aaronrene / overseer-kit public
freeze-review.yml yaml
49 lines 1.5 KB
Raw
sha256:4671b7f787ddbe63ced31c895b688c77ab495653b65a730b423329f26b3c1439 feat: K1-P1 complete — agent provenance, build-verification… Sonnet 4.6 patch 53 days ago
1 # Example: headless freeze review in CI (§K5.10 / K11).
2 # Copy to your consumer repo as .github/workflows/freeze-review.yml
3 # or vendor via overseer sync from templates/ci/freeze-review-github-actions.yml.
4 #
5 # Requires repository secrets/variables:
6 # OVERSEER_REVIEW_API_KEY (secret)
7 # OVERSEER_REVIEW_API_URL (variable — base URL of your review API)
8 #
9 # Safe default: --dry-run (no stamp write). Remove --dry-run on feature-branch gates
10 # when operator policy allows stamp writes in CI.
11
12 name: freeze-review
13
14 on:
15 pull_request:
16 paths:
17 - "docs/**"
18 - ".overseer/**"
19 workflow_dispatch:
20 inputs:
21 freeze_path:
22 description: Repo-relative freeze artifact path
23 required: true
24 default: docs/PHASE-K5-FREEZE-REVIEWER-CONTRACT.md
25
26 jobs:
27 review:
28 runs-on: ubuntu-latest
29 steps:
30 - uses: actions/checkout@v4
31
32 - name: Set up Python
33 uses: actions/setup-python@v5
34 with:
35 python-version: "3.11"
36
37 - name: Install Overseer Kit CLI dependencies
38 run: pip install PyYAML
39
40 - name: Freeze review (headless API, dry-run)
41 env:
42 OVERSEER_REVIEW_API_KEY: ${{ secrets.OVERSEER_REVIEW_API_KEY }}
43 OVERSEER_REVIEW_API_URL: ${{ vars.OVERSEER_REVIEW_API_URL }}
44 run: |
45 FREEZE_PATH="${{ github.event.inputs.freeze_path || 'docs/PHASE-K5-FREEZE-REVIEWER-CONTRACT.md' }}"
46 ./cli/overseer review --freeze "$FREEZE_PATH" \
47 --provider api \
48 --dry-run \
49 --json
File History 1 commit
sha256:4671b7f787ddbe63ced31c895b688c77ab495653b65a730b423329f26b3c1439 feat: K1-P1 complete — agent provenance, build-verification… Sonnet 4.6 patch 53 days ago