## 📝 Summary

- ARM64 docker
- Speed improvement by recycling built bin.

## ✅ I have completed the following steps:

* [X] Run `make lint`
* [X] Run `make test`
* [ ] Added tests (if applicable)

## 📝 Summary

  - Split Claude actions into PR‑only and issues‑only workflows.
- PR workflow handles reviews and @claude on PR comments; issues
workflow handles @claude in issues and replies there.
  - Issue workflow can comment on issues but has no PR or git tooling.

## 📝 Summary
- Apply least-privilege permissions — moved permissions from
workflow-level to per-job.
- Prevent double-trigger on @claude review — claude-response now
excludes @claude review comments on the issue_comment path, so only
claude-manual-review handles those.
- Add concurrency groups — each job cancels stale in-progress runs per
PR, preventing redundant parallel executions on rapid pushes.
  - Add security prompt to interactive mode.

## 📝 Summary

Previously included endpoint was internal without stability guarantees,
switch to public-facing one.

## 💡 Motivation and Context

<!--- (Optional) Why is this change required? What problem does it
solve? Remove this section if not applicable. -->

---

## ✅ I have completed the following steps:

* [ ] Run `make lint`
* [ ] Run `make test`
* [ ] Added tests (if applicable)