fix(strix): unblock trusted smoke during provider-prefix migration

[seonghobae]

Purpose

The protected-main trusted Strix smoke test hard-codes the retired openai-direct/ alias. A PR that updates the workflow and its smoke assertion together cannot pass its own pull_request_target self-test because the smoke executable is intentionally loaded from protected main.

Change

Accept the current canonical openai_direct/ form and the pre-migration form during this bounded transition. This preserves the trusted gate while allowing the canonical workflow PR (#1263) to pass after this prerequisite merges; #1263 still enforces the canonical form and rejects the retired alias in its own workflow contract.

Verification

• bash -n scripts/ci/strix_required_workflow_smoke.sh
• bash scripts/ci/strix_required_workflow_smoke.sh
• git diff --check

This is a normal protected PR prerequisite. No ruleset, required check, approval, or test policy is changed.

---

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4063a189-0f31-4d6d-9414-6668f0ca0e15

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[seonghobae]

RCA for failed Strix job 97304258487: the trusted smoke passed. The required scan then failed closed because NVIDIA NIM returned HTTP 429, and the fallback configured on protected main used the pre-migration openai-direct alias. This is provider/control-plane evidence, not a failure of this one-file smoke compatibility change. A normal failed-job rerun is queued; merge remains blocked until a current exact-head Strix result succeeds.

[seonghobae]

Exact head 677df5b against main@0c6b9a6459c9dbdf5e23fb01df7a32a8a14964b3 is unchanged. The one-file change is bounded to the protected Strix smoke compatibility assertion and preserves the canonical workflow contract; current hosted checks are queued with no failed conclusion. Please publish a substantive formal review for this exact head; no merge until all required checks and independent approval are current.

[seonghobae]

@opencode-agent review

Review exact current head 677df5b against protected main@0c6b9a6459c9dbdf5e23fb01df7a32a8a14964b3. Walk through the one-file smoke compatibility change and its permission/assertion boundary, then publish a substantive Reviews API verdict on this exact SHA.

[seonghobae]

Exact-head RCA for 677df5b: Strix failed in run 32691523377 because NVIDIA NIM returned HTTP 429 Too Many Requests, then the configured direct fallback returned HTTP 404. The log also states no vulnerability report artifact was produced and fails closed on provider infrastructure output. This is provider/backend infrastructure evidence, not a source finding in this PR; rerun the failed Strix job under the existing gate.