feat: require validation cwd and HEAD proof in reviewer reports (Closes #398)

Add assess_validation_cwd_proof_report so reviewer final reports must prove pwd, git rev-parse HEAD, git status, and expected PR head SHA before claiming validation ran in a branches/ worktree. Wire the verifier into final_report_validator and gitea_validate_review_final_report. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-07-07 11:28:34 -04:00
parent 027a3cb92c
commit 8df795ef80
8 changed files with 447 additions and 0 deletions
@@ -5506,6 +5506,7 @@ def gitea_validate_review_final_report(
    action_log: list[dict] | None = None,
    mutations_observed: bool = False,
    local_edits: bool = False,
+    validation_session: dict | None = None,
 ) -> dict:
    """Read-only: machine-validate reviewer final report schema before output (#391).

@@ -5523,6 +5524,7 @@ def gitea_validate_review_final_report(
        action_log=action_log,
        mutations_observed=mutations_observed,
        local_edits=local_edits,
+        validation_session=validation_session,
    )