/sop-ack memory-consulted
/sop-ack no-backwards-compat
/sop-ack five-axis-review
/sop-ack root-cause
/sop-ack staging-smoke
/sop-ack local-postgres-e2e
/sop-ack comprehensive-testing
Approve: digest-surface step non-fatal (continue-on-error); CI green.
Approve: chat-priority steer + friendly placeholder; adapter unit test + all substantive CI passed on eb6d5c1c (push-event); orphaned pull_request-event duplicates reconciled.
/security-recheck
/qa-recheck /security-recheck
Approve: surfaces pushed digest as commit status (operator promotes, no AWS on deploy path) + .runtime-version/requirements drift guard. Directly prevents the codex chat-fix-never-shipped class.
Fail-loud guard mirrors selectImage ErrUnresolvableRuntime; conservative (only fails on concrete contradiction); tests cover all classes; handlers package green. LGTM.
Approve: canonical .runtime-version bump 0.3.7->0.3.8 (cascade artifact). Ships the protobuf chat fix into the codex image; requirements.txt already ==0.3.8 on main.
Approve: pin runtime==0.3.8 (protobuf parse fix) + a2a-sdk==1.0.3. Stops the silent float that broke chat.
Approve: one-line fix — extract_message_text accepts protobuf RepeatedCompositeContainer (a2a-sdk>=1.0) per its docstring; CI green (build/lint/unit/smoke). Fixes the empty-message regression.
Approve: one-line org-header fix, shellcheck clean, closes the re-sync 400 (TENANT_ORG_HEADER_REQUIRED) for rotation pickup.
Approve: GET-only re-sync watchdog + per-agent OAuth POST gated off. pytest+shellcheck green, T4 conformance passed.