systemic: CodeRabbit not submitting formal reviews on maintainer PRs — all merges blocked

[marcusquinn]

Problem

CodeRabbit is commenting on all open maintainer PRs but not submitting formal reviews (APPROVED or CHANGES_REQUESTED). This means all 23+ maintainer PRs have 0 formal reviews and cannot be auto-merged by the pulse supervisor.

Evidence

• PR GH#3862: Fix systemic Label PR from Conventional Commit CI failures #3865, GH#3549: Fix quality-debt in auto-deploy-agents workflow #3857, GH#3775: Fix remaining quality-debt from PR #356 review feedback #3856, GH#3793: Standardize post-increment to pre-increment across 50 shell scripts #3855, GH#3798: Fix critical quality-debt from PR #38 review feedback #3854, GH#3797: Fix critical quality-debt from PR #42 review feedback #3853, t3848: Fix code-review-monitoring CI 403 by adding top-level permissions #3850, GH#3803: Fix critical quality-debt from PR #44 review feedback #3847, t3837: Skip SonarCloud analysis gracefully when SONAR_TOKEN is missing #3839, fix: add input validation for --max-iterations and --completion-promise args (GH#3816) #3832, t3827: tune CodeRabbit config to reduce rate-limit pressure #3831, t3820: Pin CI dependency versions for reproducible builds #3830, t3820: Pin dependency versions in GitLab CI template #3828, fix: address remaining quality-debt from PR #14 review feedback #3823, GH#3702: Fix critical quality-debt in code-audit-helper.sh #3720, t3570: Replace deprecated gemini-2.5-pro-preview-06-05 with GA endpoint #3620, GH#3568: Fix quality-debt in flash.md from PR #758 CodeRabbit review #3618, fix: address critical quality-debt in accessibility helper scripts (#3530, #3538) #3590, fix: resolve critical quality-debt from PR #916 review feedback #3579, fix: separate local declarations from assignments in setup-modules #3545, t3501: fix Homebrew bin wrapper not executable after install #3542, t3384: fix .coderabbit.yaml schema compliance (PR #1 review feedback) #3394, GH#3297: Remove blanket error suppression from kill command in local-hosting docs #3324, fix: address PR #2079 review feedback for Cloudflare Code Mode docs #3304, fix: prevent ShellCheck memory explosion with RSS watchdog, rate limiting, and PATH fix #3146 — all have 0 formal reviews
• review-bot-gate-helper.sh check returns PASS (CodeRabbit commented) but gh pr view --json reviews --jq '.reviews | length' returns 0
• External contributor PRs (e.g., t1418: Deduplicate claim-task-id.sh guidance (3x → 1x canonical) #3925) DO receive formal CHANGES_REQUESTED from CodeRabbit
• Gemini is rate-limited on all PRs (rate-limit notices instead of reviews)

Hypothesis

CodeRabbit may be configured to only submit formal reviews on external contributor PRs, or there's a GitHub permission issue preventing it from submitting formal reviews on maintainer PRs. The .coderabbit.yaml has request_changes_workflow: true and auto_review: enabled — these should trigger formal reviews.

Impact

All maintainer PRs are stuck. The pulse supervisor cannot merge any PRs. Quality debt is accumulating.

Fix

1. Check CodeRabbit dashboard for any configuration or permission issues
2. Consider adding a fallback: if bot gate PASS and PR is 4h+ old with no formal reviews, allow merge (PASS_RATE_LIMITED scenario)
3. Or update pulse.md to allow merge when review-bot-gate returns PASS and PR is 4h+ old (treating PASS as equivalent to APPROVED for rate-limited scenarios)