From 823dd3fd61f74ed8fcc030fb6c70352d9c670304 Mon Sep 17 00:00:00 2001
From: He Wang <wanghechn@qq.com>
Date: Thu, 16 Jul 2026 20:26:26 +0800
Subject: [PATCH 1/3] fix(review): align self-review image and attribution

fix:
- Build the OpenCode review image from the exact pull request head
- Attribute review comments to the bot and show the active skill fingerprint

test:
- Remove presentation-only assertions from repository tests

docs:
- Document the development-image self-review workflow
---
 .github/workflows/code-review.yml             | 11 ++++++-
 AGENTS.md                                     | 16 +++++-----
 docker/README.md                              | 16 +++++-----
 .../review/publish/formatter.py               |  6 +++-
 tests/test_opencode_image.py                  | 30 +------------------
 tests/test_review_publisher.py                | 29 ++----------------
 6 files changed, 35 insertions(+), 73 deletions(-)

diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml
index e01697c..aaa0a69 100644
--- a/.github/workflows/code-review.yml
+++ b/.github/workflows/code-review.yml
@@ -27,6 +27,15 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
+      - name: Check out pull request source
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          persist-credentials: false
+
+      - name: Build review image
+        run: docker build --target opencode --tag code-review-bot:pr-head .
+
       - name: Run code review
         env:
           AUTO_APPROVE_ON_CLEAN_REVIEW: "true"
@@ -60,5 +69,5 @@ jobs:
             -e OPENCODE_UPSTREAM_ENDPOINT \
             -e OPENCODE_UPSTREAM_API_KEY \
             -e OPENCODE_MODEL \
-            whhe/code-review-bot:opencode \
+            code-review-bot:pr-head \
             --cr-id "${{ github.event.pull_request.number }}"
diff --git a/AGENTS.md b/AGENTS.md
index d0296b7..a03385c 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -149,13 +149,15 @@ credential helper so tokens are never embedded in workspace URLs or Git metadata
 factory explicitly forwards only the required OpenCode runtime environment through ACP's filtered
 subprocess environment. Existing global config files are left untouched.
 
-`.github/workflows/code-review.yml` runs `whhe/code-review-bot:opencode` for non-draft,
-same-repository pull requests targeting `main` and skips fork pull requests. Dependabot pull
-requests are allowed to run, but GitHub does not provide Actions secrets and grants the built-in
-`GITHUB_TOKEN` read-only permissions for those runs. The workflow therefore prefers an optional
-`CODE_REVIEW_GITHUB_TOKEN` secret and falls back to the built-in token; Dependabot reviews require
-same-named Dependabot secrets for that write-capable token and `OPENCODE_UPSTREAM_API_KEY`. The
-workflow uses repository variables for `OPENCODE_UPSTREAM_ENDPOINT` and `OPENCODE_MODEL`.
+`.github/workflows/code-review.yml` checks out the exact pull-request head, builds the shared
+Dockerfile's OpenCode target locally, and runs that development image for non-draft,
+same-repository pull requests targeting `main`; fork pull requests are skipped. Checkout does not
+persist credentials into the build context. Dependabot pull requests are allowed to run, but GitHub
+does not provide Actions secrets and grants the built-in `GITHUB_TOKEN` read-only permissions for
+those runs. The workflow therefore prefers an optional `CODE_REVIEW_GITHUB_TOKEN` secret and falls
+back to the built-in token; Dependabot reviews require same-named Dependabot secrets for that
+write-capable token and `OPENCODE_UPSTREAM_API_KEY`. The workflow uses repository variables for
+`OPENCODE_UPSTREAM_ENDPOINT` and `OPENCODE_MODEL`.
 It enables clean-review approval with `AUTO_APPROVE_ON_CLEAN_REVIEW=true` and debug logging with
 `LOG_LEVEL=DEBUG`; the repository must allow GitHub Actions to create and approve pull requests for
 the built-in token to approve a clean review.
diff --git a/docker/README.md b/docker/README.md
index aaa5846..40aa096 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -176,7 +176,8 @@ Optionally set `ANTHROPIC_MODEL`.
 ### GitHub Actions
 
 The repository includes `.github/workflows/code-review.yml`, which reviews pull requests targeting
-`main` with `whhe/code-review-bot:opencode`. Configure these values under **Settings → Secrets and
+`main`. It checks out the exact pull-request head, builds the shared Dockerfile's `opencode` target
+locally, and runs that development image. Configure these values under **Settings → Secrets and
 variables → Actions** before enabling the workflow:
 
 | Type | Name | Description |
@@ -190,14 +191,13 @@ Actions → General → Workflow permissions**, enable **Allow GitHub Actions to
 pull requests** so clean reviews can be approved with the built-in `GITHUB_TOKEN`.
 
 The workflow runs for opened, updated, reopened, and ready-for-review pull requests. It uses the
-built-in `GITHUB_TOKEN` with `contents: read` and `pull-requests: write`. The workflow itself does
-not check out or directly execute the pull-request branch, and it skips draft and fork pull
+built-in `GITHUB_TOKEN` with `contents: read` and `pull-requests: write`. It checks out and executes
+the pull-request branch without persisting checkout credentials, and it skips draft and fork pull
 requests. Fork pull requests are skipped because GitHub does not expose repository secrets to
-their `pull_request` workflows; branches inside the repository should therefore be limited to
-trusted collaborators. Dependabot pull requests are not skipped, but GitHub supplies Dependabot
-secrets instead of Actions secrets and gives the built-in `GITHUB_TOKEN` read-only permissions for
-those runs. To review them, add these values under **Settings → Secrets and variables →
-Dependabot**:
+their `pull_request` workflows; branches inside the repository must therefore be limited to trusted
+collaborators. Dependabot pull requests are not skipped, but GitHub supplies Dependabot secrets
+instead of Actions secrets and gives the built-in `GITHUB_TOKEN` read-only permissions for those
+runs. To review them, add these values under **Settings → Secrets and variables → Dependabot**:
 
 | Name | Description |
 |---|---|
diff --git a/src/code_review_bot/review/publish/formatter.py b/src/code_review_bot/review/publish/formatter.py
index 405fb63..00ea59b 100644
--- a/src/code_review_bot/review/publish/formatter.py
+++ b/src/code_review_bot/review/publish/formatter.py
@@ -6,6 +6,7 @@
 from code_review_bot.skill.protocol import Finding, count_findings_by_severity
 
