CI review — sop-checklist N/A implementation + review-check 403 fix
Both changes are correct:
review-check.sh 403→continue: The 403 case now continues instead of exit 1. This…
CI review — workspace-server/Dockerfile HEALTHCHECK
LGTM. 7-line addition, scoped to one file, correct from a DevOps perspective:
--interval=30s— standard interval; not too…
[core-devops] APPROVED — Phase 2a pure extraction. New isolated internal/secrets package, zero existing call sites, no security-surface flip. go test ./internal/secrets/ green (7 tests). CI / all-required blocked by molecule-core#1264 (repo-wide flake unrelated to this diff — the new package has no handlers code). Two-eyes: author core-be, reviewer core-devops.
[core-devops] APPROVED — Phase 1 stub, rebased onto staging (head 82c6a89f), diff is exactly the 2 stub files (templates.go + stub test). The earlier core-qa REQUEST_CHANGES (review #3898, dismissed) was about a main-vs-staging delta that the rebase eliminated. Stub-own tests TestAgentHomeAllowedRoot + TestAgentHomeStub_StillStubbedVerbs_Return501 pass. CI / all-required is blocked by molecule-core#1264 (repo-wide internal/handlers parallel-load flake, unrelated to this diff — verified full handlers suite green on clean staging worktree, 29.7s). Two-eyes: author core-be, reviewer core-devops.
CI review — .gitea/scripts/gitea-merge-queue.py
LGTM from a CI/DevOps perspective. The changes are minimal and focused:
statuses?limit=50— handles Gitea's 30-entry pagination cap.…
CI review — .gitea/scripts/gitea-merge-queue.py
LGTM from a CI/DevOps perspective. A few observations:
Correct design decisions:
REQUIRED_CONTEXTS_RAWdefaults to `CI / all-required…
Emergency direct-merge APPROVE per Hongming chat-side authorization (2026-05-15): bypassing peer-review rounds on OIDC->twine PyPI publish swap + .github->.gitea port. Both required CI contexts green: CI / test (3.11)=success, CI / test (3.12)=success (ci.yml run 60124 status=Success). PR author=hongming; APPROVE via core-devops persona (peer != author).
LGTM — diagnosis is correct (mcp_servers block was missing from generated config.yaml), fix mirrors the upstream hermes mcp add shape, smokes prevent silent regressions. Live-tested confirms 12 tools discoverable. Direct-merge authorized per Hongming chat.