dependabot PR #71 has never been audited — the fleet drain has skipped this repo since 2026-08-05

[martymcenroe]

#71 (cryptography 49.0.0→50.0.0) opened 2026-08-05 and carries zero automated reviews, while fleet runs on 2026-08-05, 2026-08-06, and 2026-08-09 audited other repos' PRs. Either this repo is not enrolled in the drain's fleet list or something filters it out — worth checking against the harvester's repo enumeration (umbrella AssemblyZero#2013). Separately: even once audited, the bump target is cryptography 50.0.0, which failed poetry install in a post-interpreter-pin fleet audit on 2026-08-09 — likely awaiting cp314 wheels, so expect a legitimate defer at first. Found during the 2026-08-09 per-open-PR fleet audit.

[martymcenroe]

Cause pinned, one investigation later: enumeration is NOT the problem — the 2026-08-09 06:00 run enumerated this repo correctly. The scheduled drain processes repos in sorted-name order under a 15-review-event harvest cap, and merges + re-audits in alphabetically-earlier repos consume the whole budget every morning; the run then logs 'Harvest limit reached — skipping martymcenroe/silphe (queue untouched)'. silphe sits at the queue tail, so this repeats daily. Tracked fleet-side as AssemblyZero#2155. Until that lands, a manual single-repo run (dependabot_review.py --repo) is the workaround — though #71's cryptography 50.0.0 target will likely defer on install per AssemblyZero#2153.