.
@@ -56,6 +67,12 @@ SENTINEL_MARKER='<!-- auto-rebase-conflict:'
 REBASE_RESPONSE_MARKER='intent=rebase status='
 REBASE_APPLIED_MARKER='intent=rebase status=applied'
 
+# Label a human/PR can add to explicitly demand an up-to-date branch even when the
+# ruleset does not require it — the "or a human/label requests it" arm of #1881 AC #1.
+# Same label the central reusable's review-ready eligibility predicate already honours.
+AUTO_REBASE_REQUEST_LABEL="${AUTO_REBASE_REQUEST_LABEL:-auto-rebase:ready}"
+DEFAULT_BRANCH="${DEFAULT_BRANCH:-main}"
+
 # ---------------------------------------------------------------------------
 # Pure helpers (unit-tested; no network)
 # ---------------------------------------------------------------------------
@@ -112,6 +129,54 @@ summarize_merge_states() {
     ] | @tsv' <<< "$json"
 }
 
+# strict_from_branch_rules <rules_json>
+# Reads whether the default branch's ruleset requires PRs to be up to date with
+# base — the `strict_required_status_checks_policy` flag (#1864). Input is the JSON
+# array from `gh api repos/{repo}/rules/branches/<branch>`. Echoes "true" iff some
+# active required_status_checks rule sets that policy true, else "false". This is
+# the config-derived condition of #1881 AC #2: if strict is re-armed later the flag
+# flips with no code change. Absent/empty/unparseable input → "false".
+strict_from_branch_rules() {
+  local json="${1:-}"
+  [ -n "$json" ] || json='[]'
+  local r
+  r="$(printf '%s' "$json" | jq -r '
+    [ .[]?
+      | select(.type == "required_status_checks")
+      | (.parameters.strict_required_status_checks_policy // false)
+    ] | any' 2>/dev/null || echo false)"
+  [ "$r" = "true" ] && echo "true" || echo "false"
+}
+
+# summarize_base_merges <prs_json> <strict_enabled> [request_label]
+# Emits TSV: required<TAB>skippable — over the open non-draft, non-Dependabot,
+# mergeStateStatus==BEHIND PRs, the count whose base merge is genuinely REQUIRED vs
+# a no-op that should be SKIPPED (#1881 AC #4). A BEHIND PR's base merge is required
+# when being behind actually blocks it — ANY of:
+#   * strict_enabled == "true" (ruleset requires up-to-date branches), OR
+#   * the PR is queued to merge (autoMergeRequest non-null), OR
+#   * the PR carries the explicit request label (default AUTO_REBASE_REQUEST_LABEL).
+# Otherwise the base merge is skippable churn. DIRTY PRs are deliberately NOT counted:
+# they take the conflict/rebase path unchanged (AC #3). Absent/empty JSON → "0\t0".
+summarize_base_merges() {
+  local json="${1:-}" strict="${2:-false}" label="${3:-$AUTO_REBASE_REQUEST_LABEL}"
+  [ -n "$json" ] || json='[]'
+  jq -r --arg strict "$strict" --arg label "$label" '
+    [ .[]
+      | select((.isDraft // false) | not)
+      | select(((.author?.login // "" | tostring) | test("dependabot"; "i")) | not)
+      | select(.mergeStateStatus == "BEHIND")
+      | ( ($strict == "true")
+          or (.autoMergeRequest != null)
+          or ([ (.labels // [])[] | (.name // "") ] | index($label) != null)
+        )
+    ] as $flags |
+    [
+      ([ $flags[] | select(.) ]       | length),
+      ([ $flags[] | select(. | not) ] | length)
+    ] | @tsv' <<< "$json" 2>/dev/null || printf '0\t0'
+}
+
 # summarize_runs <runs_json>
 # Emits TSV: total<TAB>success<TAB>failed over the auto-rebase run telemetry.
 summarize_runs() {
@@ -144,13 +209,16 @@ fmt_rate() {
   echo "$(( num * 100 / denom ))%"
 }
 
-# render_report <comments_json> <runs_json> <lookback_days> <behind_prs> [today] [prs_json] [pr_list_truncated] [pr_list_limit]
+# render_report <comments_json> <runs_json> <lookback_days> <behind_prs> [today] [prs_json] [pr_list_truncated] [pr_list_limit] [strict_enabled] [request_label]
 # Writes the full Markdown report to stdout. Pure: no network.
 # pr_list_truncated=true renders a warning that BEHIND/DIRTY counts may undercount.
+# strict_enabled ("true"/"false") is the config-derived up-to-date-branches policy;
+# it drives the base-merge-necessity section (#1881).
 render_report() {
   local comments_json="${1:-[]}" runs_json="${2:-[]}"
   local lookback="${3:-7}" behind="${4:-0}" today="${5:-}" prs_json="${6:-[]}"
   local pr_list_truncated="${7:-false}" pr_list_limit="${8:-1000}"
+  local strict_enabled="${9:-false}" request_label="${10:-$AUTO_REBASE_REQUEST_LABEL}"
   [ -n "$today" ] || today="$(date -u +%Y-%m-%d)"
 
   local sentinels responses applied
@@ -162,6 +230,9 @@ render_report() {
   local ms_behind ms_dirty
   IFS=$'\t' read -r ms_behind ms_dirty < <(summarize_merge_states "$prs_json")
 
+  local bm_required bm_skippable
+  IFS=$'\t' read -r bm_required bm_skippable < <(summarize_base_merges "$prs_json" "$strict_enabled" "$request_label")
+
   local fanout
   fanout="$(estimate_fanout "$total" "$behind")"
 
