Skip to content

feat: add pipeline kill switch and per-PR gate verdict audit comments#353

Open
schmug wants to merge 1 commit into
mainfrom
claude/dmarcheck-routine-98tqP
Open

feat: add pipeline kill switch and per-PR gate verdict audit comments#353
schmug wants to merge 1 commit into
mainfrom
claude/dmarcheck-routine-98tqP

Conversation

@schmug
Copy link
Copy Markdown
Owner

@schmug schmug commented May 22, 2026

Summary

  • Both Routines (implementer + reviewer) now check for open issues with the pipeline-paused label as their very first action — if any open issue carries it, the Routine exits immediately with a no-op message and mutates nothing (no PRs opened, no merges, no labels added, no ledger updates).
  • Reviewer now posts the full gate verdict JSON (pass + reasons) as a PR comment on every auto-merged PR before the merge command runs, providing an immutable per-PR audit record for forensics.
  • setup-labels.sh creates the new pipeline-paused label (yellow, FBCA04).
  • docs/routine-pipeline.md documents the kill switch (pause/resume steps) and the new audit comment behavior.

Closes #314

Test plan

  • setup-labels.sh runs without error; pipeline-paused label appears in the repo with yellow color
  • Apply pipeline-paused label to any open issue → next implementer Routine run exits with no-op message, opens no PRs
  • Apply pipeline-paused label to any open issue → next reviewer Routine run exits with no-op message, merges nothing, posts no comments, skips ledger update
  • Remove pipeline-paused label from all issues → both Routines resume normal operation
  • On an auto-merge path (gate exit 0): PR receives a comment containing the full JSON verdict before the merge
  • Existing escalation path (gate exit 2) is unchanged: needs-you label + reasons comment, no verdict comment

Deferred follow-ups

None — all acceptance criteria shipped in this PR.

https://claude.ai/code/session_01Qy1gPuzCRPGGVsXdAqFWvc


Generated by Claude Code

…#314)

- Both implementer and reviewer Routines now check for open issues with
  the `pipeline-paused` label as their very first action; if any exist,
  they exit with a no-op message and mutate nothing (no PRs, merges,
  labels, or ledger updates).
- Reviewer now posts the full gate verdict JSON (`pass` + `reasons`) as
  a PR comment on every auto-merged PR, providing an immutable audit
  record before the merge command runs.
- `setup-labels.sh` creates the new `pipeline-paused` label (yellow).
- `docs/routine-pipeline.md` documents the kill switch and audit comments.

Closes #314

https://claude.ai/code/session_01Qy1gPuzCRPGGVsXdAqFWvc
@cloudflare-workers-and-pages
Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
dmarcheck 29c8d39 May 22 2026, 02:13 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Reviewer Routine hardening: per-merge audit comment + kill switch

2 participants