Acknowledge authorized tasks from workers #19

Merged
lambadalambda merged 2 commits from feat/worker-eyes-acknowledgement into main 2026-08-30 18:16:49 +00:00

Summary

  • persist a SHA-256 digest of the complete authorized webhook comment body
  • verify worker identity plus exact repository, target, author, and live comment body before mutation
  • idempotently add the bot-owned eyes reaction from the disposable worker before OpenCode starts
  • keep acknowledgement best-effort and preserve dispatcher/launcher publication boundaries

Testing

  • go test ./...
  • go vet ./...
  • sh scripts/adversarial-check.sh
  • git diff --check

Review

Independent review found no remaining blocking or medium issues.

## Summary - persist a SHA-256 digest of the complete authorized webhook comment body - verify worker identity plus exact repository, target, author, and live comment body before mutation - idempotently add the bot-owned eyes reaction from the disposable worker before OpenCode starts - keep acknowledgement best-effort and preserve dispatcher/launcher publication boundaries ## Testing - `go test ./...` - `go vet ./...` - `sh scripts/adversarial-check.sh` - `git diff --check` ## Review Independent review found no remaining blocking or medium issues.
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
lambadalambda/opencode-forgejo-bot!19
No description provided.