[PR] fix(release-vote-draft): keep CVE IDs and security framing out of the expedited reason [magpie]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk opened a new pull request, #1509:
URL: https://github.com/apache/magpie/pull/1509

   `release-vote-draft` copied the release manager's `--expedited` reason verbatim into the `[VOTE]` email and the planning-issue comment, and both are public.
   If the reason named a CVE ID or described the release as fixing a security problem, the skill published that before the embargo lifted.
   The eval expected that output, so the model failed both expedited cases (on `main` too) by correctly leaving the CVE out.
   
   ## Summary
   
   - **Golden rule 4 and Steps 2 and 3:** until the public announcement ships, the expedited reason names no CVE and carries no security framing, per [AGENTS.md § Confidentiality](https://github.com/apache/magpie/blob/main/AGENTS.md#confidentiality-of-the-tracker-repository). The reason is written neutrally (*"Time-sensitive fix release"*), keeps any approval the RM cited, and the RM is told what was left out.
   - **Expected answers:** the two expedited cases now expect the neutral reason.
   - **New assertion:** both suites assert that no CVE ID or security framing reaches the public text.
   
   ## Test plan
   
   - [x] prek hooks on commit
   - [x] `release-vote-draft` step-2 (3/3) and step-3 (3/3). Step-2 case-2 failed once on bracket formatting, then passed twice.
   
   🤖 Generated with [Claude Code](https://claude.com/claude-code)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(release-vote-draft): keep CVE IDs and security framing out of the expedited reason [magpie]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk merged PR #1509:
URL: https://github.com/apache/magpie/pull/1509


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org