Route LLM reviews through GPT-6-Astra on Azure

[Vilin97]

LLM reviews currently charge the repository’s OpenAI API key. Route every production review to gpt-6-astra at xhigh through the existing Codex account pool on the Azure lean VM. Azure failures fail the review; they never fall back to paid API requests. Review comments report Codex quota billing.

The VM worker and dedicated GitHub SSH secrets are deployed. The key permits only the review worker, the host key is pinned, Codex requires ChatGPT authentication, and review subprocesses disable tools and use isolated temporary directories on /data. Existing review rubrics, CI prerequisites, and verdict aggregation remain in effect. The explicit local API backend remains available separately.

Validation: 332 Python tests pass; Ruff lint/format, actionlint, and diff checks pass. Live GPT-6-Astra requests succeeded through both the worker and the restricted SSH transport. The real GitHub Actions review of PR #396 completed successfully: all five rubric calls used gpt-6-astra / xhigh / codex-azure, and the posted comment reports Codex account quota with no API credits. Successful workflow run.

[greptile-apps]

Advisory cross-file review against Lean Pool's supervisory rubric. This is not by itself a significance, source-verification, or merge verdict.

The PR appears safe to merge; no actionable issue remains in the current changes.

Summary

• Configures pinned-host SSH credentials in the review workflow and removes production OpenAI API credentials.
• Adds a standard-library remote worker with fixed model selection, credential isolation, bounded requests, process-group timeout handling, and structured responses.
• Updates review budgeting, billing labels, documentation, and tests for the Azure backend.
• Changes since the previous review only add consistent operational documentation to README.md and AGENTS.md.

_{Reviews (2) · Last reviewed commit: "Document the Azure review backend in the..."}

[github-actions]

LLM review skipped: PR touches no .lean files. Push a Lean change or comment /review after one lands to re-trigger.

[github-actions]

LLM review skipped: PR touches no .lean files. Push a Lean change or comment /review after one lands to re-trigger.