@@ -199,7 +270,19 @@ render_report() {
   fi
   printf '> Snapshot of the current open-PR queue, scoped to **`%s`** — fleet-wide counts would '  "$WORKFLOW_REPO"
   printf 'require a cross-repo PAT this report does not carry. Tracks the effectiveness of the '
-  printf 'AC1/AC2 auto-rebase fixes (petry-projects/.github#926) without a manual audit.\n'
+  printf 'AC1/AC2 auto-rebase fixes (petry-projects/.github#926) without a manual audit.\n\n'
+
+  printf '## Base-merge necessity (#1881)\n\n'
+  printf -- '- **Up-to-date-branches policy** (ruleset `strict_required_status_checks_policy`): `%s`\n' "$strict_enabled"
+  printf -- '- **Base merges required** (behind actually blocks: strict on, queued to merge, or `%s` label): %s\n' \
+    "$request_label" "$bm_required"
+  printf -- '- **Base merges skippable** (BEHIND with no such requirement — a no-op churn): %s\n' "$bm_skippable"
+  printf -- '- `base_merges_required=%s base_merges_skippable=%s`\n\n' "$bm_required" "$bm_skippable"
+  printf '> Deterministic counter over open non-draft non-Dependabot **BEHIND** PRs (DIRTY PRs keep the '
+  printf 'conflict/rebase path, so they are excluded). `skippable` is the no-op base-merge volume #1881 '
+  printf 'removes at the source; it is the second input to #1864 AC #4 alongside #1865 `reviews_carried_forward`. '
+  printf 'The policy flag is read from repository configuration — if `strict` is re-armed, every BEHIND PR '
+  printf 'becomes `required` with no code change.\n'
 }
 
 # ---------------------------------------------------------------------------
@@ -247,12 +330,13 @@ main() {
     --paginate --jq '.workflow_runs | map({conclusion, created_at})' 2>/dev/null \
     | jq -s 'add // []' 2>/dev/null || echo '[]')"
 
-  # 3. Open-PR snapshot — pulled once with the fields both the behind-PR
-  #    multiplier and the AC7 merge-state (BEHIND/DIRTY) metric need. Best-effort;
-  #    defaults to [] so the report still renders when the query fails.
+  # 3. Open-PR snapshot — pulled once with the fields the behind-PR multiplier, the
+  #    AC7 merge-state (BEHIND/DIRTY) metric, and the #1881 base-merge-necessity
+  #    counter (labels + autoMergeRequest) all need. Best-effort; defaults to [] so
+  #    the report still renders when the query fails.
   local prs_json pr_list_truncated pr_count
   prs_json="$(gh pr list --repo "$WORKFLOW_REPO" --state open --limit "$PR_LIST_LIMIT" \
-    --json author,isDraft,mergeStateStatus 2>/dev/null || echo '[]')"
+    --json author,isDraft,mergeStateStatus,labels,autoMergeRequest 2>/dev/null || echo '[]')"
   [ -n "$prs_json" ] || prs_json='[]'
   pr_count="$(printf '%s' "$prs_json" | jq 'length' 2>/dev/null || echo 0)"
   if [ "$pr_count" -ge "$PR_LIST_LIMIT" ]; then
@@ -268,8 +352,22 @@ main() {
     | jq '[.[] | select((.author?.login // "") | test("dependabot"; "i") | not)] | length' \
     2>/dev/null || echo 0)"
 
+  # 4. Up-to-date-branches policy — read from the default branch's ruleset so the
+  #    base-merge-necessity counter (#1881) is derived from config, not hardcoded.
+  #    Best-effort: if the ruleset cannot be read the report degrades to strict=false
+  #    with a warning (so a silent read failure cannot masquerade as "no requirement"),
+  #    matching the token-degradation posture above.
+  local rules_json strict_enabled
+  if rules_json="$(gh api "repos/${WORKFLOW_REPO}/rules/branches/${DEFAULT_BRANCH}" 2>/dev/null)"; then
+    [ -n "$rules_json" ] || rules_json='[]'
+  else
+    rules_json='[]'
+    echo "::warning::Could not read branch rules for ${WORKFLOW_REPO}@${DEFAULT_BRANCH} — base-merge necessity assumes strict=false; skippable counts may be overstated." >&2
+  fi
+  strict_enabled="$(strict_from_branch_rules "$rules_json")"
+
   local report
-  report="$(render_report "$comments_json" "$runs_json" "$LOOKBACK_DAYS" "$behind" "$today" "$prs_json" "$pr_list_truncated" "$PR_LIST_LIMIT")"
+  report="$(render_report "$comments_json" "$runs_json" "$LOOKBACK_DAYS" "$behind" "$today" "$prs_json" "$pr_list_truncated" "$PR_LIST_LIMIT" "$strict_enabled" "$AUTO_REBASE_REQUEST_LABEL")"
 
