docs(doctoring): mass-revert tip pre-push checklist (#2171/#2205/#2226)

[seonghobae]

Summary

• Adds docs/doctoring/mass-revert-tip-pre-push-checklist-20260918.md documenting recurring mass-revert / phantom-deletion tips on ⚡ Bolt: [performance improvement] sanitize_line 정제 속도 99% 최적화 #2171, ⚡ Bolt: 문자열 분리 및 치환 시 인라인 정규표현식 오버헤드 최적화 #2205, and fix(codeql): preserve fail-fast bootstrap writes #2226.
• Separates two-dot phantoms (~15.7k deletions on a healthy tip) from real mass-revert tips (e.g. ⚡ Bolt: 문자열 분리 및 치환 시 인라인 정규표현식 오버헤드 최적화 #2205 tip wiping coalesce-tick / queue-health control-plane).
• Worker pre-push checklist requires git diff --shortstat origin/main...HEAD size gate before push; OPENCODE_REVIEW_COALESCE_ENABLED stays false.

Test plan

• Docs-only; no workflow / script changes
• Pre-push three-dot check on this branch is small (one doctoring file)
• Tip still contains opencode-review-coalesce-tick.yml and actions-queue-health.yml
• Human skim of the three referenced PRs against the table in the record

Made with Cursor

[coderabbitai]

Warning

Review limit reached

Next included review available in 58 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 77685c6b-e81b-4ff7-a57f-709c255f9849

📥 Commits

Reviewing files that changed from the base of the PR and between e6334e2 and 10f7dcc.

📒 Files selected for processing (26)

• .github/workflows/codeql-scan-dispatch.yml
• .github/workflows/opencode-review-dispatch.yml
• CHANGELOG.d/20260920-strix-trusted-binder-runtime-fixture.md
• CHANGELOG.md
• docs/doctoring/mass-revert-tip-pre-push-checklist-20260918.md
• docs/product-technical-gap-baseline.md
• requirements-strix-ci-hashes.txt
• requirements-strix-ci.txt
• scripts/ci/actions_queue_health.py
• scripts/ci/actions_queue_health_core.py
• scripts/ci/strix_quick_gate.sh
• scripts/ci/test_strix_quick_gate.sh
• tests/test_actions_queue_health_cancelled_before_runner.py
• tests/test_actions_queue_health_post_evidence_retry.py
• tests/test_actions_queue_health_snapshot_consistency.py
• tests/test_actions_queue_health_terminal_preexecution.py
• tests/test_codeql_scan_dispatch_ghas_credential_contract.py
• tests/test_noema_document_review_context.py
• tests/test_noema_review_document_boundaries.py
• tests/test_opencode_agent_contract.py
• tests/test_organization_commercial_readiness_loop_receipt_contract.py
• tests/test_pr_review_autofix_nvidia_nim_contract.py
• tests/test_pr_review_merge_scheduler.py
• tests/test_strix_evidence_binder_trusted_path.py
• tests/test_strix_runtime_dependencies.py
• tests/test_strix_trusted_fixture_boundary.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Admission correction — exact current head 7c65b0ddf703f89613d153b104473645d8f7282b was re-fetched immediately before this transition. The PR remains Open and its branch, commits, reviews, and valid delta are preserved, but it is not merge-admissible: terminal workflow failure: Python Security:failure. Moving it to Draft/Proposed records the live blocker without retiring or closing the work. Return it to Ready only after the same exact head (or a non-destructive reconciled successor) is mergeable, has no substantive unresolved review state, and has terminal required Checks.

[seonghobae]

Run 35278338680 / job 105466573585 reported the same two stale B310 findings.

Root-cause repair (exact-head preserving, non-force).

The failed Python Security evidence was inherited from the stale central base, not introduced by this PR's documentation delta. I ordinary-restacked this branch on current canonical security/CodeQL owner #2291 (b90d873e67860944308d5cef919a1f95243ef98f) using a two-parent commit; the PR remains Open and Draft.

Post-restack evidence:

• effective delta versus fix(strix): resolve evidence binder from trusted source #2291: exactly one existing docs/doctoring/ file;
• no force push or history rewrite;
• git diff --check: clean;
• current owner security validation on the reconstructed tree: Bandit MEDIUM+/MEDIUM+ scan 0 findings; test_strix_runtime_dependencies.py + test_codeql_scan_dispatch_ghas_credential_contract.py: 5 passed.

New exact head: 10f7dcc5f953d687eedd6aa445910c4cbb94a7d4. Fresh hosted Checks are required before any Ready/merge decision; queued, pending, skipped, or absent Checks are not GREEN.

[seonghobae]

Concurrent-head re-audit: 10f7dcc5f953d687eedd6aa445910c4cbb94a7d4 (base main@e6334e229581a918e2f22de18733b76fa65d7e71, 45 ahead / 0 behind).

새 head는 0-behind·mergeable·미해결 thread 0·활성 CHANGES_REQUESTED 0·terminal workflow failure 0입니다. Checks는 queued/pending이나 review admission blocker가 아니므로 Ready로 복구합니다.