 BOT_METADATA_PREFIX = "<!-- code-review-bot:"
+CODE_REVIEW_BOT_URL = "https://github.com/whhe/code-review-bot"
 
 SEVERITY_LABELS: dict[str, str] = {
     "critical": "Critical",
@@ -66,7 +67,10 @@ def format_review_note(
                 f"{finding.description}~~"
             )
         lines.append("")
-    lines.append(f"_Skill: `{skill_name}` v`{skill_version}`_")
+    lines.append(
+        f"_Generated by [whhe/code-review-bot]({CODE_REVIEW_BOT_URL}) · "
+        f"Skill fingerprint: `{skill_version}`_"
+    )
     metadata = {
         "head_sha": cr.head_sha,
         "skill": skill_name,
diff --git a/tests/test_opencode_image.py b/tests/test_opencode_image.py
index 7b50d0e..c5e1fb0 100644
--- a/tests/test_opencode_image.py
+++ b/tests/test_opencode_image.py
@@ -1,6 +1,5 @@
 """Static contracts for the GitHub-built coding-agent images."""
 
-import re
 from pathlib import Path
 
 _REPO_ROOT = Path(__file__).resolve().parents[1]
@@ -63,39 +62,12 @@ def test_github_actions_publishes_agent_tags_from_shared_dockerfile() -> None:
     assert "cache-to: type=gha,mode=max,scope=${{ matrix.tag }}" in workflow
 
 
-def test_env_example_scopes_agent_credentials_to_image_variants() -> None:
+def test_env_example_defaults_to_claude_agent() -> None:
     env_example = (_REPO_ROOT / ".env.example").read_text(encoding="utf-8")
-    docker_heading = "# Docker only — image setup and runtime"
-    before_docker, docker_section = env_example.split(docker_heading, 1)
     active_settings = dict(
         line.split("=", 1)
         for line in env_example.splitlines()
         if line and not line.startswith("#") and "=" in line
     )
 
-    assert "docker" not in before_docker.lower()
-    section_divider = "# " + "=" * 77
-    assert docker_section.count(section_divider) == 1
-    assert "Claude Code image only: whhe/code-review-bot:claude-code (also :latest)" in env_example
-    assert (
-        "[docker, required on first start for Claude Code image] Set exactly one credential"
-        in env_example
-    )
-    assert (
-        "[docker, optional on first start for Claude Code image] Anthropic API base URL"
-        in env_example
-    )
-    assert "OpenCode image only: whhe/code-review-bot:opencode" in env_example
-    assert "[docker, required at runtime for :opencode] Upstream API credential" in env_example
-    assert "[docker, required on first start for :opencode] Upstream model ID" in env_example
     assert active_settings["ACP_AGENT_TYPE"] == "claude"
-
-    docker_readme = (_REPO_ROOT / "docker" / "README.md").read_text(encoding="utf-8")
-    claude_section = docker_readme.split("## Claude Code image environment variables", 1)[1].split(
-        "## CI integration", 1
-    )[0]
-    assert "| Variable | Required when | Default | Description |" in claude_section
-    assert "| `ANTHROPIC_API_KEY` | first start (one of two) |" in claude_section
-    assert "endpoint and API key remain required at runtime" in docker_readme
-    assert "target branch" in docker_readme
-    assert re.search(r"source\s+branch", docker_readme)
diff --git a/tests/test_review_publisher.py b/tests/test_review_publisher.py
index ff18a56..0b6cfcd 100644
--- a/tests/test_review_publisher.py
+++ b/tests/test_review_publisher.py
@@ -91,7 +91,7 @@ async def test_publisher_creates_inline_from_agent_line() -> None:
     assert adapter.inline_positions[0].new_line == 10
     assert adapter.inline_positions[0].file_path == "a.py"
     assert adapter.inline_positions[0].base_sha == "base"
-    assert "**[High]** A risky pattern" in adapter.inline_bodies[0]
+    assert "A risky pattern" in adapter.inline_bodies[0]
     assert len(adapter.summaries_posted) == 1
 
 
@@ -109,7 +109,6 @@ async def test_publisher_moves_finding_to_unlocated_when_inline_fails() -> None:
     )
 
     assert outcome.inline_comments == 0
-    assert "Findings without diff position" in adapter.summaries_posted[0]
     assert "A risky pattern" in adapter.summaries_posted[0]
 
 
@@ -143,16 +142,13 @@ async def test_formatter_includes_metadata_for_incremental_dedupe() -> None:
         fingerprints=["fp1"],
     )
 
-    assert "### Code Review" in body
-    assert "Critical 0 / High 1 / Medium 0 / Low 0" in body
-    assert "Inline comments posted: 1" in body
     assert BOT_METADATA_PREFIX in body
     assert '"head_sha":"head"' in body
     assert '"fingerprints":["fp1"]' in body
 
 
 @pytest.mark.asyncio
-async def test_formatter_unlocated_section_describes_diff_limitation() -> None:
+async def test_formatter_includes_unlocated_finding() -> None:
     body = format_review_note(
         cr=make_change_request(),
         summary="Reviewed",
@@ -164,7 +160,6 @@ async def test_formatter_unlocated_section_describes_diff_limitation() -> None:
         fingerprints=["fp1"],
     )
 
-    assert "Findings without diff position" in body
     assert "A risky pattern" in body
 
 
@@ -185,28 +180,9 @@ async def test_publisher_renders_resolved_findings() -> None:
 
     assert outcome.inline_comments == 0
     assert adapter.inline_bodies == []
-    assert "Previously resolved" in adapter.summaries_posted[0]
     assert "A risky pattern" in adapter.summaries_posted[0]
 
 
-@pytest.mark.asyncio
-async def test_publisher_no_resolved_section_when_empty() -> None:
-    adapter = FakeAdapter()
-    publisher = PlatformPublisher(adapter)
-
-    outcome = await publisher.publish(
-        make_change_request(),
-        SkillResult(summary="Reviewed", findings=[make_finding()]),
-        skill_name="default",
-        skill_version="1",
-        fingerprints=["fp1"],
-        resolved_findings=[],
-    )
-
-    assert outcome.inline_comments == 1
-    assert "Previously resolved" not in adapter.summaries_posted[0]
-
-
 @pytest.mark.asyncio
 async def test_debug_publisher_writes_findings_file(tmp_path: object) -> None:
     from pathlib import Path
@@ -224,6 +200,5 @@ async def test_debug_publisher_writes_findings_file(tmp_path: object) -> None:
     out_file = Path(str(tmp_path)) / "project-1_cr-5.md"
     assert out_file.exists()
     content = out_file.read_text(encoding="utf-8")
-    assert "Code Review Report" in content
     assert "A risky pattern" in content
     assert outcome.inline_comments == 1

