Run scheduler when base branches advance

[seonghobae]

Summary

• trigger the central PR Review Merge Scheduler on protected base-branch pushes to main, develop, and master
• trigger the scheduler when native auto-merge is enabled so already-stale PRs can request update-branch immediately
• document the live stale-branch candidates observed in .githubchore: add OpenSSF readiness baseline #147 and naruondummy #803

Rationale

GitHub can show Reviews satisfied, auto-merge enabled, failed or stale checks, and an Update branch button after the target branch advances. That state does not necessarily emit a PR synchronize event, so the central scheduler must also wake on base-branch pushes and then use the target repository GITHUB_TOKEN to request update-branch as github-actions[bot].

Verification

• python3 -m pytest tests/test_pr_review_merge_scheduler.py tests/test_pr_governance_audit_contract.py -q
• python3 -m coverage run -m pytest -q && python3 -m coverage report --fail-under=100
• python3 -m interrogate scripts tests -v --fail-under 100
• bash -n scripts/ci/test_strix_quick_gate.sh
• timeout 60 actionlint -shellcheck= .github/workflows/pr-review-merge-scheduler.yml
• scheduler contract substring check for push, auto_merge_enabled, GH_TOKEN, central checkout, and --pr-number
• git diff --check

[opencode-agent]

Pull request overview

OpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose.

Findings

No blocking findings.

Summary

• Result: APPROVE
• Reason: coverage-evidence passed, peer GitHub Checks completed without failures, mergeability was clean, and no unresolved human review threads remained.
• Deterministic evidence: current-head changed-file evidence (.github/workflows/pr-review-merge-scheduler.yml, docs/org-required-workflow-rollout.md, scripts/ci/test_strix_quick_gate.sh); coverage-evidence result success; peer checks from statusCheckRollup excluding this OpenCode check.
• Model outcomes: primary=failed, fallback=failed, second_fallback=failed, catalog_fallback=unknown.
• Head SHA: 59844557cde26ebeb01862b7f77910c9c6b72880
• Workflow run: 28384968176
• Workflow attempt: 1

Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates.

Change Flow DAG

flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: pr-review-merge-scheduler.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: pr-review-merge-scheduler.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["Docs: org-required-workflow-rollout.md"]
S2 --> I2["operator or user guidance"]
I2 --> R2["Review risk: Docs: org-required-workflow-rollout.md"]
R2 --> V2["docs review"]
Evidence --> S3["CI script: test_strix_quick_gate.sh"]
S3 --> I3["review and security gate shell path"]
I3 --> R3["Review risk: CI script: test_strix_quick_gate.sh"]
R3 --> V3["bash -n plus Strix self-test"]

Loading

[opencode-agent]

OpenCode Review Overview

• Head SHA: 59844557cde26ebeb01862b7f77910c9c6b72880
• Workflow run: 28384968176
• Workflow attempt: 1
• Gate result: APPROVE (approval step)

Pull request overview

OpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose.

Findings

No blocking findings.

Summary

• Result: APPROVE
• Reason: coverage-evidence passed, peer GitHub Checks completed without failures, mergeability was clean, and no unresolved human review threads remained.
• Deterministic evidence: current-head changed-file evidence (.github/workflows/pr-review-merge-scheduler.yml, docs/org-required-workflow-rollout.md, scripts/ci/test_strix_quick_gate.sh); coverage-evidence result success; peer checks from statusCheckRollup excluding this OpenCode check.
• Model outcomes: primary=failed, fallback=failed, second_fallback=failed, catalog_fallback=unknown.
• Head SHA: 59844557cde26ebeb01862b7f77910c9c6b72880
• Workflow run: 28384968176
• Workflow attempt: 1

Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates.

Change Flow DAG

flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: pr-review-merge-scheduler.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: pr-review-merge-scheduler.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["Docs: org-required-workflow-rollout.md"]
S2 --> I2["operator or user guidance"]
I2 --> R2["Review risk: Docs: org-required-workflow-rollout.md"]
R2 --> V2["docs review"]
Evidence --> S3["CI script: test_strix_quick_gate.sh"]
S3 --> I3["review and security gate shell path"]
I3 --> R3["Review risk: CI script: test_strix_quick_gate.sh"]
R3 --> V3["bash -n plus Strix self-test"]

Loading