feat(verified): review gate -- evidence chain to merge, fail closed, no self-merge

[gHashTag]

Closes #6680
Refs #6655 (Phase E, automated review gate)

Adds specs/verified/review_gate.t27, which gives the review state of a PR from recorded evidence and says whether it may merge.

• gate_state(affected, required, reported, failed, seals_ok, policy_ok) walks the chain AFFECTED -> EXECUTED -> PASSED -> SEALED -> POLICY and stops at the first link that is missing or failed. A required check that never reported is not a pass. An affected set that is unknown or out of range gives NONE (fail closed). RUN_ALL counts as resolved.
• may_merge(state, approved, approver_is_author) returns true only at POLICY, with approval, and only when the approver is not the author (no bee self-merge).
• It does not restate specs/ci/affected.t27 (which specs are touched) or specs/queen/review_valve.t27 (what happens to work that was not accepted).

Evidence (Railway lab, master t27c, zig 0.16.0):

• t27c gen ... && zig test: 9/9 passed
• 8/8 mutants killed, one per guard
• gen-verilog (152 lines) and gen-c (158 lines) OK
• t27c seal --verify: all hashes MATCH (spec_hash sha256:021648f6...)
• gitleaks: no leaks; the own-language hook passed

This PR does not wire the rule into CI. That would be the next slice, kept separate so each PR stays one atomic change.

🤖 Generated with Claude Code

[github-actions]