   printf '%s\n' "$report"
   if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
diff --git a/tests/auto_rebase_health.bats b/tests/auto_rebase_health.bats
index 39aa20295..e0a16b898 100644
--- a/tests/auto_rebase_health.bats
+++ b/tests/auto_rebase_health.bats
@@ -45,6 +45,36 @@ setup() {
     {"number":5,"mergeStateStatus":"BEHIND","isDraft":true,"author":{"login":"dave"}},
     {"number":6,"mergeStateStatus":"DIRTY","isDraft":false,"author":{"login":"dependabot[bot]"}}
   ]'
+
+  # Branch-rules JSON as returned by `gh api repos/{repo}/rules/branches/main`.
+  # Contains a required_status_checks rule with strict=false (matches the current
+  # post-#1864 state: the ruleset no longer demands up-to-date branches).
+  RULES_STRICT_OFF_JSON='[
+    {"type":"pull_request","parameters":{}},
+    {"type":"required_status_checks","parameters":{"strict_required_status_checks_policy":false,"required_status_checks":[{"context":"lint"}]}}
+  ]'
+  # Same shape but strict re-armed (the #1864 one-field revert).
+  RULES_STRICT_ON_JSON='[
+    {"type":"required_status_checks","parameters":{"strict_required_status_checks_policy":true,"required_status_checks":[{"context":"lint"}]}}
+  ]'
+
+  # Base-merge-necessity PR set. Open non-draft non-Dependabot BEHIND PRs:
+  #   #1 plain BEHIND (no queue, no label)                 → skippable when strict off
+  #   #2 BEHIND + queued to merge (autoMergeRequest set)    → required always
+  #   #3 BEHIND + carries the explicit request label        → required always
+  #   #4 DIRTY (conflict path — never a base-merge candidate, AC #3)
+  #   #5 BEHIND but DRAFT                                    → excluded
+  #   #6 BEHIND but Dependabot-authored                     → excluded
+  #   #7 CLEAN                                              → excluded (not BEHIND)
+  BASE_MERGE_PRS_JSON='[
+    {"number":1,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"alice"},"labels":[],"autoMergeRequest":null},
+    {"number":2,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"bob"},"labels":[],"autoMergeRequest":{"enabledAt":"2026-09-20T00:00:00Z"}},
+    {"number":3,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"carol"},"labels":[{"name":"auto-rebase:ready"}],"autoMergeRequest":null},
+    {"number":4,"mergeStateStatus":"DIRTY","isDraft":false,"author":{"login":"dan"},"labels":[],"autoMergeRequest":null},
+    {"number":5,"mergeStateStatus":"BEHIND","isDraft":true,"author":{"login":"eve"},"labels":[],"autoMergeRequest":null},
+    {"number":6,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"dependabot[bot]"},"labels":[],"autoMergeRequest":null},
+    {"number":7,"mergeStateStatus":"CLEAN","isDraft":false,"author":{"login":"frank"},"labels":[],"autoMergeRequest":null}
+  ]'
 }
 
 # ---------------------------------------------------------------------------
@@ -135,6 +165,110 @@ setup() {
   [ "$output" = "$(printf '1\t1')" ]
 }
 
+# ---------------------------------------------------------------------------
+# strict_from_branch_rules — reads strict flag from repo config (AC #2)
+# ---------------------------------------------------------------------------
+
+@test "strict_from_branch_rules: strict policy on yields true" {
+  run strict_from_branch_rules "$RULES_STRICT_ON_JSON"
+  [ "$status" -eq 0 ]
+  [ "$output" = "true" ]
+}
+
+@test "strict_from_branch_rules: strict policy off yields false" {
+  run strict_from_branch_rules "$RULES_STRICT_OFF_JSON"
+  [ "$status" -eq 0 ]
+  [ "$output" = "false" ]
+}
+
+@test "strict_from_branch_rules: no required_status_checks rule yields false" {
+  run strict_from_branch_rules '[{"type":"pull_request","parameters":{}}]'
+  [ "$output" = "false" ]
+}
+
+@test "strict_from_branch_rules: empty/absent JSON yields false (no error)" {
+  run strict_from_branch_rules ""
+  [ "$status" -eq 0 ]
+  [ "$output" = "false" ]
+}
+
+@test "strict_from_branch_rules: unparseable input yields false (no error)" {
+  run strict_from_branch_rules "not-json"
+  [ "$status" -eq 0 ]
+  [ "$output" = "false" ]
+}
+
+# ---------------------------------------------------------------------------
+# summarize_base_merges — required vs skippable base merges (#1881 AC #4)
+# ---------------------------------------------------------------------------
+
+@test "summarize_base_merges: strict off — only queued/labelled PRs are required" {
+  run summarize_base_merges "$BASE_MERGE_PRS_JSON" false
+  [ "$status" -eq 0 ]
+  # #2 queued + #3 labelled = 2 required; #1 plain BEHIND = 1 skippable.
+  # DIRTY(#4), draft(#5), dependabot(#6), CLEAN(#7) all excluded.
+  [ "$output" = "$(printf '2\t1')" ]
+}
+
+@test "summarize_base_merges: strict on — every eligible BEHIND PR is required" {
+  run summarize_base_merges "$BASE_MERGE_PRS_JSON" true
+  [ "$status" -eq 0 ]
+  # #1,#2,#3 all required; 0 skippable.
+  [ "$output" = "$(printf '3\t0')" ]
+}
+
+@test "summarize_base_merges: strict off, plain BEHIND PRs are all skippable" {
+  run summarize_base_merges '[
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"autoMergeRequest":null},
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"b"},"labels":[],"autoMergeRequest":null}
+  ]' false
+  [ "$output" = "$(printf '0\t2')" ]
+}
+
+@test "summarize_base_merges: queued-to-merge PR is required even when strict off" {
+  run summarize_base_merges '[
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"autoMergeRequest":{"enabledAt":"x"}}
+  ]' false
+  [ "$output" = "$(printf '1\t0')" ]
+}
+
+@test "summarize_base_merges: explicit request label makes a PR required when strict off" {
+  run summarize_base_merges '[
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[{"name":"auto-rebase:ready"}],"autoMergeRequest":null}
+  ]' false
+  [ "$output" = "$(printf '1\t0')" ]
+}
+
+@test "summarize_base_merges: DIRTY PRs are not counted (conflict path unchanged, AC #3)" {
+  run summarize_base_merges '[
+    {"mergeStateStatus":"DIRTY","isDraft":false,"author":{"login":"a"},"labels":[],"autoMergeRequest":null}
+  ]' false
+  [ "$output" = "$(printf '0\t0')" ]
+}
+
+@test "summarize_base_merges: excludes draft and Dependabot BEHIND PRs" {
+  run summarize_base_merges '[
+    {"mergeStateStatus":"BEHIND","isDraft":true,"author":{"login":"a"},"labels":[],"autoMergeRequest":null},
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"dependabot[bot]"},"labels":[],"autoMergeRequest":null}
+  ]' false
+  [ "$output" = "$(printf '0\t0')" ]
+}
+
+@test "summarize_base_merges: empty/absent JSON returns zeros (no error)" {
+  run summarize_base_merges "" false
+  [ "$status" -eq 0 ]
+  [ "$output" = "$(printf '0\t0')" ]
+}
+
+@test "summarize_base_merges: handles null/missing labels and author safely" {
+  run summarize_base_merges '[
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":null},
+    {"mergeStateStatus":"BEHIND","isDraft":false}
+  ]' false
+  [ "$status" -eq 0 ]
+  [ "$output" = "$(printf '0\t2')" ]
+}
+
 # ---------------------------------------------------------------------------
 # estimate_fanout — run_count × behind_prs
 # ---------------------------------------------------------------------------
@@ -220,3 +354,19 @@ setup() {
   [ "$status" -eq 0 ]
   [[ "$output" != *"PR list capped"* ]]
 }
+
+@test "render_report: surfaces base-merge necessity section and machine counters" {
+  run render_report "$COMMENTS_JSON" "$RUNS_JSON" 7 3 2026-06-15 "$BASE_MERGE_PRS_JSON" false 1000 false
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"Base-merge necessity"* ]]
+  # strict off → #2 queued + #3 labelled required, #1 skippable
+  [[ "$output" == *"base_merges_required=2"* ]]
+  [[ "$output" == *"base_merges_skippable=1"* ]]
+}
+
+@test "render_report: base-merge section reflects strict re-armed (all required)" {
+  run render_report "$COMMENTS_JSON" "$RUNS_JSON" 7 3 2026-06-15 "$BASE_MERGE_PRS_JSON" false 1000 true
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"base_merges_required=3"* ]]
+  [[ "$output" == *"base_merges_skippable=0"* ]]
+}

