@@ -6,3 +6,4 @@
 
 - Findings are now fact-checked against the changed file's full content before they are posted — claims the file contradicts are dropped automatically (`WUMING_VERIFY=false` to disable).
 - Repos can now set a minimum severity for posted findings (`WUMING_MIN_SEVERITY`): anything below the floor — and unrecognised severity values — are dropped before posting; agent prompts now also treat a clean report as the preferred outcome.
+- Wave-1 settings are reachable from the Forgejo/GitHub Action interface again: `action.yml` now has `verify` and `min_severity` inputs (previously they silently fell back to defaults).

@@ -100,0 +110,4 @@
+      Unset by default — everything posts. Invalid values fail closed with a
+      startup error.
+    required: false
+    default: ""

@@ -0,0 +16,4 @@
+_REPO_ROOT = Path(__file__).resolve().parent.parent
+
+_ENV_READ_PATTERN = r'os\.environ\.get\(\s*"(WUMING_[A-Z0-9_]+)"'
+_INPUT_REFERENCE_PATTERN = r"\$\{\{\s*inputs\.([A-Za-z0-9_]+)\s*\}\}"

@@ -0,0 +64,4 @@
+    env_mappings = _action_env_mappings()
+    config_env_vars = _config_env_vars()
+    for env_var in sorted(config_env_vars - _INTENTIONALLY_UNMAPPED):
+        expect(env_mappings).to_contain(env_var)

@@ -33,6 +34,10 @@ The pass is cautious in both directions: it only judges whether a finding is fac
 
 ---
 
+A small repair for anyone running WuMing as a Forgejo or GitHub Action: the two review-quality settings from the last release — the fact-checking pass and the severity floor — existed only as environment variables, so the action wrapper quietly ignored them and ran with defaults. Both now have proper inputs (`verify` and `min_severity`), so you can set them directly in your workflow file. Anyone already setting the environment variables by hand is unaffected.

@@ -0,0 +55,4 @@
+    Returns:
+        Every WUMING_* variable name passed to ``os.environ.get`` in config.py.
+    """
+    config_source = (_REPO_ROOT / "src" / "wuming" / "config.py").read_text()

@@ -0,0 +135,4 @@
+    return env_vars
+
+
+@test("every WUMING_ env var config.py reads has an action.yml input")

@@ -0,0 +139,4 @@
+def test_env_vars_have_inputs() -> None:
+    env_mappings = _action_env_mappings()
+    config_env_vars = _config_env_vars()
+    # Guard against vacuous passes: if the scrape ever breaks (e.g. config.py

@@ -0,0 +181,4 @@
+    for node in ast.walk(tree):
+        if not isinstance(node, ast.Call):
+            continue
+        if _dotted_name(node.func) != "os.environ.get" or not node.args:

@@ -0,0 +195,4 @@
+            and isinstance(node.args[1], ast.Constant)
+            and isinstance(node.args[1].value, str)
+        ):
+            defaults[first_argument.value] = node.args[1].value

@@ -0,0 +240,4 @@
+    mismatches: list[str] = []
+    for env_var, target in _action_env_mappings().items():
+        referenced_inputs = re.findall(_INPUT_REFERENCE_PATTERN, str(target))
+        input_default = str(

@@ -124,2 +138,4 @@
     WUMING_VERBOSE: ${{ inputs.verbose }}
     WUMING_SUMMARY_COMMENT: ${{ inputs.summary_comment }}
+    WUMING_VERIFY: ${{ inputs.verify }}
+    WUMING_MIN_SEVERITY: ${{ inputs.min_severity }}