From 300e645abc7725a0017b3784fb07ee0cea3f7d9e Mon Sep 17 00:00:00 2001
From: He Wang <wanghechn@qq.com>
Date: Thu, 16 Jul 2026 20:29:41 +0800
Subject: [PATCH 2/3] fix(ci): point self-review build at Dockerfile

fix:
- Pass docker/Dockerfile explicitly when building the OpenCode review image
---
 .github/workflows/code-review.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml
index aaa0a69..7273bf1 100644
--- a/.github/workflows/code-review.yml
+++ b/.github/workflows/code-review.yml
@@ -34,7 +34,12 @@ jobs:
           persist-credentials: false
 
       - name: Build review image
-        run: docker build --target opencode --tag code-review-bot:pr-head .
+        run: >-
+          docker build
+          --file docker/Dockerfile
+          --target opencode
+          --tag code-review-bot:pr-head
+          .
 
       - name: Run code review
         env:

From 87efca66729314b78835aa6bde991440581afe18 Mon Sep 17 00:00:00 2001
From: He Wang <wanghechn@qq.com>
Date: Thu, 16 Jul 2026 21:01:14 +0800
Subject: [PATCH 3/3] fix(review): consolidate GitHub review publication

fix:
- Publish the full summary as the GitHub approval decision body
- Preserve metadata discovery and extension compatibility
- Fall back to issue comments when review submission fails

ci:
- Restore the published OpenCode image for self-review

test:
- Cover review consolidation, fallback, pagination, and legacy contracts
---
 .github/workflows/code-review.yml             |  16 +-
 AGENTS.md                                     |  32 ++--
 README.md                                     |   5 +-
 docker/README.md                              |  16 +-
 .../platforms/github/adapter.py               |  32 +++-
 .../platforms/github/client.py                |  18 +++
 src/code_review_bot/platforms/protocol.py     |  15 +-
 src/code_review_bot/review/models.py          |   1 +
 src/code_review_bot/review/orchestrator.py    |  61 ++++++--
 .../review/publish/platform.py                |   5 +-
 tests/test_auto_approve.py                    | 148 +++++++++++++++++-
 tests/test_platform_github_adapter.py         |  57 +++++--
 tests/test_review_publisher.py                |  19 +++
 13 files changed, 354 insertions(+), 71 deletions(-)

diff --git a/.github/workflows/code-review.yml b/.github/workflows/code-review.yml
index 7273bf1..e01697c 100644
--- a/.github/workflows/code-review.yml
+++ b/.github/workflows/code-review.yml
@@ -27,20 +27,6 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-      - name: Check out pull request source
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          persist-credentials: false
-
-      - name: Build review image
-        run: >-
-          docker build
-          --file docker/Dockerfile
-          --target opencode
-          --tag code-review-bot:pr-head
-          .
-
       - name: Run code review
         env:
           AUTO_APPROVE_ON_CLEAN_REVIEW: "true"
@@ -74,5 +60,5 @@ jobs:
             -e OPENCODE_UPSTREAM_ENDPOINT \
             -e OPENCODE_UPSTREAM_API_KEY \
             -e OPENCODE_MODEL \
-            code-review-bot:pr-head \
+            whhe/code-review-bot:opencode \
             --cr-id "${{ github.event.pull_request.number }}"
diff --git a/AGENTS.md b/AGENTS.md
index a03385c..c8883ea 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -38,7 +38,7 @@ src/code_review_bot/
 │   ├── models.py           # ReviewTaskContext, ReviewOutcome
 │   └── publish/
 │       ├── protocol.py     # ReviewPublisher protocol
-│       ├── platform.py     # posts inline comments + summary note to the git platform
+│       ├── platform.py     # posts inline comments + summary to the git platform
 │       └── debug.py        # writes Markdown report to disk (--debug mode)
 ├── skill/
 │   ├── protocol.py         # ReviewSkill protocol; Finding and SkillResult pydantic models
@@ -63,22 +63,28 @@ src/code_review_bot/
    prior review's stored metadata. All inline comment threads (resolved and open) are included in
    the prompt via `<inline_threads>`; the agent applies the embedded rules to decide whether to
    re-report each one.
-5. `ReviewPublisher.publish()` posts inline diff comments and a summary note, storing the new
-   fingerprint set in a hidden metadata comment for the next run.
+5. `ReviewPublisher.publish()` posts inline diff comments and formats the summary, storing the new
+   fingerprint set in hidden metadata for the next run. GitLab and GitHub without automatic
+   approval post it as a note; GitHub with automatic approval defers it to the final review body.
 6. When `AUTO_APPROVE_ON_CLEAN_REVIEW=true` (and not in `--debug` mode), the orchestrator
    approves the change request if no new findings were published, or revokes approval when new
-   findings exist (GitLab: approve/unapprove API; GitHub: `APPROVE` / `REQUEST_CHANGES` review).
+   findings exist (GitLab: approve/unapprove API; GitHub: `APPROVE` / `REQUEST_CHANGES` review
+   containing the full summary). If the GitHub review cannot be submitted, the summary falls back
+   to an issue comment.
    When `AUTO_APPROVE_IGNORE_LOW_SEVERITY=true`, low-severity findings are excluded from this
    decision: a review with only low-severity findings is still treated as clean.
 
 ## Key protocols
 
-All three are `typing.Protocol` — swap an implementation by updating the corresponding factory.
+The core interfaces are `typing.Protocol` types; swap an implementation by updating the
+corresponding factory. `ReviewBodyApprovalAdapter` is an optional runtime-checkable capability used
+to consolidate a GitHub summary into the final review decision.
 
 | Protocol | Module | Factory |
 |---|---|---|
 | `CodingAgent` | `agent/protocol.py` | `agent/factory.py` — `build_coding_agent()` |
 | `PlatformAdapter` | `platforms/protocol.py` | `platforms/factory.py` — `build_platform_adapter()` |
+| `ReviewBodyApprovalAdapter` | `platforms/protocol.py` | implemented by the GitHub adapter |
 | `ReviewPublisher` | `review/publish/protocol.py` | instantiated in `orchestrator.py` |
 
 ## Extension points
@@ -149,15 +155,13 @@ credential helper so tokens are never embedded in workspace URLs or Git metadata
 factory explicitly forwards only the required OpenCode runtime environment through ACP's filtered
 subprocess environment. Existing global config files are left untouched.
 
