Merge branch 'main' into codex/fix-vulnerability-in-guardrail-configuration

Author: JSONbored

.env.example

@@ -394,6 +394,7 @@ REDIS_URL=redis://redis:6379                # REQUIRED for the self-host review
 # RUNNER_SCOPE=repo                          # repo | org | enterprise
 # RUNNER_NAME=gittensory-runner
 # RUNNER_LABELS=self-hosted,linux
+# RUNNER_MEM_LIMIT=2g                        # per-runner-container memory ceiling; raise for memory-heavy CI jobs
 
 # --- Docker disk hygiene (#audit-rate-headroom / #selfhost-runtime-pressure) ---
 # Build cache and unused images accumulate fast on a box that builds from source or runs CI runners; a root

.gitignore

@@ -16,6 +16,9 @@ output/
 docker-compose.override.yml
 !docker-compose.override.yml.example
 *.local
+# Alertmanager receiver webhook files used by self-host local configs.
+alertmanager/*_url
+alertmanager/*_url_file
 # Private self-host operator config. Root AGENTS.md/CLAUDE.md are public project docs;
 # repo-scoped review instructions live under this ignored mount.
 gittensory-config/

.gittensory.yml

@@ -37,7 +37,7 @@ gate:
   duplicates: block            # block | advisory | off — block obvious duplicate PRs
   readiness:
     mode: advisory             # advisory | off — readiness score is informational and never blocks the Gate
-    minScore: 60
+    minScore: 40               # lowered from 60: 73% false-positive rate showed PRs scoring 40-59 merge freely
   # aiReview:                  # opt-in AI maintainer review (off by default; needs the AI flags enabled)
   #   mode: advisory           # block | advisory | off — block only blocks on a dual-model consensus defect
   #   byok: false              # use a maintainer Anthropic/OpenAI key for the write-up; consensus stays on the free/default reviewer
@@ -55,6 +55,37 @@ gate:
 #     relatedWork: false                                # linkedIssue | relatedWork | reviewLoad (Change scope) |
 #     openPrQueue: false                                # validationEvidence (Validation posture) | openPrQueue (Contributor workload) | contributorContext | gateResult
 
+# Linked-issue label propagation (#priority-linked-issue-gate, #priority-linked-issue-gate-ownership): a PR
+# that closes/fixes/resolves an issue inherits that issue's point-bearing gittensor:* label onto the PR
+# itself, instead of the PR's own label being decided purely by its commit-title prefix. bug/feature are
+# `trustMaintainerAuthoredIssue: true` (routine categorization, no reward at stake, and the title-based
+# fallback already has zero equivalent verification) so they propagate even when the PR author isn't a
+# formal GitHub assignee of the issue — our issues are almost always maintainer-authored for open pickup and
+# rarely formally assigned. priority intentionally omits the flag: it is the scarce, maintainer-hand-picked
+# reward label, and must still require the PR author to be the issue's actual author/assignee.
+#
+# Review-evasion protection: closing or converting-to-draft your OWN PR while gittensory has an active
+# review pass running, a prior recorded gate failure, or a repeated ready<->draft cycle on this PR, is
+# treated as dodging the one-shot review rather than an ordinary action (layered OVER the dashboard's
+# own default of "off").
+settings:
+  linkedIssueLabelPropagation:
+    enabled: true
+    mode: exclusive_type_label
+    mappings:
+      - issueLabel: "gittensor:bug"
+        prLabel: "gittensor:bug"
+        removeOtherTypeLabels: true
+        trustMaintainerAuthoredIssue: true
+      - issueLabel: "gittensor:feature"
+        prLabel: "gittensor:feature"
+        removeOtherTypeLabels: true
+        trustMaintainerAuthoredIssue: true
+      - issueLabel: "gittensor:priority"
+        prLabel: "gittensor:priority"
+        removeOtherTypeLabels: true
+  reviewEvasionProtection: close
+
 # Repo-doc generation roadmap (#2993/#3002) — opt-in only, off by default. Uncomment to let Gittensory open a
 # PR generating AGENTS.md/CLAUDE.md from this repo's own profile.
 # repoDocGeneration:

.gittensory.yml.example

@@ -342,6 +342,13 @@ gate:
 # Review output controls. These tune review output without changing the
 # deterministic gate policy above. Omit the block to keep the byte-identical
 # defaults.
+#
+# SELF-HOST ONLY (`review.shared_config`, #2046): when `GITTENSORY_REPO_CONFIG_DIR` is mounted,
+# place a shared review base at `${GITTENSORY_REPO_CONFIG_DIR}/_shared/.gittensory.yml` (see
+# `config/examples/shared.gittensory.yml`). Per-repo `review:` keys overlay it field-by-field —
+# repo value wins when set, shared fills gaps, defaults stay byte-identical. Absent shared base is
+# the common case and changes nothing. A malformed shared base warns and is ignored (never blocks a
+# review). The loader records provenance at runtime in `review.sharedConfigSource` (not a YAML key).
 review:
   # Deterministic AI review eligibility filters (`review.auto_review`, #1954 / #2038–#2065). Each knob quietly
   # skips the advisory AI review for matching PRs — never a gate failure. When the Orb review check is enabled,

