Switch to Opus for reviews

[strawgate]

No description provided.

[github-actions]

AI generated by PR Review Agent for #9

[github-actions]

PR Review Summary

This PR switches the review agent to use claude-opus-4.6, adds a submit_pull_request_review safe output, and updates various infrastructure versions (awf 0.16.2, agent 0.0.409, mcpg v0.1.4).

Key Concerns

🔴 CRITICAL — Setup action references personal fork on unpinned branch: The lock file references strawgate/gh-aw/actions/setup@submit-single-pr-review instead of github/gh-aw/actions/setup@(pinned-sha). This is a supply-chain security risk and should not be merged to main as-is. If this is for testing purposes only, consider marking the PR as a draft.

🟠 HIGH — Chroot isolation removed: The --enable-chroot flag was dropped from the awf command. Confirm this is expected with the v0.16.2 upgrade.

What looks good

• The .md changes (engine config, submit-pull-request-review safe output, Step 4 documentation) are clean and well-structured.
• Version bumps are consistent across the file.
• The new submit_pull_request_review tool schema and validation config are properly defined.

AI generated by PR Review Agent for #9

[github-actions]

PR Review Summary

This PR switches the review agent engine to claude-opus-4.6, adds the submit_pull_request_review safe output tool, updates infrastructure versions (gh-aw v0.43.18, actions/checkout v6.0.2), and improves the review process instructions to use local file reading instead of API calls.

Changes reviewed

• .github/aw/actions-lock.json — New lock entry for v0.43.18. Clean.
• .github/workflows/pr-review.md — Engine config, new safe output, updated review instructions. Well-structured.
• .github/workflows/pr-review.lock.yml — Auto-generated, reflects the .md changes correctly.
• Makefile — Adds setup-gh-aw and compile targets for the gh-aw compiler. Clean additions.

Prior review concerns addressed

The previous review's CRITICAL (personal fork reference in lock file) and HIGH (chroot removal) have both been resolved — the lock file now correctly references github/gh-aw/actions/setup with a pinned SHA.

No new issues found.

AI generated by PR Review Agent for #9