Phase 5: spec and build plan for Option B as built, release drift check, supported repos

docs/supported-repos.md

@@ -0,0 +1,25 @@
+# Supported repos
+
+The review ruleset 26132750 targets the repos with status `target` below, by `repository_id`, on their default branch. The rules for a supported repo are in the [design spec](claude-review-design.md#supported-repos). A repo joins or leaves this list through a PR to this repo. A `candidate` meets the rules but is not a target yet; a one-line PR changes it to `target` after it joins the ruleset and its test PR passes.
+
+Every active repo also gets the baseline ruleset 25787833 (`~ALL`), whether it is listed here or not.
+
+| Repo | `repository_id` | Default branch | Status | Date joined |
+|---|---|---|---|---|
+| `front-end` | 135777271 | `main` | target | 2026-10-29 |
+| `back-end` | 182584277 | `main` | target | 2026-10-29 |
+| `operationcode_infra` | 107068150 | `main` | target | 2026-10-29 |
+| `operationcode-pybot` | 146210805 | `master` | target | 2026-10-29 |
+| `START_HERE` | 82613670 | `master` | candidate | |
+
+## Excluded active repos
+
+| Repo | `repository_id` | Reason |
+|---|---|---|
+| `.github` | 1432342572 | Never a target: it holds the central workflow, and a ruleset that requires a workflow from `.github` and also targets `.github` can deadlock. |
+| `claude-review-test` | 1432457406 | Test repo. Only the scratch test ruleset 25835887 requires the workflow there. |
+| `claude-review-p0-source` | 1433591286 | Test source repo for the acceptance tests. No review ruleset. |
+
+Private repos are excluded (not supported): v1 supports public repos only.
+
+Every other repo in the org is archived (decision P5-3).

review/tests/unit/fixtures/release/org-rulesets-list.json

@@ -0,0 +1,59 @@
+[
+  {
+    "id": 26132750,
+    "name": "claude-review-pilot",
+    "target": "branch",
+    "source_type": "Organization",
+    "source": "OperationCode",
+    "enforcement": "active",
+    "node_id": "RRS_lACkVXNlcs4An-cEzgGOwQ4",
+    "_links": {
+      "self": {
+        "href": "https://api.github.com/orgs/OperationCode/rulesets/26132750"
+      },
+      "html": {
+        "href": "http://github.com/organizations/OperationCode/settings/rules/26132750"
+      }
+    },
+    "created_at": "2026-10-29T08:21:30.214-07:00",
+    "updated_at": "2026-10-31T10:54:53.991-07:00"
+  },
+  {
+    "id": 25787833,
+    "name": "org-baseline",
+    "target": "branch",
+    "source_type": "Organization",
+    "source": "OperationCode",
+    "enforcement": "active",
+    "node_id": "RRS_lACkVXNlcs4An-cEzgGJfbk",
+    "_links": {
+      "self": {
+        "href": "https://api.github.com/orgs/OperationCode/rulesets/25787833"
+      },
+      "html": {
+        "href": "http://github.com/organizations/OperationCode/settings/rules/25787833"
+      }
+    },
+    "created_at": "2026-10-24T09:17:22.576-07:00",
+    "updated_at": "2026-11-01T08:37:17.739-08:00"
+  },
+  {
+    "id": 25835887,
+    "name": "p0-required-workflow",
+    "target": "branch",
+    "source_type": "Organization",
+    "source": "OperationCode",
+    "enforcement": "active",
+    "node_id": "RRS_lACkVXNlcs4An-cEzgGKOW8",
+    "_links": {
+      "self": {
+        "href": "https://api.github.com/orgs/OperationCode/rulesets/25835887"
+      },
+      "html": {
+        "href": "http://github.com/organizations/OperationCode/settings/rules/25835887"
+      }
+    },
+    "created_at": "2026-10-25T13:17:05.495-07:00",
+    "updated_at": "2026-10-31T10:54:55.389-07:00"
+  }
+]

