[hard_yellow] judged_paths go to Jev with [path_judge] judge = "jev": weakened checks give ORANGE,
routine changes a hint, the rest YELLOW; hard paths always win, and the host may forbid the repository to switch the judge on.
The README shows how workflow code, Jev and the LLM work together.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

@@ -26,3 +26,3 @@
     # These modules hold the trust boundary: tokens, redaction, the HOME guard and the Gitea writes.
     "werkrevisor/isolation.py", "werkrevisor/redact.py", "werkrevisor/gitea.py", "werkrevisor/config.py",
-    "pyproject.toml", "requirements*.txt", "server/*.gradle.kts", "server/gradle/**", "server/gradlew*", "**/*secret*", "**/*.pem", "**/*.key", ".env*",
+    # The Gradle wrapper decides which Gradle runs, so it stays hard; the build files themselves are judged by Jev.

@@ -0,0 +55,4 @@
+    records: list = field(default_factory=list)
+
+
+def _diff_text(d):

@@ -239,6 +241,16 @@ def evaluate_rules(files, diffs, config):
             if pattern:
                 risky.append(f"{path} ({pattern})")
                 break
+        else:

@@ -29,1 +28,4 @@
+    # The Gradle wrapper decides which Gradle runs, so it stays hard; the build files themselves are judged by Jev.
+    "pyproject.toml", "requirements*.txt", "server/gradle/**", "server/gradlew*", "**/*secret*", "**/*.pem", "**/*.key", ".env*",
 ]
+# Jev judges these: a version number or a new module gives GREEN, a weakened check ORANGE.

@@ -0,0 +97,4 @@
+        for unit, future in futures:
+            try:
+                answer = future.result()
+            except Exception as e:

@@ -0,0 +42,4 @@
+  - **and** Jev answers `<weakens>` for "weakens checks" and `<risk>` for the build risk
+- **Then** the path gives `<color>`
+
+| change | weakens | risk | color |