fix(patchwarden): use patchwarden actor for safe-docs review #834

Merged

Iskra merged 22 commits from codex/patchwarden-review-actor into main 2026-06-26 13:03:49 +02:00

Conversation 2 Commits 22 Files changed 9 +955 -53

codex commented 2026-06-26 02:00:33 +02:00

Collaborator

Copy link

Canary status: required — Patchwarden PR sanity workflow change

Summary

• let patchwarden-pr-sanity use FORGEJO_TOKEN_PATCHWARDEN as the formal safe-docs/status review actor
• keep the existing Iskra/generic review-token fallback
• add a workflow contract test so the formal review path cannot silently regress back to comments-only

Why

Patchwarden can already post a clean PASS sanity comment, but Platform PRs can still be blocked by protected-branch approval rules. This moves the Platform dogfood flow closer to the June 2026 Patchwarden vision: a clean safe-docs/status PR gets a real Patchwarden-owned approval review, while merge authority stays with branch protection/automerge.

Checks

• python3 -m pytest control-plane/platformctl/tests/test_pr_sanity.py -q
• git diff --check

Runtime / secrets

No runtime mutation. No secret values printed, written, or committed. This only changes the workflow's actor selection when a runner already has FORGEJO_TOKEN_PATCHWARDEN.

Refs pdurlej/platform#823
Refs pdurlej/patchwarden#237

Canary status: required — Patchwarden PR sanity workflow change ## Summary - let `patchwarden-pr-sanity` use `FORGEJO_TOKEN_PATCHWARDEN` as the formal safe-docs/status review actor - keep the existing Iskra/generic review-token fallback - add a workflow contract test so the formal review path cannot silently regress back to comments-only ## Why Patchwarden can already post a clean PASS sanity comment, but Platform PRs can still be blocked by protected-branch approval rules. This moves the Platform dogfood flow closer to the June 2026 Patchwarden vision: a clean safe-docs/status PR gets a real Patchwarden-owned approval review, while merge authority stays with branch protection/automerge. ## Checks - `python3 -m pytest control-plane/platformctl/tests/test_pr_sanity.py -q` - `git diff --check` ## Runtime / secrets No runtime mutation. No secret values printed, written, or committed. This only changes the workflow's actor selection when a runner already has `FORGEJO_TOKEN_PATCHWARDEN`. Refs pdurlej/platform#823 Refs pdurlej/patchwarden#237

codex added 1 commit 2026-06-26 02:00:34 +02:00

fix(patchwarden): use patchwarden actor for safe-docs review 2ccb597ed2

codex added the

agent/codex

class/security-sensitive

domain:ci

flow/review

risk/process

size/small

source/operator-chat

labels 2026-06-26 02:01:10 +02:00

patchwarden commented 2026-06-26 02:05:23 +02:00

First-time contributor

Copy link

Patchwarden PR sanity

Operator signal: ⚠️ WAIT - automation should rerun or inspect reviewer health before owner attention.

Automerge signal: ❌ NOT READY - no unattended merge or APPROVED review should be published.

Verdict: ⚠️ WAIT - deterministic checks are clean, but reviewer health is degraded; this is not an approval signal.

Next step: Rerun PR sanity or inspect the degraded reviewer lane before unattended merge.

• PR: 834
• Commit: 46dd02f7a2ea705a37875eca81d6ae12e1e270e1
• Status: eligible_sanity_clean
• Reviewer health: degraded
• Security-sensitive label: present
• Authority: Patchwarden policy signal; branch protection and automerge controller remain merge authority.
• Model mix: glm-5.2:cloud, deepseek-v4-pro:cloud, kimi-k2.7-code:cloud

What I checked

• Changed files: 9
• Deterministic blocker scan: clean
• Model reviewer lanes: 3
• Comment contract: this comment is updated in place via a hidden Patchwarden marker.

Approval Handoff

• State: not_ready_degraded_reviewer_health
• Action: rerun PR sanity or inspect the degraded reviewer lane before any unattended approval.
• Boundary: branch protection and the automerge controller remain merge authority.

Signal Board

• Legend: ✅ evidence is sufficient; 🟡 controller still has work; ⚠️ automation retries first; 🛑/❌ do not approve or merge.

