5-axis review on RFC#450 Option C sop-checklist gate widen: correctness OK (resolve_required_teams single-sited, is_high_risk fires on tier:high OR cfg.high_risk_labels intersect, both probe and compute_ack_state read same high_risk flag); readability OK (extensive doc-comments cite the RFC); arch OK (closes governance gap between sop-tier-check (tier-aware) and sop-checklist (was tier-blind), single-sited decision); security OK (default-class items unchanged); perf negligible. Test coverage: high-risk predicate matrix + resolver fallback rule. APPROVED.
/sop-ack root-cause dev-lead: senior judgment — this is genuinely root-cause, not symptom. The typo'd 40-hex SHA fails to resolve in the self-hosted action mirror (404), which is the direct…
/sop-ack no-backwards-compat dev-lead: confirmed — one token replaced in place, no shim, no compat layer, no dead code. Diff is a single-line substitution. Justification holds.
/qa-recheck /security-recheck
/sop-n/a comprehensive-testing /sop-n/a local-postgres-e2e /sop-n/a staging-smoke /sop-n/a root-cause /sop-n/a five-axis-review /sop-n/a no-backwards-compat /sop-n/a memory-consulted
6cfe76b6dd
Merge pull request 'fix(workspace-server): persist poll-mode canvas user message synchronously before queued 200 (internal#471, sibling of #1347)' (#1350) from fix/canvas-user-message-poll-mode-sync-persist into main
a92beb5d49
fix(workspace-server): persist poll-mode canvas user message synchronously before queued 200
8e754e6b28
Merge pull request 'fix(workspace-server): inject /configs token files agent-owned, not root (P0 list_peers 401)' (#1327) from fix/workspace-token-injection-agent-owned into main