-`.github/workflows/code-review.yml` checks out the exact pull-request head, builds the shared
-Dockerfile's OpenCode target locally, and runs that development image for non-draft,
-same-repository pull requests targeting `main`; fork pull requests are skipped. Checkout does not
-persist credentials into the build context. Dependabot pull requests are allowed to run, but GitHub
-does not provide Actions secrets and grants the built-in `GITHUB_TOKEN` read-only permissions for
-those runs. The workflow therefore prefers an optional `CODE_REVIEW_GITHUB_TOKEN` secret and falls
-back to the built-in token; Dependabot reviews require same-named Dependabot secrets for that
-write-capable token and `OPENCODE_UPSTREAM_API_KEY`. The workflow uses repository variables for
-`OPENCODE_UPSTREAM_ENDPOINT` and `OPENCODE_MODEL`.
+`.github/workflows/code-review.yml` runs `whhe/code-review-bot:opencode` for non-draft,
+same-repository pull requests targeting `main` and skips fork pull requests. Dependabot pull
+requests are allowed to run, but GitHub does not provide Actions secrets and grants the built-in
+`GITHUB_TOKEN` read-only permissions for those runs. The workflow therefore prefers an optional
+`CODE_REVIEW_GITHUB_TOKEN` secret and falls back to the built-in token; Dependabot reviews require
+same-named Dependabot secrets for that write-capable token and `OPENCODE_UPSTREAM_API_KEY`. The
+workflow uses repository variables for `OPENCODE_UPSTREAM_ENDPOINT` and `OPENCODE_MODEL`.
 It enables clean-review approval with `AUTO_APPROVE_ON_CLEAN_REVIEW=true` and debug logging with
 `LOG_LEVEL=DEBUG`; the repository must allow GitHub Actions to create and approve pull requests for
 the built-in token to approve a clean review.
diff --git a/README.md b/README.md
index 2b2805f..140a1b5 100644
--- a/README.md
+++ b/README.md
@@ -9,7 +9,8 @@ adapters can be added behind the same interface.
 The bot clones the change-request branch, then delegates the entire review to a coding agent. The
 agent reads the diff, follows the review methodology defined in the `SKILL.md` of the configured
 review skill, and produces structured findings. Results are posted back to the platform as inline
-review comments and a summary note on the change request.
+review comments and a summary on the change request. On GitHub, when automatic approval is
+enabled, the summary is used as the final `APPROVE` or `REQUEST_CHANGES` review body.
 
 Review skills live outside this repository. `REVIEW_SKILL` can be a local directory path or an
 `https` URL pointing at a skill containing `SKILL.md`; when empty the coding agent reviews using
@@ -107,7 +108,7 @@ See `.env.example` for the full list with descriptions.
 | `REVIEW_EXCLUDE` | no | `[]` | JSON array of glob patterns for files to skip (e.g. `["dist/**", "*.pb.go"]`). Added on top of built-in defaults: `*.lock`, `*-lock.json`, `*.min.js`, `*.min.css`, `*.map`, `**/vendor/**`, `**/generated/**`. |
 | `REVIEW_INCLUDE` | no | `[]` | JSON array of glob patterns; when set, only matching files are reviewed. Empty means all files (subject to excludes). Example: `["src/**", "tests/**"]`. |
 | `OUTPUT_LANGUAGE` | no | `english` | Language for findings and the change-request summary (`english` or `chinese`). Code, configs, and identifiers stay in English. |
-| `AUTO_APPROVE_ON_CLEAN_REVIEW` | no | `false` | When `true`, approve the MR/PR after publish when no new findings were posted; revoke approval when new findings exist. Requires token approval permissions. Skipped in `--debug` mode. |
+| `AUTO_APPROVE_ON_CLEAN_REVIEW` | no | `false` | When `true`, approve the MR/PR after publish when no new findings were posted; revoke approval when new findings exist. On GitHub, the full summary is published as that review's body instead of a separate issue comment. Requires token approval permissions. Skipped in `--debug` mode. |
 | `AUTO_APPROVE_IGNORE_LOW_SEVERITY` | no | `false` | When `true`, low-severity findings are excluded from the approval decision: a review with only low-severity findings is treated as clean and approved. Has no effect when `AUTO_APPROVE_ON_CLEAN_REVIEW` is `false`. |
 
 ### Coding agent (ACP)
diff --git a/docker/README.md b/docker/README.md
index 40aa096..aaa5846 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -176,8 +176,7 @@ Optionally set `ANTHROPIC_MODEL`.
 ### GitHub Actions
 
 The repository includes `.github/workflows/code-review.yml`, which reviews pull requests targeting
-`main`. It checks out the exact pull-request head, builds the shared Dockerfile's `opencode` target
-locally, and runs that development image. Configure these values under **Settings → Secrets and
+`main` with `whhe/code-review-bot:opencode`. Configure these values under **Settings → Secrets and
 variables → Actions** before enabling the workflow:
 
 | Type | Name | Description |
@@ -191,13 +190,14 @@ Actions → General → Workflow permissions**, enable **Allow GitHub Actions to
 pull requests** so clean reviews can be approved with the built-in `GITHUB_TOKEN`.
 
 The workflow runs for opened, updated, reopened, and ready-for-review pull requests. It uses the
-built-in `GITHUB_TOKEN` with `contents: read` and `pull-requests: write`. It checks out and executes
-the pull-request branch without persisting checkout credentials, and it skips draft and fork pull
+built-in `GITHUB_TOKEN` with `contents: read` and `pull-requests: write`. The workflow itself does
+not check out or directly execute the pull-request branch, and it skips draft and fork pull
 requests. Fork pull requests are skipped because GitHub does not expose repository secrets to
-their `pull_request` workflows; branches inside the repository must therefore be limited to trusted
-collaborators. Dependabot pull requests are not skipped, but GitHub supplies Dependabot secrets
-instead of Actions secrets and gives the built-in `GITHUB_TOKEN` read-only permissions for those
-runs. To review them, add these values under **Settings → Secrets and variables → Dependabot**:
+their `pull_request` workflows; branches inside the repository should therefore be limited to
+trusted collaborators. Dependabot pull requests are not skipped, but GitHub supplies Dependabot
+secrets instead of Actions secrets and gives the built-in `GITHUB_TOKEN` read-only permissions for
+those runs. To review them, add these values under **Settings → Secrets and variables →
+Dependabot**:
 
