fix(strix): include app auth in backend PR scope

[seonghobae]

Summary

• include backend/app/__init__.py and backend/app/auth.py as trusted context for backend Python PR scans
• verify app-package auth is materialized from the trusted base tree

Validation

• bash scripts/ci/test_strix_quick_gate.sh
• bash -n scripts/ci/strix_quick_gate.sh scripts/ci/test_strix_quick_gate.sh
• git diff --check

This fixes the partial-scope false positive observed on LineageWeave PR #387 without changing product code or weakening Strix findings.

---

[coderabbitai]

Warning

Review limit reached

@seonghobae, you've reached your PR review limit, so we couldn't start this review.

Next review available in:38 minutes

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

Wait for the limit to reset, then comment @coderabbitai review or push new commits to the PR.

An organization admin can change what happens after included review limits in Billing.

How do review limits work?

CodeRabbit enforces per-developer PR review limits within each organization.

For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 573ab75f-a05e-4dba-9c9b-1a19d83879c6

📥 Commits

Reviewing files that changed from the base of the PR and between 23a776e and 3f78370.

📒 Files selected for processing (2)

• scripts/ci/strix_quick_gate.sh
• scripts/ci/test_strix_quick_gate.sh

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

Devin Review found 1 potential issue.

[seonghobae]

@opencode-agent Review exact current head 3f78370f3ad01409c7b2fcfb63dfb66862098fa6. Verify that backend Python PR scopes include trusted-base backend/app/auth.py context and that the regression test exercises materialization without trusting PR-head dependency content. Publish an independent exact-head verdict; do not reuse predecessor evidence or bypass protection.