apps/gittensory-ui/public/openapi.json

@@ -8760,6 +8760,9 @@
                     },
                     "removeOtherTypeLabels": {
                       "type": "boolean"
+                    },
+                    "trustMaintainerAuthoredIssue": {
+                      "type": "boolean"
                     }
                   },
                   "required": [
@@ -9085,13 +9088,15 @@
             "type": "integer",
             "nullable": true,
             "minimum": 0,
-            "exclusiveMinimum": true
+            "exclusiveMinimum": true,
+            "maximum": 100
           },
           "contributorOpenIssueCap": {
             "type": "integer",
             "nullable": true,
             "minimum": 0,
-            "exclusiveMinimum": true
+            "exclusiveMinimum": true,
+            "maximum": 100
           },
           "contributorCapLabel": {
             "type": "string",

apps/gittensory-ui/src/routes/docs.tuning.tsx

@@ -157,9 +157,11 @@ function Tuning() {
           <code>GITTENSORY_REVIEW_MEMORY</code> — repeat-false-positive suppression: matches an
           advisory (non-blocking) AI finding against this repo's stored suppression signals (a
           maintainer's own past false-positive dismissals) and demotes or drops it before the
-          unified comment renders. Advisory-only by construction — never applied to gate blockers,
-          so it can never change the merge/close disposition. Also requires the per-repo{" "}
-          <code>review.memory: true</code> opt-in in <code>.gittensory.yml</code>. Per-PR.
+          unified comment renders. A maintainer records a signal with{" "}
+          <code>@gittensory resolve [finding-code]</code> (or a whole-PR{" "}
+          <code>@gittensory resolve</code> ack). Advisory-only by construction — never applied to
+          gate blockers, so it can never change the merge/close disposition. Also requires the
+          per-repo <code>review.memory: true</code> opt-in in <code>.gittensory.yml</code>. Per-PR.
         </li>
         <li>
           <code>GITTENSORY_REVIEW_REPUTATION</code> — submitter-reputation spend control. A new,

config/examples/README.md

@@ -162,7 +162,9 @@ folded across one more layer; it is not a new merge algorithm.
 behavior is byte-identical to the pre-#1959 2-layer chain. A malformed or unreadable shared file
 fails safe exactly like a malformed per-repo or global file always has: it is dropped from the
 merge and the remaining, still-valid layers combine as if it were never mounted — a broken shared
-base never blocks a review.
+base never blocks a review. When a shared `review:` block contributes, the parsed manifest carries
+`review.sharedConfigSource` (runtime provenance only, #2046) with the relative path of the shared
+file that supplied the base layer.
 
 ### Example 4 — shared base + global default + a per-repo override, all three present
 

docker-compose.yml

@@ -809,6 +809,15 @@ services:
       # /var/run/docker.sock grants container-escape risk and is intentionally omitted.
     volumes:
       - runner-work:/tmp/runner
+    # A memory ceiling so a single runaway CI job can't exhaust host RAM and take down the app alongside
+    # it (#3893) -- same universal-default treatment every other service in this file already has. This
+    # is independent of the CPU-priority tuning above: that's host-specific (vCPU count, replica count)
+    # and stays an opt-in docker-compose.override.yml pattern, but a memory cap needs no host-specific
+    # sizing to be a safe default.
+    deploy:
+      resources:
+        limits:
+          memory: "${RUNNER_MEM_LIMIT:-2g}"
 
   # ── Backups (--profile backup) ────────────────────────────────────────────
   # Active database backup (Postgres pg_dump or WAL-safe SQLite online backup) + a Qdrant snapshot, on a loop

grafana/dashboards/gittensory.json

@@ -3059,6 +3059,41 @@
           "legendFormat": "skew"
         }
       ]
+    },
+    {
+      "datasource": { "type": "prometheus", "uid": "${DS_PROMETHEUS}" },
+      "fieldConfig": {
+        "defaults": {
+          "color": { "mode": "thresholds" },
+          "thresholds": {
+            "mode": "absolute",
+            "steps": [
+              { "color": "green", "value": null },
+              { "color": "yellow", "value": 1 }
+            ]
+          },
+          "unit": "short"
+        }
+      },
+      "gridPos": { "h": 4, "w": 4, "x": 0, "y": 209 },
+      "id": 161,
+      "options": {
+        "colorMode": "background",
+        "graphMode": "none",
+        "justifyMode": "auto",
+        "orientation": "auto",
+        "reduceOptions": { "calcs": ["lastNotNull"], "fields": "", "values": false },
+        "textMode": "auto"
+      },
+      "title": "Review-Floor Bypass Attempts (total, #3901)",
+      "type": "stat",
+      "targets": [
+        {
+          "datasource": { "type": "prometheus", "uid": "${DS_PROMETHEUS}" },
+          "expr": "gittensory_ai_review_onmerge_clamped_total or vector(0)",
+          "legendFormat": "clamped"
+        }
+      ]
     }
   ],
   "refresh": "30s",

migrations/0118_pull_request_draft_conversion_count.sql

@@ -0,0 +1,5 @@
+-- Review-evasion: repeated ready<->draft cycling (#gaming-tactic-draft-cycle). A contributor converting their
+-- OWN PR to draft more than once is using draft state as a repeated shield to harvest AI-review/CI feedback
+-- for free while dodging the one-shot disposition. Counts every converted_to_draft webhook ever processed for
+-- this PR NUMBER (not scoped to head SHA -- a new commit between draft cycles is still the same evasion shape).
+ALTER TABLE pull_requests ADD COLUMN draft_conversion_count INTEGER NOT NULL DEFAULT 0;