Handle stacked PR retarget and merge-queue trigger gaps

[seonghobae]

Summary

• add pull_request_target trigger coverage for edited, ready_for_review, auto_merge_enabled, and auto_merge_disabled in the central merge scheduler workflow
• keep existing required-check gates intact (no bypass/weakening)
• add a workflow contract test that locks the trigger set and rejects unsupported enqueued/dequeued activity types

Root cause

Stacked PR chains can change merge-readiness without a head push (base retarget and auto-merge state flips). The scheduler workflow did not trigger on those transitions, so automerge reevaluation could stall until a later sweep.

Why this is safe

• no change to merge decision criteria, required checks, or permissions policy
• only event coverage widened so the existing scheduler logic runs at the right time

Validation

• python -m pytest tests/test_required_workflow_queue_contract.py tests/test_adversarial_evidence.py -v

[Copilot]

Pull request overview

Extends the central PR Review Merge Scheduler workflow’s pull_request_target trigger coverage to react to merge-readiness transitions that may occur without a head push (e.g., retargeting, merge-queue transitions, and auto-merge state flips), and adds a contract test to prevent trigger regressions.

Changes:

• Expand pull_request_target activity types in pr-review-merge-scheduler.yml to include edited, enqueued, dequeued, and auto_merge_disabled (while keeping existing gates unchanged).
• Add a workflow contract test to lock the expected trigger types for the merge scheduler.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
tests/test_required_workflow_queue_contract.py	Adds a contract test to ensure the merge scheduler workflow keeps the intended pull_request_target.types coverage.
.github/workflows/pr-review-merge-scheduler.yml	Widens pull_request_target event types so the scheduler runs on retarget/queue/auto-merge state transitions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

tests/test_required_workflow_queue_contract.py:51

• The new workflow contract test extracts pull_request_target.types via brittle string splits and assumes an inline types: [...] list plus a later pull_request_review: key. This couples the contract to YAML formatting and trigger ordering rather than just the trigger set, so a harmless reformat (e.g. multi-line list) would fail the test.

def test_merge_scheduler_pull_request_target_includes_retarget_and_queue_events() -> None:
    workflow = workflow_text("pr-review-merge-scheduler.yml")
    trigger_block = workflow.split("pull_request_target:", 1)[1].split(
        "pull_request_review:",
        1,
    )[0]
    types_line = next(
        line.strip() for line in trigger_block.splitlines() if line.strip().startswith("types:")
    )
    listed = types_line.split("[", 1)[1].split("]", 1)[0]
    trigger_types = {item.strip() for item in listed.split(",") if item.strip()}

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

tests/test_required_workflow_queue_contract.py:51

• This contract test currently assumes the pull_request_target.types list is expressed as a single inline [a, b, c] YAML sequence. That makes the test fail on semantically equivalent formatting changes (e.g., block-list types:\n - opened) or quoted items, even though the trigger set is unchanged. Consider parsing both inline and block-list forms so the contract locks the trigger semantics rather than the exact YAML layout.

    types_line = next(
        line.strip() for line in trigger_block.splitlines() if line.strip().startswith("types:")
    )
    listed = types_line.split("[", 1)[1].split("]", 1)[0]
    trigger_types = {item.strip() for item in listed.split(",") if item.strip()}

[seonghobae]

Merge-loop status: human-action blocker (model-provider outage)

Adversarial review of this PR's content found no defects. Scheduler dedupe reorder (active_review_run_refs), evidence citation regex boundaries, and the pull_request_target trigger additions were all reviewed against cross-PR contamination, malformed-SHA, and boundary-bypass scenarios — clean. All required checks at head c4a9023 pass except opencode-review.

The only blocker is infrastructure, not this PR: every repository_dispatch OpenCode review run org-wide ends OPENCODE_MODEL_POOL_OUTCOME: exhausted because all three provider families fail fast (~5s):

Provider	Failure class
github-models (deepseek-v3-0324, gpt-4.1, gpt-5, gpt-5-chat, o3, deepseek-r1)	authentication-or-permission
openrouter (deepseek-v3.2, qwen3-coder — paid pins from #622)	credit-exhausted
openai/gpt-5.6-luna	quota-or-budget

Evidence runs for #618c4a9023: 30142031164, 30141689649, 30141364368, 30140921858. Same signature reproduced at 2026-07-25T04:46Z (run 30144526218, kaefa#70) and as far back as 2026-07-23T01:19Z (run 29964744722) — even the successful dispatch runs since Jul 22 only passed by reusing prior same-head approvals. No PR has automation-merged since #559 (Jul 14); all later merges were manual.

Human actions needed (any one unblocks the pool):

1. Restore GitHub Models access for the workflow token (org Models policy / token permission — all github-models candidates return auth-or-permission despite models: read).
2. Refill OpenRouter credits (paid coder models from fix(opencode-review): replace free OpenRouter pins with paid coder models #622 report credit-exhausted).
3. Restore OpenAI quota/budget for gpt-5.6-luna.

Once any provider recovers, no further action is needed on this PR: all 11 review threads are resolved, Strix evidence is complete, and the scheduler will re-dispatch the same-head review and merge on a real-model APPROVED verdict. Governance untouched — no checks weakened or bypassed.

[seonghobae]

Merge-loop status (pass @ 2026-07-25 05:5xZ): human-action blocker persists ? org-wide model-provider billing exhaustion

Adversarial review of head c4a9023: no PR-caused defects. Independent re-verification this pass:

• Scheduler dedupe reorder (active_review_run_refs): dispatch-title classification now gated on run_repo == dispatch_repo AND event == repository_dispatch before the run-name filter ? correct against run-name expansion on dispatch runs; no cross-repo/cross-PR misclassification path found.
• Workflow trigger additions (edited, auto_merge_disabled) are valid pull_request_target activity types; no token-scope widening.
• Citation regex boundary (line N of/in path) rejects path-prefix bypass (path.py.evil) via the negative lookahead; sentence-punctuation acceptance is anchored.
• Targeted tests at head c4a9023 (local, Python 3.14): tests/test_adversarial_evidence.py tests/test_pr_review_merge_scheduler.py tests/test_required_workflow_queue_contract.py ? 165 passed.

Check state: all required checks green at head except opencode-review.

