What to Trust, Revert, and Test in an Agent-Generated Pull Request

说明与用途

该工作流程识别并移除超出范围的更改，添加合同和失败测试，降低隐藏依赖风险。

问题

Agent-generated PRs often modify unrelated files such as config, auth, or CI workflows, leading to scope creep and hidden dependencies.

结果

The workflow isolates scope creep, ensures only relevant changes are reviewed, and enforces contract and failure tests, reducing risk of hidden dependencies.

工作流

• Sort diff into Trust, Revert, Test buckets
• Run diff_scope.py to flag sensitive files
• Grep for exception handling and default changes
• Revert out-of-scope files and re-run CI
• Add contract test for happy path
• Add failure-injection test for error handling

证据

CI is green. The diff also edits the shared config loader and one auth middleware file.

来源

Green CI proves compilation, not intent

来源

Step 1 — Sort the diff into three buckets

来源

Run it against the PR branch: python diff_scope.py origin/main

来源