From 31b9b0267ec5291bece9d17994c8002a1de33773 Mon Sep 17 00:00:00 2001
From: don-petry <36422719+don-petry@users.noreply.github.com>
Date: Tue, 22 Sep 2026 17:21:29 +0000
Subject: [PATCH 2/4] fix(reviews): address review comments [skip ci-relay]

---
 scripts/auto_rebase_health.sh | 27 ++++++++++++++++++++++-----
 1 file changed, 22 insertions(+), 5 deletions(-)

diff --git a/scripts/auto_rebase_health.sh b/scripts/auto_rebase_health.sh
index 5234b696b..ab90df1af 100644
--- a/scripts/auto_rebase_health.sh
+++ b/scripts/auto_rebase_health.sh
@@ -71,7 +71,11 @@ REBASE_APPLIED_MARKER='intent=rebase status=applied'
 # ruleset does not require it — the "or a human/label requests it" arm of #1881 AC #1.
 # Same label the central reusable's review-ready eligibility predicate already honours.
 AUTO_REBASE_REQUEST_LABEL="${AUTO_REBASE_REQUEST_LABEL:-auto-rebase:ready}"
-DEFAULT_BRANCH="${DEFAULT_BRANCH:-main}"
+# Branch whose ruleset drives the up-to-date policy. Left empty by default so
+# main() resolves the repo's ACTUAL default branch — an AGENT_REPO whose default
+# branch is not `main` would otherwise have its rules read from the wrong branch.
+# Set this env to pin a specific branch and skip the lookup.
+DEFAULT_BRANCH="${DEFAULT_BRANCH:-}"
 
 # ---------------------------------------------------------------------------
 # Pure helpers (unit-tested; no network)
@@ -145,7 +149,7 @@ strict_from_branch_rules() {
       | select(.type == "required_status_checks")
       | (.parameters.strict_required_status_checks_policy // false)
     ] | any' 2>/dev/null || echo false)"
-  [ "$r" = "true" ] && echo "true" || echo "false"
+  echo "$r"
 }
 
 # summarize_base_merges <prs_json> <strict_enabled> [request_label]
@@ -357,12 +361,25 @@ main() {
   #    Best-effort: if the ruleset cannot be read the report degrades to strict=false
   #    with a warning (so a silent read failure cannot masquerade as "no requirement"),
   #    matching the token-degradation posture above.
-  local rules_json strict_enabled
-  if rules_json="$(gh api "repos/${WORKFLOW_REPO}/rules/branches/${DEFAULT_BRANCH}" 2>/dev/null)"; then
+  #
+  #    Resolve the branch first: when DEFAULT_BRANCH is not pinned via env, query the
+  #    repo's ACTUAL default branch so an AGENT_REPO whose default is not `main` reads
+  #    its rules from the right branch (#1887). Fall back to `main` if the lookup fails.
+  local default_branch="${DEFAULT_BRANCH:-}"
+  if [ -z "$default_branch" ]; then
+    default_branch="$(gh api "repos/${WORKFLOW_REPO}" --jq '.default_branch' 2>/dev/null || echo main)"
+    [ -n "$default_branch" ] || default_branch=main
+  fi
+
+  # Capture the command-substitution exit status into a variable first (rather than
+  # running it directly inside `if`) so a failure is not swallowed under `set -e`.
+  local rules_json strict_enabled api_status=0
+  rules_json="$(gh api "repos/${WORKFLOW_REPO}/rules/branches/${default_branch}" 2>/dev/null)" || api_status=$?
+  if [ "$api_status" -eq 0 ]; then
     [ -n "$rules_json" ] || rules_json='[]'
   else
     rules_json='[]'
-    echo "::warning::Could not read branch rules for ${WORKFLOW_REPO}@${DEFAULT_BRANCH} — base-merge necessity assumes strict=false; skippable counts may be overstated." >&2
+    echo "::warning::Could not read branch rules for ${WORKFLOW_REPO}@${default_branch} — base-merge necessity assumes strict=false; skippable counts may be overstated." >&2
   fi
   strict_enabled="$(strict_from_branch_rules "$rules_json")"
 

