fix(ci): allow unsafe pr checkout for ai-review workflow

Co-authored-by: claw-io <273482092+claw-io@users.noreply.github.com>

Author: b3nw

.fork/features/ci.md

@@ -69,3 +69,15 @@ Notes:
 - Adds fallback between Secrets and Variables for `LLM_PROXY_URL`, `LLM_PROXY_API_KEY`,
   and `LLM_PROXY_MODEL`.
 - Uses sensible fallback model `codex/gpt-5.6-sol` if `LLM_PROXY_MODEL` is empty.
+
+## 2026-09-05 — Allow unsafe PR checkout in AI PR Review workflow
+
+Branch: `fix/ci-ai-review-checkout`
+Files:
+- `.github/workflows/ai-review.yml`
+
+Notes:
+- Sets `allow-unsafe-pr-checkout: true` on `actions/checkout@v4` in `ai-review.yml`.
+  GitHub's `actions/checkout` requires this explicit opt-in when checking out
+  fork PR refs under `pull_request_target`.
+

.fork/stack.yml

@@ -56,6 +56,7 @@ rules:
       - "feat(ci): fork-aware release notes with incremental topic diff"
       - "fix(ci): add AI PR review workflow"
       - "fix(ci): support fork PRs via pull_request_target in ai-review workflow"
+      - "fix(ci): allow unsafe pr checkout for ai-review workflow"
     tooling:
       - "feat(tooling): add AGENTS.md and .agent/ config for linear stack workflow"
       - "fix(tooling): scope fork-stack gate to canonical branch and tolerate transient commits"

.github/workflows/ai-review.yml

@@ -45,6 +45,7 @@ jobs:
           # Fetch full history so git diff operates correctly
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
+          allow-unsafe-pr-checkout: true
 
       - name: Run AI Review
         uses: Nikita-Filonov/ai-review@v0.69.0