Lane	Signal	Meaning
🧪 Deterministic sanity	✅ clean	No deterministic blockers found.
🧠 Model reviewers	⚠️ degraded	Not an approval signal; rerun or inspect the lane.
🛡️ Patchwarden approval	❌ not_ready_degraded_reviewer_health	No unattended APPROVED review should be published.
🚦 Unattended automerge	❌ ineligible	Outside the narrow safe-docs/status unattended lane.
🙋 Owner attention	🔁 automation first	Retry, repair, or inspect automation before asking the owner.

• Scope blocker: non-doc/status path(s): .forgejo/workflows/patchwarden-client-dry-run.yml, .forgejo/workflows/patchwarden-pr-sanity.yml, control-plane/platformctl/ci/automerge_readiness.py, control-plane/platformctl/ci/pr_sanity.py, ... (+2 more)
• Risk label blocker: class/security-sensitive
• Security-sensitive blocker: class/security-sensitive is present.
  🧭 Merge authority: branch protection and automerge controller remain authoritative.

Required Fixes

No deterministic blockers.

Non-blocking Notes

• info sensitive-path-touched Sensitive path touched - .forgejo/workflows/patchwarden-client-dry-run.yml
  • Evidence: .forgejo/workflows/patchwarden-client-dry-run.yml
  • Next: Route through the existing 3+3/risk-tier process; model review remains advisory.
• info sensitive-path-touched Sensitive path touched - .forgejo/workflows/patchwarden-pr-sanity.yml
  • Evidence: .forgejo/workflows/patchwarden-pr-sanity.yml
  • Next: Route through the existing 3+3/risk-tier process; model review remains advisory.

Reviewer Details

Model reviewer lanes

global-glm / glm-5.2:cloud

• Status: skipped
• Verdict: -
• Note: Diff exceeds PR sanity model-review budget; deterministic report only.
• Findings: none

global-deepseek / deepseek-v4-pro:cloud

• Status: skipped
• Verdict: -
• Note: Diff exceeds PR sanity model-review budget; deterministic report only.
• Findings: none

redteam / kimi-k2.7-code:cloud

• Status: skipped
• Verdict: -
• Note: Diff exceeds PR sanity model-review budget; deterministic report only.
• Findings: none

Policy notes

• Patchwarden PR sanity is the first merge-lane signal for this PR.
• Models produce findings; Patchwarden/policy produces decisions.
• Model findings alone do not fail the status check; they require human or agent disposition.
• Formal approval is separate from this comment and requires clean reviewer health.
• Automerge remains delegated to branch protection and the automerge pilot.