• PR Handle stacked PR retarget and merge-queue trigger gaps #618 failing run: 30142031164 (03:19Z) ? COVERAGE_EVIDENCE_RESULT: success; failure isolated to model pool: "reached the per-run provider attempt ceiling of 30 attempts ? model pool exhausted before producing a valid control conclusion."
• Freshest org sample: run 30145835483 (05:28?05:37Z, PR fix(deps): protobuf를 aiplatform 호환 범위로 유지 #549) ? still exhausted: every github-models/* candidate fails class=authentication-or-permission (billing lock), openai/gpt-5.6-luna fails class=quota-or-budget, openrouter/* skipped "provider credits exhausted (HTTP 402 / payment required)". Outcome OPENCODE_MODEL_POOL_OUTCOME=exhausted model=none.
• The 05:02?05:03Z pull_request_target "success" runs are no-ops (opencode-review job skipped) ? not evidence of recovery.

Classification: infrastructure, not PR-caused. Exhaustion has persisted org-wide since ~20:40Z Jul 24 across all sibling repos. Governance correctly refuses deterministic approval ("only an existing real-model APPROVED review bound to this exact head may satisfy the required review"). No code change here can or should fix this.

Human action required: restore model-provider capacity ? clear the GitHub Models billing lock on the org/installation, and/or fund OpenRouter (402) / OpenAI quota. The queue sweep re-dispatches reviews automatically (#549 retried 03:48/04:07/05:03/05:28Z), so PR #618 will re-review and merge without further intervention once any provider recovers.

[seonghobae]

Merge-loop status: blocked on org-wide review-provider outage (human action required)

Adversarial review of this PR found no PR-caused defects; the only failing required check is opencode-review, and its failure is infrastructure:

• Failing check: opencode-review run 30142031164 (attempts 4 and 5), head c4a90235405119bb26737886f3618b932da94db9.
• Signature: MODEL_OUTPUT_UNAVAILABLE, OPENCODE_MODEL_POOL_OUTCOME=exhausted — all 10 model candidates fail in ~5s each, every catalog cycle.
• Canary confirming org scope: run 30148110436 (PR fix(deps): protobuf를 aiplatform 호환 범위로 유지 #549) fails identically. Every repository_dispatch OpenCode review org-wide has failed since the last real-model success at 2026-07-23T09:00Z (runs 29993472635, 29993471451).

Per-provider failure classes from the model-pool logs (provider content suppressed, classes logged):

Provider	Class	Human action
github-models/* (via STRIX_GITHUB_MODELS_TOKEN)	authentication-or-permission	Rotate/renew the token or restore its Models access
openai/gpt-5.6-luna (direct, OPENAI_API_KEY)	quota-or-budget	Restore OpenAI quota/budget
openrouter/*	credit-exhausted (HTTP 402)	Top up OpenRouter credits

These classes are not time-window rate limits; reruns will keep failing until at least one credential/budget is restored. Per governance, no deterministic fallback may approve after provider exhaustion — only a real-model APPROVED review bound to this exact head. Once any provider is restored, re-run the failed opencode-review job (no code change needed on this PR).

[seonghobae]

Merge-loop status (pass @ 2026-07-25 08:2xZ): human-action blocker persists ? org-wide model-provider quota exhaustion

Adversarial re-review of head c4a9023: no PR-caused defects. Re-verified this pass: citation-regex boundary lookahead (adversarial_evidence.py ? suffix-path and prefix-boundary negative tests intact), active_review_run_refs dedupe reorder (dispatch-title match scoped to dispatch_repo + repository_dispatch before name filter), and pull_request_target trigger set (edited/auto_merge_disabled added; invalid enqueued/dequeued correctly excluded, contract-tested).

Only failing required check: opencode-review ? infrastructure, not PR content:

• PR Handle stacked PR retarget and merge-queue trigger gaps #618 latest dispatch: run 30142031164 ? OPENCODE_MODEL_POOL_OUTCOME: exhausted, model=none.
• Signature (from peer run 30149057014, identical across ?14 repos): all 10 pool candidates fail per cycle ? openai/gpt-5.6-luna ? class=quota-or-budget; all github-models/* ? exit 1 in ~5s; openrouter/* ? fatal provider error.
• Live recovery probe this pass: run 30149542808 (.github#549, dispatched 07:34Z) ? failure 07:43Z.
• Last successful repository_dispatch model review org-wide: run 29993472635 at 2026-07-23T09:00:28Z ? outage duration ? 47 h.

Scheduler state (not a defect): run 30149522878 decisions ? #618 wait: review dispatch limit reached, queued FIFO behind #549/#551/#562/#595?#602/#616 with REVIEW_DISPATCH_LIMIT=1 per cycle. #618 will be auto-redispatched when its turn comes; no manual rerun needed.

Human action required: restore model-provider quota/billing (GitHub Models inference quota, OpenAI direct credit, and/or OpenRouter credit). No workflow timing changes were made per the fixed rule (opencode-review timing untouchable; failures = infra, re-run only). Governance intact: no required-check weakening or bypass.

[seonghobae]

Merge-loop status: blocked by infrastructure (human action required) ? PR content is sound

Adversarial review of this PR's diff found no defects. The scheduler active_review_run_refs reorder is a correct root-cause fix for dynamic repository_dispatch run names (adds a run_repo == dispatch_repo tightening), the added edited/auto_merge_disabled trigger types correctly cover base-retarget events, and the citation-regex change still enforces exact path+line (boundary tests cover prefix/suffix gaming). No governance weakening.

The failing opencode-review check is NOT caused by this PR. Root cause chain, with evidence:

1. GitHub Models is retired for this org. Org-attributed inference (POST https://models.github.ai/orgs/ContextualWisdomLab/inference/chat/completions) returns 403 with headers Sunset: Thu, 30 Jul 2026 00:00:00 GMT and Link: <https://github.blog/changelog/2026-07-01-github-models-is-being-fully-retired-on-july-30-2026/>; rel="deprecation". GitHub Models is fully retired 2026-07-30; scheduled brownouts ran Jul 16 and Jul 23. Org access cut off at ~2026-07-25T00:26Z (last successful real-model review: PR Kill hung runs early when a pinned pool model is delisted #621 at 23:40Z Jul 24).
2. The org secret was dead and masked the fallback. STRIX_GITHUB_MODELS_TOKEN (updated 2026-07-22T01:00:00Z, visibility all) failed 401/403 on every model. I deleted it so the documented ${{ secrets.STRIX_GITHUB_MODELS_TOKEN || github.token }} fallback engages.
3. The fallback also fails ? Actions github.token attributes to the org, which is cut off (failure signature changed from json-bytes 930?978 to 698?701 after deletion, confirming the fallback engaged and was equally rejected).
4. Both non-GitHub providers need billing: openai/gpt-5.6-luna ? quota-or-budget (insufficient_quota); openrouter/deepseek-v3.2, openrouter/qwen3-coder ? credit-exhausted (HTTP 402).

