[PR governance] Enroll html4tree in central OpenCode review dispatch

[seonghobae]

Problem

ContextualWisdomLab/html4tree is governed by the central required-review workflows, but it is absent from the exact repository allowlist exposed through OPENCODE_REPOSITORY_DISPATCH_TARGETS.

The current html4tree pull requests have completed same-head Strix evidence, and the repository-local scheduler then stops with this fail-closed decision:

Required OpenCode Review dispatch waits for central required workflow materialization; required workflow source is ContextualWisdomLab/.github, but this scheduler run has no cross-repository repository-dispatch credential.

The central scheduler's runtime allowlist currently omits ContextualWisdomLab/html4tree, so the privileged central path cannot target the repository either. A green placeholder check must not be treated as an actual Reviews API verdict.

Affected current pull requests

• ContextualWisdomLab/html4tree#435
• ContextualWisdomLab/html4tree#436
• ContextualWisdomLab/html4tree#442
• ContextualWisdomLab/html4tree#444

All four have auto-merge enabled and remain blocked on a real independent current-head review verdict.

Acceptance criteria

• Add ContextualWisdomLab/html4tree to the organization variable OPENCODE_REPOSITORY_DISPATCH_TARGETS without weakening the exact-allowlist or actor validation.
• Run the central targeted scheduler for each affected current head after same-head Strix evidence completes.
• Verify that opencode-agent or opencode-agent[bot] submits APPROVED or CHANGES_REQUESTED for the exact current head through the Reviews API.
• Do not accept a COMMENTED review, old-head review, status-only check, human-originated repository_dispatch, or self-approval as satisfying the gate.
• Confirm that an approved PR with successful exact-head required checks merges through the existing auto-merge policy.
• Close this issue only after at least one html4tree PR receives a real current-head OpenCode review and the remaining affected PRs are queued through the same path.

Security boundary

This is a configuration enrollment request, not a request to remove fail-closed behavior or bypass independent approval.

[seonghobae]

Updated exact-head enrollment targets after maintainer hardening:

• ContextualWisdomLab/html4tree#435 — 0e54b9f68775bb2f6198065f513a6bf56b7df0e5
• ContextualWisdomLab/html4tree#436 — adf4be984d917570813c227117b7bbf2ac568c3b
• ContextualWisdomLab/html4tree#444 — 520b1adf2a575f2d66f47911669026917a94f066

PR #442 is now Draft and must not enter merge automation: its all-or-nothing failure path cannot safely delete or replace index.html until the generated-artifact ownership contract in #1004 exists.

#435 and #436 now include standards-traceability doctoring and realistic regression tests; #444 includes an observable filesystem-call-count regression. Each exact head has fresh required workflows queued. The unresolved blocker remains a real independent Reviews API verdict from opencode-agent/opencode-agent[bot]; a status-only check or old-head verdict is not acceptable.

[seonghobae]

Enrolled ContextualWisdomLab/html4tree in the organization variable OPENCODE_REPOSITORY_DISPATCH_TARGETS.

Current allowlist: ContextualWisdomLab/.github,ContextualWisdomLab/naruon,ContextualWisdomLab/keyverse,ContextualWisdomLab/html4tree.

The exact-allowlist and actor validation are unchanged. A current-head OpenCode Reviews API verdict is still required; this does not treat a placeholder check as approval.

[seonghobae]

2026-08-15 html4tree queue update:

• Ready PR needing exact-head independent review dispatch: ContextualWisdomLab/html4tree#444 at 520b1adf2a575f2d66f47911669026917a94f066.
• Draft PRs that must receive review-only treatment, not merge automation:
  • #436 at 6273b0fba81eb631f542f476cbb6aaf6933742b7 — valid code direction but .jules/palette.md contains superseded empty-state guidance.
  • #442 at 24037e2ed75a9218aa154333c7d88e8fda31f295 — waits for fix(opencode): ignore review-state gate before approval #453 ownership contract.
  • #453 at f1918b3c222fbe34b9528090eafd18cce64f3dc2 — representative generated-index ownership PR, currently Draft due valid CodeRabbit findings plus backup-retention hardening.

Closed duplicate or unsafe-repeat html4tree PRs in this loop: #446, #447, #448, #449, #450, #451, #452. Do not dispatch merge automation for those closed PRs. The required boundary remains an actual current-head Reviews API verdict from opencode-agent/opencode-agent[bot]; a status-only opencode-review check is not sufficient.