Last updated: 2026-05-15 (dev-loop run)
Coverage (origin/main): 54.1% cmd/review-bot

## Open Issues
- #143: bug: doc-map config loaded from PR branch (untrusted) → IN PR #153
- #150: fix: validateDocmapPath — add EvalSymlinks → IN PR #152
- #154: refactor: extract shared base-args helper in main_test.go (LOW PRIORITY, deferred NIT)

## Closed This Run
- #144: bug: dev-loop merged PR autonomously → closed (fixed by #148 pure shell dispatch)
- #145: bug: merged despite REQUEST_CHANGES → closed (fixed by #148 pure shell dispatch)
- #146: missing subprocess tests → closed (fixed by PR #151 + comments)
- #147: coverage <50% → closed (54.1% on origin/main)

## Open PRs (waiting for review/merge by Aaron)
- #151: test(#146): add InvalidDocMapPath/File tests (base: main) — labels: ai-review
- #152: fix(#150): EvalSymlinks dir-symlink bypass (base: main) — labels: needs-review
- #153: feat(#143): doc-map-trusted-ref (base: main, rebased on issue-146) — labels: needs-review

## Merge Order
Recommended: #152 first (no deps), then #151, then #153 (rebased on issue-146, no conflict)

## Notes
- PR #153 is rebased on issue-146 (which is the base for PR #151). Merge #151 before #153.
- PR #154 (refactor) is low priority — deferred NIT from PR #151 review.