#1 chore: deploy Set it Free Loop (review tier, v2.0.0)

Set it Free Loop — Deployment

Version: 2.0.0
Tier: review
Source SHA: 380fe0edc7a87cfc7b31233a955b37df0223a3a8
Engine policy: codex-gpt-55-high

Components deployed

• labels
• governance
• sfl-pr-review

What is the Set it Free Loop?

The Set it Free Loop is a continuous
quality improvement operating model for software repositories. See the
CATALOG
for all available workflows.

Before merging

• Run .\deployment\governance\setup-labels.ps1 -Owner <org> -Repo <repo> if labels are not yet configured
• For each .md workflow: verify gh aw compile .github/workflows/<name>.md succeeds
• Trigger a workflow manually to confirm output
• Review sfl.json manifest in the repo root

---

Summary by cubic

Deploys the Set it Free Loop review tier v2.0.0 with a label-triggered full-spectrum PR review, inline findings, a consolidated review, and the “SFL Reviewer Approval” check. Switches the review model to OpenRouter moonshotai/kimi-k3, pins action versions, and adds a manifest and badge.

• New Features

  • Adds sfl-pr-review workflow (trigger: sfl-review) that posts up to 20 inline comments, submits one consolidated review, creates the “SFL Reviewer Approval” check, and removes the trigger label for re-runs.
  • Adds locked workflow sfl-pr-review.lock.yml and action lock .github/aw/actions-lock.json (pins github/gh-aw-actions/setup@v0.84.1); .gitattributes marks lock files as generated with merge=ours.
  • Adds sfl.json (v2.0.0, tier review) with engine policy; workflow uses OpenRouter moonshotai/kimi-k3.
  • Updates README with a Set it Free Loop version badge.

• Migration

  • Ensure secrets/vars exist: OPENROUTER_API_KEY, SFL_APP_CLIENT_ID, SFL_APP_PRIVATE_KEY.
  • Configure labels if needed: .\deployment\governance\setup-labels.ps1 -Owner <org> -Repo <repo>.
  • Verify gh aw compile .github/workflows/sfl-pr-review.md and test by applying sfl-review to a PR.
  • Review sfl.json in the repo root.

[!NOTE]

Deploy Set it Free Loop PR review workflow at review tier v2.0.0

• Adds sfl-pr-review.md, an agentic workflow that triggers on the sfl-review label and runs a full-spectrum PR review using moonshotai/kimi-k3 via OpenRouter.
• The workflow posts up to 20 inline findings, submits a consolidated APPROVE or REQUEST_CHANGES review, and creates an SFL Reviewer Approval check run based on finding severities.
• Adds sfl.json as the SFL deployment manifest pinning the version, tier, and engine policy.
• Adds a generated lock workflow sfl-pr-review.lock.yml with pinned action SHAs and a .gitattributes rule to treat lock files as generated with merge=ours.

^{Macroscope summarized 478a0d0.}