<!-- patchwarden-pr-sanity:pdurlej/platform:PR-834 --> <!-- patchwarden.pr_sanity.v1 status=eligible_sanity_clean model_health=degraded approval_handoff=not_ready_degraded_reviewer_health pr=834 sha=46dd02f7a2ea705a37875eca81d6ae12e1e270e1 --> # Patchwarden PR sanity **Operator signal:** ⚠️ WAIT - automation should rerun or inspect reviewer health before owner attention. **Automerge signal:** ❌ NOT READY - no unattended merge or APPROVED review should be published. **Verdict:** ⚠️ WAIT - deterministic checks are clean, but reviewer health is degraded; this is not an approval signal. **Next step:** Rerun PR sanity or inspect the degraded reviewer lane before unattended merge. - PR: `834` - Commit: `46dd02f7a2ea705a37875eca81d6ae12e1e270e1` - Status: `eligible_sanity_clean` - Reviewer health: `degraded` - Security-sensitive label: `present` - Authority: Patchwarden policy signal; branch protection and automerge controller remain merge authority. - Model mix: `glm-5.2:cloud`, `deepseek-v4-pro:cloud`, `kimi-k2.7-code:cloud` ## What I checked - Changed files: `9` - Deterministic blocker scan: `clean` - Model reviewer lanes: `3` - Comment contract: this comment is updated in place via a hidden Patchwarden marker. ## Approval Handoff - State: `not_ready_degraded_reviewer_health` - Action: rerun PR sanity or inspect the degraded reviewer lane before any unattended approval. - Boundary: branch protection and the automerge controller remain merge authority. ## Signal Board - Legend: ✅ evidence is sufficient; 🟡 controller still has work; ⚠️ automation retries first; 🛑/❌ do not approve or merge. | Lane | Signal | Meaning | | --- | --- | --- | | 🧪 Deterministic sanity | ✅ `clean` | No deterministic blockers found. | | 🧠 Model reviewers | ⚠️ `degraded` | Not an approval signal; rerun or inspect the lane. | | 🛡️ Patchwarden approval | ❌ `not_ready_degraded_reviewer_health` | No unattended APPROVED review should be published. | | 🚦 Unattended automerge | ❌ `ineligible` | Outside the narrow safe-docs/status unattended lane. | | 🙋 Owner attention | 🔁 `automation first` | Retry, repair, or inspect automation before asking the owner. | - Scope blocker: non-doc/status path(s): `.forgejo/workflows/patchwarden-client-dry-run.yml`, `.forgejo/workflows/patchwarden-pr-sanity.yml`, `control-plane/platformctl/ci/automerge_readiness.py`, `control-plane/platformctl/ci/pr_sanity.py`, ... (+2 more) - Risk label blocker: `class/security-sensitive` - Security-sensitive blocker: `class/security-sensitive` is present. 🧭 Merge authority: branch protection and automerge controller remain authoritative. ## Required Fixes No deterministic blockers. ## Non-blocking Notes - **`info` `sensitive-path-touched`** Sensitive path touched - `.forgejo/workflows/patchwarden-client-dry-run.yml` - Evidence: `.forgejo/workflows/patchwarden-client-dry-run.yml` - Next: Route through the existing 3+3/risk-tier process; model review remains advisory. - **`info` `sensitive-path-touched`** Sensitive path touched - `.forgejo/workflows/patchwarden-pr-sanity.yml` - Evidence: `.forgejo/workflows/patchwarden-pr-sanity.yml` - Next: Route through the existing 3+3/risk-tier process; model review remains advisory. ## Reviewer Details <details> <summary>Model reviewer lanes</summary> ### `global-glm` / `glm-5.2:cloud` - Status: `skipped` - Verdict: `-` - Note: Diff exceeds PR sanity model-review budget; deterministic report only. - Findings: none ### `global-deepseek` / `deepseek-v4-pro:cloud` - Status: `skipped` - Verdict: `-` - Note: Diff exceeds PR sanity model-review budget; deterministic report only. - Findings: none ### `redteam` / `kimi-k2.7-code:cloud` - Status: `skipped` - Verdict: `-` - Note: Diff exceeds PR sanity model-review budget; deterministic report only. - Findings: none </details> ## Policy notes - Patchwarden PR sanity is the first merge-lane signal for this PR. - Models produce findings; Patchwarden/policy produces decisions. - Model findings alone do not fail the status check; they require human or agent disposition. - Formal approval is separate from this comment and requires clean reviewer health. - Automerge remains delegated to branch protection and the automerge pilot.

ollama added 1 commit 2026-06-26 02:19:51 +02:00

test(patchwarden): cover patchwarden review actor e8667b908e

ollama added 1 commit 2026-06-26 02:29:38 +02:00

fix(patchwarden): use available kimi redteam model b0e89e9108

ollama added 1 commit 2026-06-26 08:21:00 +02:00

test(patchwarden): lock review actor fail-closed path f60c54a98b

ollama added 1 commit 2026-06-26 08:31:15 +02:00

fix(patchwarden): keep safe PRs off owner attention 91d6bd6bb8

ollama added 1 commit 2026-06-26 08:39:25 +02:00

docs(patchwarden): clarify owner-attention boundary b21c2d59c4

ollama added 1 commit 2026-06-26 08:53:52 +02:00

fix(patchwarden): preserve automerge opt-in boundary f081231a49

ollama added 1 commit 2026-06-26 09:12:23 +02:00

test(patchwarden): harden readiness assertions 977d111a09

ollama added 2 commits 2026-06-26 09:33:14 +02:00

test(pr-sanity): document review actor evidence 301349e2b0

Merge remote-tracking branch 'origin/main' into codex/patchwarden-review-actor 7d2dcbdcb5

ollama added 1 commit 2026-06-26 09:44:58 +02:00

test(pr-sanity): cover comment actor verification 51e40036c8

ollama added 1 commit 2026-06-26 09:57:11 +02:00

fix(pr-sanity): split comment and approval tokens 6b657fbea6

ollama added 1 commit 2026-06-26 10:16:20 +02:00

feat(pr-sanity): clarify merge signals fc2e7b9004

ollama added 1 commit 2026-06-26 10:25:16 +02:00

fix(pr-sanity): preflight approved review scope e86358a7b5

ollama added 1 commit 2026-06-26 10:41:57 +02:00

fix(pr-sanity): align review signal UX 2ea9dc6401

codex added 1 commit 2026-06-26 10:45:55 +02:00

Merge remote-tracking branch 'origin/main' into codex/patchwarden-review-actor 3ff5b93bf5