From 41fa32f900cdfa4488f5c44822f9ef3c190ad373 Mon Sep 17 00:00:00 2001
From: don-petry <36422719+don-petry@users.noreply.github.com>
Date: Tue, 22 Sep 2026 18:01:22 +0000
Subject: [PATCH 3/4] fix(bot): address bot feedback [skip ci-relay]

---
 scripts/auto_rebase_health.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/scripts/auto_rebase_health.sh b/scripts/auto_rebase_health.sh
index ab90df1af..1ea4032a3 100644
--- a/scripts/auto_rebase_health.sh
+++ b/scripts/auto_rebase_health.sh
@@ -170,11 +170,11 @@ summarize_base_merges() {
       | select((.isDraft // false) | not)
       | select(((.author?.login // "" | tostring) | test("dependabot"; "i")) | not)
       | select(.mergeStateStatus == "BEHIND")
-      | ( ($strict == "true")
-          or (.autoMergeRequest != null)
-          or ([ (.labels // [])[] | (.name // "") ] | index($label) != null)
-        )
-    ] as $flags |
+    ] | map(
+      ($strict == "true")
+      or (.autoMergeRequest != null)
+      or ([ (.labels // [])[] | (.name // "") ] | index($label) != null)
+    ) as $flags |
     [
       ([ $flags[] | select(.) ]       | length),
       ([ $flags[] | select(. | not) ] | length)

From 1c27f20b1a84dc6e83f3016844597bf56cf770d4 Mon Sep 17 00:00:00 2001
From: don-petry <36422719+don-petry@users.noreply.github.com>
Date: Tue, 22 Sep 2026 18:21:06 +0000
Subject: [PATCH 4/4] fix(reviews): address review comments [skip ci-relay]

---
 scripts/auto_rebase_health.sh | 95 +++++++++++++++++++++++++++++------
 tests/auto_rebase_health.bats | 87 ++++++++++++++++++++++++--------
 2 files changed, 145 insertions(+), 37 deletions(-)

diff --git a/scripts/auto_rebase_health.sh b/scripts/auto_rebase_health.sh
index 1ea4032a3..54989a086 100644
--- a/scripts/auto_rebase_health.sh
+++ b/scripts/auto_rebase_health.sh
@@ -152,27 +152,35 @@ strict_from_branch_rules() {
   echo "$r"
 }
 
-# summarize_base_merges <prs_json> <strict_enabled> [request_label]
+# summarize_base_merges <prs_json> <strict_policy> [request_label]
 # Emits TSV: required<TAB>skippable — over the open non-draft, non-Dependabot,
 # mergeStateStatus==BEHIND PRs, the count whose base merge is genuinely REQUIRED vs
 # a no-op that should be SKIPPED (#1881 AC #4). A BEHIND PR's base merge is required
 # when being behind actually blocks it — ANY of:
-#   * strict_enabled == "true" (ruleset requires up-to-date branches), OR
-#   * the PR is queued to merge (autoMergeRequest non-null), OR
+#   * strict is on for THAT PR's base branch (ruleset requires up-to-date branches), OR
+#   * the PR is enqueued in the merge queue (mergeQueueEntry non-null — actual
+#     merge-queue membership, not auto-merge arming, which does not force an
+#     up-to-date branch), OR
 #   * the PR carries the explicit request label (default AUTO_REBASE_REQUEST_LABEL).
 # Otherwise the base merge is skippable churn. DIRTY PRs are deliberately NOT counted:
 # they take the conflict/rebase path unchanged (AC #3). Absent/empty JSON → "0\t0".
+#
+# <strict_policy> is either a scalar "true"/"false" applied to every base branch, OR
+# a JSON object mapping baseRefName → boolean so each PR is classified against its OWN
+# base's ruleset (#1887): a release branch with a different strict policy no longer
+# borrows the default branch's flag. A base absent from the map defaults to false.
 summarize_base_merges() {
   local json="${1:-}" strict="${2:-false}" label="${3:-$AUTO_REBASE_REQUEST_LABEL}"
   [ -n "$json" ] || json='[]'
   jq -r --arg strict "$strict" --arg label "$label" '
+    ($strict | (fromjson? // false)) as $sp |
     [ .[]
       | select((.isDraft // false) | not)
       | select(((.author?.login // "" | tostring) | test("dependabot"; "i")) | not)
       | select(.mergeStateStatus == "BEHIND")
     ] | map(
-      ($strict == "true")
-      or (.autoMergeRequest != null)
+      (if ($sp | type) == "object" then ($sp[(.baseRefName // "")] // false) else $sp end)
+      or (.mergeQueueEntry != null)
       or ([ (.labels // [])[] | (.name // "") ] | index($label) != null)
     ) as $flags |
     [
@@ -213,16 +221,20 @@ fmt_rate() {
   echo "$(( num * 100 / denom ))%"
 }
 
-# render_report <comments_json> <runs_json> <lookback_days> <behind_prs> [today] [prs_json] [pr_list_truncated] [pr_list_limit] [strict_enabled] [request_label]
+# render_report <comments_json> <runs_json> <lookback_days> <behind_prs> [today] [prs_json] [pr_list_truncated] [pr_list_limit] [strict_enabled] [request_label] [strict_policy]
 # Writes the full Markdown report to stdout. Pure: no network.
 # pr_list_truncated=true renders a warning that BEHIND/DIRTY counts may undercount.
-# strict_enabled ("true"/"false") is the config-derived up-to-date-branches policy;
-# it drives the base-merge-necessity section (#1881).
+# strict_enabled ("true"/"false") is the DEFAULT branch's config-derived
+# up-to-date-branches policy — shown as the report headline.
+# strict_policy is what actually drives the base-merge-necessity counter (#1881):
+# either the same scalar, or a JSON object mapping baseRefName → boolean so each PR
+# is classified against its own base's ruleset (#1887). Defaults to strict_enabled.
 render_report() {
   local comments_json="${1:-[]}" runs_json="${2:-[]}"
   local lookback="${3:-7}" behind="${4:-0}" today="${5:-}" prs_json="${6:-[]}"
   local pr_list_truncated="${7:-false}" pr_list_limit="${8:-1000}"
   local strict_enabled="${9:-false}" request_label="${10:-$AUTO_REBASE_REQUEST_LABEL}"
+  local strict_policy="${11:-$strict_enabled}"
   [ -n "$today" ] || today="$(date -u +%Y-%m-%d)"
 
