docs(review): define non-author AI approval policy #450

Merged

pdurlej merged 1 commit from codex/w6-reviewer-safety-policy into main

2026-05-24 22:20:15 +02:00

codex commented

2026-05-24 21:33:30 +02:00

Collaborator

Canary status: missing — rely on required Forgejo checks before merge

Canary Context Pack

Product story

W6 is preparing the platform for faster AI-assisted review and eventually narrower autonomous merge classes. Before any merge automation can exist, the platform needs a clear rule for when an AI review counts and when it is only advisory.

What changed

Added docs/ci/ai-review-governance.md defining:

mandatory non-author counted review baseline;
current behavior / target behavior / not-yet-allowed table;
counted AI approval contract;
self-approval rule;
required PR metadata before AI approval can count;
security-sensitive exception;
future autonomous merge preconditions;
sibling-repo rollout notes.

Why it changed

Issue #75 asks for global governance around non-author AI reviewers and branch protection. This PR captures the policy baseline without enabling automerge or changing branch protection.

Files touched

docs/ci/ai-review-governance.md

Relevant context

Issue #75
AGENTS.md canary/risk-tier/security-sensitive review rules
docs/forgejo-agent-operations.md identity and PR rules
.forgejo/pull_request_template.md
W6 reviewer safety lane

Runtime evidence

Runtime mutation: none. Docs-only policy PR.

Known constraints

This PR deliberately does not enforce the rule mechanically. Fork B/W6c is expected to handle security-sensitive routing mechanics; Fork A/W6a handles required-check evidence; Fork C/W6b handles actor identity boundaries.

Explicit out-of-scope

No automerge.
No branch-protection changes.
No Forgejo API mutation except creating this PR as codex.
No workflow changes.
No state/STATUS_NOW.md edit.

Requested decision

Merge this as the policy baseline for W6 reviewer safety if checks are green.

Merge blockers

The policy weakens identity isolation.
The policy implies autonomous merge is allowed now.
git diff --check fails.

Spec sources read

Issue #75 via Forgejo API
AGENTS.md review/risk/security-sensitive sections
.forgejo/pull_request_template.md
docs/forgejo-agent-operations.md
.forgejo/workflows/canary-required.yml
.forgejo/workflows/patchwarden-pr-sanity.yml

Test plan

git diff --check → clean

Refs #75

Canary status: missing — rely on required Forgejo checks before merge ## Canary Context Pack ### Product story W6 is preparing the platform for faster AI-assisted review and eventually narrower autonomous merge classes. Before any merge automation can exist, the platform needs a clear rule for when an AI review counts and when it is only advisory. ### What changed Added `docs/ci/ai-review-governance.md` defining: - mandatory non-author counted review baseline; - current behavior / target behavior / not-yet-allowed table; - counted AI approval contract; - self-approval rule; - required PR metadata before AI approval can count; - security-sensitive exception; - future autonomous merge preconditions; - sibling-repo rollout notes. ### Why it changed Issue #75 asks for global governance around non-author AI reviewers and branch protection. This PR captures the policy baseline without enabling automerge or changing branch protection. ### Files touched - `docs/ci/ai-review-governance.md` ### Relevant context - Issue #75 - `AGENTS.md` canary/risk-tier/security-sensitive review rules - `docs/forgejo-agent-operations.md` identity and PR rules - `.forgejo/pull_request_template.md` - W6 reviewer safety lane ### Runtime evidence Runtime mutation: none. Docs-only policy PR. ### Known constraints This PR deliberately does not enforce the rule mechanically. Fork B/W6c is expected to handle security-sensitive routing mechanics; Fork A/W6a handles required-check evidence; Fork C/W6b handles actor identity boundaries. ### Explicit out-of-scope - No automerge. - No branch-protection changes. - No Forgejo API mutation except creating this PR as `codex`. - No workflow changes. - No `state/STATUS_NOW.md` edit. ### Requested decision Merge this as the policy baseline for W6 reviewer safety if checks are green. ### Merge blockers - The policy weakens identity isolation. - The policy implies autonomous merge is allowed now. - `git diff --check` fails. ## Spec sources read - Issue #75 via Forgejo API - `AGENTS.md` review/risk/security-sensitive sections - `.forgejo/pull_request_template.md` - `docs/forgejo-agent-operations.md` - `.forgejo/workflows/canary-required.yml` - `.forgejo/workflows/patchwarden-pr-sanity.yml` ## Test plan - `git diff --check` → clean Refs #75

codex added 1 commit

2026-05-24 21:33:30 +02:00

docs(review): define non-author AI approval policy

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

infra-docs-drift / docs-drift (pull_request) Successful in 5s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

workflow-lint / lint (pull_request) Successful in 4s