You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Pull request backlog: give every open bot pull request a verdict #541
hmm yeah we are definitely generating more than we're merging, like we're losing track of PRs like cgwalters-forge/agentic-job#153 ?
Count on 13 Oct, 20:15 UTC: 132 open pull requests by cgwalters-bot. Today 57 were opened and 50 merged, so the day is close to even; the pile is older.
Fork drafts waiting for the operator's review (about 83): bootc 24, composefs-rs 21, bcvk 6, and 14 other forks. Most date from 23 Sep to 6 Oct.
Upstream, waiting for maintainers (18).
Rules from here (controller):
Each own-repository pull request older than two days gets one verdict: rebase and merge, finish, or close with a reason. Triage run on this issue, then act on it.
No new implement dispatch in a repository while it has an own pull request older than two days with no verdict.
yeah the fork drafts are a totally different thing that's indeed blocking on me. but for our harness let's ensure we're not just leaking work
Scope of this issue is therefore the harness repositories; fork drafts are out. Added to the rules: every pass of the poll (cgwalters-forge/agent-board#40) lists as leaked (a) any open bot pull request in our repositories with no review, fix run or queue entry in progress and no needs-human label, and (b) any board item In Progress with no open pull request and no active run; leaked items are reported on the board status, oldest first.
Verdicts for the 29 open cgwalters-bot pull requests in scope: 5 MERGE, 0 FINISH, 24 CLOSE. None is worth finishing. All 15 in homegit are CLOSE. Two have content that could move: homegit#110 to the review prompt, and homegit#143 to agent-board if tracker#372 is still wanted. Everything in scope from agentic-job, actions#6 and the old agent.yml path in devspace-sandbox has been replaced on main or by agentic-job. The five MERGEs are test-only PRs or small PRs the operator already asked for or approved. They need a rebase, a /promote or the operator's review, and no new work.
How I checked: for each PR I read the description, the comments, the reviews, the file list and the CI rollup. I checked against today's main of agentic-job (0090cf3), cgwalters-forge/review, cgwalters-forge/actions and bootc-dev/cgwalters-devspace-sandbox. Ages and mergeable state come from the GitHub API today (13 Oct). Statements marked inferred are my reading and were not checked.
CLOSE here. The checklist (mined from about 1,400 of the operator's review comments) should move into the review prompt: agentic-job workflow/review.md or the cgwalters-agentic-job wrapper (inferred; it has no checklist today)
CLOSE: carries a sign-off through homegit's bot-git and bot-pr. Its four design questions to the operator have had no answer since 1 Oct. Re-file against the new harness if DCO churn is still a problem
CLOSE: replaced on main, which has the README and every doc this PR adds (background-ghaw, compiler, harness, inference, interactive, interface, plan, related-projects, ...), last edited 11 Oct. The operator's 7 Oct note (secure-host for generic CI jobs) is tracked in #503
CLOSE: a job-container prototype that nothing builds or runs, with an LLM review asking for changes. The operator's 13 Oct direction is to deprivilege the runner user through secure-host (#503). Keep #137 open as the record
CLOSE: not worth it. The code has moved to apply.yml and workflow/replacement.cjs (both still use quotePath=false), so the change would need a rewrite. It changes no behavior: PLAIN_PATH_RE is still ASCII-only, and the comparison fails closed either way
CLOSE: replaced by agentic-job's secure-host action (BPF world-write policy, docs/secure-host.md). actions now holds only tailscale, sandbox-share and the wrapper
MERGE after the operator's security review: it widens who can get inference credentials. Off unless a policy adds issuers. Using it also needs the Forgejo runner upgraded from v6 (described in the PR)
MERGE: needs the operator's /promote to bootc-dev. Small, and it is the rework of bootc-dev#2 that his review asked for. "Development runner" still runs on bootc-dev main today
MERGE: needs the operator's merge in bootc-dev, then one devspace smoke run, because devspace.yml can only run from the default branch and is untested as a whole. Sign-off already given on forge#2
Acted on the triage: closed 18 with high confidence (homegit 12, agentic-job #1#143#153, devspace-sandbox #3#17, cgwalters/bootc#1). cgwalters-forge/review #46 and #47 rebased and sent for review, to merge on approval.
Left for the operator's word (medium or low confidence, or his to do): close homegit #143, #110 (checklist could move into the review prompt), #66; agentic-job #144; actions #6 (he approved it; replaced by secure-host); devspace-sandbox #8. Merge needs him: praxis-credential-broker#23 (security review), devspace-sandbox #16 in both forks.
(Run status from 2026-10-13T20:20:33Z, re-posted by the bot without the agent's own words. The original job-token comment was removed so this issue counts as collaborator-only input, tracker#738.)
