fix(strix): honor GPT-5.4 tool reasoning contract

[seonghobae]

Root cause

The required Strix workflow correctly exhausted NVIDIA NIM after HTTP 429/410 provider failures, then reached its direct OpenAI fallback. The pinned Strix scanner uses Chat Completions function tools, while direct OpenAI rejected gpt-5.4 when the inherited reasoning_effort=high was present. The fallback therefore produced no authoritative security evidence and remained fail closed.

Repair

• Preserve high reasoning for every existing supported model path.
• For the exact direct OpenAI gpt-5.4 fallback only, pass reasoning_effort=none, as required by the provider's observed Chat Completions function-tool contract.
• Keep vulnerability findings, provider exhaustion, missing artifacts, and all other incomplete scans non-passing.
• Extend the existing NIM-to-direct-OpenAI fallback regression so it fails if GPT-5.4 inherits an unsupported reasoning effort.

Verification

• STRIX_TEST_CASE_FILTER=nvidia-rate-limit-openai-direct-fallback-clears-api-base STRIX_TEST_PROCESS_TIMEOUT_SECONDS=3 STRIX_TEST_FAKE_SLEEP_SECONDS=5 bash scripts/ci/test_strix_quick_gate.sh
• uv run --with pytest pytest -q tests/test_strix_nvidia_nim_not_found_fallback.py tests/test_strix_openai_fallback_api_base.py — 25 passed
• bash -n scripts/ci/strix_quick_gate.sh scripts/ci/test_strix_quick_gate.sh
• git diff --check
• actionlint .github/workflows/strix.yml reports only the existing SC2016 informational diagnostic at unchanged line 267.

---

[devin-ai-integration]

Devin Review found 1 potential issue.

[seonghobae]

@opencode-agent review the current exact head; this change owns the Strix reasoning-effort fallback repair.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 48dee0f6-b4cc-46b8-8e70-3db9e234c38f

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}