Failed run evidence (all #618c4a9023, all OPENCODE_MODEL_POOL_OUTCOME: exhausted ? MODEL_OUTPUT_UNAVAILABLE):

• Run 30150610014 (08:09Z), 30150959330 (08:21Z), 30151278716 attempt 1 (08:32Z, pre-deletion) and attempt 2 (08:56Z, post-deletion, github.token fallback engaged and still 401/403).
• 73?94 of the last 100?200 opencode-review runs org-wide failed since 00:26Z Jul 25; zero repository_dispatch successes.

Required human actions (any one restores reviews):

1. Top up OpenRouter credits (fastest; pool falls through to openrouter automatically), or
2. Restore OpenAI quota/billing, or
3. (stopgap, dies 2026-07-30) create a fine-grained PAT with GitHub Models read access and set it as org secret STRIX_GITHUB_MODELS_TOKEN ? user-attributed inference still returns 200.

Durable fix: migrate the review model pool off github-models before 2026-07-30 (opencode.jsonc + workflow model lists org-wide). Tracked in a separate issue.

Once any provider is funded, the scheduler auto-redispatches the review for this head; no PR changes are needed.

[seonghobae]

Merge-loop status: human-action blocker (provider billing), not PR-caused

Adversarial review result: PR #618 diff re-reviewed (trigger-type widening, active_review_run_refs dispatch-title reorder, evidence-citation regex widening) — no PR-caused defects; governance intact. All head checks green except the opencode-review commit status.

Blocker (with signatures): every OpenCode model-pool attempt fails at the provider account level. Central run 30153577309 attempts 1-6 all ended OPENCODE_MODEL_POOL_OUTCOME: exhausted:

• github-models (gpt-4.1, o3, deepseek-r1-0528, ...): HTTP 403 - direct API probe returns "Unable to proceed with model usage. This account has locked billing." Free-tier models (e.g. gpt-4.1-nano) still return 200, so this is the paid-tier billing lock, not token validity. openai/gpt-5 additionally returns 400 unavailable_model (retired ID).
• openai/gpt-5.6-luna (native OPENAI_API_KEY): class=quota-or-budget.
• openrouter (deepseek-v3.2, qwen3-coder): class=credit-exhausted (key was rotated 2026-07-23 and is exhausted again).
• Org secret STRIX_GITHUB_MODELS_TOKEN does not exist (org secrets listing has no STRIX_* entry), so runs fall back to github.token (models: read), which hits the same billing lock.

Last genuine model review org-wide: ~2026-07-21T04:17Z; since then 129/200 central review runs failed with this signature and all run-level "successes" had the model job skipped (fast-approval scope) - misleading for gauging provider health.

Human actions (any one unblocks):

1. Unlock GitHub Models billing for the account/org (Settings -> Billing), or
2. Restore OpenAI API quota for OPENAI_API_KEY, or
3. Add OpenRouter credits for OPENROUTER_API_KEY, or
4. Create org secret STRIX_GITHUB_MODELS_TOKEN with a fine-grained PAT (models: read) from an account with active Models billing.

Also recommended: replace retired openai/gpt-5 in the pool with a current catalog ID.

Once any provider is restored: gh run rerun 30153577309 --failed - auto-merge (squash) is already armed and every other check is green at head c4a9023.

[seonghobae]

Merge-loop pass @ 2026-07-25T14:1xZ: blocker persists ? provider billing (human action), not PR-caused

Fresh evidence (post-dates prior comment): run 30153577309 attempt 7 completed failure at 14:03:11Z with the identical signature ? MODEL_OUTPUT_UNAVAILABLE after all 10 pool candidates failed every cycle:

• 7x github-models/* ? class=authentication-or-permission (org-attributed GitHub Models inference cut off; see Migrate OpenCode review model pool off GitHub Models before 2026-07-30 retirement #624)
• openai/gpt-5.6-luna ? class=quota-or-budget
• openrouter/deepseek-v3.2, openrouter/qwen3-coder ? class=credit-exhausted

Outage scope: 0/134 repository_dispatch opencode-review runs succeeded org-wide 01:36?13:12Z today; last real-model success was 2026-07-23T09:00Z (run 29993472635).

Adversarial re-review of head c4a9023: no PR-caused defects. All other required checks pass on this head (strix, coverage-evidence, CodeQL, Semgrep, Bandit, pip-audit, gitleaks, osv, scorecard, noema, dependency-review). Governance intact: no check weakened or bypassed.

Only human actions unblock (any one, per #624): top up OpenRouter credits, restore OpenAI quota, or set a fine-grained PAT (Models: read) as org secret STRIX_GITHUB_MODELS_TOKEN (stopgap until Jul 30). Auto-recovery is wired: the merge-scheduler cron (*/15, */30) re-dispatches the review once a provider works ? no manual re-run needed after billing is fixed.

[seonghobae]

Merge-loop status (agent): blocked on org-wide model-provider outage — not PR-caused.

Head c4a9023 has every required check green except the opencode-review commit status, published by central dispatch run 30153577309. Attempts 7, 8, and 9 (reruns at ~13:54, ~15:05, ~15:17 UTC) all ended OPENCODE_MODEL_POOL_OUTCOME: exhausted — all 10 pool candidates hard-fail in ~5s:

Provider family	Models	Failure class
GitHub Models	deepseek-v3-0324, gpt-4.1, gpt-5, gpt-5-chat, o3, deepseek-r1(-0528)	authentication-or-permission
OpenAI direct	gpt-5.6-luna	quota-or-budget
OpenRouter	deepseek-v3.2, qwen3-coder	credit-exhausted (HTTP 402 payment required)

Identical failures hit unrelated repos at the same time (disksage#16 run 30162265183, wardnet#48 run 30162237155, fast-mlsirm#194 run 30162208656), confirming infra, not this diff. Adversarial review of the PR diff itself found no defects; evidence-gate strictness is unchanged.

