diff --git a/AGENTS.md b/AGENTS.md
index 21ea0d1..de99753 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -36,6 +36,13 @@ explain the ambiguity in plain language, and ask for confirmation before
 acting. This is especially important for filesystem operations, sync targets,
 workflow paths, and anything outside the repository.
 
+## Review Session Default
+
+When running a PR review for this repository, approve by default if the review
+finds no actionable concerns that need to be flagged. If the review finds
+blockers, risks, missing validation, or anything that needs maintainer
+judgment, flag those items clearly to the user instead of approving silently.
+
 ## Visual QA Is Mandatory For UI Work
 
 For any change that affects rendered UI, guide pages, screenshots,
diff --git a/constraints-test.txt b/constraints-test.txt
index 485d7d8..7729e37 100644
--- a/constraints-test.txt
+++ b/constraints-test.txt
@@ -16,18 +16,18 @@
 # an older interpreter or unusual ABI may need a source build or a re-lock
 # (--relock). Pins guard versions, not artifacts.
 aiohappyeyeballs==2.6.2
-aiohttp==3.13.5
+aiohttp==3.14.0
 aiosignal==1.4.0
 attrs==26.1.0
 boolean.py==5.0
 CacheControl==0.14.4
 certifi==2026.5.20
 charset-normalizer==3.4.7
-cyclonedx-python-lib==11.7.0
+cyclonedx-python-lib==11.8.0
 defusedxml==0.7.1
-filelock==3.29.0
+filelock==3.29.1
 frozenlist==1.8.0
-idna==3.17
+idna==3.18
 iniconfig==2.3.0
 license-expression==30.4.4
 markdown-it-py==4.2.0