pdurlej/platform

Fork 0

fix: make PR sanity comment actionable #829

Merged

pdurlej merged 1 commit from codex/patchwarden-pr-sanity-clawsweeper-comment into main

2026-06-25 23:21:07 +02:00

codex commented

2026-06-25 23:10:13 +02:00

Collaborator

Follow-up for pdurlej/patchwarden#237.

This makes the Patchwarden PR sanity comment behave more like a ClawSweeper-style sentinel: short verdict first, explicit next action, checked surface, required fixes, reviewer details folded below, and hidden machine-readable metadata for future automation.

What changed:

updates the PR sanity model route to glm-5.2:cloud, deepseek-v4-pro:cloud, and kimi-k2.7:cloud red-team;
removes the stale 3+3 canary: still alive; this does not replace it UX;
adds modelHealth to the JSON report so eligible_sanity_clean no longer hides skipped/error reviewer lanes;
renders the sticky comment with verdict, next step, reviewer health, model mix, and a hidden patchwarden.pr_sanity.v1 marker;
updates runner/operations docs to match the live workflow.

Verification:

python3 -m pytest control-plane/platformctl/tests/test_pr_sanity.py control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py

Follow-up for pdurlej/patchwarden#237. This makes the Patchwarden PR sanity comment behave more like a ClawSweeper-style sentinel: short verdict first, explicit next action, checked surface, required fixes, reviewer details folded below, and hidden machine-readable metadata for future automation. What changed: - updates the PR sanity model route to `glm-5.2:cloud`, `deepseek-v4-pro:cloud`, and `kimi-k2.7:cloud` red-team; - removes the stale `3+3 canary: still alive; this does not replace it` UX; - adds `modelHealth` to the JSON report so `eligible_sanity_clean` no longer hides skipped/error reviewer lanes; - renders the sticky comment with verdict, next step, reviewer health, model mix, and a hidden `patchwarden.pr_sanity.v1` marker; - updates runner/operations docs to match the live workflow. Verification: - `python3 -m pytest control-plane/platformctl/tests/test_pr_sanity.py control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py`

codex added 1 commit

2026-06-25 23:10:14 +02:00

fix: make pr sanity comment actionable

platformctl plan / auto-apply scope (pull_request) Successful in 18s

Details

python-ci / Python 3.12 (pull_request) Successful in 42s

Details

workflow-lint / lint (pull_request) Successful in 4s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

infra-docs-drift / docs-drift (pull_request) Successful in 4s

Details

pyfallow / Pyfallow gate (control-plane) (pull_request) Successful in 16s

Details

python-ci / Python 3.11 (pull_request) Successful in 41s

Details

python-ci / Python 3.13 (pull_request) Successful in 42s

Details

canary-required / canary (pull_request) Successful in 16s

Details

base-is-main / guard (pull_request) Successful in 1s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

patchwarden-client-dry-run / dry-run (pull_request) Successful in 19s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 40s

Details

8fd2a88c42

patchwarden commented

2026-06-25 23:14:29 +02:00

First-time contributor

Patchwarden PR sanity

Status: eligible_sanity_clean
PR: 829
Commit: 8fd2a88c42d497193db90ffb31ac58a844b4da28
Security-sensitive label: present
Authority: advisory model review plus deterministic blockers only
3+3 canary: still alive; this does not replace it

Deterministic findings

info sensitive-path-touched Sensitive path touched — .forgejo/workflows/patchwarden-pr-sanity.yml
- Evidence: .forgejo/workflows/patchwarden-pr-sanity.yml
- Next: Route through the existing 3+3/risk-tier process; model review remains advisory.

Model reviewers

`global-glm` / `glm-5.2:cloud`

Status: ok
Verdict: OK
Findings: none

`global-deepseek` / `deepseek-v4-pro:cloud`

Status: ok
Verdict: OK
Findings: none

`redteam` / `kimi-k2.7:cloud`

Status: error
Verdict: -
Note: Ollama HTTP 404: {"error": "model 'kimi-k2.7:cloud' not found"}
Findings: none

Policy notes

GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot.
Optional red-team model is enabled only when PLATFORMCTL_PR_SANITY_REDTEAM_MODEL is configured.
Auto-merge is not enabled here.

# Patchwarden PR sanity - Status: `eligible_sanity_clean` - PR: `829` - Commit: `8fd2a88c42d497193db90ffb31ac58a844b4da28` - Security-sensitive label: `present` - Authority: advisory model review plus deterministic blockers only - 3+3 canary: still alive; this does not replace it ## Deterministic findings - **`info` `sensitive-path-touched`** Sensitive path touched — `.forgejo/workflows/patchwarden-pr-sanity.yml` - Evidence: `.forgejo/workflows/patchwarden-pr-sanity.yml` - Next: Route through the existing 3+3/risk-tier process; model review remains advisory. ## Model reviewers ### `global-glm` / `glm-5.2:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `global-deepseek` / `deepseek-v4-pro:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `redteam` / `kimi-k2.7:cloud` - Status: `error` - Verdict: `-` - Note: Ollama HTTP 404: {"error": "model 'kimi-k2.7:cloud' not found"} - Findings: none ## Policy notes - GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot. - Optional red-team model is enabled only when `PLATFORMCTL_PR_SANITY_REDTEAM_MODEL` is configured. - Auto-merge is not enabled here.

codex added the

class/security-sensitive

label

2026-06-25 23:18:48 +02:00