[soulbah]

Spec and outcome

• Spec or repository-only rationale: specs/002-pull-request-reporting/spec.md (Accepted).
• Accepted outcome: publish CLI-owned architecture diff, policy, provenance, annotation, comment, and fixed artifact evidence for pull requests.
• Explicit non-goals: semantic parsing in Action, Git fetching, pull_request_target, custom check runs, PDF output, dialect installation, or release publication.

Done when and evidence

• Done when command or protocol: bun run verify; real same-repository changed and unchanged pull-request runs update one marker-owned comment.
• Evidence path or exact output: specs/002-pull-request-reporting/evidence/e2e.md; proof PR test(action): prove pull request reporting #9; changed run 33447403911; unchanged run 33447592934; comment 5485676893; final quality run 33448082670.
• Full gate: bun run verify

Risk and privacy

• Security/privacy impact: dedicated optional comment token; fork and non-PR writes blocked; release and comment credentials masked and removed from CLI child environments.
• Offline and determinism impact: CLI remains offline after verified install; only opt-in comment upsert and existing artifact upload use network. Report order, byte ceilings, and artifact inventory are fixed.
• Dependency or toolchain change: none.
• Rollback path: remove additive inputs, outputs, report modules, comment client, and diff artifacts; default SPEC-001 behavior remains isolated.

Review checklist

• Scope matches accepted spec or repository-only rationale.
• Success, boundary, failure, and regression paths have evidence proportional to risk.
• No secret, real Terraform material, private AI material, or generated noise enters Git.
• Primary reviewer inspected final diff and recorded remaining limits.