Risk score

This runs in CI, where something reads the JSON and decides whether a PR needs a second reviewer or can merge. That only works if the same diff gets the same score every time. So the score comes from scripts/score.py, never from you.

Your job is getting the right diff into the script and handing back what it prints, untouched. If a rule looks wrong for this PR, that's a change to the script, made in a PR of its own. Bending one score breaks the thing CI trusts.

1. Pick the diff

$ARGUMENTS decides:

• A number, or a GitHub PR URL: the PR.

  gh pr diff <number or url> --color=never