proof-agent.yml

name: Proof Agent

on:
  pull_request:
    types: [opened, synchronize, reopened]

permissions:
  contents: read
  pull-requests: write
  copilot-requests: write

jobs:
  verify:
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Need full history for git diff
      
      - name: Run Proof Agent verification
        uses: AndreaGriffiths11/proof-agent@v1.1.2
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          base-ref: origin/main
          # LLM findings are advisory; deterministic CI, CodeQL, and dependency audit remain merge gates.
          block-on-fail: false
          post-comment: true
          comment-mode: collapse