ci(review): budget complete DeepSeek Pro coverage for release PR 6002

Scope the approved 500000-character, 16-pass and 65536-output-token budget to PR Hmbown#6002 using the existing DeepSeek Pro BYOK route. Keep unrelated PR defaults, explicit repository overrides, pinned diff collection, and fail-closed complete coverage unchanged. Document the release exception alongside the general defaults.

Validation: actionlint passed and git diff --check passed. No provider request or public mutation executed; full current-head coverage planning is recorded separately before the public update.

Author: CodeWhale Bot

.github/workflows/codewhale-review.yml

@@ -16,8 +16,10 @@ name: Codewhale PR Review
 # being fetched for its diff. Same-repository authors already have write access.
 #
 # CODEWHALE_REVIEW_MAX_CHARS bounds each complete ordered review pass
-# (default 200000). CODEWHALE_REVIEW_MAX_PASSES defaults to 1; increasing it is
-# an explicit spend/duration choice. Exceeding either bound never posts a prefix.
+# (normally 200000). CODEWHALE_REVIEW_MAX_PASSES normally defaults to 1.
+# PR #6002 has an explicitly approved 500000-char / 16-pass / 65536-output
+# DeepSeek Pro budget below; other PRs retain the conservative defaults.
+# Exceeding either coverage bound never posts a prefix.
 # Missing keys and provider outages keep the existing advisory policy, and
 # their explicit non-run receipts must never be counted as completed reviews.
 
@@ -139,11 +141,14 @@ jobs:
           DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
           OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
           ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
-          CODEWHALE_REVIEW_PROVIDER: ${{ vars.CODEWHALE_REVIEW_PROVIDER }}
-          CODEWHALE_REVIEW_MODEL: ${{ vars.CODEWHALE_REVIEW_MODEL }}
-          CODEWHALE_REVIEW_MAX_OUTPUT_TOKENS: ${{ vars.CODEWHALE_REVIEW_MAX_OUTPUT_TOKENS }}
-          CODEWHALE_REVIEW_MAX_CHARS: ${{ vars.CODEWHALE_REVIEW_MAX_CHARS }}
-          CODEWHALE_REVIEW_MAX_PASSES: ${{ vars.CODEWHALE_REVIEW_MAX_PASSES }}
+          # One approved release review, using the existing provider secret.
+          # These ceilings authorize complete ordered passes only for PR #6002;
+          # repository variables remain explicit operator overrides.
+          CODEWHALE_REVIEW_PROVIDER: ${{ vars.CODEWHALE_REVIEW_PROVIDER || (github.event.pull_request.number == 6002 && 'deepseek') || '' }}
+          CODEWHALE_REVIEW_MODEL: ${{ vars.CODEWHALE_REVIEW_MODEL || (github.event.pull_request.number == 6002 && 'deepseek-v4-pro') || '' }}
+          CODEWHALE_REVIEW_MAX_OUTPUT_TOKENS: ${{ vars.CODEWHALE_REVIEW_MAX_OUTPUT_TOKENS || (github.event.pull_request.number == 6002 && '65536') || '' }}
+          CODEWHALE_REVIEW_MAX_CHARS: ${{ vars.CODEWHALE_REVIEW_MAX_CHARS || (github.event.pull_request.number == 6002 && '500000') || '200000' }}
+          CODEWHALE_REVIEW_MAX_PASSES: ${{ vars.CODEWHALE_REVIEW_MAX_PASSES || (github.event.pull_request.number == 6002 && '16') || '1' }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
         run: |
           set -euo pipefail

docs/GITHUB_APP.md

@@ -71,6 +71,15 @@ with `--no-project-config`. Account mode deliberately pins the relay route:
 the account agent precondition reports a configured provider, but does not
 supply an exact model id or a vendor credential to the runner.
 
+For release PR **#6002** only, the workflow supplies an explicitly approved
+`deepseek` / `deepseek-v4-pro` route and ceilings of **500000** characters per
+pass, **16** complete passes, and **65536** output tokens per request. Existing
+repository variables override these values. Other PRs retain the defaults
+below. This exception changes no credentials or coverage rules: a diff that
+requires more than 16 passes still fails before model review, and a provider
+non-run is never completed-review evidence. Keep the release head frozen
+during review to avoid cancellation and repeated provider cost.
+
 ## Complete diffs and input limits
 
 The workflow checks out the event's pinned head SHA for same-repository PRs,