feat(review): opt-in LLM approval reviewer (guardian) — V1–V3 - #140

Merged

cnjack merged 12 commits into

mainfrom

feat/approval-review

Jul 15, 2026

Commits on Jul 14, 2026

feat(review): V1 LLM approval reviewer (guardian)

cnjack
and
claude
committed
7eb923f
feat(review): V2 read-only investigation loop

cnjack
and
claude
committed
aa7db98
feat(review): V3 reused reviewer session for prompt-cache reuse

cnjack
and
claude
committed
f7b1b1d
docs(review): approval-review design doc (motivation, V1-V3, cache, comparison)

cnjack
and
claude
committed
ff1e027
feat(review): wire reviewer into TUI + web; add eval + test report

cnjack
and
claude
committed
39cd41e
fix(review): first-class 'escalate' verdict + panic fail-open (adversarial review)

cnjack
and
claude
committed
e952b51
fix(review): harden policy against cloud-metadata SSRF (found by 20-round eval)

cnjack
and
claude
committed
3543a23
docs(review): finalize test report with 20-round + metadata re-test results

cnjack
and
claude
committed
172c6bf

Commits on Jul 15, 2026

fix(review): address PR review — deterministic SSRF filter, verdict hardening, V3 incremental transcript

cnjack
and
claude
committed
f4210d3
docs(review): record PR review round in the test report

cnjack
and
claude
committed
837272f
docs(review): record post-fix V3 cache re-verification (92-93% hit, +101 tok/review)

cnjack
and
claude
committed
349b991
feat(review): Auto session mode — reviewer as the fourth selector mode
cnjack
committed
ff84517