Allow OpenCode deterministic fallback with app-token-limited checks

[seonghobae]

This updates the central OpenCode required workflow so deterministic fallback approval handles target-repo app tokens that cannot read statusCheckRollup. Branch protection remains authoritative for target checks, while the workflow still requires coverage evidence, mergeability, and human-thread checks.

[opencode-agent]

Pull request overview

OpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose.

Findings

No blocking findings.

Summary

• Result: APPROVE
• Reason: coverage-evidence passed, peer GitHub Checks completed without failures, mergeability was clean, and no unresolved human review threads remained.
• Deterministic evidence: current-head changed-file evidence (.github/workflows/opencode-review.yml, scripts/ci/test_strix_quick_gate.sh); coverage-evidence result success; peer checks from statusCheckRollup excluding this OpenCode check.
• Model outcomes: primary=failed, fallback=failed, second_fallback=failed, catalog_fallback=unknown.
• Head SHA: 06b3f8bef1f5ca0039c53a23f59e8108321cd492
• Workflow run: 28408353533
• Workflow attempt: 1

Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates.

Change Flow DAG

flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: opencode-review.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: opencode-review.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["CI script: test_strix_quick_gate.sh"]
S2 --> I2["review and security gate shell path"]
I2 --> R2["Review risk: CI script: test_strix_quick_gate.sh"]
R2 --> V2["bash -n plus Strix self-test"]

Loading

[opencode-agent]

OpenCode Review Overview

• Head SHA: 06b3f8bef1f5ca0039c53a23f59e8108321cd492
• Workflow run: 28408353533
• Workflow attempt: 1
• Gate result: APPROVE (approval step)

Pull request overview

OpenCode model attempts did not emit a usable current-head control block, so the approval gate used deterministic current-head evidence instead of model prose.

Findings

No blocking findings.

Summary

• Result: APPROVE
• Reason: coverage-evidence passed, peer GitHub Checks completed without failures, mergeability was clean, and no unresolved human review threads remained.
• Deterministic evidence: current-head changed-file evidence (.github/workflows/opencode-review.yml, scripts/ci/test_strix_quick_gate.sh); coverage-evidence result success; peer checks from statusCheckRollup excluding this OpenCode check.
• Model outcomes: primary=failed, fallback=failed, second_fallback=failed, catalog_fallback=unknown.
• Head SHA: 06b3f8bef1f5ca0039c53a23f59e8108321cd492
• Workflow run: 28408353533
• Workflow attempt: 1

Deterministic fallback approval was used only after model-output instability and did not bypass coverage, failed-check, mergeability, or human-review gates.

Change Flow DAG

flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: opencode-review.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: opencode-review.yml"]
R1 --> V1["actionlint plus required checks"]
Evidence --> S2["CI script: test_strix_quick_gate.sh"]
S2 --> I2["review and security gate shell path"]
I2 --> R2["Review risk: CI script: test_strix_quick_gate.sh"]
R2 --> V2["bash -n plus Strix self-test"]

Loading