#1 chore: deploy Set it Free Loop (review tier, v2.0.0)

Set it Free Loop — Deployment

Version: 2.0.0
Tier: review
Source SHA: 380fe0edc7a87cfc7b31233a955b37df0223a3a8
Engine policy: codex-gpt-55-high

Components deployed

• labels
• governance
• sfl-pr-review

What is the Set it Free Loop?

The Set it Free Loop is a continuous
quality improvement operating model for software repositories. See the
CATALOG
for all available workflows.

Before merging

• Run .\deployment\governance\setup-labels.ps1 -Owner <org> -Repo <repo> if labels are not yet configured
• For each .md workflow: verify gh aw compile .github/workflows/<name>.md succeeds
• Trigger a workflow manually to confirm output
• Review sfl.json manifest in the repo root

---

Summary by cubic

Deploys Set it Free Loop (review tier) v2.0.0 to enable automated, full‑spectrum PR reviews with a single approval check. Uses OpenRouter moonshotai/kimi-k3 with GitHub App auth and cleans up the sfl-review label after completion.

• New Features

  • Adds sfl-pr-review workflow (.md and compiled .lock.yml) that triggers on the sfl-review label, posts inline findings, submits one consolidated review, publishes the SFL Reviewer Approval check, and removes the label.
  • Pins github/gh-aw-actions/setup@v0.84.1 via .github/aw/actions-lock.json.
  • Introduces sfl.json (v2.0.0, tier review) with engine policy codex-gpt-55-high and workflow model moonshotai/kimi-k3 via OpenRouter.
  • Adds .gitattributes to mark *.lock.yml as generated with merge=ours, plus a README badge that displays the deployed SFL version.

• Migration

  • Run .\deployment\governance\setup-labels.ps1 -Owner <org> -Repo <repo> if labels are not configured.
  • Set secrets: OPENROUTER_API_KEY, SFL_APP_PRIVATE_KEY.
  • Verify each workflow with gh aw compile .github/workflows/<name>.md, then trigger once to confirm comments and the approval check.
  • Review and commit sfl.json in the repo root.

[!NOTE]

Deploy Set it Free Loop PR review workflow at review tier v2.0.0

• Adds sfl-pr-review.md, an agentic workflow spec that triggers on the sfl-review PR label, runs multi-pass security/correctness/quality analysis using moonshotai/kimi-k3 via OpenRouter, posts inline comments per finding, and submits a consolidated APPROVE or REQUEST_CHANGES review with a SFL Reviewer Approval check run.
• Adds sfl-pr-review.lock.yml, a fully-pinned generated lock workflow with jobs for activation, agent execution, safe-outputs, and conclusion.
• Adds sfl.json as a machine-readable deployment manifest recording version, tier, included components, and engine policy; the README.md reads this to render a dynamic version badge.
• Marks *.lock.yml workflow files as linguist-generated with a merge=ours strategy in .gitattributes.

^{Macroscope summarized 54da5b7.}