l0ng-aiandl0ng-ai 51ea055d2a ci: anchor fork review findings to lines, and fence the reads (#397) ...

Two changes to the same job.

Findings now go inline. The action ships an inline-comment MCP tool
that buffers rather than posts: the queue is sent after the session
ends, by the action's own code, past a classifier. That keeps the
property review.md was chosen for -- the reviewer writes the words, a
step that cannot be argued with performs the act -- while putting a
finding next to the line it is about. review.md stays for the summary,
which belongs to the change as a whole.

Reads are fenced. A comment body is posted verbatim, so any file the
reviewer can read it can publish, and the token is in this process's
environment; /proc is the short path between the two. Reads are already
confined to the working directory in the default permission mode, but
this job should not rest on a default. Deny is evaluated before allow,
so the rules hold whatever --allowedTools says.

Co-authored-by: l0ng-ai <24760907+l0ng-ai@users.noreply.github.com>

2026-08-07 23:13:12 +08:00

..

ISSUE_TEMPLATE

tty7: a GPU-rendered, daemon-backed terminal in pure Rust

2026-07-06 21:54:27 +08:00

scripts

fix(bundle): declare macOS TCC privacy keys for child processes (#323)

2026-08-07 11:15:22 +08:00

workflows

ci: anchor fork review findings to lines, and fence the reads (#397)

2026-08-07 23:13:12 +08:00

dependabot.yml

tty7: a GPU-rendered, daemon-backed terminal in pure Rust

2026-07-06 21:54:27 +08:00