Human action needed: restore provider access — top up OpenRouter credits, restore the OpenAI API budget, and check the GitHub Models token/entitlement (auth failures started ~15:17 UTC). No timing/gate changes were made per policy. Auto-merge (squash) is already armed; once providers recover, rerun run 30153577309 (or let the scheduler re-dispatch) and the PR merges with no further changes.

[seonghobae]

Merge-loop status (adversarial review + blocker report)

Adversarial review of the diff itself: PASS ? no findings.

• Scheduler reorder in active_review_run_refs correctly gates dispatch-title classification on dispatch_repo + repository_dispatch + valid SHA suffix before the workflow-name filter; stale_pr_run_ids (name-filtered sibling) is only invoked with workflow=None, so no same-path bug remains.
• pull_request_target trigger additions (edited, auto_merge_disabled) are valid activity types; contract test pins them and rejects enqueued/dequeued.
• Evidence-citation regex boundaries verified (prefix/suffix/punctuation cases covered by tests).
• Targeted suites pass: 165 passed (test_adversarial_evidence.py, test_pr_review_merge_scheduler.py, test_required_workflow_queue_contract.py). CI coverage-evidence for head c4a9023 is PASS.

Merge blocker: infrastructure, not PR-caused ? human action required.

• Required check opencode-review fails with MODEL_OUTPUT_UNAVAILABLE (model pool exhausted). Run 30153577309, attempts 9 & 10 (rerun performed 2026-07-25T16:15Z).
• Provider signatures from attempt 10 logs:
  • github-models/*: class=authentication-or-permission ? direct probe of models.github.ai/inference returns HTTP 403 "This account has locked billing."
  • openrouter/*: class=credit-exhausted (HTTP 402, credits exhausted).
  • openai/gpt-5.6-luna: class=quota-or-budget.
• Org-wide: every repo's opencode-review run since ~2026-07-25T15:40Z failed identically; no review job has succeeded org-wide in the last 40 runs.

Required human action: unlock GitHub billing for the org/account (and/or top up OpenRouter credits or restore the OpenAI budget). Once any provider recovers, rerun run 30153577309 ? all other required checks are already green on head c4a9023 and auto-merge is armed.

No timing/threshold edits were made to the review workflow per repo policy (infra failures ? rerun only).

[seonghobae]

Merge-loop final pass: blocker is deterministic, not transient ? rerunning is pointless until #624 is mitigated.

New evidence since the last pass:

• Run 30153577309 attempt 11 (rerun at 17:0xZ, completed 17:14:03Z) failed identically: MODEL_OUTPUT_UNAVAILABLE, OPENCODE_MODEL_POOL_OUTCOME=exhausted, all github-models/* candidates class=authentication-or-permission, OpenAI quota-or-budget, OpenRouter credit-exhausted (402).
• Root cause is now confirmed as Migrate OpenCode review model pool off GitHub Models before 2026-07-30 retirement #624: GitHub Models org-attributed inference for ContextualWisdomLab is already sunset-cut-off (403 + Sunset: 2026-07-30 since ~2026-07-25T00:26Z). A user-attributed probe of models.github.ai returns 200, which proves the API is healthy and the CI failure is org-attribution ? Actions github.token runs are deterministically rejected. No number of reruns can pass.

Adversarial review outcome (this pass): PR #618 diff remains defect-free. One adjacent base-branch defect was found and filed as #626 ? scripts/ci/adversarial_evidence.py (changed by this PR) is missing from the central_review_process_fallback_scope allowlist due to refactor drift from #555, which is why this PR runs with CENTRAL_REVIEW_PROCESS_FALLBACK_ELIGIBLE=false. That drift costs review latency but does not gate this merge: after pool exhaustion, only an existing same-head real-model approval can satisfy the check, regardless of eligibility.

Human action required (any one of #624's mitigations): top up OpenRouter credits, restore OpenAI quota, or (until Jul 30 only) set a fine-grained Models-read PAT as org secret STRIX_GITHUB_MODELS_TOKEN. After that, rerun run 30153577309 ? everything else on head c4a9023 is green and auto-merge (squash) is already armed.

[seonghobae]

Merge-loop status: blocked on model-pool billing (human action required)

Adversarial review of this PR: no defects found.

• Verified live against the Actions API that name carries the dynamic run-name (e.g. run 30168486257: name == display_title == "Required OpenCode Review ...#28@7e46fd..."), confirming the scheduler run-matching reorder fixes real dead code.
• Targeted tests pass locally at head c4a9023 (58 + 107 passed); CI coverage-evidence (full pytest + coverage gate) passed on this head in run 30153577309.
• Evidence-regex boundary cases (.yml.backup, prefix, wrong line) still rejected; edited/auto_merge_disabled triggers deduped by the pr-N cancel-in-progress concurrency group.

Why opencode-review fails (infra, not PR-caused):

• Run 30153577309 attempts 11-13 all end MODEL_OUTPUT_UNAVAILABLE, OPENCODE_MODEL_POOL_OUTCOME=exhausted.
• Attempt 13 provider-failure classes: authentication-or-permission x24 (github-models), quota-or-budget x4 (openai), credit-exhausted x2 (openrouter).
• Direct probe of the GitHub Models inference endpoint returns HTTP 403: "Unable to proceed with model usage. This account has locked billing."
• Last fresh model review org-wide: run 30134503832 (2026-07-24T23:42Z, 43 min). Every "success" since is a 7-12 s existing-approval short-circuit; all org repos dispatch reviews fail identically. No PR has merged since Kill hung runs early when a pinned pool model is delisted #621 (2026-07-24T23:40Z).

Human action (any one unblocks the pool):

1. Unlock GitHub billing for the account paying GitHub Models (settings -> billing: payment failure / spending-limit lock).
2. Top up OpenRouter credits.
3. Restore OpenAI quota/budget.

After that, the merge scheduler auto-reruns the review; auto-merge (squash) is already enabled, so #618 merges without further intervention. Governance untouched: no checks weakened or bypassed.

