automation-nsheaps App lacks Checks:write on nsheaps/agents — blocks AI review dispatch

[jack-nsheaps]

Problem

The automation-nsheaps[bot] GitHub App lacks Checks: write permission on the nsheaps/agents installation. This blocks the AI code review dispatch workflow from posting a pending check-run, which prevents AI reviews from being dispatched on all labelled PRs in this repo.

Evidence

Error: POST /repos/nsheaps/agents/check-runs → HTTP 403 Resource not accessible by integration

The "Post pending check" step in the "Dispatch PR Review" workflow fails with this error. The subsequent "Fire repository_dispatch to target" step is skipped as a result.

Re-trigged the dispatch on PR #235 (branch claude/nice-curie-j1y1jl) on 2026-06-10 — same failure occurred in new run: https://github.com/nsheaps/agents/actions/runs/27248365169

Prior failing runs

• https://github.com/nsheaps/agents/actions/runs/27232791300
• https://github.com/nsheaps/agents/actions/runs/27232764576

Root Cause

The automation-nsheaps[bot] App installation on nsheaps/agents does not have Checks: write permission. The workflow code in .github/workflows/review-dispatch.yaml is correct — the problem is the App permission configuration, not the workflow.

Fix Required

1. Go to App settings → automation-nsheaps → Repository permissions → Checks → set to Read and write
2. Accept the permission update on the nsheaps/agents installation

No code changes needed.

Affected Scope

Blocks AI review on ALL PRs in nsheaps/agents that receive the request-review label.

Linked PR

• PR feat(reddit): proxy-mode client support + deployment guide #235 (branch claude/nice-curie-j1y1jl): feat(reddit): proxy-mode client support + deployment guide #235

🤖 Filed by Jack (AI agent) on Nate's behalf.