ollama added 1 commit 2026-06-26 10:59:07 +02:00

chore(pr-sanity): redrive waiting checks 0a1e65f9c6

ollama added 1 commit 2026-06-26 12:20:49 +02:00

fix(patchwarden): share safe review preflight policy c73fc051be

ollama added 1 commit 2026-06-26 12:30:16 +02:00

fix(patchwarden): keep review preflight trusted-base safe 4d4025e66a

ollama added 1 commit 2026-06-26 12:40:30 +02:00

fix(patchwarden): fail safe on empty review preflight dd3c814d9d

codex added 1 commit 2026-06-26 12:53:05 +02:00

Merge remote-tracking branch 'origin/main' into codex/patchwarden-review-actor 3d3b534443

ollama added 1 commit 2026-06-26 12:58:52 +02:00

fix(patchwarden): normalize safe review paths 46dd02f7a2

Iskra approved these changes 2026-06-26 13:03:48 +02:00

Iskra left a comment

Copy link

Operator live approval present for #834: branch is current and all latest CI/Patchwarden contexts are green. Approval recorded by Iskra as merge actor for the Patchwarden review-actor repair.

Operator live approval present for #834: branch is current and all latest CI/Patchwarden contexts are green. Approval recorded by Iskra as merge actor for the Patchwarden review-actor repair.

Iskra merged commit 7ab0695eb9 into main 2026-06-26 13:03:49 +02:00

Iskra referenced this pull request from a commit 2026-06-26 13:03:49 +02:00

Merge pull request #834

Sign in to join this conversation.

Reviewers

No reviewers

Iskra

Labels

Clear labels   

W6d-automerge-calibration

  

agent/claude-code

Vistula actor: Claude Code.

  

agent/codex

Vistula actor: Codex.

  

agent/hermes

Vistula actor: Hermes Upstream.

  

agent/iskra

Vistula actor: Iskra.

  

agent/ollama

Vistula actor: Ollama or compatible model.

  

agent/patchwarden

Vistula actor: Patchwarden.

  

automerge-candidate

Candidate for narrow W6d autonomous merge readiness pilot

  

class/security-sensitive

Security-sensitive class of service: smallest coherent PRs and full canary

  

cutover-gate

blocks production declare / final RS2000 replacement

  

dependency/blocked

Vistula dependency state: blocked.

  

dependency/blocks-others

Vistula dependency state: blocks other work.

  

dependency/cross-repo

Vistula dependency scope: cross-repository.

  

dependency/needs-confirmation

Vistula dependency state: needs confirmation.

  

domain:agents

Agent identity, delegation, subagents, routing, or workflows.

  

domain:ci

CI, checks, Actions, runners, or release automation.

  

domain:docs

Documentation, packets, practices, or source-of-truth text.

  

domain:forgejo

Forgejo issues, PRs, labels, repo settings, or identity.

  

domain:infra

Infrastructure, storage, backup, DNS, network, or host substrate.

  

domain:memory

Memory, recall, write gates, salience, or Honcho-adjacent behavior.

  

domain:runtime

Runtime services, deploys, daemons, timers, or live behavior.

  

domain:signal

Signal UX, delivery, context, or outbound behavior.

  

domain:ux

Product UX, operator experience, or conversation ergonomics.

  

flow/architecture

Vistula lifecycle: architecture phase in progress.

  

flow/blocked

Vistula lifecycle: blocked on dependency or decision.

  

flow/deployed

Vistula lifecycle: deployed to runtime where applicable.

  

flow/done

Vistula lifecycle: work merged or otherwise done.

  

flow/implementation

Vistula lifecycle: implementation phase in progress.

  

flow/intake

Vistula lifecycle: incoming signal not refined yet.

  

flow/maintained

Vistula lifecycle: maintained/steady state.

  

flow/observed

Vistula lifecycle: observed after delivery.

  

flow/ready

Vistula lifecycle: ready for architecture or implementation.

  

flow/refining

Vistula lifecycle: Hermes/spec refinement in progress.

  

flow/retired

Vistula lifecycle: retired or intentionally closed.

  

flow/review

Vistula lifecycle: review phase in progress.

  

iterating

Orchestrator/Codex actively amending in response to review — operator can ignore until resolved

  

judge/codex-candidate

Candidate for Codex implementation.

