fix(automerge): close the pr-classify TOCTOU race — classify against base-branch risk-paths.yml at decision time#121

Merged

topcoder1 merged 6 commits into

mainfrom

claude/automerge-base-riskpaths-gate

Jul 17, 2026

Commits on Jul 17, 2026

fix(automerge): close the pr-classify TOCTOU race — classify against base-branch risk-paths.yml at decision time

topcoder1
and
claude
committed
fix(automerge): harden the risk-paths gate per codex round-2 findings

topcoder1
and
claude
committed
fix(automerge): fail closed on an unreadable label set (codex round-3 P1)

topcoder1
and
claude
committed
fix(automerge): revoke stale arms when gates error; paginate label read (codex round-4)

topcoder1
and
claude
committed
fix(automerge): error-revoke must cover prerequisite failures too (codex round-5 P1)

topcoder1
and
claude
committed
fix(automerge): head-ownership guard on the error-revoke (codex round-6 P2)

topcoder1
and
claude
committed