[seonghobae]

Merge-loop status: blocked on provider billing (human action required)

PR #618 is code-complete. Adversarial review of the diff found no defects; every required check passes on head c4a9023 except opencode-review, which cannot produce a real-model review because all 10 model-pool providers are payment-blocked:

Provider family	Failure class (from run logs)	Signature
github-models/* (6 candidates)	authentication-or-permission	Direct API probe: 403 "Unable to proceed with model usage. This account has locked billing." (models.github.ai/inference)
openai/gpt-5.6-luna	quota-or-budget	fatal provider error, quota/budget
openrouter/deepseek-v3.2, openrouter/qwen3-coder	credit-exhausted	HTTP 402 payment required

Evidence

• Failing required run: 30153577309 ? attempts 13 & 14 both MODEL_OUTPUT_UNAVAILABLE, pool outcome=exhausted, per-run failure classes: 24? auth, 4? quota, 2? credit.
• Identical signature since ? 2026-07-25T01:59Z (run 30139584631) and across every org repo (free-router#29, disksage#16, wardnet#48, fast-mlsirm#194, ?). 0 successful repository_dispatch reviews since 2026-07-23; last real-model approval path recovery (2026-07-22) required STRIX_GITHUB_MODELS_TOKEN rotation by the account owner.
• Not PR-caused: same failure on unrelated heads/repos; this PR's other 20+ checks (CodeQL, Semgrep, Bandit, pip-audit, strix, coverage-evidence) all pass.

Human actions to unblock

1. Resolve the GitHub billing lock on the account backing STRIX_GITHUB_MODELS_TOKEN (Settings ? Billing ? payment method/outstanding balance), and/or
2. Top up OpenRouter credits / OpenAI budget.

Then: gh run rerun 30153577309 --failed ? auto-merge is already armed (squash); a passing review merges this PR without further action. No reruns will be attempted before billing recovery (they burn scarce quota; deterministic 403).

No gate weakening or bypass was applied; fail-closed is working as designed.

[seonghobae]

Merge-loop pass (2026-07-25T20:2xZ): blocker re-verified — still provider billing, human action required

Adversarial re-review of head c4a9023: no defects. Trigger types valid (edited covers base-retarget; enqueued/dequeued correctly excluded from pull_request_target), scheduler dispatch-title match reorder removes real dead code and is correctly guarded by run_repo == dispatch_repo, citation-regex lookaheads reject path-prefix false positives (.py.backup). coverage-evidence passed on this exact head; PR is 15 ahead / 0 behind main — no branch update needed. No same-head real-model APPROVED review exists, so only a real model run can satisfy the gate.

Fresh billing probes (post-mitigation #614/#619/#622/#621, all already on main):

• Run 30173036122 (repository_dispatch review, 20:10–20:16Z): OPENCODE_MODEL_POOL_OUTCOME=exhausted — 24× class=authentication-or-permission (GitHub Models locked billing), 4× quota-or-budget (OpenAI), 2× credit-exhausted (OpenRouter 402).
• Run 30172874583 (20:04–20:12Z): identical signature.
• PR Handle stacked PR retarget and merge-queue trigger gaps #618 check run 30153577309 attempt 14 (19:13–19:20Z): identical signature.

Failure is deterministic and org-wide (every queue-sweep dispatch 19:52–20:12Z failed identically), therefore not PR-caused and not transient. Per governance rules no required-check weakening or bypass is permitted, and rerunning before #624 (provider billing/credits) is resolved is guaranteed to fail. Once billing is restored, rerun the failed opencode-review check on this head — everything else is green.

[seonghobae]

Merge loop status: infra-blocked — human action required (provider credentials/billing)

Adversarial review result: PASSED — full 10-patch diff reviewed for stacked-PR automerge reliability (retarget event coverage, dispatch-title dedupe collision-safety, adversarial-evidence citation-format boundaries). No PR-caused defects; no code changes needed. Auto-merge (SQUASH) remains armed; all checks green on head c4a9023 except opencode-review.

Blocker: the entire OpenCode reviewer model pool is dead org-wide. Evidence:

Evidence	ID / signature
PR 618 review run, attempts 14–16	run 30153577309 — MODEL_OUTPUT_UNAVAILABLE, OPENCODE_MODEL_POOL_OUTCOME: exhausted
Attempt 16 (00:06–00:11 UTC Jul 26, post daily-reset)	all 10 candidates fail in ~5s: github-models/* → authentication-or-permission (HTTP 403, empty body); openai/gpt-5.6-luna → quota-or-budget; openrouter/* → credit-exhausted (HTTP 402)
Sentinel + org-wide sweep	30175564391 (.github#549) failed; every repository_dispatch review run across all org repos failing 22:26Z–00:00Z (e.g. 30180385787, 30180122047)
Last real model-review success	29993472635 / 29993471451 — 2026-07-23 09:00 UTC, never recovered since. Later "successes" (e.g. 30177055806, 30171886927) are bootstrap-only runs with the review job skipped
Root cause for github-models 403s	Inference endpoint returns 403 + Deprecation: @1777939200 header linking to "GitHub Models is being fully retired on July 30, 2026" (brownouts were Jul 16 & Jul 23 — matching the Jul 23 09:00Z last-success timestamp). This is a permanent retirement ramp, not a quota cycle

Required human actions (any one unblocks):

1. Migrate the reviewer pool off GitHub Models before 2026-07-30 (retirement is permanent; the 403s will not clear) — e.g. Microsoft Foundry or Copilot-backed inference per the changelog, via opencode.jsonc provider config + org secrets.
2. Top up OpenRouter credits (HTTP 402 credit-exhausted) — restores 2 of 10 pool candidates immediately.
3. Restore OpenAI quota/budget for gpt-5.6-luna (quota-or-budget).

After any provider recovers: gh run rerun 30153577309 --failed — a fresh same-head APPROVED review will flip the commit status and auto-merge completes on its own. Per governance, no review-gate timing/config was touched and no bypass was attempted; deterministic evidence cannot approve (by design).

[seonghobae]

Merge-loop pass (2026-07-26T00:3xZ): rerun attempted — blocker unchanged, human action required

Adversarial re-review of head c4a9023: no defects (independent pass — trigger-type validity, dispatch-branch trust guard run_repo == dispatch_repo + event == repository_dispatch, citation-regex boundary lookaheads all verified against head source).

Action taken this pass: re-ran the failed required check per infra policy.

• Run 30153577309, latest attempt job 89737772698 → failure, OPENCODE_MODEL_POOL_OUTCOME: exhausted, MODEL_OUTPUT_UNAVAILABLE.
• Provider failure classes identical to prior attempt: authentication-or-permission (github-models candidates), quota-or-budget (openai/gpt-5.6-luna), credit-exhausted (openrouter/deepseek-v3.2, openrouter/qwen/qwen3-coder).
• Org-wide signal: 12/12 most recent opencode-review runs on main (through 2026-07-26T00:00Z) fail the same way — not PR-specific.

