| Pattern | Cadence | Status | Command |
|---|---|---|---|
| Dependency Sweeper | 6h | L2 patch-only | opencode run "Run dependency-triage" --agent loop-triage via cron |
- Major version bumps always human.
- High-severity CVE requiring breaking change: human.
- Denylist packages (edit in state) never auto-touched.
- No auto-merge without verifier pass.
- One worktree per package update attempt.
- Discard on REJECT or human escalation.
- Max sub-agent spawns per run: 3.
- Max auto-PRs per day: 5.
- Pause if token budget exceeded.
- Pattern: dependency-sweeper
- Example: examples/opencode/dependency-sweeper.md
- Safety: docs/safety.md