docs(v0): record hybrid review authority boundary #36

Closed
opened 2026-05-26 10:55:46 +02:00 by codex · 0 comments
Collaborator

Context

Oracle consult patchwarde-auditlm-boundary after platform W6d + W8.1 concluded:

Patchwarden decides. LLM reviewers suspect. Iskra contextualizes. Platform executes. Operator arbitrates.

This issue records the boundary so reviewer-lane implementation does not drift into model-owned merge authority.

Scope

Add a compact decision/architecture note to Patchwarden docs that states:

  • Patchwarden is the only merge-safety authority.
  • AuditLM-style / Ollama reviewer lanes are sensors only.
  • Reviewer lanes emit structured findings/artifacts, never Forgejo APPROVED reviews and never merges.
  • Iskra is final contextual metadata-only approval/veto, not policy override.
  • Platform remains a thin client and merge actuator.
  • Operator remains manual arbiter for policy/no-go boundary changes.
  • AuditLM is inspiration only, not a dependency/fork decision.

Acceptance criteria

  • The note cites the platform dogfood evidence: W6d narrow lane and platform PR #500/#503/#504 outcomes.
  • The note explicitly says LLM output cannot approve or merge.
  • The note lists hard manual classes: secrets, workflows, runtime/deploy, branch protection/auth, Patchwarden policy/governance, large/stale/unparseable PRs.
  • No implementation code changes in this issue.

Out of scope

  • Calling Ollama models.
  • Changing policy schema.
  • Platform workflow changes.
  • Importing/forking AuditLM.

Trace

  • Platform Oracle consult: patchwarde-auditlm-boundary, 2026-05-26.
  • Related platform PRs: pdurlej/platform#500, #503, #504.
  • Related Patchwarden work: #28, #29, #30, #32, #33.
## Context Oracle consult `patchwarde-auditlm-boundary` after platform W6d + W8.1 concluded: > Patchwarden decides. LLM reviewers suspect. Iskra contextualizes. Platform executes. Operator arbitrates. This issue records the boundary so reviewer-lane implementation does not drift into model-owned merge authority. ## Scope Add a compact decision/architecture note to Patchwarden docs that states: - Patchwarden is the only merge-safety authority. - AuditLM-style / Ollama reviewer lanes are sensors only. - Reviewer lanes emit structured findings/artifacts, never Forgejo APPROVED reviews and never merges. - Iskra is final contextual metadata-only approval/veto, not policy override. - Platform remains a thin client and merge actuator. - Operator remains manual arbiter for policy/no-go boundary changes. - AuditLM is inspiration only, not a dependency/fork decision. ## Acceptance criteria - [ ] The note cites the platform dogfood evidence: W6d narrow lane and platform PR #500/#503/#504 outcomes. - [ ] The note explicitly says LLM output cannot approve or merge. - [ ] The note lists hard manual classes: secrets, workflows, runtime/deploy, branch protection/auth, Patchwarden policy/governance, large/stale/unparseable PRs. - [ ] No implementation code changes in this issue. ## Out of scope - Calling Ollama models. - Changing policy schema. - Platform workflow changes. - Importing/forking AuditLM. ## Trace - Platform Oracle consult: `patchwarde-auditlm-boundary`, 2026-05-26. - Related platform PRs: pdurlej/platform#500, #503, #504. - Related Patchwarden work: #28, #29, #30, #32, #33.
Sign in to join this conversation.
No labels
agent/claude-code
agent/codex
agent/gemini
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
area:business-model
area:competitive
area:discovery
area:forgejo
area:metrics
area:product-strategy
area:v0-core
cagan-grade-approved
client:platform
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
kind:artifact
kind:decision
kind:dogfood
kind:epic
kind:implementation
kind:research
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
priority:p0
priority:p1
priority:p2
priority:p3
ready-for-agent
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:blocked-on-discovery
status:cagan-grade-review-pending
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:needs-operator-decision
status:operator-needed
status:parked
tier:0-anchor
tier:0-platform-substrate
tier:1-core
tier:1-iskra-value-layer
tier:2-supporting
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
wave:1-foundation
wave:2-positioning
wave:3-validation
wave:4-economics
wave:5-operating
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/patchwarden#36
No description provided.