review/tests/unit/fixtures/release/ruleset-25787833.json

@@ -0,0 +1,67 @@
+{
+  "id": 25787833,
+  "name": "org-baseline",
+  "target": "branch",
+  "source_type": "Organization",
+  "source": "OperationCode",
+  "enforcement": "active",
+  "conditions": {
+    "ref_name": {
+      "exclude": [],
+      "include": [
+        "~DEFAULT_BRANCH"
+      ]
+    },
+    "repository_name": {
+      "exclude": [],
+      "include": [
+        "~ALL"
+      ],
+      "protected": false
+    }
+  },
+  "rules": [
+    {
+      "type": "deletion"
+    },
+    {
+      "type": "non_fast_forward"
+    },
+    {
+      "type": "pull_request",
+      "parameters": {
+        "required_approving_review_count": 1,
+        "dismiss_stale_reviews_on_push": true,
+        "required_reviewers": [],
+        "require_code_owner_review": true,
+        "require_last_push_approval": false,
+        "required_review_thread_resolution": false,
+        "require_extra_approval_for_unattributed_changes": true,
+        "allowed_merge_methods": [
+          "squash"
+        ]
+      }
+    },
+    {
+      "type": "required_signatures"
+    }
+  ],
+  "node_id": "RRS_lACkVXNlcs4An-cEzgGJfbk",
+  "created_at": "2026-10-24T09:17:22.576-07:00",
+  "updated_at": "2026-11-01T08:37:17.739-08:00",
+  "bypass_actors": [
+    {
+      "actor_id": null,
+      "actor_type": "OrganizationAdmin",
+      "bypass_mode": "pull_request"
+    }
+  ],
+  "_links": {
+    "self": {
+      "href": "https://api.github.com/orgs/OperationCode/rulesets/25787833"
+    },
+    "html": {
+      "href": "http://github.com/organizations/OperationCode/settings/rules/25787833"
+    }
+  }
+}

review/tests/unit/fixtures/release/ruleset-25835887.json

@@ -0,0 +1,48 @@
+{
+  "id": 25835887,
+  "name": "p0-required-workflow",
+  "target": "branch",
+  "source_type": "Organization",
+  "source": "OperationCode",
+  "enforcement": "active",
+  "conditions": {
+    "ref_name": {
+      "exclude": [],
+      "include": [
+        "~DEFAULT_BRANCH"
+      ]
+    },
+    "repository_id": {
+      "repository_ids": [
+        1432457406
+      ]
+    }
+  },
+  "rules": [
+    {
+      "type": "workflows",
+      "parameters": {
+        "do_not_enforce_on_create": false,
+        "workflows": [
+          {
+            "repository_id": 1432342572,
+            "path": ".github/workflows/claude-review.yml",
+            "sha": "88e055f0ebff003a3e07fe0d015fee6856692f2c"
+          }
+        ]
+      }
+    }
+  ],
+  "node_id": "RRS_lACkVXNlcs4An-cEzgGKOW8",
+  "created_at": "2026-10-25T13:17:05.495-07:00",
+  "updated_at": "2026-10-31T10:54:55.389-07:00",
+  "bypass_actors": [],
+  "_links": {
+    "self": {
+      "href": "https://api.github.com/orgs/OperationCode/rulesets/25835887"
+    },
+    "html": {
+      "href": "http://github.com/organizations/OperationCode/settings/rules/25835887"
+    }
+  }
+}

review/tests/unit/fixtures/release/ruleset-26132750.json

@@ -0,0 +1,67 @@
+{
+  "id": 26132750,
+  "name": "claude-review-pilot",
+  "target": "branch",
+  "source_type": "Organization",
+  "source": "OperationCode",
+  "enforcement": "active",
+  "conditions": {
+    "ref_name": {
+      "exclude": [],
+      "include": [
+        "~DEFAULT_BRANCH"
+      ]
+    },
+    "repository_id": {
+      "repository_ids": [
+        107068150,
+        135777271,
+        146210805,
+        182584277
+      ]
+    }
+  },
+  "rules": [
+    {
+      "type": "workflows",
+      "parameters": {
+        "do_not_enforce_on_create": false,
+        "workflows": [
+          {
+            "repository_id": 1432342572,
+            "path": ".github/workflows/claude-review.yml",
+            "sha": "88e055f0ebff003a3e07fe0d015fee6856692f2c"
+          }
+        ]
+      }
+    }
+  ],
+  "node_id": "RRS_lACkVXNlcs4An-cEzgGOwQ4",
+  "created_at": "2026-10-29T08:21:30.214-07:00",
+  "updated_at": "2026-10-31T10:54:53.991-07:00",
+  "bypass_actors": [
+    {
+      "actor_id": null,
+      "actor_type": "OrganizationAdmin",
+      "bypass_mode": "pull_request"
+    },
+    {
+      "actor_id": 2,
+      "actor_type": "RepositoryRole",
+      "bypass_mode": "pull_request"
+    },
+    {
+      "actor_id": 5,
+      "actor_type": "RepositoryRole",
+      "bypass_mode": "pull_request"
+    }
+  ],
+  "_links": {
+    "self": {
+      "href": "https://api.github.com/orgs/OperationCode/rulesets/26132750"
+    },
+    "html": {
+      "href": "http://github.com/organizations/OperationCode/settings/rules/26132750"
+    }
+  }
+}