[kingdomseed]

Why the change

Code Review ran on Factory's default model and billed Factory credits; this moves the master review workflow to Claude Sonnet 5.5 on the organization's ANTHROPIC_API_KEY, matching what was proven on mythic-dice-parser.

Special things to note

• The custom model is written to ~/.factory/settings.json in its own step. The action's settings input writes ~/.factory/droid/settings.json, which Droid ignores for custom models, so reviews silently fell back to the org default (mythic-dice-parser run 40582959530).
• Verified on mythic-dice-parser PRs #22 and #24: run logs show custom:anthropic-api:sonnet-5-5 and an empty MODEL_FALLBACK_NOTE, and the review caught a planted bug.
• Review stays off until JHD_FACTORY_REVIEW_ENABLED is true.

Change outline

 review job
+  Register the Anthropic API custom model   (writes ~/.factory/settings.json)
   Run native deep review and security (droid-action v10, unchanged pin)
+    env: ANTHROPIC_API_KEY from secrets
+    review_model / security_model: custom:anthropic-api:sonnet-5-5

Docs: CREDENTIALS.md lists the new secret, PROVENANCE.md records the correction, and OPERATIONS.md names the review model.

Merge risk

Merge risk: low

Alignment: good ✅

• Jason asked for the same Anthropic-key review across JHD repositories.

Impact: small ✅

• One workflow step plus docs; repositories get it through separate PRs.

Verification: good ✅

• Validator, Python and Node tests pass; two live review runs on mythic-dice-parser.

Rollback cost: low ✅

• Revert to return to the Factory default model.

Error detection: decent 👀

• A failed model load shows MODEL_FALLBACK_NOTE in the PR tracking comment.

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-27T21:56:44.539407Z	d1bac6d	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}