Skip to main content
← Back to list
01Issue
FeatureShippedSwamp CLIPublic
Assigneesstack72

Relationships

#1869 Enforce attestation and review integrity as merge gates

Opened by stack72 · 8/27/2026· Shipped 8/27/2026

Problem

The validate-attestation and claude-review-integrity CI jobs currently run as informational checks — they don't block merges. After 35 PRs with zero CI escapes during the shadow validation period, we have the confidence to enforce them.

Proposed Solution

Three changes to .github/workflows/ci.yml:

  1. validate-attestation: change exit 0 to exit 1 when no attestation is found — PRs without a posted attestation fail CI
  2. claude-review-integrity: already fails on findings, just needs to be in auto-merge's dependency list
  3. Auto-merge needs: add both validate-attestation and claude-review-integrity to the needs list so auto-merge waits for them

Update the comment on validate-attestation from "informational only — not a merge gate" to reflect its new role as a blocking check.

Notes

This is a chicken-and-egg PR — the attestation gate requires an attestation to pass, but the PR adding the gate won't have one. Add the hold label and merge manually to bootstrap.

02Bog Flow
OPENTRIAGEDIN PROGRESSSHIPPED+ 1 MOREASSIGNED+ 4 MOREREVIEW+ 11 MOREPR_MERGED+ 2 MORESESSION_SUMMARIZED

Shipped

8/27/2026, 5:44:34 PM

Click a lifecycle step above to view its details.

03Sludge Pulse
stack72 assigned stack728/27/2026, 5:02:41 PM

Sign in to post a ripple.