   local sentinels responses applied
@@ -235,7 +247,7 @@ render_report() {
   IFS=$'\t' read -r ms_behind ms_dirty < <(summarize_merge_states "$prs_json")
 
   local bm_required bm_skippable
-  IFS=$'\t' read -r bm_required bm_skippable < <(summarize_base_merges "$prs_json" "$strict_enabled" "$request_label")
+  IFS=$'\t' read -r bm_required bm_skippable < <(summarize_base_merges "$prs_json" "$strict_policy" "$request_label")
 
   local fanout
   fanout="$(estimate_fanout "$total" "$behind")"
@@ -278,7 +290,7 @@ render_report() {
 
   printf '## Base-merge necessity (#1881)\n\n'
   printf -- '- **Up-to-date-branches policy** (ruleset `strict_required_status_checks_policy`): `%s`\n' "$strict_enabled"
-  printf -- '- **Base merges required** (behind actually blocks: strict on, queued to merge, or `%s` label): %s\n' \
+  printf -- '- **Base merges required** (behind actually blocks: strict on, enqueued in merge queue, or `%s` label): %s\n' \
     "$request_label" "$bm_required"
   printf -- '- **Base merges skippable** (BEHIND with no such requirement — a no-op churn): %s\n' "$bm_skippable"
   printf -- '- `base_merges_required=%s base_merges_skippable=%s`\n\n' "$bm_required" "$bm_skippable"
@@ -336,15 +348,36 @@ main() {
 
   # 3. Open-PR snapshot — pulled once with the fields the behind-PR multiplier, the
   #    AC7 merge-state (BEHIND/DIRTY) metric, and the #1881 base-merge-necessity
-  #    counter (labels + autoMergeRequest) all need. Best-effort; defaults to [] so
-  #    the report still renders when the query fails.
+  #    counter (labels + mergeQueueEntry + baseRefName) all need. Fetched over GraphQL
+  #    rather than `gh pr list --json` because `mergeQueueEntry` — actual merge-queue
+  #    membership, the queue-specific signal #1881 wants (not `autoMergeRequest`, which
+  #    only means auto-merge is armed) — is not a documented `gh pr list` field. The
+  #    node set is reshaped to the same object shape the pure helpers consume. Best
+  #    effort; defaults to [] so the report still renders when the query fails.
+  local owner="${WORKFLOW_REPO%%/*}" name="${WORKFLOW_REPO##*/}"
   local prs_json pr_list_truncated pr_count
-  prs_json="$(gh pr list --repo "$WORKFLOW_REPO" --state open --limit "$PR_LIST_LIMIT" \
-    --json author,isDraft,mergeStateStatus,labels,autoMergeRequest 2>/dev/null || echo '[]')"
+  # shellcheck disable=SC2016 # $owner/$name/$endCursor are GraphQL vars, not shell vars
+  prs_json="$(gh api graphql --paginate \
+    -f owner="$owner" -f name="$name" \
+    -f query='query($owner:String!, $name:String!, $endCursor:String) {
+      repository(owner:$owner, name:$name) {
+        pullRequests(states: OPEN, first: 100, after: $endCursor) {
+          nodes {
+            number isDraft mergeStateStatus baseRefName
+            author { login }
+            labels(first: 100) { nodes { name } }
+            mergeQueueEntry { id }
+          }
+          pageInfo { hasNextPage endCursor }
+        }
+      }
+    }' --jq '.data.repository.pullRequests.nodes[]' 2>/dev/null \
+    | jq -s 'map({number, isDraft, mergeStateStatus, baseRefName, author, labels: (.labels.nodes // []), mergeQueueEntry})' 2>/dev/null || echo '[]')"
   [ -n "$prs_json" ] || prs_json='[]'
   pr_count="$(printf '%s' "$prs_json" | jq 'length' 2>/dev/null || echo 0)"
   if [ "$pr_count" -ge "$PR_LIST_LIMIT" ]; then
     pr_list_truncated=true
+    prs_json="$(jq -c --argjson lim "$PR_LIST_LIMIT" '.[:$lim]' <<< "$prs_json" 2>/dev/null || printf '%s' "$prs_json")"
   else
     pr_list_truncated=false
   fi
@@ -383,8 +416,40 @@ main() {
   fi
   strict_enabled="$(strict_from_branch_rules "$rules_json")"
 
+  # Resolve the up-to-date policy PER base branch, not just the default (#1887). The
+  # open-PR snapshot has no default-branch filter and the auto-rebase workflow updates
+  # every behind PR, so a PR based on a release branch with a different strict policy
+  # would otherwise be classified against `main`'s ruleset. Build a baseRefName→bool
+  # map covering the distinct bases of the eligible (non-draft, non-Dependabot, BEHIND)
+  # PRs and hand it to the counter. Seed it with the already-resolved default branch so
+  # that base is not re-fetched.
+  local strict_policy
+  strict_policy="$(jq -cn --arg k "$default_branch" --argjson v "$strict_enabled" '{($k): $v}')"
+  local base_branches base
+  base_branches="$(printf '%s' "$prs_json" | jq -r '
+    [ .[]
+      | select((.isDraft // false) | not)
+      | select(((.author?.login // "" | tostring) | test("dependabot"; "i")) | not)
+      | select(.mergeStateStatus == "BEHIND")
+      | .baseRefName // empty
+    ] | unique[]' 2>/dev/null || true)"
+  while IFS= read -r base; do
+    [ -n "$base" ] || continue
+    [ "$base" = "$default_branch" ] && continue
+    local b_rules b_status=0 b_strict
+    b_rules="$(gh api "repos/${WORKFLOW_REPO}/rules/branches/${base}" 2>/dev/null)" || b_status=$?
+    if [ "$b_status" -eq 0 ]; then
+      [ -n "$b_rules" ] || b_rules='[]'
+    else
+      b_rules='[]'
+      echo "::warning::Could not read branch rules for ${WORKFLOW_REPO}@${base} — base-merge necessity assumes strict=false for PRs targeting it; skippable counts may be overstated." >&2
+    fi
+    b_strict="$(strict_from_branch_rules "$b_rules")"
+    strict_policy="$(jq -c --arg k "$base" --argjson v "$b_strict" '. + {($k): $v}' <<< "$strict_policy")"
+  done <<< "$base_branches"
+
   local report
-  report="$(render_report "$comments_json" "$runs_json" "$LOOKBACK_DAYS" "$behind" "$today" "$prs_json" "$pr_list_truncated" "$PR_LIST_LIMIT" "$strict_enabled" "$AUTO_REBASE_REQUEST_LABEL")"
+  report="$(render_report "$comments_json" "$runs_json" "$LOOKBACK_DAYS" "$behind" "$today" "$prs_json" "$pr_list_truncated" "$PR_LIST_LIMIT" "$strict_enabled" "$AUTO_REBASE_REQUEST_LABEL" "$strict_policy")"
 
   printf '%s\n' "$report"
   if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
diff --git a/tests/auto_rebase_health.bats b/tests/auto_rebase_health.bats
index e0a16b898..210b62a33 100644
--- a/tests/auto_rebase_health.bats
+++ b/tests/auto_rebase_health.bats
@@ -59,21 +59,31 @@ setup() {
   ]'
 
   # Base-merge-necessity PR set. Open non-draft non-Dependabot BEHIND PRs:
-  #   #1 plain BEHIND (no queue, no label)                 → skippable when strict off
-  #   #2 BEHIND + queued to merge (autoMergeRequest set)    → required always
-  #   #3 BEHIND + carries the explicit request label        → required always
+  #   #1 plain BEHIND (no queue, no label)                  → skippable when strict off
+  #   #2 BEHIND + enqueued in merge queue (mergeQueueEntry)  → required always
+  #   #3 BEHIND + carries the explicit request label         → required always
   #   #4 DIRTY (conflict path — never a base-merge candidate, AC #3)
-  #   #5 BEHIND but DRAFT                                    → excluded
-  #   #6 BEHIND but Dependabot-authored                     → excluded
-  #   #7 CLEAN                                              → excluded (not BEHIND)
+  #   #5 BEHIND but DRAFT                                     → excluded
+  #   #6 BEHIND but Dependabot-authored                      → excluded
+  #   #7 CLEAN                                               → excluded (not BEHIND)
+  # All target the default branch `main`.
   BASE_MERGE_PRS_JSON='[
-    {"number":1,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"alice"},"labels":[],"autoMergeRequest":null},
-    {"number":2,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"bob"},"labels":[],"autoMergeRequest":{"enabledAt":"2026-09-20T00:00:00Z"}},
-    {"number":3,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"carol"},"labels":[{"name":"auto-rebase:ready"}],"autoMergeRequest":null},
-    {"number":4,"mergeStateStatus":"DIRTY","isDraft":false,"author":{"login":"dan"},"labels":[],"autoMergeRequest":null},
-    {"number":5,"mergeStateStatus":"BEHIND","isDraft":true,"author":{"login":"eve"},"labels":[],"autoMergeRequest":null},
-    {"number":6,"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"dependabot[bot]"},"labels":[],"autoMergeRequest":null},
-    {"number":7,"mergeStateStatus":"CLEAN","isDraft":false,"author":{"login":"frank"},"labels":[],"autoMergeRequest":null}
+    {"number":1,"mergeStateStatus":"BEHIND","isDraft":false,"baseRefName":"main","author":{"login":"alice"},"labels":[],"mergeQueueEntry":null},
+    {"number":2,"mergeStateStatus":"BEHIND","isDraft":false,"baseRefName":"main","author":{"login":"bob"},"labels":[],"mergeQueueEntry":{"id":"MQE_1"}},
+    {"number":3,"mergeStateStatus":"BEHIND","isDraft":false,"baseRefName":"main","author":{"login":"carol"},"labels":[{"name":"auto-rebase:ready"}],"mergeQueueEntry":null},
+    {"number":4,"mergeStateStatus":"DIRTY","isDraft":false,"baseRefName":"main","author":{"login":"dan"},"labels":[],"mergeQueueEntry":null},
+    {"number":5,"mergeStateStatus":"BEHIND","isDraft":true,"baseRefName":"main","author":{"login":"eve"},"labels":[],"mergeQueueEntry":null},
+    {"number":6,"mergeStateStatus":"BEHIND","isDraft":false,"baseRefName":"main","author":{"login":"dependabot[bot]"},"labels":[],"mergeQueueEntry":null},
+    {"number":7,"mergeStateStatus":"CLEAN","isDraft":false,"baseRefName":"main","author":{"login":"frank"},"labels":[],"mergeQueueEntry":null}
+  ]'
+
+  # Two eligible plain BEHIND PRs on DIFFERENT bases, neither queued nor labelled.
+  # Used to prove the per-base strict-policy map (#1887): a scalar policy applies to
+  # both, but a base→bool map can classify one required and the other skippable.
+  #   #1 base `main`               #2 base `release/1.x`
+  MIXED_BASE_PRS_JSON='[
+    {"number":1,"mergeStateStatus":"BEHIND","isDraft":false,"baseRefName":"main","author":{"login":"alice"},"labels":[],"mergeQueueEntry":null},
+    {"number":2,"mergeStateStatus":"BEHIND","isDraft":false,"baseRefName":"release/1.x","author":{"login":"bob"},"labels":[],"mergeQueueEntry":null}
   ]'
 }
 
