feat: add EventRelay Gemini change verification command

[groupthinking]

Closes #2422

Outcome

Adds /verify-change to the repository-owned Gemini CLI extension. The command verifies one bounded EventRelay change and requested claim at an immutable target, keeps artifact, local, provider, merge, deployment, and production evidence separate, and returns exactly one fail-closed verdict: VERIFIED, FAILED, STALE, or UNVERIFIED.

Scope

• Included: /verify-change TOML prompt; exact-SHA and worktree-state binding; repository-derived local commands; read-only provider evidence rules; deterministic verdict precedence; non-mutation and secret-safety boundaries; evidence-ledger output; version 0.3.0; documentation; focused extension contracts.
• Explicitly excluded: application/runtime changes, dependencies and lockfiles, workflows, provider mutations, production requests, deployments, model calls, and user-global Gemini configuration changes.

Risk

• Risk level: low.
• Failure mode: a weak verification prompt could credit stale or irrelevant evidence, infer higher-layer completion from a lower layer, execute untrusted arguments, or mutate repository/provider state.
• Rollback: revert this pull request; no runtime migration or production state is involved.

Verification

Exact head: 6e72c5b0f467cad62f05b252b7e4be33f3cfaf94

• python3 -m unittest -v tests.unit.test_eventrelay_gemini_extension — 25 passed on Python 3.14.
• /opt/homebrew/bin/python3.12 tests/unit/test_eventrelay_gemini_extension.py — 25 passed on Python 3.12.
• gemini extensions validate .gemini/extensions/eventrelay-engineering — passed.
• Fresh isolated temporary Gemini home — exact local extension linked successfully and listed enabled at version 0.3.0.
• git diff --cached --check before commit and committed diff checks — passed; PR contains four expected files, 351 additions, and 1 deletion.
• Staged and committed changed-scope gitleaks scans — no leaks found.
• Exact-head GitHub workflows — all nine applicable workflows succeeded; Dependabot Auto Merge was the only skipped workflow and is inapplicable to this non-Dependabot PR.
• Copilot review — both findings were corrected, re-tested, verified in the provider patch, and resolved with no unresolved threads remaining.

Evidence boundary

Current evidence proves the exact local artifact, focused contract behavior, manifest validity, isolated extension discovery, changed-scope secret scan, and exact-head provider checks and review. It does not prove merge persistence, deployment, production behavior, a Gemini model response, or a user-global installation.

Agent handoff

• One canonical issue is linked.
• Fresh GitHub search found no competing /verify-change implementation.
• Issue feat: add exact-head Gemini /verify-change command #2422 acceptance criteria are represented by the exact local head.
• Required provider checks and review state pass on the pushed exact head.
• No deployment, production request, or provider mutation is included in this change.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Repository: groupthinking/EventRelay/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d89110f2-19f6-4f3f-aac8-2a535e15fff3

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🟡 Changes recommended

Immutable worktree binding and rewritten-history handling are incomplete, allowing verification against stale or incorrect scopes.

2 open findings

• Reject misleading origin/main...HEAD scopes without a valid merge base · New
• Recheck immutable content digest before crediting verification · New

What changed in this PR

Adds /verify-change to the repository-owned Gemini CLI extension for fail-closed, evidence-layered change verification.

Changes:

• Adds the verification prompt and four verdicts.
• Documents command usage and bumps the extension to 0.3.0.
• Adds focused prompt-contract tests.

File	Description
.gemini/​extensions/​eventrelay-engineering/​commands/​verify-change.toml	Defines verification scope, evidence rules, and verdicts.
.gemini/​extensions/​eventrelay-engineering/​README.md	Documents /verify-change.
.gemini/​extensions/​eventrelay-engineering/​gemini-extension.json	Bumps version to 0.3.0.
tests/​unit/​test_eventrelay_gemini_extension.py	Tests the new command contract.

🧠 Review effort: Balanced

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[linear-code]

GRV-820

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
v0-uvai	Ready	Preview, v0	Oct 12, 2026 6:07pm UTC