Release v1.6.3: Prompt Hardening & Sweeping Claims Guard · derailed-dash/gemini-review-action

What's Changed in v1.6.3

No Unverified Universal Affirmations: Explicitly instructs Gemini to avoid making sweeping, universal, or exhaustive assertions (such as "all actions/dependencies are pinned to SHAs" or "all endpoints validate input") in prose fields (summary and general_feedback) unless verified across every occurrence in the diff (#43, #45).
Zero-Cost & Zero-Latency Quality Guard: Fixes unanchored praise directly at the prompt/instruction level, eliminating false-positive compliments without introducing the latency penalty or $2\times$ token cost multiplier of a multi-pass verification critic loop.
Synchronised Fallback & Test Coverage: Updated both gemini-review.toml and the default fallback base prompt in load_system_instruction, backed by unit test coverage.

Vertex AI Billing Labels: Automatically attaches component=gemini-review-action and repo=owner_repo labels to Vertex AI API requests for direct Cloud Billing cost attribution and export aggregation.
GitHub API Exponential Backoff & Retry: Adds automatic retries for transient GitHub 5xx server errors and network resets.
Accurate Commit Status Signals: Eliminates duplicate Commit Status API calls during standard pull_request runs while preserving updates for slash-command /gemini-review retries.
Pricing Refinements: Zero-rate cache read pricing support and storage caveats for token-based cache pricing models.

Dollar Cost Reporting: Automatically calculates and reports estimated review costs directly in the tokenomics summary table based on published rates, cached input discounts, and promotional pricing.
Fork PR Security Workflow: Gracefully skips automatic PR runs from external forks where secrets are inaccessible, guiding maintainers to trigger reviews securely via /gemini-review.
No Silent Drops: Validates that GitHub accepted review payloads and fails loudly in CI if delivery fails.

AI-Powered Dynamic Context Selection: When repository size exceeds the sparse threshold (1.5 MB), Gemini dynamically evaluates candidate files and selects up to 8 of the most relevant modules (callers, dependencies, tests, utilities) to include in full context.
Core Safeguard Budget: Guaranteed inclusion of core config and documentation files (README.md, pyproject.toml, package.json, etc.).

Sanitised inline code suggestion formatting by stripping outer fences, line-number prefixes, and auto-aligning indentation to match target code nesting.

Enhanced review prompt directives with senior engineering evaluation standards, constructive structural remedies, and refined dependency discipline.

Full Changelog: v1.6.2...v1.6.3