maintainer-bot: pin 0gm-rollout (cache-aware ledger, 0GM duplicate pass, 2-day DPX shadow capped at $5 a day)

.github/workflows/maintainer-bot.yml

@@ -9,6 +9,12 @@
 # Ordinary comments get their own concurrency group, so a "done, pushed" comment can't cancel the review of the
 # push it talks about (that is what left #670 and #730 stale). Every 6 hours a sweep re-reviews any open PR whose
 # review is older than its head commit; the first sweep also redoes the v1 reviews once (about $2.50).
+#
+# 0GM rollout: after the review, a duplicate and collision pass on 0GM (information only: a "Possibly collides with
+# #N" line in the Checks of both PRs, never a verdict or a label). When a PR opens: only its own pairs. On the
+# 6-hourly sweep and a manual backfill: every open PR (about $0.03 and 1-2 minutes). Shadow, for 2 days: the same
+# review again with context-blocks DPX as a dry run (nothing written; its verdict goes to the log as MB-SHADOW
+# lines, on its own ledger so it never uses the live cap). Remove the two shadow steps after the comparison.
 name: maintainer-bot
 on:
   pull_request_target:
@@ -55,10 +61,43 @@ jobs:
           path: .maintainer-bot
           key: maintainer-bot-ledger-${{ steps.day.outputs.day }}-${{ github.run_id }}
           restore-keys: maintainer-bot-ledger-${{ steps.day.outputs.day }}-
-      - uses: Gathin23/maintainer-bot@234fba6b795ff34b461918cfd271b14c7afdce81 # maintainer-bot: tv.json lists, UTM-tagged 0G links, pinned
+      - uses: Gathin23/maintainer-bot@dc295e24beb36f09ead3884eba65007a64912cfb # maintainer-bot 0gm-rollout: cache-aware ledger, 0GM duplicate pass, pinned
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           og-pc-api-key: ${{ secrets.OG_PC_API_KEY }}
           pr: ${{ github.event.pull_request.number || github.event.issue.number || inputs.pr }}
           force: ${{ github.event_name == 'issue_comment' }}
           daily-cap-usd: "100"
+      - name: Duplicate and collision pass (0GM)
+        if: >-
+          (github.event_name == 'pull_request_target' &&
+           contains(fromJSON('["opened","reopened","ready_for_review"]'), github.event.action)) ||
+          github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && inputs.pr == '')
+        continue-on-error: true
+        uses: Gathin23/maintainer-bot@dc295e24beb36f09ead3884eba65007a64912cfb # same pin as above
+        with:
+          mode: dedupe
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          og-pc-api-key: ${{ secrets.OG_PC_API_KEY }}
+          pr: ${{ github.event.pull_request.number }}
+          daily-cap-usd: "100"
+          dedupe-cap-usd: "1"
+      - name: Shadow review with DPX context (dry run, 2 days)
+        if: github.event_name == 'pull_request_target'
+        continue-on-error: true
+        uses: Gathin23/maintainer-bot@dc295e24beb36f09ead3884eba65007a64912cfb # same pin as above
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          og-pc-api-key: ${{ secrets.OG_PC_API_KEY }}
+          pr: ${{ github.event.pull_request.number }}
+          dry-run: "true"
+          force: "true"
+          context-blocks: DPX
+          per-pr-cap-usd: "1.5"
+          daily-cap-usd: "5"
+          ledger-dir: .maintainer-bot/shadow
+          results-file: .maintainer-bot/shadow/${{ github.run_id }}.jsonl
+      - name: Shadow verdict to the log
+        if: github.event_name == 'pull_request_target'
+        continue-on-error: true
+        run: sed 's/^/MB-SHADOW /' ".maintainer-bot/shadow/${{ github.run_id }}.jsonl" 2>/dev/null || true