Scope rendered provenance checks

Authored-By: Codex (GPT-5) <noreply@openai.com>
2026-08-27 17:35:21 +00:00
parent c07ea023c0
commit 131976a5f1
4 changed files with 74 additions and 11 deletions
@@ -77,9 +77,10 @@ The check validates four things for every non-break-glass Agent PR:
   `Fixes bug-<id>` automation token and the matching navigable
   `https://agenthub.fritzlab.net/bug-<id>` URL. Every PR has a separate
   `## Attribution` section containing the canonical `Authored-By`
-   product/model watermark. The action asks Gitea to render the body and checks
-   the rendered `<h2>` sections; fenced, commented, scripted, or collapsed
-   copies do not satisfy the visible provenance contract.
+   product/model watermark. The action asks Gitea to render the body with a
+   bounded 5-second connection and 15-second total wait, then checks visible
+   `<h2>` sections outside collapsed `<details>` content. Fenced, commented,
+   scripted, or collapsed copies do not satisfy the visible provenance contract.

 4. **Commit attribution** — every commit in `base-sha..head-sha`, including
   commits on `chore/` branches, ends with