Activity
cgwalters-bot commentedon Oct 13, 2026
Operator, 13 Oct (chat), verbatim:
Scope of this issue is therefore the harness repositories; fork drafts are out. Added to the rules: every pass of the poll (cgwalters-forge/agent-board#40) lists as leaked (a) any open bot pull request in our repositories with no review, fix run or queue entry in progress and no
needs-humanlabel, and (b) any board item In Progress with no open pull request and no active run; leaked items are reported on the board status, oldest first.Generated-by: https://github.com/cgwalters/#llms
cgwalters-bot commentedon Oct 13, 2026
Verdicts for the 29 open cgwalters-bot pull requests in scope: 5 MERGE, 0 FINISH, 24 CLOSE. None is worth finishing. All 15 in homegit are CLOSE. Two have content that could move: homegit#110 to the review prompt, and homegit#143 to agent-board if tracker#372 is still wanted. Everything in scope from agentic-job, actions#6 and the old
agent.ymlpath in devspace-sandbox has been replaced on main or by agentic-job. The five MERGEs are test-only PRs or small PRs the operator already asked for or approved. They need a rebase, a/promoteor the operator's review, and no new work.How I checked: for each PR I read the description, the comments, the reviews, the file list and the CI rollup. I checked against today's
mainof agentic-job (0090cf3), cgwalters-forge/review, cgwalters-forge/actions and bootc-dev/cgwalters-devspace-sandbox. Ages and mergeable state come from the GitHub API today (13 Oct). Statements marked inferred are my reading and were not checked.dispatch.yml, which has atriagemode run through agentic-job (dispatch.yml:38)bot-boardis being retired (tracker#528 line 2). Ifoption-addor the Orgcgwaltersmapping is still needed, file it on agent-boardtestsredbin/tools that are being frozentestsredbot-actuals, which is being frozenworkflow/review.mdor the cgwalters-agentic-job wrapper (inferred; it has no checklist today)egress/bot-gitandbot-pr. Its four design questions to the operator have had no answer since 1 Oct. Re-file against the new harness if DCO churn is still a problembot-devspace remaining, a tool of the old workerbot-prfooter and promote rework, in tools being frozenbackground-ghaw,compiler,harness,inference,interactive,interface,plan,related-projects, ...), last edited 11 Oct. The operator's 7 Oct note (secure-host for generic CI jobs) is tracked in #503rustredapply.ymlandworkflow/replacement.cjs(both still usequotePath=false), so the change would need a rewrite. It changes no behavior:PLAIN_PATH_REis still ASCII-only, and the comparison fails closed either waysrc/github/{opsview,captureview,boardfeedview}.tson main still have nonesrc/github/diffview.tson main still has nonesecure-hostaction (BPF world-write policy, docs/secure-host.md). actions now holds only tailscale, sandbox-share and the wrapperissuers. Using it also needs the Forgejo runner upgraded from v6 (described in the PR)scripts/public-repo.mjs, which exists only on #3's branch/promoteto bootc-dev. Small, and it is the rework of bootc-dev#2 that his review asked for. "Development runner" still runs on bootc-dev main todayagent.ymlis the old runner, which agentic-job replaces. Its 38 runs today come from branchbot/agent-run-praxisand do not need this PR mergeddevspace.ymlcan only run from the default branch and is untested as a whole. Sign-off already given on forge#2Counts: MERGE 5 · FINISH 0 · CLOSE 24 (homegit 15, agentic-job 4, actions 1, devspace-sandbox forge 3, cgwalters/bootc 1).
Not done here: no PR was closed or merged. agentic-job #528, #534 and #535 are under two days old and were not in scope.
Generated-by: https://github.com/cgwalters/#llms
cgwalters-bot commentedon Oct 13, 2026
Acted on the triage: closed 18 with high confidence (homegit 12, agentic-job #1 #143 #153, devspace-sandbox #3 #17, cgwalters/bootc#1). cgwalters-forge/review #46 and #47 rebased and sent for review, to merge on approval.
Left for the operator's word (medium or low confidence, or his to do): close homegit #143, #110 (checklist could move into the review prompt), #66; agentic-job #144; actions #6 (he approved it; replaced by secure-host); devspace-sandbox #8. Merge needs him: praxis-credential-broker#23 (security review), devspace-sandbox #16 in both forks.
Generated-by: https://github.com/cgwalters/#llms
cgwalters-bot commentedon Oct 18, 2026
✅ dispatch ended well. Result: #541 (comment)
(Run status from 2026-10-13T20:20:33Z, re-posted by the bot without the agent's own words. The original job-token comment was removed so this issue counts as collaborator-only input, tracker#738.)
Generated-by: https://github.com/cgwalters/#llms