Skip to content

chore(ci): auto-approve Risto's PRs as Carmen#23

Closed
ckivisild-elnora-ai wants to merge 2 commits into
mainfrom
feature/auto-approve-risto
Closed

chore(ci): auto-approve Risto's PRs as Carmen#23
ckivisild-elnora-ai wants to merge 2 commits into
mainfrom
feature/auto-approve-risto

Conversation

@ckivisild-elnora-ai

Copy link
Copy Markdown
Member

Summary

Auto-approves PRs Risto opens here when he requests Carmen's review. Posts a one-sentence approval in her voice (generated via Anthropic Haiku) attributed to ckivisild-elnora-ai for SOC 2 / ISO 27001 audit trail. Does NOT merge, does NOT delete the branch.

How it works

  1. Triggers on pull_request: types: [review_requested]
  2. Gated to requested_reviewer == ckivisild-elnora-ai && author == rjamul-elnora-ai (no-ops otherwise)
  3. Fetches PR diff (truncated to 50KB), passes to Anthropic API with Carmen's voice rules
  4. Posts the generated sentence as Carmen's approval via CARMEN_REVIEW_PAT

Required secrets (already configured)

  • CARMEN_REVIEW_PAT — fine-grained PAT on Carmen's account, repo-scoped, expires 2027-05-23
  • ANTHROPIC_API_KEY — for the comment generation

Test plan

  • Workflow syntax validates (Actions tab shows it after merge)
  • Risto opens a tiny test PR here and requests Carmen → within ~60s expect approval attributed to Carmen with a one-sentence comment
  • Someone else requesting Carmen's review → workflow no-ops
  • Risto requesting someone else's review → workflow no-ops

Plan: ~/.claude/plans/serialized-splashing-twilight.md

🤖 Generated with Claude Code

ckivisild-elnora-ai and others added 2 commits May 24, 2026 14:21
Adds .github/workflows/auto-approve-risto.yml. When Risto opens a PR and
requests Carmen as a reviewer, generates a one-sentence approval in her
voice via the Anthropic API (Haiku) and posts it as Carmen's review using
CARMEN_REVIEW_PAT.

Approval is attributed to ckivisild-elnora-ai (not github-actions[bot]) for
SOC 2 / ISO 27001 audit trail. Workflow does NOT merge and does NOT delete
the branch — explicit per Carmen's spec.

Gating (both must hold or workflow no-ops):
- requested_reviewer.login == 'ckivisild-elnora-ai'
- pull_request.user.login == 'rjamul-elnora-ai'

Required repo secrets (pre-set):
- ANTHROPIC_API_KEY
- CARMEN_REVIEW_PAT (fine-grained PAT, repo-scoped, expires 2027-05-23)

Plan: ~/.claude/plans/serialized-splashing-twilight.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Lets us trigger the workflow manually against any PR number to validate
the diff → AI → comment pipeline end-to-end. Dispatch path skips the
actual approval post (dry-run only) so no stray approvals get left behind.

The real review_requested path still posts approvals as normal.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@ckivisild-elnora-ai

Copy link
Copy Markdown
Member Author

Closing — workflow lives only on private repos. The auto-approval logic was visible to public, which we don't want for internal automation.

@ckivisild-elnora-ai ckivisild-elnora-ai deleted the feature/auto-approve-risto branch May 24, 2026 20:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant