repo-scoping/docs/migrations/trusted-auto-approval.md

Trusted Auto-Approval Migration

trusted_auto_approve_candidate_graph is historical migration behavior, not an allowed acceptance path. Deterministic analysis may generate facts and candidates, and deterministic quality gates may block or require review, but approval now requires human judgement or configured agentic review.

Identify Historical Runs

Use the inventory surfaces before rebuilding a repository with approved maps:

repo-scoping list-legacy-auto-approvals --format json

The API exposes the same inventory at:

GET /review/migrations/trusted-auto-approvals

Each record identifies the repository, analysis run, review decision, current approved ability count, scanner version when available, and the recommended next step. These records are derived from review decisions whose action is trusted_auto_approve_candidate_graph.

Rebuild Without Losing Audit History

Historical review decisions are retained. Rebuilding characteristics creates a new analysis run and can clear the currently approved characteristic tree, but it does not delete the old review-decision audit trail.

1. Run a dry run:

   repo-scoping rebuild-characteristics --repo <repo-id> --dry-run --no-llm
   

2. Inspect candidate output, quality-gate outcomes, and existing review decisions.

3. Confirm the rebuild only when ready:

   repo-scoping rebuild-characteristics --repo <repo-id> --confirm --agentic-review
   

4. If no agentic reviewer is configured, complete human review through the candidate graph approval/edit/reject flow.

Compatibility Notes

• AnalysisRunCreate.trusted_auto_approve remains as a deprecated API input for older callers, but requests are routed to agentic review and do not deterministically approve candidates.
• The CLI does not expose deterministic trusted auto-approval. Use --agentic-review during rebuild or approve after human review.
• The service method trusted_auto_approve_candidate_graph() is guarded by allow_deprecated_migration_mode=True and should only be used to replay or inspect historical migration behavior in controlled tests or migration tools.
• Self-scoping assessment artifacts continue to flag trusted_auto_approve_candidate_graph as review debt.