ci: introduce GPT-5.6 Review Fabric standard v1

[safal207]

Summary

Creates the canonical reusable CI standard for role-separated GPT-5.6 review requests.

Combined principles

• Robis: five disclosed roles, visible dissent, no fabricated multi-provider identity.
• CML: exact-head checkout, no path filters, immutable pins, minimal permissions, deterministic evidence manifests, mutation-tested workflow policy.
• Pythia: target-bound decisions, freshness, stale evidence rejection, and separation between judgment and execution.
• LiminalQA: explicit fact / observation / hypothesis taxonomy and integrity-not-truth boundary.
• LiminalDB: fail-closed behavior, reproducible diagnostics, and recovery-oriented reliability questions.

Implementation

• reusable workflow .github/workflows/gpt56-review-fabric-v1.yml;
• fixed five-role registry;
• strict repository profile schema;
• deterministic exact-head request builder;
• SHA-256 evidence manifest;
• mutation tests for stale head, role downgrade, authority escalation, and unpinned callers;
• documentation of the trust and authority boundaries.

Security boundary

The workflow is read-only. It does not call a model API, inherit secrets, execute approval, publish review comments, deploy, or merge. GPT-5.6 output remains advisory and cannot authorize an action or turn executable CI green.

Exact standard SHA

3fb6bbc91c288f169a49516efa514b9595544d18

Caller repositories must pin the reusable workflow to this full SHA.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b337ffaf-d99c-4064-b814-a8a41ad31d84

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/gpt56-review-fabric-v1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[safal207]

Exact-head implementation evidence

• Standard head: 3fb6bbc91c288f169a49516efa514b9595544d18
• Existing Pythia CI run: 29813351019 — success
• Existing Security run: 29813351035 — success
• Local contract verification before push: 4/4 mutation tests passed; Python compiled; workflow YAML parsed.
• Cross-repository validation: the pinned reusable workflow completed successfully in all seven initial caller repositories.

The standard remains advisory-only: no model API secret, comment publishing, approval, deployment, execution, or merge authority.