  

judge/hermes-candidate

Candidate for Hermes discovery/research.

  

judge/low-confidence

Judgment confidence is low.

  

judge/needs-refinement

Needs clearer evidence or scope.

  

judge/operator-needed

Needs Piotr decision or input.

  

judge/p0

Urgent, operator attention or unblock now.

  

judge/p1

High value, schedule soon.

  

judge/p2

Useful, normal queue.

  

judge/p3

Low priority, keep but do not chase.

  

judge/park

Parked from current attention.

  

judge/patchwarden-candidate

Needs Patchwarden merge-safety attention.

  

judge/stale-priority

Existing priority judgment appears stale.

  

kind/adr

Vistula work kind: architecture decision record.

  

kind/bug

Vistula work kind: bug fix.

  

kind/chore

Vistula work kind: chore.

  

kind/feature

Vistula work kind: feature.

  

kind/infra

Vistula work kind: infrastructure.

  

kind/ops

Vistula work kind: operations.

  

kind/refactor

Vistula work kind: refactor.

  

kind/research

Vistula work kind: research/discovery.

  

large-impact

Per charter §3 review-by-impact: large impact (≥300 LOC OR new module OR identity/secret change OR architectural pivot) — Oracle pre-review recommended

  

merge/auto

Vistula merge mode: automated merge.

  

merge/manual

Vistula merge mode: manual merge.

  

merge/manual-dependency-conflict

Manual merge reason: dependency conflict.

  

merge/manual-failing-tests

Manual merge reason: failing tests.

  

merge/manual-merge-conflict

Manual merge reason: merge conflict.

  

merge/manual-missing-review

Manual merge reason: missing review.

  

merge/manual-operator-preference

Manual merge reason: operator preference.

  

merge/manual-red-zone

Manual merge reason: red-zone risk.

  

merge/manual-security-sensitive

Manual merge reason: security-sensitive work.

  

merge/manual-unclear-scope

Manual merge reason: unclear scope.

  

merge/manual-unknown

Manual merge reason: unknown.

  

meta

meta-decomposition issue; first agent decomposes into atomic children

  

mode:operator-only

Apply step requires explicit operator approval.

  

mode:patchwarden-iskra-approved

Work eligible for Patchwarden/Iskra approval inside repo policy.

  

mode:safe-auto

Low-risk work eligible for lightweight autonomous handling.

  

needs-operator-decision

PR is blocked on operator yes/no decision — fresh-Claude/Codex won't make this call alone

  

needs-triage

decomposing agent has open questions / unknowns

  

not-ready

reviewed but blocked on a precondition

  

observed/erroring

Vistula observation: erroring.

  

observed/needs-followup

Vistula observation: needs follow-up.

  

observed/pending

Vistula observation: pending.

  

observed/retire-candidate

Vistula observation: retire candidate.

  

observed/unused

Vistula observation: unused.

  

observed/used

Vistula observation: used.

  

operator-emotional

operator-emotional importance (Iskra memory etc.)

  

owner-attention

owner must decide; blocks default path

  

phase/02

Phase 02 cataloging

  

phase/03

Phase 03 control plane (platformctl)

  

priority:p0

Immediate safety, uptime, data, or operator-blocking issue.

  

priority:p1

Important active work; should be pulled soon.

  

priority:p2

Useful normal-priority work.

  

priority:p3

Opportunistic cleanup, research, or backlog work.

  

proposed

auto-generated by meta-decomposition; awaiting human review

  

ready-for-agent

reviewed and pickable; agents may claim per cookbook

  

ready-for-operator

PR is ready for operator review/merge — orchestrator finished its part

  

recovery

disaster recovery / restore semantics relevant

  

review:claude-reviewed

Reviewed by Claude-family agent.

  

review:codex-reviewed

Reviewed by Codex-family agent.

  

review:dziadek-reviewed

Reviewed by Dziadek pinch-point reviewer.

  

review:needs-human

Needs human review before merge or apply.

  

risk/exposure

incorrectly public/private/tailnet/auth/routed

  

risk/process

workflow/review/orchestration may produce bad outcomes

  

risk/product

work may have lost owner/user value

  

risk/runtime

platform may not run, recover, validate, behave reproducibly

  

safety:external-write

May write to external systems, users, rooms, repos, or services.

  

safety:no-prod-mutation

Must not mutate production or live external state.

  

safety:prod-impact

May affect production/runtime behavior.