 | Name | Description |
 |---|---|
diff --git a/src/code_review_bot/platforms/github/adapter.py b/src/code_review_bot/platforms/github/adapter.py
index 9ba8b0f..995885f 100644
--- a/src/code_review_bot/platforms/github/adapter.py
+++ b/src/code_review_bot/platforms/github/adapter.py
@@ -27,7 +27,12 @@ async def fetch_change_request(self, project_ref: str, cr_id: str) -> ChangeRequ
 
     async def list_notes(self, project_ref: str, cr_id: str) -> list[dict[str, object]]:
         owner, repo = _split_project_ref(project_ref)
-        return await self._client.list_issue_comments(owner, repo, int(cr_id))
+        issue_comments = await self._client.list_issue_comments(owner, repo, int(cr_id))
+        reviews = await self._client.list_pull_reviews(owner, repo, int(cr_id))
+        return sorted(
+            [*issue_comments, *reviews],
+            key=lambda note: str(note.get("submitted_at") or note.get("created_at") or ""),
+        )
 
     async def list_inline_threads(self, project_ref: str, cr_id: str) -> list[InlineThread]:
         owner, repo = _split_project_ref(project_ref)
@@ -82,8 +87,29 @@ async def approve_change_request(
         owner, repo = _split_project_ref(project_ref)
         return await self._client.create_pull_review(owner, repo, int(cr_id), "APPROVE", head_sha)
 
+    async def approve_change_request_with_body(
+        self, project_ref: str, cr_id: str, head_sha: str, body: str
+    ) -> dict[str, object]:
+        owner, repo = _split_project_ref(project_ref)
+        return await self._client.create_pull_review(
+            owner, repo, int(cr_id), "APPROVE", head_sha, body=body
+        )
+
     async def revoke_change_request_approval(
-        self, project_ref: str, cr_id: str, head_sha: str = ""
+        self,
+        project_ref: str,
+        cr_id: str,
+        head_sha: str = "",
+    ) -> dict[str, object]:
+        return await self.revoke_change_request_approval_with_body(
+            project_ref,
+            cr_id,
+            head_sha,
+            body="Code review found new issues.",
+        )
+
+    async def revoke_change_request_approval_with_body(
+        self, project_ref: str, cr_id: str, head_sha: str, body: str
     ) -> dict[str, object]:
         owner, repo = _split_project_ref(project_ref)
         if not head_sha:
@@ -95,7 +121,7 @@ async def revoke_change_request_approval(
             int(cr_id),
             "REQUEST_CHANGES",
             head_sha,
-            body="Code review found new issues.",
+            body=body,
         )
 
 
diff --git a/src/code_review_bot/platforms/github/client.py b/src/code_review_bot/platforms/github/client.py
index 6528645..2420d45 100644
--- a/src/code_review_bot/platforms/github/client.py
+++ b/src/code_review_bot/platforms/github/client.py
@@ -44,6 +44,24 @@ async def list_issue_comments(
         response.raise_for_status()
         return list(response.json())
 
+    async def list_pull_reviews(
+        self, owner: str, repo: str, pr_number: int
+    ) -> list[dict[str, object]]:
+        items: list[dict[str, object]] = []
+        page = 1
+        while True:
+            response = await self._client.get(
+                f"/repos/{owner}/{repo}/pulls/{pr_number}/reviews",
+                params={"per_page": 100, "page": page},
+            )
+            response.raise_for_status()
+            batch = response.json()
+            items.extend(batch)
+            if len(batch) < 100:
+                break
+            page += 1
+        return items
+
     async def list_pull_review_comments(
         self, owner: str, repo: str, pr_number: int
     ) -> list[dict[str, object]]:
diff --git a/src/code_review_bot/platforms/protocol.py b/src/code_review_bot/platforms/protocol.py
index a824927..0e93966 100644
--- a/src/code_review_bot/platforms/protocol.py
+++ b/src/code_review_bot/platforms/protocol.py
@@ -1,4 +1,4 @@
-from typing import Protocol
+from typing import Protocol, runtime_checkable
 
 from code_review_bot.platforms.models import ChangeRequest, InlinePosition, InlineThread
 
@@ -39,3 +39,16 @@ async def revoke_change_request_approval(
     ) -> dict[str, object]: ...
 
     async def aclose(self) -> None: ...
+
+
+@runtime_checkable
+class ReviewBodyApprovalAdapter(Protocol):
+    """Optional capability for publishing approval decisions with a full review body."""
+
+    async def approve_change_request_with_body(
+        self, project_ref: str, cr_id: str, head_sha: str, body: str
+    ) -> dict[str, object]: ...
+
+    async def revoke_change_request_approval_with_body(
+        self, project_ref: str, cr_id: str, head_sha: str, body: str
+    ) -> dict[str, object]: ...
diff --git a/src/code_review_bot/review/models.py b/src/code_review_bot/review/models.py
index 0b6cc5b..b6c4272 100644
--- a/src/code_review_bot/review/models.py
+++ b/src/code_review_bot/review/models.py
@@ -30,3 +30,4 @@ class ReviewOutcome(BaseModel):
     inline_comments: int = 0
     report_path: str = ""
     approved: bool | None = None
+    review_body: str = ""
diff --git a/src/code_review_bot/review/orchestrator.py b/src/code_review_bot/review/orchestrator.py
index 9791931..4852111 100644
--- a/src/code_review_bot/review/orchestrator.py
+++ b/src/code_review_bot/review/orchestrator.py
@@ -1,5 +1,6 @@
 import logging
 from pathlib import Path
+from typing import cast
 
 from code_review_bot.agent.factory import build_coding_agent
 from code_review_bot.config import Settings
@@ -9,7 +10,7 @@
     detach_review_session_logging,
 )
 from code_review_bot.platforms.models import ChangeRequest
-from code_review_bot.platforms.protocol import PlatformAdapter
+from code_review_bot.platforms.protocol import PlatformAdapter, ReviewBodyApprovalAdapter
 from code_review_bot.repo.manager import RepoManager
 from code_review_bot.review.context import (
     compute_fingerprint,
@@ -153,14 +154,34 @@ async def review_change_request(self, cr_id: str) -> ReviewOutcome:
                 len(new_findings),
             )
 
