Skip first install AI review gate

Adjust the AI Review workflow so the first Unicorn Hub bootstrap PR succeeds when trusted review scripts are not yet present on the base branch. After this PR is merged, future pull requests will run the trusted scripts from main instead of PR-provided review gate code.

Constraint: First-install bootstrap skips only when trusted review scripts are absent on the base branch

Tested: ruby YAML parse for .github/workflows/ai-review.yml; pnpm run check:repo; node scripts/check-feature-memory.mjs --worktree

Co-authored-by: OmX <omx@oh-my-codex.dev>

Author: kiaquila

.github/workflows/ai-review.yml

@@ -44,21 +44,29 @@ jobs:
           path: .gate-trusted
           fetch-depth: 1
 
-      - name: Resolve PR context
-        id: pr
+      - name: Resolve trusted review script availability
+        id: trusted
+        shell: bash
         run: |
-          if [ -f .gate-trusted/scripts/resolve-pr-context.mjs ]; then
-            node .gate-trusted/scripts/resolve-pr-context.mjs
+          if [ -f .gate-trusted/scripts/resolve-pr-context.mjs ] && [ -f .gate-trusted/scripts/ai-review-gate.mjs ]; then
+            echo "available=true" >> "$GITHUB_OUTPUT"
           else
-            echo "::warning::Trusted review script missing on default branch; using PR script for first-install bootstrap only."
-            node scripts/resolve-pr-context.mjs
+            echo "::notice::Trusted AI review scripts are not installed on the base branch yet; skipping AI Review enforcement for the first Unicorn Hub bootstrap PR."
+            echo "available=false" >> "$GITHUB_OUTPUT"
           fi
+
+      - name: Resolve PR context
+        id: pr
+        if: steps.trusted.outputs.available == 'true'
+        run: |
+          node .gate-trusted/scripts/resolve-pr-context.mjs
         env:
           GITHUB_TOKEN: ${{ github.token }}
           AI_REVIEW_PR_NUMBER: ${{ inputs.pr_number }}
 
       - name: Resolve selected review policy
         id: policy
+        if: steps.trusted.outputs.available == 'true'
         shell: bash
         env:
           SELECTED_AGENT: ${{ vars.AI_REVIEW_AGENT }}
@@ -91,13 +99,8 @@ jobs:
           echo "trigger_mode=$trigger_mode" >> "$GITHUB_OUTPUT"
 
       - name: Route and validate selected native review
-        run: |
-          if [ -f .gate-trusted/scripts/ai-review-gate.mjs ]; then
-            node .gate-trusted/scripts/ai-review-gate.mjs
-          else
-            echo "::warning::Trusted review script missing on default branch; using PR script for first-install bootstrap only."
-            node scripts/ai-review-gate.mjs
-          fi
+        if: steps.trusted.outputs.available == 'true'
+        run: node .gate-trusted/scripts/ai-review-gate.mjs
         env:
           GITHUB_TOKEN: ${{ github.token }}
           AI_REVIEW_AGENT: ${{ steps.policy.outputs.selected_agent }}