docs(agents): code-owner gates disabled org-wide until multiple maintainers exist - #726
docs(agents): code-owner gates disabled org-wide until multiple maintainers exist#726seonghobae wants to merge 3 commits into
Conversation
|
Warning Review limit reached
Next review available in: 1 minute Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (3)
Comment |
|
@coderabbitai review |
✅ Action performedReview finished.
|
Fixes pip-audit hard-gate failures: aiohttp CVE-2026-59881/69243/69244, cryptography CVE-2026-69247. Hash blocks refreshed from PyPI. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
@coderabbitai approve |
✅ Action performedComments resolved. Approval is disabled; enable |
There was a problem hiding this comment.
Pull request overview
OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.
Findings
1. HIGH Current-head GitHub Checks - Fix failed required checks before approval
- Problem: Failed same-head checks remain for
9fb4e161f80e68e76880960245f15f2323da5729. - Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
- Fix: Read and fix the failed check logs below, then rerun the current-head checks.
- Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.
Failed checks:
- Python Security/pip-audit (Python dependency audit): FAILURE (https://github.com/ContextualWisdomLab/.github/actions/runs/30878132550/job/91896163965)
- Strix Security Scan/strix: FAILURE (https://github.com/ContextualWisdomLab/.github/actions/runs/30878131167/job/91893621241)
- Strix Security Scan/strix: failure (https://github.com/ContextualWisdomLab/.github/actions/runs/30878131167/job/91893621241)
- pip-audit (Python dependency audit) check run: failure (https://github.com/ContextualWisdomLab/.github/actions/runs/30878132550/job/91896163965)
Changed-File Evidence Map
flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Changed file (3 files)"]
S1 --> I1["repository behavior"]
I1 --> R1["Review risk: Changed file (3 files)"]
R1 --> V1["required checks"]
OpenCode Review Overview
Pull request overviewOpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed. Findings1. HIGH Current-head GitHub Checks - Fix failed required checks before approval
Failed checks:
Changed-File Evidence Mapflowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Changed file (3 files)"]
S1 --> I1["repository behavior"]
I1 --> R1["Review risk: Changed file (3 files)"]
R1 --> V1["required checks"]
|
pip-audit and strix both fail with ResolutionImpossible: the previous security bump pinned cryptography==50.0.0 (CVE-2026-69247) but pyopenssl 26.3.0 requires cryptography<50,>=49.0.0. pyOpenSSL 26.4.0 allows cryptography<51. Hashes are the official PyPI sha256 digests for pyopenssl-26.4.0 (whl + sdist). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Pull request was closed
|
Closing this documentation-only hold PR to keep the active queue actionable. The policy remains: do not re-enable code-owner gates while the organization has a single maintainer. Recreate a current-main PR only when a second independent maintainer exists and the ruleset can actually satisfy that gate. |
Records the 2026-08-04 org policy in AGENTS.md: code-owner review requirements are disabled everywhere (solo maintainer cannot satisfy them). ON HOLD until the org has multiple maintainers — do not re-enable.