Fix cross-repository PR cost coverage

[jeffhuber]

Summary

• isolate explicitly different repositories in shared builder and reviewer spend ledgers
• link pre-PR builder records only when their branch exactly matches one fetched GitHub PR
• keep missing, ambiguous, malformed, and same-repository unattributable evidence fail closed

Evidence

• focused economics suite: 101 tests passed, 40 subtests passed
• Ruff: passed
• compileall: passed
• release-readiness: 24 of 24 passed
• easy-mode smoke: passed
• privacy scan: passed
• full unittest discovery: 4,942 tests run; 4,918 passed, 18 skipped, 6 unrelated Board lifecycle failures because this host has an active managed Board service while those fixtures expect direct process control

Census

The same metadata-only dry run was evaluated before and after this patch with no upload.

• Code Mower complete-cost coverage: 0 to 118 PRs
• Code Mower partial coverage: 140 to 22 PRs
• Code Mower reported cost: unchanged at $122.247807
• CodeMower.com results: unchanged

No subscription access, elapsed time, token counts, source, diffs, prompts, transcripts, issue bodies, raw output, credentials, or local paths are uploaded.

Closes #1106.

CODE_MOWER_BUILDER: codex

[gitar-bot]

Note

Automatic reviews are paused because your team has used its included automatic processing for this billing period (headroom scales with your seat count). You can still comment "Gitar review" to run one anytime, and automatic reviews resume on their own by October 1. Add seats for more headroom.
Learn more

Code Review ✅ Approved

🟡 Medium risk · Changes cross-repository cost attribution and PR evidence coverage in uploads

Fixes cross-repository PR cost coverage by isolating different repositories in shared builder and reviewer spend ledgers and linking pre-PR builder records only when their branch exactly matches a fetched GitHub PR. Comprehensive testing confirms the fix: 101 economics tests passed, all lint and compilation checks passed, and cost coverage improved from 0 to 118 complete PRs with no changes to reported costs. No issues found.

Review coverage

📋 Rules No rules evaluated

🧪 Functional validation Not enabled · Set up

Options

Display: compact → Counting what did not apply, without listing it.

Comment with these commands to change the behavior for this request:

Compact

gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[github-actions]

Claude audit (merge-authority lane)

Head SHA: 499146c0f974f471645b091dd17614b0fc6a94d6
Verdict: PASS
Review details remain in the local audit artifact.
Publication workflow: .github/workflows/local-audit-publication.yml at 9f6a89dd717e70946fd6445ecb8c87ebf4244137

[jeffhuber]

Claude audit (merge-authority lane)

Head SHA: 499146c0f974f471645b091dd17614b0fc6a94d6
Findings: P0=0, P1=0, P2=0, P3=0 (blocker policy: any P0/P1/P2 -> BLOCKED)

Claude Audit: PASS

Summary:

PR fixes cross-repository PR cost coverage: cross-repo evidence (explicit differing repo_slug) is now isolated instead of suppressing the current repo's coverage, and pre-PR builder runs can be linked to a PR via an unambiguous branch match against fetched GitHub PRs, remaining fail-closed on missing/ambiguous matches. Logic, docs, and tests are consistent; ambiguous-branch and cross-repo isolation paths are explicitly covered by new tests. No correctness, security, or data-loss issues found.

Findings: none.