[probe] AgentShield severity gate ā do not merge
Temporary draft to confirm the AgentShield reusable fails at its configured min-severity (combsmith/.github#1436). It pins the reusable to the merge commit of combsmith/.github#1438 and runs on main as it is today. Expected: agent-shield / AgentShield fails. It will be closed and the branch deleted once the run is recorded.
š¤ Generated with Claude Code
Problem
See the linked issue.
Risk
Medium ā changes GitHub Actions workflow behavior, which is exercised only post-merge; verify via the affected workflow runs.
Test plan
No test files were added or updated. Verification: bash scripts/dev-lead-lint.sh (shellcheck --severity=warning) ran pre-commit; the existing CI (bats + lint) guards the change.
Rollback
Revert this PR. No non-revertible side effects (no tags, migrations, or external state).
Monitoring
Watch the affected workflow run(s) in the Actions tab and this PR's Lint check for regressions.