rul1an/Plimsoll release review

Review what an agent release's runtime capability changed (files, network, MCP tools), gate the PR, and surface findings in code scanning.

Trust Signals

name	description	required	default
before	Path to the previous release's capability surface (JSON or assay runner .tar.gz).	yes	—
after	Path to the new release's capability surface (JSON or assay runner .tar.gz).	yes	—
policy	Optional path to a review policy YAML.	no	""
workspace	Newline-separated extra in-policy workspace path prefixes.	no	""
require-coverage	Block the review when observation coverage is insufficient (recommended).	no	true
fail-on	Gate level: 'pending' (default; fail on anything not auto-cleared, including inconclusive coverage gaps), 'blocked' (fail only on a coverage hold: blocked or inconclusive), or 'never'.	no	pending
comment	Post/update a sticky review comment on the pull request.	no	true
sarif	Emit SARIF and upload it to code scanning (needs security-events: write; on private repos this needs GitHub Advanced Security).	no	true
out-dir	Directory for the review outputs.	no	plimsoll-out
license	Plimsoll hosted-layer token. Leave empty for the free per-repo review. A token enables the hosted audit ledger, fleet aggregation and governed approvals (requires a Plimsoll account; see docs/GITHUB-ACTION.md).	no	""
endpoint	Plimsoll hosted-layer endpoint (used only when 'license' is set).	no	""

name	description
decision	The review decision: auto_clear_no_new_capability \| pending \| inconclusive_observation_gap \| blocked_observation_insufficient.
findings	Number of capabilities requiring approval.
review-id	Content-addressed review id.
review-json	Path to the review.json.
sarif	Path to the emitted SARIF (empty if disabled).