e75859c67a
BASE_REF is empty on pull_request_review events since github.base_ref is only populated on pull_request events. The empty string hit the case * wildcard and silently passed the promotion gate. Add a fallback that fetches .base.ref from the PR API when BASE_REF is empty but a PR_NUMBER is available. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>