feat: block reviewer local Gitea fallbacks during normal review (Closes #324)

Add assess_reviewer_fallback_report to fail closed when reviewer final reports or action logs show profiles.json access or local helper scripts while MCP tools are available. Recovery mode requires explicit fallback classification and identity/profile/repo/capability proof. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-07-07 05:06:37 -04:00
parent cbae9a3ecd
commit 24788d3b4c
4 changed files with 338 additions and 0 deletions
@@ -3099,3 +3099,10 @@ def assess_email_disclosure(
            for email in emails
        ],
    }
+
+
+def assess_reviewer_fallback_report(report_text, **kwargs):
+    """#324: block local Gitea fallbacks during normal reviewer workflows."""
+    from reviewer_fallback import assess_reviewer_fallback_report as _assess
+
+    return _assess(report_text, **kwargs)