-            outcome = await self.publisher.publish(
-                cr,
-                result,
-                skill.name,
-                skill.version,
-                sorted(fingerprints),
-                existing_notes=notes,
+            consolidate_github_review = (
+                self._platform_publish
+                and self.adapter.platform_name == "github"
+                and isinstance(self.adapter, ReviewBodyApprovalAdapter)
+                and self.settings.auto_approve_on_clean_review
+                and cr.is_open
+                and not cr.draft
             )
+            if self._platform_publish:
+                platform_publisher = cast(PlatformPublisher, self.publisher)
+                outcome = await platform_publisher.publish(
+                    cr,
+                    result,
+                    skill.name,
+                    skill.version,
+                    sorted(fingerprints),
+                    existing_notes=notes,
+                    publish_summary=not consolidate_github_review,
+                )
+            else:
+                outcome = await self.publisher.publish(
+                    cr,
+                    result,
+                    skill.name,
+                    skill.version,
+                    sorted(fingerprints),
+                    existing_notes=notes,
+                )
             approval_count = len(new_findings)
             if self.settings.auto_approve_ignore_low_severity:
                 non_low = [f for f in new_findings if f.severity != "low"]
@@ -171,7 +192,14 @@ async def review_change_request(self, cr_id: str) -> ReviewOutcome:
                         len(non_low),
                     )
                 approval_count = len(non_low)
-            approved = await self._maybe_update_approval(cr, resolved_ref, approval_count)
+            approved = await self._maybe_update_approval(
+                cr,
+                resolved_ref,
+                approval_count,
+                review_body=outcome.review_body if consolidate_github_review else "",
+            )
+            if consolidate_github_review and approved is None:
+                await self.adapter.publish_summary(resolved_ref, cr.cr_id, outcome.review_body)
             outcome = outcome.model_copy(update={"approved": approved})
             logger.info(
                 "Published summary=%r published=%s inline_comments=%s approved=%s",
@@ -199,6 +227,7 @@ async def _maybe_update_approval(
         cr: ChangeRequest,
         project_ref: str,
         new_findings_count: int,
+        review_body: str = "",
     ) -> bool | None:
         if not self.settings.auto_approve_on_clean_review:
             return None
@@ -217,7 +246,12 @@ async def _maybe_update_approval(
                         cr.cr_id,
                     )
                     return None
-                await self.adapter.approve_change_request(project_ref, cr.cr_id, head_sha)
+                if review_body and isinstance(self.adapter, ReviewBodyApprovalAdapter):
+                    await self.adapter.approve_change_request_with_body(
+                        project_ref, cr.cr_id, head_sha, body=review_body
+                    )
+                else:
+                    await self.adapter.approve_change_request(project_ref, cr.cr_id, head_sha)
                 logger.info(
                     "Approved change request project_ref=%s cr_id=%s head_sha=%s",
                     project_ref,
@@ -225,7 +259,12 @@ async def _maybe_update_approval(
                     head_sha[:12] + "…" if len(head_sha) > 12 else head_sha,
                 )
                 return True
-            await self.adapter.revoke_change_request_approval(project_ref, cr.cr_id, head_sha)
+            if review_body and isinstance(self.adapter, ReviewBodyApprovalAdapter):
+                await self.adapter.revoke_change_request_approval_with_body(
+                    project_ref, cr.cr_id, head_sha, body=review_body
+                )
+            else:
+                await self.adapter.revoke_change_request_approval(project_ref, cr.cr_id, head_sha)
             logger.info(
                 "Revoked approval project_ref=%s cr_id=%s new_findings=%s",
                 project_ref,
diff --git a/src/code_review_bot/review/publish/platform.py b/src/code_review_bot/review/publish/platform.py
index 7ad35ac..f7bb697 100644
--- a/src/code_review_bot/review/publish/platform.py
+++ b/src/code_review_bot/review/publish/platform.py
@@ -31,6 +31,7 @@ async def publish(
         fingerprints: list[str],
         existing_notes: list[dict[str, object]] | None = None,
         resolved_findings: list[Finding] | None = None,
+        publish_summary: bool = True,
     ) -> ReviewOutcome:
         located_count, unlocated = await self._publish_inline(cr, result.findings)
         severity_counts = count_findings_by_severity(result.findings)
@@ -45,11 +46,13 @@ async def publish(
             skill_version=skill_version,
             fingerprints=fingerprints,
         )
-        await self.adapter.publish_summary(cr.project_ref, cr.cr_id, body)
+        if publish_summary:
+            await self.adapter.publish_summary(cr.project_ref, cr.cr_id, body)
         return ReviewOutcome(
             summary=result.summary,
             published=True,
             inline_comments=located_count,
+            review_body=body,
         )
 
     async def _publish_inline(
diff --git a/tests/test_auto_approve.py b/tests/test_auto_approve.py
index cdf6710..5c6d1e4 100644
--- a/tests/test_auto_approve.py
+++ b/tests/test_auto_approve.py
@@ -47,6 +47,9 @@ class ApprovalTrackingAdapter:
     def __init__(self) -> None:
         self.approve_calls: list[tuple[str, str, str]] = []
         self.revoke_calls: list[tuple[str, str, str]] = []
+        self.approve_bodies: list[str] = []
+        self.revoke_bodies: list[str] = []
+        self.summary_bodies: list[str] = []
 
     async def resolve_project_ref(self, project_path: str) -> str:
         return "1"
@@ -61,6 +64,7 @@ async def list_inline_threads(self, project_ref: str, cr_id: str) -> list:
         return []
 
     async def publish_summary(self, project_ref: str, cr_id: str, body: str) -> dict[str, object]:
+        self.summary_bodies.append(body)
         return {"id": 1}
 
     async def publish_inline_comment(
@@ -73,21 +77,67 @@ async def publish_inline_comment(
         return {"id": 1}
 
     async def approve_change_request(
-        self, project_ref: str, cr_id: str, head_sha: str
+        self, project_ref: str, cr_id: str, head_sha: str, body: str = ""
     ) -> dict[str, object]:
         self.approve_calls.append((project_ref, cr_id, head_sha))
+        self.approve_bodies.append(body)
         return {"approved": True}
 
     async def revoke_change_request_approval(
-        self, project_ref: str, cr_id: str, head_sha: str = ""
+        self, project_ref: str, cr_id: str, head_sha: str = "", body: str = ""
     ) -> dict[str, object]:
         self.revoke_calls.append((project_ref, cr_id, head_sha))
+        self.revoke_bodies.append(body)
         return {"approved": False}
 
