From a2038d277157fbf080c44d08076f1273d9a838ea Mon Sep 17 00:00:00 2001 From: Mike Mendoza Date: Tue, 6 Oct 2026 00:38:59 +0800 Subject: [PATCH] ci: switch the Vetted pilot to opt-in (V1, merge on or after 2026-10-14) Shadow mode ran for the first two weeks, as the brief requires. From 2026-10-14 Vetted comments on pull requests labelled ai-review and keeps an audit record for every pull request. Closes makoydev/vetted#42 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/vetted.yml | 7 ++++--- CHANGELOG.md | 4 ++++ 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.github/workflows/vetted.yml b/.github/workflows/vetted.yml index 12413f0..f895c28 100644 --- a/.github/workflows/vetted.yml +++ b/.github/workflows/vetted.yml @@ -1,8 +1,9 @@ name: Vetted # Vetted (https://github.com/makoydev/vetted) reviews every pull request in -# this repository: shadow mode (audit record only, no comments) for the -# first two weeks, until 2026-10-14, then opt-in with the `ai-review` label. +# this repository. It ran in shadow mode (audit record only, no comments) +# for the first two weeks; from 2026-10-14 it is opt-in: it comments on pull +# requests labelled `ai-review` and keeps an audit record for every one. # Pinned to the exact commit of the v0.1.0 release. on: pull_request: @@ -21,5 +22,5 @@ jobs: - name: Vetted AI Code Review uses: makoydev/vetted@2ae958e0fbf14fb9c74c2423059a49762927a192 # v0.1.0 with: - mode: shadow + mode: opt-in openai-api-key: ${{ secrets.OPENAI_API_KEY }} diff --git a/CHANGELOG.md b/CHANGELOG.md index 04c2b11..3750bdd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,10 @@ All notable changes to this project are documented here. The format follows [Kee ## [Unreleased] +### Changed + +- Vetted pilot switched from shadow mode to opt-in on 2026-10-14, after the two-week shadow period (issue V1): pull requests labelled `ai-review` now get Vetted's comments. + ## [0.1.0] - 2026-10-06 First release: Discreet, a privacy gateway that replaces Singapore personal data with placeholders before a request reaches an AI model and restores it in the answer, refuses automated eligibility decisions, and keeps a tamper-evident audit log. Reviewed and approved by Michael Mendoza on 2026-10-06.