  

safety:secret-touch

Touches secrets, credentials, auth, or secret-adjacent config.

  

size/large

Vistula size: large.

  

size/medium

Vistula size: medium.

  

size/small

Vistula size: small.

  

size/tiny

Vistula size: tiny.

  

size/unknown

Vistula size: not classified yet.

  

source/adr

Vistula source: ADR.

  

source/agent-generated

Vistula source: agent generated.

  

source/manual

Vistula source: manual entry.

  

source/operator-chat

Vistula source: operator chat.

  

source/voice-note

Vistula source: voice note.

  

status:blocked

Blocked by missing dependency, evidence, access, or operator decision.

  

status:codex-ready

Ready for a Codex implementation pass.

  

status:merged:pending-evidence

Merged but waiting for live or artifact evidence before closure.

  

status:needs-evidence

Needs proof, logs, tests, or operator-visible evidence.

  

status:operator-needed

Requires explicit operator input before safe progress.

  

status:parked

Intentionally deferred; not active campaign work.

  

tier/full

Full review tier per ADR-0007

  

tier/lite

Lite review tier per ADR-0007

  

tier/stacked

Stacked PR (base != main) escape hatch per ADR-0017. Requires consolidator-PR plan in PR body.

  

tier:0-platform-substrate

Data, secrets, backup, storage, or critical platform substrate.

  

tier:1-iskra-value-layer

Iskra/OpenClaw behavior, memory, runtime, or value-layer work.

  

tier:2-tools-products-modules

Tools, products, modules, experiments, and lower-blast-radius work.

  

type:bug

Incorrect behavior or regression.

  

type:chore

Maintenance, cleanup, metadata, or operational task.

  

type:docs

Documentation-only work.

  

type:feat

New capability or product behavior.

  

type:policy

Governance, protocol, boundary, or decision-contract change.

  

type:research

Investigation, spike, or evidence-gathering task.

No labels

W6d-automerge-calibration

agent/claude-code

agent/codex

agent/hermes

agent/iskra

agent/ollama

agent/patchwarden

automerge-candidate

class/security-sensitive

cutover-gate

dependency/blocked

dependency/blocks-others

dependency/cross-repo

dependency/needs-confirmation

domain:agents

domain:ci

domain:docs

domain:forgejo

domain:infra

domain:memory

domain:runtime

domain:signal

domain:ux

flow/architecture

flow/blocked

flow/deployed

flow/done

flow/implementation

flow/intake

flow/maintained

flow/observed

flow/ready

flow/refining

flow/retired

flow/review

iterating

judge/codex-candidate

judge/hermes-candidate

judge/low-confidence

judge/needs-refinement

judge/operator-needed

judge/p0

judge/p1

judge/p2

judge/p3

judge/park

judge/patchwarden-candidate

judge/stale-priority

kind/adr

kind/bug

kind/chore

kind/feature

kind/infra

kind/ops

kind/refactor

kind/research

large-impact

merge/auto

merge/manual

merge/manual-dependency-conflict

merge/manual-failing-tests

merge/manual-merge-conflict

merge/manual-missing-review

merge/manual-operator-preference

merge/manual-red-zone

merge/manual-security-sensitive

merge/manual-unclear-scope

merge/manual-unknown

meta

mode:operator-only

mode:patchwarden-iskra-approved

mode:safe-auto

needs-operator-decision

needs-triage

not-ready

observed/erroring

observed/needs-followup

observed/pending

observed/retire-candidate

observed/unused

observed/used

operator-emotional

owner-attention

phase/02

phase/03

priority:p0

priority:p1

priority:p2

priority:p3

proposed

ready-for-agent

ready-for-operator

recovery

review:claude-reviewed

review:codex-reviewed

review:dziadek-reviewed

review:needs-human

risk/exposure

risk/process

risk/product

risk/runtime

safety:external-write

safety:no-prod-mutation

safety:prod-impact

safety:secret-touch

size/large

size/medium

size/small

size/tiny

size/unknown

source/adr

source/agent-generated

source/manual

source/operator-chat

source/voice-note

status:blocked

status:codex-ready

status:merged:pending-evidence

status:needs-evidence

status:operator-needed

status:parked

tier/full

tier/lite

tier/stacked

tier:0-platform-substrate

tier:1-iskra-value-layer

tier:2-tools-products-modules

type:bug

type:chore

type:docs

type:feat

type:policy

type:research

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

4 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

pdurlej/platform!834

No description provided.