이전 head의 approval/Checks는 병합 근거로 승계하지 않습니다. Current head의 terminal Checks와 qualifying independent approval 전에는 merge하지 않습니다.

[opencode-agent]

Pull request overview

OpenCode reviewed the current-head product diff. Coverage is a separate gate.

Changed files

• .github/workflows/codeql-scan-dispatch.yml — GitHub Actions review job
• .github/workflows/opencode-review-dispatch.yml — GitHub Actions review job
• CHANGELOG.d/20260920-strix-trusted-binder-runtime-fixture.md — repository behavior
• CHANGELOG.md — repository behavior
• docs/doctoring/mass-revert-tip-pre-push-checklist-20260918.md — operator or user guidance
• docs/product-technical-gap-baseline.md — operator or user guidance
• requirements-strix-ci-hashes.txt — repository behavior
• requirements-strix-ci.txt — repository behavior
• scripts/ci/actions_queue_health.py — review and security gate shell path
• scripts/ci/actions_queue_health_core.py — review and security gate shell path
• scripts/ci/strix_quick_gate.sh — review and security gate shell path
• scripts/ci/test_strix_quick_gate.sh — review and security gate shell path
• tests/test_actions_queue_health_cancelled_before_runner.py — regression suite
• tests/test_actions_queue_health_post_evidence_retry.py — regression suite
• tests/test_actions_queue_health_snapshot_consistency.py — regression suite
• tests/test_actions_queue_health_terminal_preexecution.py — regression suite
• tests/test_codeql_scan_dispatch_ghas_credential_contract.py — regression suite
• tests/test_noema_document_review_context.py — regression suite
• tests/test_noema_review_document_boundaries.py — regression suite
• tests/test_opencode_agent_contract.py — regression suite
• tests/test_organization_commercial_readiness_loop_receipt_contract.py — regression suite
• tests/test_pr_review_autofix_nvidia_nim_contract.py — regression suite
• tests/test_pr_review_merge_scheduler.py — regression suite
• tests/test_strix_evidence_binder_trusted_path.py — regression suite
• tests/test_strix_runtime_dependencies.py — regression suite
• tests/test_strix_trusted_fixture_boundary.py — regression suite

Changed behavior

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow: codeql-scan-dispatch.yml"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow: codeql-scan-dispatch.yml"]
  R1 --> V1["actionlint plus required checks"]
  Evidence --> S2["Workflow: opencode-review-dispatch.yml"]
  S2 --> I2["GitHub Actions review job"]
  I2 --> R2["Review risk: Workflow: opencode-review-dispatch.yml"]
  R2 --> V2["actionlint plus required checks"]
  Evidence --> S3["Repository file: 20260920-strix-trusted-binder-runtime-fixture.md"]
  S3 --> I3["repository behavior"]
  I3 --> R3["Review risk: Repository file: 20260920-strix-trusted-binder-runtime-fixture.md"]
  R3 --> V3["required checks"]
  Evidence --> S4["Repository file: CHANGELOG.md"]
  S4 --> I4["repository behavior"]
  I4 --> R4["Review risk: Repository file: CHANGELOG.md"]
  R4 --> V4["required checks"]
  Evidence --> S5["Docs: mass-revert-tip-pre-push-checklist-20260918.md (2 files)"]
  S5 --> I5["operator or user guidance"]
  I5 --> R5["Review risk: Docs: mass-revert-tip-pre-push-checklist-20260918.md (2 files)"]
  R5 --> V5["docs review"]
  Evidence --> S6["Repository file: requirements-strix-ci-hashes.txt"]
  S6 --> I6["repository behavior"]
  I6 --> R6["Review risk: Repository file: requirements-strix-ci-hashes.txt"]
  R6 --> V6["required checks"]
  Evidence --> S7["Repository file: requirements-strix-ci.txt"]
  S7 --> I7["repository behavior"]
  I7 --> R7["Review risk: Repository file: requirements-strix-ci.txt"]
  R7 --> V7["required checks"]
  Evidence --> S8["CI script: actions_queue_health.py"]
  S8 --> I8["review and security gate shell path"]
  I8 --> R8["Review risk: CI script: actions_queue_health.py"]
  R8 --> V8["bash -n plus Strix self-test"]
  Evidence --> S9["CI script: actions_queue_health_core.py"]
  S9 --> I9["review and security gate shell path"]
  I9 --> R9["Review risk: CI script: actions_queue_health_core.py"]
  R9 --> V9["bash -n plus Strix self-test"]
  Evidence --> S10["CI script: strix_quick_gate.sh"]
  S10 --> I10["review and security gate shell path"]
  I10 --> R10["Review risk: CI script: strix_quick_gate.sh"]
  R10 --> V10["bash -n plus Strix self-test"]
  Evidence --> S11["CI script: test_strix_quick_gate.sh"]
  S11 --> I11["review and security gate shell path"]
  I11 --> R11["Review risk: CI script: test_strix_quick_gate.sh"]
  R11 --> V11["bash -n plus Strix self-test"]
  Evidence --> S12["Test: test_actions_queue_health_cancelled_before_runner.py (14 files)"]
  S12 --> I12["regression suite"]
  I12 --> R12["Review risk: Test: test_actions_queue_health_cancelled_before_runner.py (14 files)"]
  R12 --> V12["targeted test run"]

Loading

Findings

No source-backed product finding is synthesized from the coverage gate. A coverage miss belongs in the status comment.

