Finding §2.1 from the 2026-08-07 open-work review (docs/plans/2026-08-07-audit-findings-recovery-and-open-work-execution-plan.md).
The calm-guard-dogfood CI job runs in shadow mode (.github/workflows/ci.yml, continue-on-error: true). da3c14f fixed its merge-base bug but left it in shadow mode with explicit promotion criteria (ci.yml:54-63):
- 10 consecutive PRs where the job actually ran (not skipped) with zero infra-category failures (subcommand/merge-base/install/timeout) — a real
aggregate_risk >= fail-on block does not count as an infra failure.
- No open false-positive report against
calm guard's risk model older than 7 days.
When both hold, the promotion is a one-line diff removing continue-on-error: true.
Why this needs an issue: the trigger to act lives only in a comment on a job that is green-by-design (continue-on-error), so nothing surfaces when the bar is met — the exact fragility that lost the tail of the earlier audit. This issue is the durable tracker.
Finding §2.1 from the 2026-08-07 open-work review (
docs/plans/2026-08-07-audit-findings-recovery-and-open-work-execution-plan.md).The
calm-guard-dogfoodCI job runs in shadow mode (.github/workflows/ci.yml,continue-on-error: true).da3c14ffixed its merge-base bug but left it in shadow mode with explicit promotion criteria (ci.yml:54-63):aggregate_risk >= fail-onblock does not count as an infra failure.calm guard's risk model older than 7 days.When both hold, the promotion is a one-line diff removing
continue-on-error: true.Why this needs an issue: the trigger to act lives only in a comment on a job that is green-by-design (
continue-on-error), so nothing surfaces when the bar is met — the exact fragility that lost the tail of the earlier audit. This issue is the durable tracker.