v1.0.1 — bounded dispatch recovery

Recover brief service outages and lost dispatch acknowledgments without creating a new review generation.

• Retry transport failures, including interrupted acknowledgment bodies, and HTTP 408/429/500/502/503/504.
• Reuse the same OIDC admission identity, with at most three attempts in 90 seconds. Honor longer Retry-After values; fail rather than retry early beyond the deadline.
• Keep authentication refusals and malformed acknowledgments as failures. Check the PR before manually retrying: a failed job may already have admitted a run.

Pin managoat/review-loop-action@8a2df42f250063b33f253bec2c3b0e7abffd50d1 in trusted workflows. A green dispatch still means admission, not approval.

Validation: 13 Node tests and the public consumer smoke check pass. No paid review is started by the test suite.

Review Loop Action v1.0.0

First public release of the dependency-free Review Loop dispatch Action.

- uses: managoat/review-loop-action@f10fac7d0e21607dd4aa0da7d794e94780db2a65 # v1.0.0
  with:
    service-url: ${{ vars.REVIEW_LOOP_URL }}

Use it in .github/workflows/review-loop.yml on pull_request with id-token: write. Install the GitHub App and merge the repository policy and workflow before first use. No checkout or repository secrets are needed. A successful step acknowledges admission; the separate Review Loop check reports the PR outcome.

v1.0.0 and v1 point to the release commit. Pin the full SHA when the workflow is part of your trusted review policy.

Validation: all six protocol/entrypoint tests passed on GitHub's Node.js 24 runtime. A separate GitHub runner fetched this exact public Action commit and exercised its real entrypoint's input rejection without requesting credentials or starting paid work. This release packages the same dispatch runtime already covered by the service's contract tests; the runner smoke is not a claim of a new production PR loop.