Skip to content

fix(scheduler): require lineage evidence before zero-diff close - #2090

Open
seonghobae wants to merge 1 commit into
mainfrom
fix/zero-diff-close-lineage-2082
Open

fix(scheduler): require lineage evidence before zero-diff close#2090
seonghobae wants to merge 1 commit into
mainfrom
fix/zero-diff-close-lineage-2082

Conversation

@seonghobae

Copy link
Copy Markdown
Contributor

Summary

  • fetch complete per-commit file lineage before destructive zero-diff cleanup
  • wait instead of closing when lineage is missing, malformed, truncated, or contains changed files
  • preserve existing dry-run and empty-PR behavior for verified empty lineage

Closes #2082

Verification

  • python -m pytest -q tests/test_zero_diff_close_lineage_contract.py tests/test_pr_review_merge_scheduler.py (333 passed)
  • python -m compileall -q scripts/ci/pr_review_merge_scheduler_core.py tests/test_pr_review_merge_scheduler.py tests/test_zero_diff_close_lineage_contract.py
  • git diff --check

@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 8 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 1733cb52-4082-41d8-ad2c-da1b645f93fb

📥 Commits

Reviewing files that changed from the base of the PR and between cb0872c and 68bb564.

📒 Files selected for processing (6)
  • CHANGELOG.d/20260911-zero-diff-close-lineage.md
  • docs/pr-review-and-merge-procedure.md
  • docs/product-technical-gap-baseline.md
  • scripts/ci/pr_review_merge_scheduler_core.py
  • tests/test_pr_review_merge_scheduler.py
  • tests/test_zero_diff_close_lineage_contract.py

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

  • CHANGELOG.d/20260911-zero-diff-close-lineage.md — repository behavior
  • docs/pr-review-and-merge-procedure.md — operator or user guidance
  • docs/product-technical-gap-baseline.md — operator or user guidance
  • scripts/ci/pr_review_merge_scheduler_core.py — review and security gate shell path
  • tests/test_pr_review_merge_scheduler.py — regression suite
  • tests/test_zero_diff_close_lineage_contract.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

  • Head SHA: 68bb564922625c2a693d9e212d8cb5a7b987708a
  • Workflow run: 34564247464
  • Workflow attempt: 1
  • Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

@opencode-agent

opencode-agent Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

OpenCode Review Overview

Coverage evidence did not pass, so approval is blocked. The formal pull-request review is the source-backed diff review, not this status comment.

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

  • CHANGELOG.d/20260911-zero-diff-close-lineage.md — repository behavior
  • docs/pr-review-and-merge-procedure.md — operator or user guidance
  • docs/product-technical-gap-baseline.md — operator or user guidance
  • scripts/ci/pr_review_merge_scheduler_core.py — review and security gate shell path
  • tests/test_pr_review_merge_scheduler.py — regression suite
  • tests/test_zero_diff_close_lineage_contract.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

  • Head SHA: 68bb564922625c2a693d9e212d8cb5a7b987708a
  • Workflow run: 34567748559
  • Workflow attempt: 1
  • Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

  • CHANGELOG.d/20260911-zero-diff-close-lineage.md — repository behavior
  • docs/pr-review-and-merge-procedure.md — operator or user guidance
  • docs/product-technical-gap-baseline.md — operator or user guidance
  • scripts/ci/pr_review_merge_scheduler_core.py — review and security gate shell path
  • tests/test_pr_review_merge_scheduler.py — regression suite
  • tests/test_zero_diff_close_lineage_contract.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

  • Head SHA: 68bb564922625c2a693d9e212d8cb5a7b987708a
  • Workflow run: 34571744480
  • Workflow attempt: 1
  • Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

  • CHANGELOG.d/20260911-zero-diff-close-lineage.md — repository behavior
  • docs/pr-review-and-merge-procedure.md — operator or user guidance
  • docs/product-technical-gap-baseline.md — operator or user guidance
  • scripts/ci/pr_review_merge_scheduler_core.py — review and security gate shell path
  • tests/test_pr_review_merge_scheduler.py — regression suite
  • tests/test_zero_diff_close_lineage_contract.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

  • Head SHA: 68bb564922625c2a693d9e212d8cb5a7b987708a
  • Workflow run: 34576070994
  • Workflow attempt: 1
  • Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

  • CHANGELOG.d/20260911-zero-diff-close-lineage.md — repository behavior
  • docs/pr-review-and-merge-procedure.md — operator or user guidance
  • docs/product-technical-gap-baseline.md — operator or user guidance
  • scripts/ci/pr_review_merge_scheduler_core.py — review and security gate shell path
  • tests/test_pr_review_merge_scheduler.py — regression suite
  • tests/test_zero_diff_close_lineage_contract.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

  • Head SHA: 68bb564922625c2a693d9e212d8cb5a7b987708a
  • Workflow run: 34578462810
  • Workflow attempt: 1
  • Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

@opencode-agent opencode-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

  • CHANGELOG.d/20260911-zero-diff-close-lineage.md — repository behavior
  • docs/pr-review-and-merge-procedure.md — operator or user guidance
  • docs/product-technical-gap-baseline.md — operator or user guidance
  • scripts/ci/pr_review_merge_scheduler_core.py — review and security gate shell path
  • tests/test_pr_review_merge_scheduler.py — regression suite
  • tests/test_zero_diff_close_lineage_contract.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

  • Head SHA: 68bb564922625c2a693d9e212d8cb5a7b987708a
  • Workflow run: 34581049540
  • Workflow attempt: 1
  • Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Repository file: 20260911-zero-diff-close-lineage.md"]
  S1 --> I1["repository behavior"]
  I1 --> R1["Review risk: Repository file: 20260911-zero-diff-close-lineage.md"]
  R1 --> V1["required checks"]
  Evidence --> S2["Docs: pr-review-and-merge-procedure.md (2 files)"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: pr-review-and-merge-procedure.md (2 files)"]
  R2 --> V2["docs review"]
  Evidence --> S3["CI script: pr_review_merge_scheduler_core.py"]
  S3 --> I3["review and security gate shell path"]
  I3 --> R3["Review risk: CI script: pr_review_merge_scheduler_core.py"]
  R3 --> V3["bash -n plus Strix self-test"]
  Evidence --> S4["Test: test_pr_review_merge_scheduler.py (2 files)"]
  S4 --> I4["regression suite"]
  I4 --> R4["Review risk: Test: test_pr_review_merge_scheduler.py (2 files)"]
  R4 --> V4["targeted test run"]
Loading

@seonghobae

Copy link
Copy Markdown
Contributor Author

Potential HIGH/functional correctness finding on exact head 68bb564922625c2a693d9e212d8cb5a7b987708a: _fresh_commit_lineage_for_close() requests only pulls/{number}/commits?per_page=100 and treats len(commits) >= 100 as incomplete. GitHub REST documents this endpoint as paginated with max per_page=100 and a page parameter. As written, a PR with exactly 100 commits is always forced to wait even when lineage is complete, and a PR with 101+ commits never fetches page 2 and can never be closed by this path. Please either paginate until the final page (while preserving fail-closed behavior on an actual pagination/API failure) or document and test an explicit bounded policy. Add regressions for exactly 100 commits and a multi-page lineage; do not weaken the non-empty-lineage wait rule.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix(governance): prevent zero-diff auto-close from discarding unmerged valid delta

1 participant