`has_customization` regex creates a fragile coupling to canonical-stub contents

[twistedmelonman]

Non-Blocking Review Concern: has_customization regex creates a fragile coupling to canonical-stub contents

Source: pre-push whole-codebase review
Location: bulk-install-claude-review.sh:153-156
Date: 2026-04-30

What was flagged

has_customization flags any file with a top-level paths-ignore, paths, extra_instructions, model, timeout_minutes, or env key (or a literal [skip-claude-review: token). If the canonical caller stub at smartwatermelon/.github/workflow-templates/claude-blocking-review.yml ever introduces any of these (e.g., a workflow- or job-level env: block, or a paths-ignore to skip docs-only PRs), every freshly installed copy will be permanently classified CUSTOMIZED on subsequent runs and never bumped — silently breaking the rollout/refresh loop. Mitigation: add an early self-check that runs has_customization against the just-fetched CANONICAL_CONTENT and aborts with a loud diagnostic if it returns true, so this can never get out of sync without the operator noticing.

Context

This issue was automatically created from a non-blocking concern identified
during pre-push whole-codebase review. It was flagged for tracking.

---

Created by lib-review-issues.sh

[twistedmelonman]

Closing per fleet-wide issue triage. Verified this cosmetic tech-debt finding is still technically accurate in current code, but it's a low-value, non-blocking style/hardening nit in internal tooling scripts (not a bug, not planned future work, no user-facing impact — misclassification risk in bulk-install-claude-review.sh is real but low-likelihood per the issue's own analysis). Closing to declutter backlog; re-file if it causes an actual incident during future fleet rollouts.