Blocker (human action): restore model-provider credentials/billing (GitHub Models token permissions, OpenAI quota, OpenRouter credits). No code change can fix this without weakening the required-check gate, which is out of bounds. Auto-merge (SQUASH) remains armed; the check will be re-run once any provider is restored.

[seonghobae]

Merge-loop status: blocked on provider billing (human action required)

Adversarial review of this PR's diff found no defects — the retarget trigger addition, active_review_run_refs() reordering, and citation-regex loosening are sound, and all peer checks pass on head c4a9023. Zero unresolved review threads. The only failing check is opencode-review, and it is not PR-caused:

• Run 30153577309 (attempt 17) ended OPENCODE_MODEL_POOL_OUTCOME=exhausted: all 10 pool candidates failed.
• GitHub Models (deepseek-v3-0324, gpt-4.1, gpt-5, gpt-5-chat, o3, deepseek-r1-0528, deepseek-r1): class=authentication-or-permission. Direct inference probe at 2026-07-26T01:41Z returns HTTP 403 "Unable to proceed with model usage. This account has locked billing." (catalog endpoint works; billing lock blocks inference).
• openai/gpt-5.6-luna: class=quota-or-budget.
• OpenRouter (deepseek-v3.2, qwen3-coder — pinned by fix(opencode-review): replace free OpenRouter pins with paid coder models #622): HTTP 402 credits exhausted.

Org-wide outage: last successful dispatched review was run 29993472635 (2026-07-23T09:00Z); every dispatched run since fails identically (e.g. 30182720474 at 2026-07-26T01:28Z). #619/#621/#622 merged during this window only via manual admin merge.

The deterministic model-unavailable fallback cannot approve (by design it only accepts an existing same-head real-model approval; none exists for c4a9023), so no in-repo change can unblock this without weakening governance.

Required human actions (any one restores the pool):

1. Unlock GitHub billing for the account backing GitHub Models inference (fixes 7/10 candidates), or
2. Top up OpenRouter credits (fixes 2/10), or
3. Restore OpenAI quota/budget for gpt-5.6-luna.

After that, re-run the failed opencode-review check on this head — approval + automerge should proceed with no further changes.

[seonghobae]

Merge-loop pass (2026-07-26T02:4xZ): rerun attempt 18 ? provider blocker unchanged, human action required

Adversarial re-review of head c4a9023: no defects (independent pass ? retarget trigger types valid for pull_request_target, active_review_run_refs() dispatch-before-name-filter reorder is spoof-guarded by run_repo == dispatch_repo, citation-regex widening keeps prefix/suffix/wrong-line rejections).

Check state: every required check passes on head c4a9023 except opencode-review.

Rerun evidence (run 30153577309, attempt 18, completed 2026-07-26T02:35:14Z):

• All github-models/* candidates: provider failure metadata: class=authentication-or-permission json-bytes=702
• openai/gpt-5.6-luna: class=quota-or-budget json-bytes=819
• openrouter/deepseek/deepseek-v3.2, openrouter/qwen/qwen3-coder: skipped ? provider credits exhausted (HTTP 402 / payment required)
• Outcome: OpenCode model pool reached the per-run provider attempt ceiling of 30 attempts ? exhausted

Identical to attempt 17 (2026-07-26T00:32Z). Not PR-caused; no code change can fix this without weakening the required check (forbidden).

Human action required: restore at least one provider ? GitHub Models token/permission (authentication-or-permission on every github-models candidate), OpenAI billing/quota, or OpenRouter credits ? then rerun opencode-review on head c4a9023. Auto-merge (squash) is already armed and will complete once the check approves.

[seonghobae]

Merge-loop diagnosis: provider billing outage blocks opencode-review (not PR-caused)

PR content status: adversarial review of this diff found no defects. All 165 targeted tests (test_required_workflow_queue_contract.py, test_adversarial_evidence.py, test_pr_review_merge_scheduler.py) pass on head c4a9023. No governance weakening: dispatch-title matching before the name filter is required because the dynamic run-name means the Actions API name never equals the workflow name for repository_dispatch runs; the run_repo == dispatch_repo constraint is a hardening.

Blocking check: opencode-review fails with MODEL_OUTPUT_UNAVAILABLE (model pool exhausted). This is an org-wide provider outage, not caused by this PR ? 98 of the last 100 opencode-review runs failed identically.

Evidence (run IDs / signatures):

• Run 30153577309 attempts 18 & 19 (2026-07-26T02:35Z, 03:47Z): pool exhausted, 0 same-head approval candidates.
• Run 30182884481 (job 89742519849) model-pool classes per candidate:
  • github-models/* (7 models): authentication-or-permission (401/403)
  • openai/gpt-5.6-luna: quota-or-budget
  • openrouter/deepseek-v3.2, openrouter/qwen3-coder: credit-exhausted (HTTP 402)
• Direct probe of https://models.github.ai/inference/chat/completions returns HTTP 403: "Unable to proceed with model usage. This account has locked billing."

Human actions required (any one restores the pool):

1. Unlock GitHub account billing (fixes all 7 github-models/* candidates ? STRIX_GITHUB_MODELS_TOKEN account has locked billing).
2. Top up OpenRouter credits (HTTP 402).
3. Restore OpenAI quota/budget.

Once any provider recovers, rerun opencode-review (run 30153577309) or push-free redispatch; auto-merge (squash) is already enabled and every other required check is green on the current head, so the PR merges without further changes. Per repo policy, no timing changes or deterministic-approval bypasses were made.

[seonghobae]

Merge-loop status: blocked on org-wide OpenCode provider outage (human action required)

Adversarial review of this PR's diff found no defects: the active_review_run_refs reorder matches live Actions API behavior (name mirrors dynamic run-name), trigger widening adds no governance bypass, and the evidence-regex relaxation still rejects path-prefix/suffix spoofs. The only failing check is opencode-review, and it is not PR-caused.

Evidence:

• Run 30153577309 attempts 19 and 20 (rerun at 2026-07-26 ~04:25 UTC) both end in MODEL_OUTPUT_UNAVAILABLE after full model-pool exhaustion.
• All 10 pool candidates fail fatally per cycle: 7x class=authentication-or-permission (json-bytes=701/702), openai/gpt-5.6-luna class=quota-or-budget, openrouter/deepseek-v3.2 and openrouter/qwen3-coder class=credit-exhausted (credits gone).
• Org-wide: the 30 most recent opencode-review runs in ContextualWisdomLab/.github ALL failed (incl. sibling repos disksage#18 run 30182884481, wardnet#48 run 30182866883, fast-mlsirm#194 run 30182845440). Last success: run 30177055806 at 2026-07-25T22:10Z.

