diff --git a/.gitea/workflows/adversarial-review.yml b/.gitea/workflows/adversarial-review.yml index 3a6c1ea..4e6dd4b 100644 --- a/.gitea/workflows/adversarial-review.yml +++ b/.gitea/workflows/adversarial-review.yml @@ -1,7 +1,8 @@ -# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow. -# Mirrors gadfly's own dogfood config: 6 cloud models + the Claude Code engine -# (sonnet, opus, and opus with max extended thinking). No local Macs. Advisory -# only — never blocks a merge. +# Gadfly adversarial review — subscribes to steve/gadfly's reusable workflow and +# INHERITS its default swarm (3 cloud models + Claude Code sonnet/opus/opus:max, +# 5-lens suite). This stub holds only the triggers, the actor gate, secret +# forwarding, and the allow-list; the swarm config lives centrally in gadfly's +# review-reusable.yml. Advisory only — never blocks a merge. name: Adversarial Review (Gadfly) @@ -38,19 +39,14 @@ jobs: || github.actor == 'dazed')) # Pinned to an immutable gadfly commit (not @main): a push to gadfly can't # silently change the code that runs with our forwarded secrets. - uses: steve/gadfly/.gitea/workflows/review-reusable.yml@20a5c431f22d43bab0f711c14ce74de3a735c110 - # Least privilege: forward ONLY the secrets this swarm uses (GITEA_TOKEN is auto). + uses: steve/gadfly/.gitea/workflows/review-reusable.yml@b02b11d69139843665da4cdbf776bc0b3583490d + # Least privilege: forward ONLY the secrets the swarm uses (GITEA_TOKEN is auto). secrets: OLLAMA_CLOUD_API_KEY: ${{ secrets.OLLAMA_CLOUD_API_KEY }} CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} GADFLY_FINDINGS_URL: ${{ secrets.GADFLY_FINDINGS_URL }} GADFLY_FINDINGS_TOKEN: ${{ secrets.GADFLY_FINDINGS_TOKEN }} with: - models: "minimax-m3:cloud,glm-5.2:cloud,glm-5.1:cloud,deepseek-v4-pro:cloud,nemotron-3-super:cloud,qwen3-coder:480b-cloud,claude-code/sonnet,claude-code/opus,claude-code/opus:max" - specialists: "security,correctness,error-handling" - provider_concurrency: "ollama-cloud=3,claude-code=2" - provider_lens_concurrency: "ollama-cloud=3" - timeout_secs: "600" - max_steps: "14" + # Inherit the default swarm from gadfly's review-reusable.yml; only the + # consumer-specific allow-list is set here. allowed_users: "steve,fizi,dazed" - timeout_minutes: 90