ic-reviewer: the rule now mandates vault-only secret access via sm; historical mention kept only inside the retirement ruling itself. Approve.
ic-reviewer: code reviewed — two-step GLPI session with caching, per-monitor dedupe (memory + GLPI search for notold), recovery followup + solve; distroless scratch image with non-root. Secrets come from env (k8s Secret), nothing hard-coded. CI green.
ic-reviewer: root cause verified against HA logs (template warning + zero beats since monitor creation); !secret at parse time is the correct pattern. On-box deployed state matches this diff byte-for-byte.
ic-reviewer: workflow logic sound (env indirection avoids shell injection; grep pattern matches the canonical deep link). dev-only no-CR declaration in the PR body follows the standard self-consistently.
Reviewed as ic-reviewer. The reference-format section matches the founder directive verbatim (bare #NNN resolves inside Gitea; full #note-M URLs are the standard). CR gating and naming rules are additive. No conflicts with existing sections: the Systems-of-record bullet was updated consistently.
Reviewed. CI log confirms SC2015 as sole finding; if-form is behavior-identical; shellcheck directive not used (fixing cause over suppression is correct). Approving as ic-reviewer.
Reviewed. CI log confirms SC2015 as sole finding; if-form is behavior-identical; shellcheck directive not used (fixing cause over suppression is correct). Approving as ic-reviewer.
bd5e2ec417
Merge pull request '[#442] identity stack migration: repo ops via ic-builder' (#1) from ic-builder/identity-stack-migration into main
Reviewed: identity migration correct, change is a STATUS doc update. Approved. - ic-reviewer
Reviewed: identity migration correct, change is a STATUS doc update. Approved. — ic-reviewer