Required human action:

1. Top up OpenRouter credits (credit-exhausted).
2. Check/rotate the GitHub Models / OpenAI provider credentials or quota (authentication-or-permission, quota-or-budget).
3. Then rerun: gh run rerun 30153577309 -R ContextualWisdomLab/.github --failed. Auto-merge is already enabled (squash), so the PR merges on approval.

Per fixed policy, no timing changes or fake fixes were applied; the deterministic fallback correctly refuses to approve without a real-model review.

[seonghobae]

Merge-loop status: blocked on review-model infrastructure (human action required)

Adversarial review of head c4a9023 found no PR-side defects: the Actions API .name == dynamic run-name premise was verified live (run 30153577309 returns the dispatch title as name), so the reordered dispatch-first filter in active_review_run_refs is the correct root-cause fix; the run_repo == dispatch_repo tightening and evidence-citation regex extension are test-covered and do not weaken governance. All review threads resolved; every required check except opencode-review passes; auto-merge (squash) already enabled.

opencode-review cannot approve because the entire model pool is down org-wide (persistent since >= 2026-07-24, zero real-model successes in the last ~600 runs):

Provider	Failure class (run 30153577309, attempt 21, job 89764873984)	Human action
github-models/* (all candidates)	authentication-or-permission (fails in ~5s)	Rotate / re-authorize GitHub Models token or app-installation models permission
openrouter/deepseek/deepseek-v3.2, openrouter/qwen/qwen3-coder	credit-exhausted (HTTP 402 payment required)	Top up OpenRouter credits
openai/gpt-5.6-luna	quota-or-budget	Raise OpenAI budget

Same signature in runs 30126343911 (07-24) and 30180357408 (07-25). Attempts 20 and 21 both ended OPENCODE_MODEL_POOL_OUTCOME=exhausted -> MODEL_OUTPUT_UNAVAILABLE; the deterministic-evidence fallback is correctly ineligible (CENTRAL_REVIEW_PROCESS_FALLBACK_ELIGIBLE=false) and there is no reusable same-head real-model approval (same-head candidates=0).

Recovery: fix any one provider above, then re-run the failed opencode-review check (gh run rerun 30153577309 --failed). No PR changes are needed; per governance, no timing changes, no check weakening, no bypass.

[seonghobae]

Merge-loop status: blocked by provider billing (human action required)

Adversarial review of head c4a90235 — no defects found.

• active_review_run_refs reorder is the correct root-cause fix: central repository_dispatch runs carry dynamic run-names (Required OpenCode Review owner/repo#N@<sha>), so the previous name-first filter dropped them before dispatch classification. New order still fail-closes: dispatch match requires run_repo == dispatch_repo + exact title prefix + full-SHA suffix; spoofed dynamic names in target repos are ignored (covered by new tests 9500/9501/9502).
• pull_request_target types add edited/auto_merge_disabled (retarget + auto-merge transitions) and correctly exclude invalid enqueued/dequeued. No governance weakening.
• Citation regex "line N of/in path" enforces prefix/suffix boundaries (prefix.github/... and ...yml.backup rejected; tests included).
• Local verification at head: tests/test_adversarial_evidence.py + tests/test_required_workflow_queue_contract.py = 58 passed; tests/test_pr_review_merge_scheduler.py = 107 passed.

Blocker (infra, not PR-caused): opencode-review fails org-wide since 2026-07-23 09:00 UTC with MODEL_OUTPUT_UNAVAILABLE — the whole model pool is unfunded:

• github-models: class=authentication-or-permission — direct probe of POST https://models.github.ai/inference/chat/completions returns 403 "This account has locked billing." (catalog reads work; all pinned models exist)
• openrouter: class=credit-exhausted (HTTP 402) for deepseek/deepseek-v3.2, qwen/qwen3-coder
• openai (gpt-5.6-luna): class=quota-or-budget

Evidence runs: this PR run 30153577309 (RUN_ATTEMPT 21, pool ceiling 30 attempts exhausted), same signature in 30192951569, 30192938416, 30192909424, 30192886816 (other repos, same hour).

Human action needed: unlock GitHub billing for the account backing STRIX_GITHUB_MODELS_TOKEN (or rotate to a funded token), and/or add OpenRouter credits / OpenAI quota. No code change in this PR can fix it; per repo policy the failure is rerun-only. Auto-merge (squash) is already armed; every other current-head check is green, so the PR merges automatically once a funded provider lets OpenCode approve.

[seonghobae]

Merge-loop pass (2026-07-26T10:0xZ): fresh rerun reconfirms provider billing blocker — human action still required

Adversarial re-review of head c4a90235: no defects (trigger-type widening is valid pull_request_target activity with per-PR concurrency dedupe; active_review_run_refs dispatch-first classification is spoof-guarded by run_repo == dispatch_repo + GIT_SHA_RE; citation-regex widening still requires exact path+line, prefix-spoof rejected). All other required checks green on this head (pull_request_target run 30136377154, incl. coverage-evidence).

Only failing check: opencode-review commit status from repository_dispatch run 30196418659.

• Attempt 1 (2026-07-26T09:25Z) and rerun (09:56–10:02Z) both ended MODEL_OUTPUT_UNAVAILABLE: pool exhausted at the 30-attempt ceiling with zero successful control blocks.
• Failure classes this rerun: github-models/* = authentication-or-permission (billing-locked 403), openai/gpt-5.6-luna = quota-or-budget, openrouter/* = credit-exhausted.
• Org-wide: every opencode-review dispatch run since ~09:30Z fails identically across all CWL repos (e.g. 30197072325 saju-caldav#7, 30196803994 naruon#1081, 30196596545 pg-erd-cloud#596).

Classification: infrastructure (provider funding), not PR-caused. Reruns are futile until billing is restored.

Human action required: restore GitHub Models paid-tier billing (account locked) or top up OpenRouter credits / OpenAI quota. Once any provider is funded, rerun run 30196418659 (or push-free re-dispatch); no PR changes are needed.

