PR Pipeline — Authorize → Validate → Review → Merge / auth (pull_request) Successful in 17s
PR Pipeline — Authorize → Validate → Review → Merge / validate (pull_request) Successful in 32s
PR Pipeline — Authorize → Validate → Review → Merge / ai-review (pull_request) Successful in 11s
PR Pipeline — Authorize → Validate → Review → Merge / lint (pull_request) Successful in 17s
PR Pipeline — Authorize → Validate → Review → Merge / gate (pull_request) Successful in 3s
Tanko runs both DSH (pnpm dsh web) and Hermes (hermes gateway) concurrently. The false premise was that tanko is DSH-only with no Hermes gateway, which caused the gateway liveness, config.yaml, and wrapper integrity checks to be skipped entirely. Now tanko gets the full Hermes-era checks like koonimo and koby, while dsh/pi-only agents still skip those legs correctly.