[verified] Bind review publication authority to the current request

harness/tests/review/test_native_review.py

@@ -189,6 +189,21 @@ class NativeReviewTests(unittest.TestCase):
                             m.publish(p, before, api, lease, self.canonical(m, p), declaration={'mode': 'none'})
                         self.assertNotIn('secret transport detail', str(error.exception))
                 self.assertEqual(api.posts, 1)
+    def test_publication_request_binding_is_independent_of_workflow_labels(self):
+        text = (ROOT / 'harness/agents/review/skills/gitea-code-review/SKILL.md').read_text()
+        entry = text.split('## 진입 조건', 1)[1].split('## 리뷰 관점', 1)[0]
+        publication = text.split('## Native review 게시와 재검토', 1)[1].split('### 재리뷰 수렴', 1)[0]
+        for rule in ('현재 요청의 원문', 'session/message ID', '독립적으로 대조',
+                     '기존 workflow artifact', 'workflow label', 'run-id suffix',
+                     '추론하지 않는다', '권한 근거가 아니다'):
+            with self.subTest(entry_rule=rule):
+                self.assertIn(rule, entry)
+        for rule in ('진입 시 고정한 요청 참조', '재사용', '현재 요청',
+                     '불명확하거나 불일치하면 게시하지 않는다',
+                     'label이나 동일 문구의 다른 요청으로 대체하지 않는다'):
+            with self.subTest(publication_rule=rule):
+                self.assertIn(rule, publication)
+
     def test_empty_review_comments_no_header_contract_is_explicit(self):
         text = (ROOT / 'harness/agents/review/skills/gitea-code-review/references/native-review.md').read_text()
         self.assertIn('### Empty review-comments readback without a count header', text)