[seonghobae]

Merge-loop status: human-action blocker — model-provider pool exhausted >24h

PR is sound; infrastructure is not. Adversarial review of this PR's diff passed (no PR-caused defects). The only merge blocker is the missing current-head OpenCode APPROVED review, and every review attempt fails because all model providers are exhausted.

Evidence

• Failure signature (every attempt): ##[error]MODEL_OUTPUT_UNAVAILABLE: OpenCode did not change the pull request review state.
• Provider failure classes on the latest attempt (run 30251174462 attempt 21, 2026-07-27 14:16-14:18 UTC): class=quota-or-budget and class=authentication-or-permission across the whole pool.
• Run 30196418659: consumed all 50 rerun attempts (GitHub hard cap; now startup_failure) - all failed with the same signature.
• Run 30251174462 (fresh dispatch via merge scheduler at 08:46 UTC 2026-07-27): 21 attempts, 08:46-14:19 UTC - all failed with the same signature.
• Last successful OpenCode model output anywhere in this repo: 2026-07-26 14:11 UTC. Continuous exhaustion since then (>24h, ~68 model-pool attempts).
• 00:00 UTC and ~07:00 UTC (US-Pacific midnight) quota-reset hypotheses both disproven by dense retry sampling across those windows.

Human actions needed (any one may unblock)

1. Replenish OpenRouter credits (provider returns HTTP 402 credit-exhausted -> quota-or-budget).
2. Wait for / raise the GitHub Models daily quota (403 daily-cap -> quota-or-budget).
3. Check provider API keys: the persistent authentication-or-permission class on most pool entries suggests expired/revoked keys or missing permissions, which no quota reset will fix.

Recovery recipe (once providers are funded)

• Cheapest: gh run rerun 30251174462 --repo ContextualWisdomLab/.github --failed (29 attempts left on this run).
• Or dispatch a fresh review via the scheduler: gh api repos/ContextualWisdomLab/.github/dispatches --input payload.json with payload {"event_type":"merge-scheduler","client_payload":{"pr_number":"618","trigger_reviews":true}} (note: trigger_reviews must be explicit - absent defaults to false and the scheduler will block instead of dispatching).
• On review success the workflow runs the merge scheduler and this PR should auto-merge; no other checks are failing on head c4a9023.

Governance intact throughout: no required-check weakening, no bypass, no reviewer-timing changes; deterministic evidence was never used to approve.

[seonghobae]

Merge-loop status: blocked by model-provider billing (human action required)

Adversarial review of this PR's diff: PASSED — no defects found in the retarget trigger changes, active_review_run_refs dispatch-title matching, or the citation-regex broadening. All required checks pass except the opencode-review commit status.

Why opencode-review fails (deterministic, not PR-caused)

Every model provider in the review pool is failing for billing reasons:

Provider	Error	Evidence
GitHub Models (models.github.ai)	HTTP 403 — "Unable to proceed with model usage. This account has locked billing."	Verified by direct API call; matches class=authentication-or-permission in run logs
OpenAI direct (gpt-5.6-luna)	429 insufficient_quota	Strix run 30266043710 log, 12:33:25Z
OpenRouter (deepseek-v3.2, qwen3-coder)	HTTP 402 payment required / credits exhausted	Run 30251174462 attempt 22, 14:35Z

Run evidence

• Run 30251174462 (repository_dispatch review of Handle stacked PR retarget and merge-queue trigger gaps #618c4a9023), attempts 21 & 22: MODEL_OUTPUT_UNAVAILABLE — all 10 pool candidates fail (authentication-or-permission / quota-or-budget / credit-exhausted).
• 0 of 246 repository_dispatch opencode-review runs have ever succeeded since the dispatch path went live 2026-07-26T11:05Z. Same signature on build(deps): bump regex from 2026.5.9 to 2026.7.19 #630 (run 30271133478) and fix(deps): protobuf를 aiplatform 호환 범위로 유지 #549 (run 30266127077).
• Strix runs "pass" only because LLM-unavailable is treated as neutral there; OpenCode review correctly fails closed per governance.

Required human action (any one unblocks all PRs)

1. Resolve the GitHub billing lock on the account that owns GitHub Models usage (settle balance / update payment method) — restores all github-models/* candidates, or
2. Top up OpenRouter credits, or
3. Restore OpenAI quota.

After that, rerun the failed dispatch run (gh run rerun 30251174462 --failed) or let the scheduler re-dispatch; once a real-model APPROVED review lands at head c4a9023, this PR merges automatically. No workflow/code change is appropriate — weakening the fail-closed review gate is prohibited by governance.

[seonghobae]

Merge-loop pass 2026-07-27T15:5xZ: re-dispatched fresh review; provider-pool billing blocker persists

Adversarial review of head c4a9023: PASSED again (trigger widening valid, enqueued/dequeued correctly excluded; dispatch-title matching guarded by run_repo == dispatch_repo + event + full-SHA regex; citation regex still exact path+line). No PR-caused defects. All other required checks green on this head.

Fresh evidence (this pass)

• Dispatched targeted scheduler run 30280954323 -> decision review_dispatch: current head has completed Strix evidence; same-head OpenCode dispatched.
• Fresh review run 30280977052 (15:38-15:50 UTC, head c4a9023): coverage-evidence PASS, then model pool exhausted:
  • class=quota-or-budget (openai/gpt-5.6-luna fatal provider error)
  • class=authentication-or-permission (repeated 403s across pool)
  • OpenRouter deepseek-v3.2 / qwen3-coder: HTTP 402 payment required
  • Final: MODEL_OUTPUT_UNAVAILABLE: OpenCode model pool exhausted before producing a valid control conclusion.
• Org-wide: every opencode-review run 15:15-15:50 UTC failed identically (30279126712 ... 30280316080). Zero provider recovery.

Why no code path can unblock this

• Deterministic model-unavailable fallback only re-validates an existing same-head real-model APPROVED review (none exists for c4a9023).
• central fast approval still requires opencode_review_model_pool.outputs.review_status == success - a real model verdict is mandatory by design. Correctly so; no governance weakening attempted.

Human action required

Restore billing/credits for the review model providers (GitHub Models 403 billing lock, OpenRouter 402 credits). Once any provider is live, re-dispatch with:
gh api repos/ContextualWisdomLab/.github/dispatches -f event_type=merge-scheduler -F client_payload[pr_number]=618 -F client_payload[trigger_reviews]=true