Rodin rodin
  • Joined on 2026-04-23
rodin pushed to ci-selfreview-gate at rodin/review-bot 2026-05-16 01:45:27 +00:00
b716aed914 ci: trigger review-gate on self-review comments; run heavy review on issue_comment when reason=='self-review'
rodin pushed to ci-selfreview-gate at rodin/review-bot 2026-05-16 01:42:08 +00:00
a129f062a2 ci: require reason=='self-review' before running heavy review (disable TTL-triggered heavy reviews)
rodin pushed to ci-selfreview-gate at rodin/review-bot 2026-05-16 01:39:23 +00:00
3d0c84fa6e ci: correct triggers and add self-review gate with TTL; gate review job
rodin pushed to ci-selfreview-gate at rodin/review-bot 2026-05-16 01:36:54 +00:00
6b75201c1e ci: fix triggers (on:) and normalize review if condition
rodin commented on pull request rodin/review-bot#152 2026-05-16 01:18:12 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Self-Review: PR #152

Self-review against eb0ff3aa69f152dd995de91c88227d3e32ac2917

Phase 1: Independent Findings

None — diff looks clean.

Reviewed validatedocmap.go and `validatedocmap_…

rodin pushed to ci-selfreview-gate at rodin/review-bot 2026-05-16 01:16:30 +00:00
0c6f46d279 ci: gate review job on current self-review (with Doc consistency); TTL fallback via review-gate job
rodin created pull request rodin/review-bot#159 2026-05-16 01:16:30 +00:00
CI: gate review on self-review (Doc consistency) + TTL fallback
rodin created branch ci-selfreview-gate in rodin/review-bot 2026-05-16 01:16:30 +00:00
rodin commented on pull request rodin/review-bot#152 2026-05-16 01:14:18 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Self-Review: PR #152

Self-review against eb0ff3aa69f152dd995de91c88227d3e32ac2917

Phase 1: Independent Findings

None — diff looks clean.

Reviewed: validateDocmapPath signature…

rodin commented on pull request rodin/review-bot#152 2026-05-16 01:10:34 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #1 (ACK-NOT-VALID): Acknowledged. The reviewer explicitly notes this is a known limitation of the os.SameFile pattern and that "no action is required" — the code comment already labels it defense-in-depth. No change needed.

rodin commented on pull request rodin/review-bot#152 2026-05-16 01:07:16 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #4 (ACK-NOT-VALID): os.Lstat is intentionally used here for consistency with checkStaleDocs, which also uses Lstat to avoid implicit symlink-follow semantics. Switching to Stat post-EvalSymlinks would be equivalent in practice but inconsistent with the rest of the file. Deliberate choice — no change needed.

rodin commented on pull request rodin/review-bot#152 2026-05-16 01:07:16 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #5 (ACK-NOT-VALID): User-facing error messages intentionally reference *docmapFlag (the original --docmap value) rather than the resolved path. Showing the resolved path would confuse users who specified a symlink — they would see a path they did not specify. Accepted UX tradeoff.

rodin commented on pull request rodin/review-bot#152 2026-05-16 01:07:16 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #2 (ACK-NOT-VALID): Acknowledged. The reviewer confirms no issue — the ModeSymlink check removal is correct (the check was genuinely unreachable after filepath.EvalSymlinks), the comment is accurate, and this is a deliberate documented choice. No action needed.

rodin commented on pull request rodin/review-bot#152 2026-05-16 01:06:45 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #1 (ACK-NOT-VALID): Acknowledged. The reviewer explicitly states this is a known limitation of the os.SameFile pattern and that "no action is required" — the code comment already labels it defense-in-depth. No code change needed.

rodin commented on pull request rodin/review-bot#152 2026-05-16 01:02:38 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #1 (ACK-NOT-VALID): Acknowledged. The reviewer explicitly notes this is a known limitation of os.SameFile and that "no action is required" — the code comment already labels it defense-in-depth. No change needed.

rodin commented on pull request rodin/review-bot#152 2026-05-16 00:58:57 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #5 (ACK-NOT-VALID): User-facing error messages intentionally reference *docmapFlag (the original --docmap value) rather than the resolved path. Showing the resolved path in errors would confuse users who specified a symlink — they want to see the path they actually provided.

rodin commented on pull request rodin/review-bot#152 2026-05-16 00:58:52 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #4 (ACK-NOT-VALID): os.Lstat is intentionally used here for consistency with checkStaleDocs, which also uses Lstat to avoid implicit symlink-follow semantics. Switching to Stat post-EvalSymlinks would be equivalent but would create an inconsistency within the file.

rodin commented on pull request rodin/review-bot#152 2026-05-16 00:58:47 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #2 (ACK-NOT-VALID): Acknowledged. The reviewer confirms no issue — the ModeSymlink removal is correct (the check was genuinely unreachable after EvalSymlinks), the comment is accurate, and the removal is a deliberate documented choice.

rodin commented on pull request rodin/review-bot#152 2026-05-16 00:58:01 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #1 (ACK-NOT-VALID): Acknowledged. The reviewer explicitly notes this is a known limitation of the os.SameFile pattern and that "no action is required" — the code comment already labels it defense-in-depth. No code change needed.

rodin commented on pull request rodin/review-bot#152 2026-05-16 00:54:20 +00:00
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass

Finding #5 (ACK-NOT-VALID): User-facing error messages intentionally reference *docmapFlag (the original --docmap value) for user clarity — showing a resolved path the user never specified would be surprising. The reviewer notes this is acceptable. No change needed.