Files
Peter Steinberger 9726512367 ci(security-review): reconcile ci-gate statuses when CI completion delivery is lost (#155392)
Lost CI-completion deliveries can leave the required ci-gate status pending after CI finishes. Add scheduled reconciliation through the existing trusted Security Review resolver and enforcement job.

Preserve overlapping completion windows, reject incomplete listings before publication, keep provisional statuses eligible, and trust only Actions-owned gate statuses. Bound each pass to the oldest 100 heads and retain the successful window anchor while a backlog remains.

Reruns whose original creation time predates the three-hour listing margin retain the documented existing recovery path through a push or Security Review rerun.

Validation: exact-head CI passed, focused entry-point and workflow regressions passed, and live read-only GitHub transport proof completed. Production scheduled recovery remains post-merge proof.
2026-09-27 14:08:14 -07:00
..
…