[joshunrau]

The PR Body workflow now holds only agent-authored pull requests to the opening-pr template; a pull request written by a person alone passes untouched.

Changes

• The template check runs only when the pull request shows agent authorship: a bot author other than Dependabot, a Co-Authored-By: Claude|GPT|Codex|Copilot trailer in the author's own commits or in the body (with or without an email), the 🤖 Generated with footer, or an ## Adversarial review heading or attestation line in the body. Otherwise the job reports that the template does not apply and closes nothing.
• Pull requests from release/<major> are exempt, so a merge-back to main is not closed for carrying agent commits that already passed the check.
• The workflow lists the pull request's commits through the API, keeping only those the pull request's author wrote; it still never checks out the pull request's code.
• opening-pr now tells agents which signals turn the check on.

Decisions

• A review block or attestation counts as an agent signal, so a body that carries one is always validated. Gating on the attestation alone was rejected: no agent PR from another author since October carries one, so that gate would exempt every agent that skips the template.
• Free-text disclosures ("assisted with claude Sonnet 5") are not matched; prose is too varied to parse reliably, and an agent that leaves no marker cannot be told apart from a person under any rule.

Risks

• Open agent pull requests without a review block (e.g. fix: bump app runtime dependencies for security advisories #1855, feat: add instance-wide card themes for light and dark mode #1868) are closed on their next push or edit.
• If listing the commits fails, the check step is skipped and the job fails red without closing the pull request.

Notes

Replaying the new script over every pull request since July (events rebuilt from the GraphQL history) exempted outside contributors, unmarked human pull requests and Dependabot, and checked every pull request carrying an agent marker. The author filter was run against #1893: it keeps the author's seven trailered commits and drops all of them for any other login.

Adversarial review

Reviewed at commit 9c13e26. pnpm check: green.

Findings

1. scripts/check-pr-body.ts:77 — any agent trailer on any commit in the range marks the PR agent-authored, so a human-opened release merge-back carrying already-reviewed agent commits is closed — count only the PR author's commits and exempt release/ heads.
2. .agents/skills/opening-pr/SKILL.md:7 — the skill still says the workflow closes any PR missing the review block — say it checks PRs that show agent authorship and list the signals.

Fixed

• 1. The workflow keeps only commits whose author is the PR's author, and EXEMPT_HEAD_REF exempts release/<major> heads.
• 2. The description and opening paragraph name the agent-authorship signals.

Attestation

I, Claude Opus 5.5, attest that the review block above reports the adversarial review as it ran on the commit named, with every finding it returned.

🤖 Generated with Claude Code