Replace majordomo's full self-contained Gadfly stub with a thin caller of
steve/gadfly's reusable workflow, matching mort/executus:
- explicit secret forwarding (least privilege) instead of broad exposure;
GITEA_TOKEN is the automatic job token.
- pinned to an immutable gadfly commit (@20a5c43), not @main.
- adds the Claude Code engine (sonnet, opus, opus:max) to the 6 cloud models.
- provider_concurrency claude-code=3 so all three claudes run at once.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Drop the four lowest-graded reviewers — m5/qwen3.6:35b-mlx, gemma4:cloud,
gpt-oss:120b-cloud, kimi-k2.7-code:cloud. Removing m5/qwen3.6 takes the last
local Mac out, so this is now a cloud-only fleet of 6 ollama-cloud models;
GADFLY_ENDPOINT_M5 and the m5 concurrency entry are gone and the per-job timeout
drops to 45m. README/CLAUDE.md kept in sync.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
M1 was consistently slow (26-29 min) for zero real findings, so pull it before
this workflow ever fires. Leaves the 9 ollama-cloud models + the M5 Mac;
removes GADFLY_ENDPOINT_M1 and the m1 concurrency entry. Mirrors the same change
on executus.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Installs the standalone Gadfly agentic adversarial reviewer (advisory, never
blocks merge), mirroring executus's setup on the latest pinned image
(sha-d7f364d). Reviews majordomo PRs with the full fleet: 9 ollama-cloud models
plus the M1/M5 Macs via foreman, each running the 3-lens suite (security,
correctness, error-handling). Posts one consolidated comment per model.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>