@@ -205,7 +215,7 @@ setup() {
 @test "summarize_base_merges: strict off — only queued/labelled PRs are required" {
   run summarize_base_merges "$BASE_MERGE_PRS_JSON" false
   [ "$status" -eq 0 ]
-  # #2 queued + #3 labelled = 2 required; #1 plain BEHIND = 1 skippable.
+  # #2 enqueued + #3 labelled = 2 required; #1 plain BEHIND = 1 skippable.
   # DIRTY(#4), draft(#5), dependabot(#6), CLEAN(#7) all excluded.
   [ "$output" = "$(printf '2\t1')" ]
 }
@@ -219,37 +229,61 @@ setup() {
 
 @test "summarize_base_merges: strict off, plain BEHIND PRs are all skippable" {
   run summarize_base_merges '[
-    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"autoMergeRequest":null},
-    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"b"},"labels":[],"autoMergeRequest":null}
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"mergeQueueEntry":null},
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"b"},"labels":[],"mergeQueueEntry":null}
   ]' false
   [ "$output" = "$(printf '0\t2')" ]
 }
 
-@test "summarize_base_merges: queued-to-merge PR is required even when strict off" {
+@test "summarize_base_merges: enqueued (mergeQueueEntry) PR is required even when strict off" {
   run summarize_base_merges '[
-    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"autoMergeRequest":{"enabledAt":"x"}}
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"mergeQueueEntry":{"id":"MQE_x"}}
   ]' false
   [ "$output" = "$(printf '1\t0')" ]
 }
 
+@test "summarize_base_merges: armed auto-merge alone (no queue entry) is skippable when strict off" {
+  # autoMergeRequest is intentionally NOT consulted (#1887): auto-merge arming does
+  # not force an up-to-date branch, so a BEHIND PR with only auto-merge armed and no
+  # mergeQueueEntry is a skippable base merge.
+  run summarize_base_merges '[
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[],"mergeQueueEntry":null,"autoMergeRequest":{"enabledAt":"x"}}
+  ]' false
+  [ "$output" = "$(printf '0\t1')" ]
+}
+
 @test "summarize_base_merges: explicit request label makes a PR required when strict off" {
   run summarize_base_merges '[
-    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[{"name":"auto-rebase:ready"}],"autoMergeRequest":null}
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"a"},"labels":[{"name":"auto-rebase:ready"}],"mergeQueueEntry":null}
   ]' false
   [ "$output" = "$(printf '1\t0')" ]
 }
 
+@test "summarize_base_merges: per-base strict map classifies each PR against its own base (#1887)" {
+  # release/1.x strict on, main strict off: #2 (release/1.x) required, #1 (main) skippable.
+  run summarize_base_merges "$MIXED_BASE_PRS_JSON" '{"main":false,"release/1.x":true}'
+  [ "$status" -eq 0 ]
+  [ "$output" = "$(printf '1\t1')" ]
+}
+
+@test "summarize_base_merges: base absent from the strict map defaults to false" {
+  # Only main is mapped (true); release/1.x is unmapped → treated as strict off → skippable.
+  run summarize_base_merges "$MIXED_BASE_PRS_JSON" '{"main":true}'
+  [ "$status" -eq 0 ]
+  [ "$output" = "$(printf '1\t1')" ]
+}
+
 @test "summarize_base_merges: DIRTY PRs are not counted (conflict path unchanged, AC #3)" {
   run summarize_base_merges '[
-    {"mergeStateStatus":"DIRTY","isDraft":false,"author":{"login":"a"},"labels":[],"autoMergeRequest":null}
+    {"mergeStateStatus":"DIRTY","isDraft":false,"author":{"login":"a"},"labels":[],"mergeQueueEntry":null}
   ]' false
   [ "$output" = "$(printf '0\t0')" ]
 }
 
 @test "summarize_base_merges: excludes draft and Dependabot BEHIND PRs" {
   run summarize_base_merges '[
-    {"mergeStateStatus":"BEHIND","isDraft":true,"author":{"login":"a"},"labels":[],"autoMergeRequest":null},
-    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"dependabot[bot]"},"labels":[],"autoMergeRequest":null}
+    {"mergeStateStatus":"BEHIND","isDraft":true,"author":{"login":"a"},"labels":[],"mergeQueueEntry":null},
+    {"mergeStateStatus":"BEHIND","isDraft":false,"author":{"login":"dependabot[bot]"},"labels":[],"mergeQueueEntry":null}
   ]' false
   [ "$output" = "$(printf '0\t0')" ]
 }
@@ -370,3 +404,12 @@ setup() {
   [[ "$output" == *"base_merges_required=3"* ]]
   [[ "$output" == *"base_merges_skippable=0"* ]]
 }
+
+@test "render_report: per-base strict map (arg 11) drives the counter, scalar (arg 9) the headline" {
+  # Headline policy = default-branch scalar (false); the counter uses the per-base map
+  # where release/1.x is strict — so #2 (release/1.x) is required, #1 (main) skippable.
+  run render_report "$COMMENTS_JSON" "$RUNS_JSON" 7 3 2026-06-15 "$MIXED_BASE_PRS_JSON" false 1000 false auto-rebase:ready '{"main":false,"release/1.x":true}'
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"base_merges_required=1"* ]]
+  [[ "$output" == *"base_merges_skippable=1"* ]]
+}