Release: Review-Auto Sandbox Policy Contract

Forgeflow 4.3.57 lands Phase 4 of the review-auto sandbox path. The classifier now emits a deterministic policy contract before any sandbox runner exists, so future auto-fix proposals can distinguish safe proposal candidates from risky or blocked findings without editing source files.

Structured Finding Contract

• /forgeflow-review-auto-classify normalizes class, files, evidence_count, target file, source, tier, and policy metadata.
• Classifier output includes policy version, matched rules, reasons, proposal eligibility, and sandbox-required status.
• Saved evidence artifacts render the same policy contract for handoff and review.

Deterministic Policy

• Allowlisted single-file classes can become future sandbox proposal candidates.
• Unknown or unapproved classes stay risky.
• Denylisted classes and surfaces such as auth, permissions, secrets, migrations, dependencies, release publishing, settings files, broad behavior changes, and product judgment are not auto-applicable.

Schema Safety

• /forgeflow-review-evidence-schema now inspects files[] before classification.
• Multi-file findings and path hazards are surfaced before classifier or evidence consumption.
• The classifier remains read-only: no source edits, worker dispatch, commits, pushes, or sandbox runner behavior.

Validation

• Full scripts/forgeflow/test-*.js suite
• node scripts/forgeflow/test-classify-review-auto.js
• node scripts/forgeflow/test-check-review-evidence-schema.js
• node scripts/forgeflow/test-render-review-auto-evidence.js
• node scripts/forgeflow/smoke-check.js --mode source --json
• node scripts/forgeflow/render-release-readiness.js --json
• git diff --check