chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-81-gate-followups.yml: Gate followups hub - consolidates keepalive and autofix followups
• agents-keepalive-sweep.yml: Keepalive sweep - periodic level-based resync; dispatches the loop for open agent PRs so silent zero-commit stalls resurface
• agents-71-codex-belt-dispatcher.yml: Codex belt dispatcher - selects issues and creates agent branches for work
• agents-issue-optimizer.yml: Issue optimizer - LangChain-based issue formatting and optimization (Phase 1)
• agents-issue-format-guard.yml: Issue format guard - validates issues on open/edit/reopen/closed, hold/exemption-label changes, and manual dispatch against AGENT_ISSUE_FORMAT, while durable/wontfix, automated, and bot issues remain exempt and have stale agents:format leases cleared. Closed issues also clear agents:auto-pilot-pause only after a fresh state read confirms they remain closed. Pause and needs-human labels hold dispatch. Any invalid non-exempt issue change on those triggers clears stale agents:formatted state, and hold removal revalidates on resume. Non-conforming unheld work gets agents:format so the optimizer repairs it. Requires .github/scripts/issue_format.py.
• agents-auto-label.yml: Auto-label - suggests/applies labels based on semantic matching (Phase 5A)
• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• maint-coverage-guard.yml: Coverage guard - daily baseline monitoring with automatic issue creation. Intentional full-workflow sync exception: ships the complete guard implementation to consumers instead of a thin reusable caller because the workflow embeds repo-specific artifact discovery and download logic tied to tools/coverage_guard.py.
• issue_format.py: Pure-stdlib validator for AGENT_ISSUE_FORMAT compliance. Single fleet definition of agent-processable; used by agents-issue-format-guard.yml and callable directly by local filers to pre-flight before gh issue create (non-zero exit = unfit). Do not fork per repo.
• coverage_guard.py: Checks coverage guard artifacts - required by maint-coverage-guard.yml
• check_deliberate_break.py: Opt-in Gate helper that proves named deliberate-break acceptance tests fail against the base implementation
• agent_delegation_policy.js: Agent delegation policy - system-driven routing for agent:auto label
• keepalive_loop.js: Core keepalive loop logic
• github-api-with-retry.js: GitHub API retry wrapper with exponential backoff and pagination support - required by agents-auto-pilot.yml
• sync_tracker_state/ (1 files): Shared durable tracker and open PR state helpers for consumer sync workflows
• label_matcher.py: Label matcher - suggests labels based on semantic matching
• langchain_client.py: LangChain client builder - multi-provider client with slot-based fallback and configuration

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: 8714fb96e5e6c4aa00e7d4285312ec299602d988
Template hash: 2306d085790a
Consumer-sync plan ID: sha256:2306d085790aac561411cab7869e2f7c674da5c48a9d15b79763c0648684fd72
Plan scope: full
Scope base SHA: full
Sync phase: promote
Sync branch: sync/workflows-delivery
Consumer repo: stranske/Counter_Risk
Manifest: .github/sync-manifest.yml

autofix: false

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Review skipped — only excluded labels are configured. (7)

• sync
• workflow:source-sync
• workflow:source-maintenance
• consumer-sync
• integration-sync
• workflows-sync
• template-sync

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Essentials

Run ID: 84c4b220-2624-4924-93e9-e8a04fc95a3e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.

[Copilot]

🔵 Needs a closer look

It introduces broad, fleet-wide workflow and automation behavior changes (coverage guard, delegation, keepalive dispatch) that warrant careful human verification in CI and real-run scenarios.

Pull request overview

This PR syncs automation/workflow templates from stranske/Workflows into stranske/Counter_Risk, updating the repo’s agent orchestration, labeling, keepalive, and coverage-guard infrastructure to match the shared fleet behavior.

Changes:

• Improves coverage-guard robustness by supporting per-repo source workflows and broader artifact/payload discovery (including matrix-suffixed artifacts).
• Expands agent keepalive and delegation support (Cursor/Gemini runners, route-weights-based agent selection, periodic sweep mode split).
• Tightens issue/label automation (issue format guard behavior, safer label auto-apply with margin checks, improved keyword scoring/diversity).

File summaries

File	Description
tools/langchain_client.py	Ensures a provider-specific reviewed model is resolved before building clients when a provider is selected.
tools/coverage_guard.py	Refines breach/recovery messaging and recovery-window closure logic, including a warning-threshold recovery path.
scripts/langchain/label_matcher.py	Adds diverse-match bounding, margin-based auto-apply selection, and more conservative keyword scoring.
scripts/check_deliberate_break.py	Improves fallback parsing for deliberate-break specs and prefers explicit markers anywhere in PR body.
.github/workflows/maint-coverage-guard.yml	Makes coverage guard configurable per repo (source_workflows) and more tolerant of artifact naming/layout variations.
.github/workflows/agents-weekly-metrics.yml	Posts dated metric summaries (timestamped comment body) to the tracking issue.
.github/workflows/agents-keepalive-sweep.yml	Adds consolidated vs non-consolidated sweep paths and scopes eligibility to opted-in keepalive PRs.
.github/workflows/agents-issue-optimizer.yml	Counts only workflow_dispatch retries and surfaces format-validation output on failure.
.github/workflows/agents-issue-format-guard.yml	Extends triggers to issue close events and clears stale pause holds only after confirming closed state.
.github/workflows/agents-auto-label.yml	Uses margin-based auto-apply and diverse suggestions to reduce false positives/over-labeling.
.github/workflows/agents-81-gate-followups.yml	Adds Cursor/Gemini execution paths and passes delegation metadata through workflow outputs.
.github/workflows/agents-71-codex-belt-dispatcher.yml	Stages retry helpers safely and adds rate-limit preflight gating for dispatcher actions.
.github/scripts/sync_tracker_state/index.js	Tightens consumer PR detection to require matching head repository as well as branch pattern.
.github/scripts/keepalive_loop.js	Integrates delegation-source reporting, route-weights loading, and runner availability gating into keepalive evaluation/summary.
.github/scripts/issue_format.py	Expands accepted “concrete target” detection (including lint commands) and improves validation diagnostics.
.github/scripts/github-api-with-retry.js	Enhances rate-limit checks with reserve/forecast logic and surfaces token pool identity when available.
.github/scripts/agent_delegation_policy.js	Adds optional Orchestrator route-weights-based agent selection with validation/time-bounds and consistent runner eligibility checks.

Review details

• Files reviewed: 17/17 changed files
• Comments generated: 2
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Workflow state fingerprint for Agents Gate Followups. Do not edit.

[stranske]

Maint 71 auto-resolved bot review thread(s) on manifest-synced content.

• .github/scripts/agent_delegation_policy.js → upstream stranske/Workflows/.github/scripts/agent_delegation_policy.js
• .github/scripts/keepalive_loop.js → upstream stranske/Workflows/.github/scripts/keepalive_loop.js
  Upstream tracking issue: #3346

[iamkayleb]

Closing this generated delivery as no longer current.
delivery_reason: plan_mismatch
delivery_disposition: superseded
next_command: close-or-refresh-delivery