From da19f55e9c294448b30c9659e0ac640b25ff1b38 Mon Sep 17 00:00:00 2001
From: tnsardesai <18272584+tnsardesai@users.noreply.github.com>
Date: Tue, 27 Oct 2026 03:50:54 +0000
Subject: [PATCH 1/2] Add shadow-mode PR risk check

---
 .github/workflows/pr-risk.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .github/workflows/pr-risk.yml

diff --git a/.github/workflows/pr-risk.yml b/.github/workflows/pr-risk.yml
new file mode 100644
index 000000000..f8d8914c4
--- /dev/null
+++ b/.github/workflows/pr-risk.yml
@@ -0,0 +1,28 @@
+name: PR Risk
+
+# Comments whether a small PR would have been auto-approved and why. It never approves, so a
+# human review is still required. The mechanism is pr-risk.yml in kernel/security-workflows.
+
+on:
+  pull_request:
+    types: [ready_for_review, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  classify:
+    uses: kernel/security-workflows/.github/workflows/pr-risk.yml@main
+    with:
+      # Never eligible in this repo, on top of the shared defaults.
+      deny-paths: |
+        deploy/**
+        lib/network/**
+        lib/egressproxy/**
+    # Named rather than `secrets: inherit`: this calls a workflow in another repository, and
+    # inherit would hand it every secret this repo holds.
+    secrets:
+      ADMIN_APP_ID: ${{ secrets.ADMIN_APP_ID }}
+      ADMIN_APP_PRIVATE_KEY: ${{ secrets.ADMIN_APP_PRIVATE_KEY }}
+      ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}

From 4c5c3ca2b9a1f225da1732af8fb3010fafcc6e25 Mon Sep 17 00:00:00 2001
From: tnsardesai <18272584+tnsardesai@users.noreply.github.com>
Date: Tue, 27 Oct 2026 03:57:20 +0000
Subject: [PATCH 2/2] Run the PR risk check on PRs opened as ready

---
 .github/workflows/pr-risk.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/pr-risk.yml b/.github/workflows/pr-risk.yml
index f8d8914c4..6b74d37e6 100644
--- a/.github/workflows/pr-risk.yml
+++ b/.github/workflows/pr-risk.yml
@@ -5,7 +5,7 @@ name: PR Risk
 
 on:
   pull_request:
-    types: [ready_for_review, synchronize]
+    types: [opened, ready_for_review, synchronize]
 
 permissions:
   contents: read