AGENT VIGIL

Public PR evidence desk

See what GitHub can prove.

Paste a public pull request. This page checks its exact commits, formal reviews, check runs, and commit statuses. It shows the gaps before you decide whether to install the full repository gate.

No account and no upload.
This static page requests public metadata directly from api.github.com. It does not fetch source files, send request bodies, store the URL, or change the repository.

Read-only observationbrowser 0.24.3-browser.1

Private repositories are rejected. GitHub limits anonymous API requests; this page does not ask for or retain a token.

What happens next

Observation first. Enforcement second.

  1. Check the public record. The browser receipt records exact commit identity, formal reviews, check counts, freshness, and missing coverage.
  2. Inspect the limits. This page does not run trusted repository tests or decide whether those tests were sufficient.
  3. Install the repository gate. The copied v0.24.4 command prepares an exact-pin workflow and base-owned policy for review.
  4. Add real enforcement. Use an external required workflow or an App-owned exact-head check. Requiring an ordinary job name does not establish who supplied the workflow.

Copied setup steps are labeled for the checked repository but run only in a local checkout. Trial registration is optional and opens a consent form; it does not install anything. Downloaded receipts and copied results omit response bodies, check logs, review text, source, prompts, and transcripts. Nothing is posted automatically.