potiuk opened a new pull request, #74822: URL: https://github.com/apache/airflow/pull/74822
Stacked on #74820. Part 3 of 5 of the AIP-120 implementation (design: #73378); this PR's base is the previous branch, so the diff shows only this layer. `breeze ci fork-ci-reconcile`, run every 15 minutes by `fork-ci-monitor.yml`, is the only writer for gated PRs: it labels them, keeps them in draft until the fork's `Tests (AMD)` push run for the head commit is green, keeps one state comment and a `Fork CI / Tests (AMD)` commit status linking to the fork run, closes PRs without fork CI activity after 7 days, and posts unknowns to `internal-airflow-ci-cd`. Hardening from security review: gate tampering is detected from recorded `pull_request` / review runs of the PR's branch (so a later clean push does not hide it), using base-branch triggers and job inspection for signal 1 and the run's own commit for signal 2; a green fork run is trusted only when the PR does not change CI-defining files, with that decision read from the commit status rather than from comments. No `pull_request_target`. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 5) Generated-by: Claude Code (Opus 5) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
