The review guard called a fix awaiting release an attack: a merged dev PR that changed claude-review.yml went red on every dev PR as 'review disabled repo-wide'. A third arm reads the base's copy back to the merged PR that produced it and says 'pending release'; the hostile arm is unchanged and a lookup that dies there fails closed - #3673