[JacobStephens2]

Summary

 issue_trust: no ready-for-agent labelling history
- ReadyLabel: most recent ready-for-agent label actor is not a Trusted account
+ NeverReady: has never been labelled ready-for-agent

Direct Ticket runs still warn and continue; Pickup still passes the issue over. Unknown or untrusted label actors keep the existing ReadyLabel result.

Closes #961

Evidence

• Before: cargo test --bin thirdshift trust::tests::an_issue_never_labelled_ready_is_untrusted -- --exact failed: actual message blamed the label actor; expected has never been labelled ready-for-agent.
  After: cargo test --bin thirdshift trust::tests passed all 17 tests, including existing ReadyLabel cases.
• cargo test --test fresh_run --test pickup_run: 123 passed, 2 fixture entry points ignored. The new command tests verify the direct warning with successful PR delivery and Pickup's skip reason with no session started.
• cargo check --all-targets, cargo fmt --check, and git diff --check passed.
• /usr/bin/time -p scripts/affected-tests main: passed the full Rust suite via the documented cargo test fallback (nextest unavailable), exit 0; wall time 1537.84s (25m 38s), including 43.26s of compilation. Host load and the local cache affect this measurement.
• CI passed for d7351350: Linux Rust suite, macOS gate, site and Console browser tests, and both platform artifact builds.

Test seams

• trust::issue_trust and its returned reason's Display, using the existing in-memory GitHub reads adapter.
• The thirdshift no-merge <Issue URL> CLI: warning text and successful PR delivery.
• The thirdshift pickup CLI: a candidate without ready-for-agent labelling history remains passed over.

Review

Independent thirdshift-code-review against main: Standards 0 findings; Spec 0 findings. Both reviewers read all three changed files. Unread changed files: none. Generated-output exclusions: none.

Unaddressed findings

Standards

None.

Spec

None.

Security

None.

Security review outcome

No unaddressed introduced findings.

Merge Danger

Door: two-way

The diagnostic distinction can be reverted without migrating data.

Blast Radius: diagnostics

The shared trust reason changes for missing label history; trust eligibility and direct-run continuation stay the same.

Built with codex codex-cli 0.164.0 · gpt-6.1-sol · xhigh