fix(review): run Codex review from trusted base (#186)

* fix(review): run Codex review from trusted base

Co-Authored-By: Codex <noreply@openai.com>

* fix(review): disable automatic review convergence

Co-Authored-By: Codex <noreply@openai.com>

* chore(review): remove bypass policy fields

Co-Authored-By: Codex <noreply@openai.com>

* fix(review): pass explicit string fallback flags

Co-Authored-By: Codex <noreply@openai.com>

* fix(review): fail closed for fork pull requests

Co-Authored-By: Codex <noreply@openai.com>

---------

Co-authored-by: Codex <noreply@openai.com>

Author: Pigbibi

.github/codex_auto_merge_policy.json

@@ -43,8 +43,6 @@
       "low"
     ],
     "timeout_minutes": 20,
-    "max_diff_lines": 2400,
-    "auto_converge_after": 3,
-    "block_on_review_failure": false
+    "max_diff_lines": 2400
   }
 }

.github/workflows/codex_pr_review.yml

@@ -1,7 +1,7 @@
 name: Codex PR Review
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, reopened]
 
 permissions:
@@ -19,7 +19,7 @@ jobs:
     uses: QuantStrategyLab/AIAuditBridge/.github/workflows/codex_pr_review.yml@main
     with:
       caller_concurrency_key: pr-${{ github.event.pull_request.number || github.run_id }}
-      allow_unconfigured_backend: true
+      allow_unconfigured_backend: false
       api_fallback_enabled: "false"
       direct_api_primary_enabled: "false"
     secrets: inherit