     async def aclose(self) -> None:
         pass
 
 
+class LegacyApprovalAdapter(ApprovalTrackingAdapter):
+    async def approve_change_request(
+        self, project_ref: str, cr_id: str, head_sha: str
+    ) -> dict[str, object]:
+        self.approve_calls.append((project_ref, cr_id, head_sha))
+        return {"approved": True}
+
+    async def revoke_change_request_approval(
+        self, project_ref: str, cr_id: str, head_sha: str = ""
+    ) -> dict[str, object]:
+        self.revoke_calls.append((project_ref, cr_id, head_sha))
+        return {"approved": False}
+
+
+class ReviewBodyApprovalTrackingAdapter(ApprovalTrackingAdapter):
+    async def approve_change_request_with_body(
+        self, project_ref: str, cr_id: str, head_sha: str, body: str
+    ) -> dict[str, object]:
+        return await self.approve_change_request(project_ref, cr_id, head_sha, body=body)
+
+    async def revoke_change_request_approval_with_body(
+        self, project_ref: str, cr_id: str, head_sha: str, body: str
+    ) -> dict[str, object]:
+        return await self.revoke_change_request_approval(project_ref, cr_id, head_sha, body=body)
+
+
+class LegacyPublisher:
+    def __init__(self) -> None:
+        self.calls = 0
+
+    async def publish(
+        self,
+        cr: ChangeRequest,
+        result: SkillResult,
+        skill_name: str,
+        skill_version: str,
+        fingerprints: list[str],
+        existing_notes: list[dict[str, object]] | None = None,
+        resolved_findings: list[Finding] | None = None,
+    ) -> ReviewOutcome:
+        self.calls += 1
+        return ReviewOutcome(summary=result.summary)
+
+
 def _make_orchestrator(
     adapter: ApprovalTrackingAdapter,
     *,
@@ -129,6 +179,19 @@ async def test_maybe_update_approval_approves_when_no_new_findings() -> None:
     assert adapter.revoke_calls == []
 
 
+@pytest.mark.asyncio
+async def test_maybe_update_approval_preserves_legacy_platform_adapter_contract() -> None:
+    adapter = LegacyApprovalAdapter()
+    orchestrator = _make_orchestrator(adapter)
+
+    approved = await orchestrator._maybe_update_approval(
+        _make_change_request(), "1", new_findings_count=0
+    )
+
+    assert approved is True
+    assert adapter.approve_calls == [("1", "5", "headsha")]
+
+
 @pytest.mark.asyncio
 async def test_maybe_update_approval_revokes_when_findings_exist() -> None:
     adapter = ApprovalTrackingAdapter()
@@ -314,7 +377,12 @@ def _make_orchestrator_ignore_low(adapter: ApprovalTrackingAdapter) -> ReviewOrc
 
 
 @contextlib.asynccontextmanager
-async def _stub_review_internals(orchestrator: ReviewOrchestrator, skill_result: SkillResult):
+async def _stub_review_internals(
+    orchestrator: ReviewOrchestrator,
+    skill_result: SkillResult,
+    *,
+    stub_publisher: bool = True,
+):
     """Stub all review_change_request dependencies except the approval logic."""
     mock_skill = MagicMock()
     mock_skill.name = "code-review"
@@ -357,12 +425,80 @@ async def _stub_review_internals(orchestrator: ReviewOrchestrator, skill_result:
         mock_filter_cls.return_value.filter_findings.return_value = (skill_result.findings, 0)
         orchestrator.repo_manager.make_review_workspace = AsyncMock(return_value=Path("/tmp/ws"))
         orchestrator.repo_manager.cleanup_review_workspace = MagicMock()
-        orchestrator.publisher.publish = AsyncMock(  # type: ignore[method-assign]
-            return_value=ReviewOutcome(summary="ok")
-        )
+        if stub_publisher:
+            orchestrator.publisher.publish = AsyncMock(  # type: ignore[method-assign]
+                return_value=ReviewOutcome(summary="ok", review_body="Full review summary")
+            )
         yield
 
 
+@pytest.mark.asyncio
+async def test_review_preserves_legacy_publisher_contract() -> None:
+    adapter = ApprovalTrackingAdapter()
+    orchestrator = _make_orchestrator(adapter, auto_approve=False)
+    publisher = LegacyPublisher()
+    orchestrator.publisher = publisher
+    orchestrator._platform_publish = False
+
+    async with _stub_review_internals(
+        orchestrator, SkillResult(summary="ok", findings=[]), stub_publisher=False
+    ):
+        outcome = await orchestrator.review_change_request("5")
+
+    assert outcome.summary == "ok"
+    assert publisher.calls == 1
+
+
+@pytest.mark.asyncio
+async def test_github_auto_approval_publishes_summary_as_single_review() -> None:
+    adapter = ReviewBodyApprovalTrackingAdapter()
+    adapter.platform_name = "github"
+    orchestrator = _make_orchestrator(adapter)
+    result = SkillResult(summary="ok", findings=[_make_finding("high")])
+
+    async with _stub_review_internals(orchestrator, result):
+        await orchestrator.review_change_request("5")
+
+    assert orchestrator.publisher.publish.await_args.kwargs["publish_summary"] is False
+    assert adapter.revoke_bodies == ["Full review summary"]
+    assert adapter.summary_bodies == []
+
+
+@pytest.mark.asyncio
+async def test_github_legacy_adapter_keeps_separate_summary_and_approval() -> None:
+    adapter = LegacyApprovalAdapter()
+    adapter.platform_name = "github"
+    orchestrator = _make_orchestrator(adapter)
+    result = SkillResult(summary="ok", findings=[])
+
+    async with _stub_review_internals(orchestrator, result):
+        outcome = await orchestrator.review_change_request("5")
+
+    assert orchestrator.publisher.publish.await_args.kwargs["publish_summary"] is True
+    assert adapter.approve_calls == [("1", "5", "headsha")]
+    assert outcome.approved is True
+
+
+@pytest.mark.asyncio
+async def test_github_auto_approval_falls_back_to_summary_when_review_fails() -> None:
+    adapter = ReviewBodyApprovalTrackingAdapter()
+    adapter.platform_name = "github"
+
+    async def failing_approve(
+        project_ref: str, cr_id: str, head_sha: str, body: str = ""
+    ) -> dict[str, object]:
+        raise RuntimeError("forbidden")
+
+    adapter.approve_change_request_with_body = failing_approve  # type: ignore[method-assign]
+    orchestrator = _make_orchestrator(adapter)
+    result = SkillResult(summary="ok", findings=[])
+
+    async with _stub_review_internals(orchestrator, result):
+        await orchestrator.review_change_request("5")
+
+    assert adapter.summary_bodies == ["Full review summary"]
+
+
 @pytest.mark.asyncio
 async def test_ignore_low_approves_when_only_low_findings() -> None:
     adapter = ApprovalTrackingAdapter()
diff --git a/tests/test_platform_github_adapter.py b/tests/test_platform_github_adapter.py
index 0e7beed..d7bc7f0 100644
--- a/tests/test_platform_github_adapter.py
+++ b/tests/test_platform_github_adapter.py
@@ -23,6 +23,26 @@ def _make_adapter() -> GitHubAdapter:
     return GitHubAdapter(_make_client())
 
