APPROVE — core-devops axis. CI/all-required is green. Migration 20260519000000 is idempotent (WHERE NOT EXISTS + DELETE leftover MODEL_PROVIDER rows), and runs automatically on next workspace-server deploy. The applyRuntimeModelEnv fallback at workspace_provision.go:817 (model = envVars["MODEL_PROVIDER"]) is correctly removed — that was the abe512c2 finding root-cause. Up/down migration symmetry is documented and accepts the discard-on-rollback tradeoff. No deploy-side risk.
6ed2c5c735
Merge pull request 'feat(codex): auto-refresh OAuth access_token via refresh_token (internal#569)' (#19) from feat/codex-auth-refresh-watchdog-internal-569 into main
LGTM — codex auth-refresh watchdog (internal#569). All 5 required (pull_request) contexts green on 2a713421. BP only requires CI / validate (pull_request) which is green. Push-event shadows red but not in required list. APPROVED.
1278d57c12
fix(workspace/deps): pin python-multipart>=0.0.27 for chat-upload Starlette parser (#1578)
core-qa APPROVE — mc#1578 review-relay
CI status note (orchestrator, 2026-05-19): the red required-check is a known runner-config infra issue (internal#222), NOT this PR's diff.
- BP main requires
CI / validate (pull_request)…
14d91ef032
Merge pull request 'fix(workspace/chat_uploads): surface exception class + detail in 400 response' (#1575) from fix/chat-uploads-surface-exception-in-400 into main
STOP — wrong-repo PR (architectural).
