MHSanaei a716122ef2 feat(ci): let the review bot read the discussion, the issue and xray-core ... The bot never read the replies under its own findings, so a finding a maintainer had already declined came back on the next `@claude review`. It now reads every comment and inline thread first: a maintainer's answer settles a finding for good, anyone else's is a claim checked against the code, and the summary gives each earlier finding a disposition. It also reads the issue the PR claims to fix and reports a partial fix. REVIEW.md asks for an upstream symbol behind every wire-format claim, but the job had no xray-core source (#6718's review said so). The module the base go.mod pins is now unpacked into a hidden dir in the base workspace; nothing from pr-head runs. REVIEW.md gains the rules only /senior-review carried: keep read, reproduced and inferred claims apart, evidence for performance findings, a traced trust boundary for security ones, and duplicated logic as a finding. The summary now says each inline finding in one line.		2026-10-02 16:11:08 +02:00
..
claude	perf(tests): copy a migrated template DB instead of migrating per test	2026-09-27 03:04:50 +02:00
ISSUE_TEMPLATE	fix(ci): resync the bot prompts with the repo and close the gaps an audit found	2026-08-17 02:41:21 +02:00
workflows	feat(ci): let the review bot read the discussion, the issue and xray-core	2026-10-02 16:11:08 +02:00
dependabot.yml	Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)	2026-05-13 12:52:52 +02:00
FUNDING.yml	chore(github): overhaul issue and PR templates	2026-05-24 22:14:28 +02:00
pull_request_template.md	chore(github): overhaul issue and PR templates	2026-05-24 22:14:28 +02:00