@chad / @btrahan, do you think this is worth separating? Offhand, the integration points I can think of are:

• Ability to comment and add inlines;
• actual Audit UI (probably already covered by uninstalling Audit);
• audit-triggering Herald rules;
• "Auditors:" text rule in commit messages;
• I think there's an "automatic audit" trigger in Owners.

It seems fairly reasonable to me to gate all of these on "Audit" actually being installed.

The counterargument is that we've generally been merging Audit into Diffusion and I'm not sure they're really two separate applications anymore at this point, or if they'll remain separate in the future (I'd like to collapse the ancient Repository UI completely into Diffusion, and possibly collapse all of the Audit UI into it, too).

Another thrust would be separating permissions ("Can Comment" vs "Can View") but I'd like stronger use cases for this.

On the WMF side, if we fail to reach and enact a favorable consensus here quickly, if you just commented out this form locally that would probably get you most of the way there. The other integrations are difficult to stumble across or irrelevant because of other configuration.

It seems reasonable for them to be separate.

I don't really care whether the application is separate or inside some super-Diffusion; I guess I have a modest preference for super diffusion because it feels like organic audits happen while browsing the code and otherwise you'd just go to audit when you knew there was a problem or something?

I do think you should be able to easily turn off audit review flows. I think we should actually consider shipping with these off by default to get a bit more "paternal" on how we want code review to work.

Alright, we seem to agree on the idea of merging Audit under Diffusion, yet leaving a configuration option to enable/disable the post-commit review workflow.

For your information, we have closed the original report of this task at https://phabricator.wikimedia.org/T75715 as Declined.

Although I earlier (in T6630#85282) felt like it was reasonable to consider separating Audit and Diffusion, there are now more existing or planned integration points and I think this approach is significantly less reasonable than the "merge them" approach. It also doesn't seem to be causing any problems on real installs.

Thus, I'm planning to resolve this by removing the ability to uninstall Audit (since the existence of that capability is misleading) and generally continuing to merge Audit into Diffusion.