Rodin rodin
  • Joined on 2026-04-23
rodin commented on issue rodin/review-bot#146 2026-05-15 08:28:23 +00:00
PR #140: missing TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile tests

Plan

Problem

The --doc-map flag path validation in main() is unreachable by existing subprocess tests because it occurs at step 6c — after PR fetch from the server. We need two…

rodin opened issue rodin/review-bot#150 2026-05-15 08:21:29 +00:00
fix: validateDocmapPath — add EvalSymlinks to close directory-symlink bypass
rodin commented on pull request rodin/review-bot#142 2026-05-15 08:21:10 +00:00
feat(#141): validate-docmap subcommand — CI hard-fail on missing docmap coverage

Self-review against af8b29fa5d9bec667c1b4f182edcd79c10dfe553

Assessment: ⚠️ Needs attention

**Note: PR was already merged before self-review completed (merged at 2026-05-15T07:39:22Z). Finding…

rodin commented on issue rodin/review-bot#143 2026-05-15 08:16:54 +00:00
bug: doc-map config loaded from PR branch (untrusted) — potential data exfiltration

🔍 Triage note (from DESIGN-137-doc-map.md):

The design doc states:

The doc-map YAML file is read from the local workspace (like system-prompt-file).

In CI, "local workspace" is the…

rodin commented on issue rodin/review-bot#147 2026-05-15 08:16:43 +00:00
PR #140: cmd/review-bot coverage at 49.3% — does not meet ≥50% acceptance criterion

🔍 Triage note: This issue depends on #146 (the two missing doc-map subprocess tests). Once #146 is resolved, re-run coverage to see if it crosses 50%. If not, additional test targets will…

rodin commented on issue rodin/review-bot#144 2026-05-15 08:16:37 +00:00
bug: dev-loop merged PR #140 autonomously — no human review or assignment

🔍 Triage note: Same as #145 — the fix is in the dev-loop skill, not in review-bot code. The dev-loop controls merge behavior; review-bot only posts reviews.

Should this remain as a tracking…

rodin commented on issue rodin/review-bot#145 2026-05-15 08:16:32 +00:00
bug: dev-loop merged PR #138 despite active REQUEST_CHANGES from security-review-bot

🔍 Triage note: The fix for this issue lives in the dev-loop skill (an OpenClaw workspace skill), not in review-bot Go code. Should this issue remain here as a tracking issue, or be moved/close…

rodin merged pull request rodin/review-bot#149 2026-05-15 08:12:02 +00:00
docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign
rodin closed issue rodin/review-bot#148 2026-05-15 08:12:02 +00:00
feat: redesign dev-loop dispatch as pure shell script — no model reasoning in dispatch
rodin pushed to main at rodin/review-bot 2026-05-15 08:12:02 +00:00
30fe48d265 docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign (#149)
rodin commented on pull request rodin/review-bot#149 2026-05-15 08:05:00 +00:00
docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign

Feedback Addressed

All findings from reviews #3969 (Sonnet) and #3974 (GPT) have been addressed in commit 151199e:

Review #3969 (Sonnet) — 3 NITs

  1. NIT SKILL.md:13 — Architecture…
rodin pushed to issue-148 at rodin/review-bot 2026-05-15 08:03:11 +00:00
d573c14998 fix(docs): address review feedback on architecture clarity and path consistency
rodin commented on pull request rodin/review-bot#149 2026-05-15 08:02:21 +00:00
docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign

Fix Plan against 151199e43633d03216aa1fea85992f538bee3c0e:

Current (non-stale) review findings to address:

Sonnet review (3 NITs):

rodin commented on pull request rodin/review-bot#149 2026-05-15 07:47:18 +00:00
docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign

Self-review against 151199e43633d03216aa1fea85992f538bee3c0e

Assessment: Clean

Self-Review: issue-148 — 2026-05-15

Verdict: PASS

No code changes — documentation only. Reviewed both…

rodin pushed to issue-148 at rodin/review-bot 2026-05-15 07:47:04 +00:00
151199e436 fix(docs): correct rule numbering and missing sr-fix template reference
rodin created pull request rodin/review-bot#149 2026-05-15 07:45:29 +00:00
docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign
rodin pushed to issue-148 at rodin/review-bot 2026-05-15 07:45:17 +00:00
76931dfee9 docs(#148): add SKILL.md and dev-loop-spec.md for dispatch redesign
rodin created branch issue-148 in rodin/review-bot 2026-05-15 07:45:17 +00:00
rodin pushed to main at rodin/review-bot 2026-05-15 07:39:23 +00:00
2dac6ce0c8 title
af8b29fa5d fix(#141): restore runValidateDocmap doc comment inadvertently truncated
7d7a49e967 fix(#141): harden docmap file path — confine to repo-root, reject symlinks, cap size
83a1835474 chore(#141): remove TODO.md — dev-loop artifact, not project documentation
5c6758e990 fix(#141): address review feedback — tighten escape check, improve error messages, add comments
Compare 12 commits »
rodin merged pull request rodin/review-bot#142 2026-05-15 07:39:22 +00:00
feat(#141): validate-docmap subcommand — CI hard-fail on missing docmap coverage