 
+@pytest.mark.asyncio
+@respx.mock
+async def test_list_pull_reviews_fetches_all_pages() -> None:
+    route = respx.get(f"{_BASE}/repos/alice/myrepo/pulls/7/reviews").mock(
+        side_effect=[
+            httpx.Response(200, json=[{"id": item} for item in range(100)]),
+            httpx.Response(200, json=[{"id": 100}]),
+        ]
+    )
+
+    client = _make_client()
+    reviews = await client.list_pull_reviews("alice", "myrepo", 7)
+
+    assert [review["id"] for review in reviews] == list(range(101))
+    assert route.call_count == 2
+    assert dict(route.calls[0].request.url.params) == {"per_page": "100", "page": "1"}
+    assert dict(route.calls[1].request.url.params) == {"per_page": "100", "page": "2"}
+    await client.aclose()
+
+
 # --- _split_project_ref ---
 
 
@@ -96,16 +116,24 @@ async def test_fetch_pull_request_maps_to_change_request() -> None:
 
 @pytest.mark.asyncio
 @respx.mock
-async def test_list_notes_fetches_issue_comments() -> None:
+async def test_list_notes_fetches_issue_comments_and_pull_reviews() -> None:
     respx.get(f"{_BASE}/repos/alice/myrepo/issues/7/comments").mock(
-        return_value=httpx.Response(200, json=[{"id": 1, "body": "comment"}])
+        return_value=httpx.Response(
+            200,
+            json=[{"id": 1, "body": "comment", "created_at": "2026-07-16T02:00:00Z"}],
+        )
+    )
+    respx.get(f"{_BASE}/repos/alice/myrepo/pulls/7/reviews").mock(
+        return_value=httpx.Response(
+            200,
+            json=[{"id": 2, "body": "review", "submitted_at": "2026-07-16T01:00:00Z"}],
+        )
     )
 
     adapter = _make_adapter()
     notes = await adapter.list_notes("alice/myrepo", "7")
 
-    assert len(notes) == 1
-    assert notes[0]["id"] == 1
+    assert [note["id"] for note in notes] == [2, 1]
 
     await adapter.aclose()
 
@@ -381,35 +409,43 @@ async def test_list_inline_threads_empty_when_no_threads() -> None:
 
 @pytest.mark.asyncio
 @respx.mock
-async def test_approve_change_request_submits_approve_review() -> None:
+async def test_approve_change_request_with_body_submits_approve_review() -> None:
     route = respx.post(f"{_BASE}/repos/alice/myrepo/pulls/7/reviews").mock(
         return_value=httpx.Response(200, json={"id": 1, "state": "APPROVED"})
     )
 
     adapter = _make_adapter()
-    result = await adapter.approve_change_request("alice/myrepo", "7", "deadbeef")
+    result = await adapter.approve_change_request_with_body(
+        "alice/myrepo", "7", "deadbeef", body="Full review summary"
+    )
 
     assert result["state"] == "APPROVED"
     payload = json.loads(route.calls.last.request.content)
-    assert payload == {"event": "APPROVE", "commit_id": "deadbeef"}
+    assert payload == {
+        "event": "APPROVE",
+        "commit_id": "deadbeef",
+        "body": "Full review summary",
+    }
     await adapter.aclose()
 
 
 @pytest.mark.asyncio
 @respx.mock
-async def test_revoke_change_request_approval_submits_request_changes() -> None:
+async def test_revoke_change_request_approval_with_body_submits_request_changes() -> None:
     route = respx.post(f"{_BASE}/repos/alice/myrepo/pulls/7/reviews").mock(
         return_value=httpx.Response(200, json={"id": 2, "state": "CHANGES_REQUESTED"})
     )
 
     adapter = _make_adapter()
-    result = await adapter.revoke_change_request_approval("alice/myrepo", "7", head_sha="deadbeef")
+    result = await adapter.revoke_change_request_approval_with_body(
+        "alice/myrepo", "7", head_sha="deadbeef", body="Full review summary"
+    )
 
     assert result["state"] == "CHANGES_REQUESTED"
     payload = json.loads(route.calls.last.request.content)
     assert payload["event"] == "REQUEST_CHANGES"
     assert payload["commit_id"] == "deadbeef"
-    assert "new issues" in payload["body"]
+    assert payload["body"] == "Full review summary"
     await adapter.aclose()
 
 
@@ -444,4 +480,5 @@ async def test_revoke_change_request_approval_falls_back_to_fetch_when_no_sha()
     payload = json.loads(route.calls.last.request.content)
     assert payload["event"] == "REQUEST_CHANGES"
     assert payload["commit_id"] == "deadbeef"
+    assert payload["body"] == "Code review found new issues."
     await adapter.aclose()
diff --git a/tests/test_review_publisher.py b/tests/test_review_publisher.py
index 0b6cfcd..c95a9ab 100644
--- a/tests/test_review_publisher.py
+++ b/tests/test_review_publisher.py
@@ -129,6 +129,25 @@ async def test_publisher_always_creates_summary_note() -> None:
     assert BOT_METADATA_PREFIX in adapter.summaries_posted[0]
 
 
+@pytest.mark.asyncio
+async def test_publisher_can_defer_summary_to_platform_review() -> None:
+    adapter = FakeAdapter()
+    publisher = PlatformPublisher(adapter)
+
+    outcome = await publisher.publish(
+        make_change_request(),
+        SkillResult(summary="Reviewed", findings=[]),
+        skill_name="default",
+        skill_version="1",
+        fingerprints=["fp1"],
+        publish_summary=False,
+    )
+
+    assert adapter.summaries_posted == []
+    assert "Reviewed" in outcome.review_body
+    assert BOT_METADATA_PREFIX in outcome.review_body
+
+
 @pytest.mark.asyncio
 async def test_formatter_includes_metadata_for_incremental_dedupe() -> None:
     body = format_review_note(