• Head SHA: 10f7dcc5f953d687eedd6aa445910c4cbb94a7d4
• Workflow run: 36307576035
• Workflow attempt: 1
• Coverage gate: failure

Review outcome

Coverage is a gate, not the review. This body reviews the changed product files.

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Workflow: codeql-scan-dispatch.yml"]
  S1 --> I1["GitHub Actions review job"]
  I1 --> R1["Review risk: Workflow: codeql-scan-dispatch.yml"]
  R1 --> V1["actionlint plus required checks"]
  Evidence --> S2["Workflow: opencode-review-dispatch.yml"]
  S2 --> I2["GitHub Actions review job"]
  I2 --> R2["Review risk: Workflow: opencode-review-dispatch.yml"]
  R2 --> V2["actionlint plus required checks"]
  Evidence --> S3["Repository file: 20260920-strix-trusted-binder-runtime-fixture.md"]
  S3 --> I3["repository behavior"]
  I3 --> R3["Review risk: Repository file: 20260920-strix-trusted-binder-runtime-fixture.md"]
  R3 --> V3["required checks"]
  Evidence --> S4["Repository file: CHANGELOG.md"]
  S4 --> I4["repository behavior"]
  I4 --> R4["Review risk: Repository file: CHANGELOG.md"]
  R4 --> V4["required checks"]
  Evidence --> S5["Docs: mass-revert-tip-pre-push-checklist-20260918.md (2 files)"]
  S5 --> I5["operator or user guidance"]
  I5 --> R5["Review risk: Docs: mass-revert-tip-pre-push-checklist-20260918.md (2 files)"]
  R5 --> V5["docs review"]
  Evidence --> S6["Repository file: requirements-strix-ci-hashes.txt"]
  S6 --> I6["repository behavior"]
  I6 --> R6["Review risk: Repository file: requirements-strix-ci-hashes.txt"]
  R6 --> V6["required checks"]
  Evidence --> S7["Repository file: requirements-strix-ci.txt"]
  S7 --> I7["repository behavior"]
  I7 --> R7["Review risk: Repository file: requirements-strix-ci.txt"]
  R7 --> V7["required checks"]
  Evidence --> S8["CI script: actions_queue_health.py"]
  S8 --> I8["review and security gate shell path"]
  I8 --> R8["Review risk: CI script: actions_queue_health.py"]
  R8 --> V8["bash -n plus Strix self-test"]
  Evidence --> S9["CI script: actions_queue_health_core.py"]
  S9 --> I9["review and security gate shell path"]
  I9 --> R9["Review risk: CI script: actions_queue_health_core.py"]
  R9 --> V9["bash -n plus Strix self-test"]
  Evidence --> S10["CI script: strix_quick_gate.sh"]
  S10 --> I10["review and security gate shell path"]
  I10 --> R10["Review risk: CI script: strix_quick_gate.sh"]
  R10 --> V10["bash -n plus Strix self-test"]
  Evidence --> S11["CI script: test_strix_quick_gate.sh"]
  S11 --> I11["review and security gate shell path"]
  I11 --> R11["Review risk: CI script: test_strix_quick_gate.sh"]
  R11 --> V11["bash -n plus Strix self-test"]
  Evidence --> S12["Test: test_actions_queue_health_cancelled_before_runner.py (14 files)"]
  S12 --> I12["regression suite"]
  I12 --> R12["Review risk: Test: test_actions_queue_health_cancelled_before_runner.py (14 files)"]
  R12 --> V12["targeted test run"]

Loading

[opencode-agent]

OpenCode Review Overview

• Head SHA: 10f7dcc5f953d687eedd6aa445910c4cbb94a7d4
• Workflow run: 36307576035
• Workflow attempt: 1
• Gate result: COVERAGE_BLOCKED
• Coverage gate: failure
• Model pool: unknown
• Verdict: COVERAGE_BLOCKED
• Formal review: docs(doctoring): mass-revert tip pre-push checklist (#2171/#2205/#2226) #2257 (review)

Coverage evidence did not pass, so approval is blocked. The formal pull-request review is the source-backed diff review, not this status comment.

[seonghobae]

Exact-head admission correction — 10f7dcc5f953d687eedd6aa445910c4cbb94a7d4

Ready is review admission only. Fresh audit against base e6334e229581a918e2f22de18733b76fa65d7e71 found:

• mergeability=false on current base
• CHANGES_REQUESTED: opencode-agent

This PR is moved to Draft/Proposed until the causal owner repair is present on a successor exact head and re-audited. Queued/pending work is neither an additional blocker nor passing evidence. No Close, force push, destructive rebase, manual rerun, synthetic status/approval, merge, auto-merge, or bypass was performed.