PR Dashboard

Generated at: 2026-10-06 06:56:07 UTC

• feat(verified): review gate -- evidence chain to merge, fail closed, no self-merge #6681 feat(verified): review gate -- evidence chain to merge, fail closed, no self-merge | Created: 2026-10-06 | Updated: 2026-10-06 | 23 failing / 25 total
• feat(verified): PoC static region + two compatible slots, sealed A -> B frontier (#6656) #6678 feat(verified): PoC static region + two compatible slots, sealed A -> B frontier (#6656) | Created: 2026-10-06 | Updated: 2026-10-06 | 2 failing / 25 total
• spec(queen): scheduler control contract -- event wakeups, fenced task leases, assign/cancel, agent reuse #6676 spec(queen): scheduler control contract -- event wakeups, fenced task leases, assign/cancel, agent reuse | Created: 2026-10-06 | Updated: 2026-10-06 | 1 failing / 26 total
• feat(verified): invalidation frontier over the use graph (Phase A of #6655) #6674 feat(verified): invalidation frontier over the use graph (Phase A of #6655) | Created: 2026-10-06 | Updated: 2026-10-06 | 1 failing / 25 total
• fix(ledger): enter ar_ternary_logic Rust/Lean mismatch (fast green for #6658) #6672 fix(ledger): enter ar_ternary_logic Rust/Lean mismatch (fast green for #6658) | Created: 2026-10-06 | Updated: 2026-10-06 | 1 failing / 24 total
• feat(verified): reuse/rebuild rule and failure fingerprint (Phase A of #6655) #6671 feat(verified): reuse/rebuild rule and failure fingerprint (Phase A of #6655) | Created: 2026-10-06 | Updated: 2026-10-06 | 1 failing / 26 total
• t27b checked: test blocks for 1 specs in specs/docs (1 of 1) #6623 t27b checked: test blocks for 1 specs in specs/docs (1 of 1) | Created: 2026-10-05 | Updated: 2026-10-05 | 1 failing / 26 total
• t27b checked: test blocks for 1 specs in specs/tools/trinity/tri (1 of 1) #6622 t27b checked: test blocks for 1 specs in specs/tools/trinity/tri (1 of 1) | Created: 2026-10-05 | Updated: 2026-10-05 | 1 failing / 27 total
• t27b checked: test blocks for 5 specs in specs/agents (4 of 4) #6620 t27b checked: test blocks for 5 specs in specs/agents (4 of 4) | Created: 2026-10-05 | Updated: 2026-10-05 | 2 failing / 26 total
• feat(gen-ts): list skipped fns/tests in __NOT_EMITTED__; opt-in --fn lowers pure fn bodies (#6559) #6613 feat(gen-ts): list skipped fns/tests in NOT_EMITTED; opt-in --fn lowers pure fn bodies (#6559) | Created: 2026-10-05 | Updated: 2026-10-05 | 8 failing / 37 total
• feat(t27c): every gen path runs typecheck first (Closes #6446) [needs owner label] #6577 feat(t27c): every gen path runs typecheck first (Closes #6446) [needs owner label] | Created: 2026-10-05 | Updated: 2026-10-05 | 7 failing / 37 total
• bitwalk: --help and a missing file panic instead of printing usage or an error #6551 bitwalk: --help and a missing file panic instead of printing usage or an error | Created: 2026-10-05 | Updated: 2026-10-05 | 3 failing / 26 total
• security: lefthook + gitleaks secret gate (pre-commit, pre-push, CI); remove OSF token #6433 security: lefthook + gitleaks secret gate (pre-commit, pre-push, CI); remove OSF token | Created: 2026-10-05 | Updated: 2026-10-05 | 2 failing / 24 total
• Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/lib/agents/hermes/hermes-provider-map.ts (TypeScript, 2 funct #6399 Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/lib/agents/hermes/hermes-provider-map.ts (TypeScript, 2 funct | Created: 2026-10-05 | Updated: 2026-10-05 | 3 failing / 25 total
• Port bootstrap/src/ternary/mod.rs (Rust, 3 functions) to specs/port/bootstrap/src/ternary/mod.t27 #6208 Port bootstrap/src/ternary/mod.rs (Rust, 3 functions) to specs/port/bootstrap/src/ternary/mod.t27 | Created: 2026-10-04 | Updated: 2026-10-04 | 5 failing / 25 total
• Port tools/check_devhome_paths.py (Python, 6 functions) to specs/port/tools/check_devhome_paths.t27 #6206 Port tools/check_devhome_paths.py (Python, 6 functions) to specs/port/tools/check_devhome_paths.t27 | Created: 2026-10-04 | Updated: 2026-10-04 | 6 failing / 25 total
• Port tools/c_error_classes.py (Python, 6 functions) to specs/port/tools/c_error_classes.t27 #6205 Port tools/c_error_classes.py (Python, 6 functions) to specs/port/tools/c_error_classes.t27 | Created: 2026-10-04 | Updated: 2026-10-04 | 5 failing / 25 total
• fix(t27c): gen-c arithmetic traps where t27 traps, with no C undefined behaviour #6181 fix(t27c): gen-c arithmetic traps where t27 traps, with no C undefined behaviour | Created: 2026-10-04 | Updated: 2026-10-04 | 0 failing / 3 total
• fix(xilinx7): bitwalk prints usage and clean errors instead of panicking (Closes #6039) #6073 fix(xilinx7): bitwalk prints usage and clean errors instead of panicking (Closes #6039) | Created: 2026-10-04 | Updated: 2026-10-04 | 2 failing / 25 total
• self-host: give Gamma (agent C) a /self-host skill for epic #5980 #6057 self-host: give Gamma (agent C) a /self-host skill for epic #5980 | Created: 2026-10-04 | Updated: 2026-10-04 | 1 failing / 25 total
• hooks: pre-commit trusts a PATH tri only if it has hooks pre-commit (#6009) #6011 hooks: pre-commit trusts a PATH tri only if it has hooks pre-commit (#6009) | Created: 2026-10-04 | Updated: 2026-10-04 | 0 failing / 25 total
• ci: every check is a .t27 card -- schema, generator, three pilots (P1 of #5933) #5970 ci: every check is a .t27 card -- schema, generator, three pilots (P1 of #5933) | Created: 2026-10-04 | Updated: 2026-10-04 | 1 failing / 30 total
• fpga: elaboration ratchet back to 176 -- ternary_isa (W459), uart (spec), adapter (NEW-clean) (Closes #5908) #5948 fpga: elaboration ratchet back to 176 -- ternary_isa (W459), uart (spec), adapter (NEW-clean) (Closes #5908) | Created: 2026-10-04 | Updated: 2026-10-04 | 1 failing / 46 total
• CI: spec-guards and emit-bitexact restore master cargo caches; cancel superseded emit-bitexact runs (B25) #5924 CI: spec-guards and emit-bitexact restore master cargo caches; cancel superseded emit-bitexact runs (B25) | Created: 2026-10-04 | Updated: 2026-10-04 | 1 failing / 32 total
• ring-096 and formats.t27 agree on f32 (Closes #5746) #5921 ring-096 and formats.t27 agree on f32 (Closes #5746) | Created: 2026-10-04 | Updated: 2026-10-04 | 1 failing / 56 total
• Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/api/services/queen-lane-credits.ts (TypeScript, 4 functions)  #5778 Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/api/services/queen-lane-credits.ts (TypeScript, 4 functions) | Created: 2026-10-03 | Updated: 2026-10-03 | 3 failing / 32 total
• bees/merger/publisher: reviewer bee as a service, merger reads discounted checks, publisher heading passes check (Closes #5776) #5777 bees/merger/publisher: reviewer bee as a service, merger reads discounted checks, publisher heading passes check (Closes #5776) | Created: 2026-10-03 | Updated: 2026-10-04 | 0 failing / 3 total
• fix(tri): gates preview asks the contexts the ruleset requires, parse-ratchet among them (Closes #5725) #5732 fix(tri): gates preview asks the contexts the ruleset requires, parse-ratchet among them (Closes #5725) | Created: 2026-10-03 | Updated: 2026-10-04 | 0 failing / 7 total
• docs(igla): re-take the corpus figures on master, 1150 specs (Refs #5497) #5610 docs(igla): re-take the corpus figures on master, 1150 specs (Refs #5497) | Created: 2026-10-02 | Updated: 2026-10-02 | 1 failing / 34 total
• The Queen's accept is the merge: dispatch.t27 says so, and its harness measures it #5452 The Queen's accept is the merge: dispatch.t27 says so, and its harness measures it | Created: 2026-10-01 | Updated: 2026-10-06 | 6 failing / 36 total
• docs(tri): mark the Solana tri-mining program and depin.prove rewards superseded by mint-on-acceptance (Closes #5412) #5413 docs(tri): mark the Solana tri-mining program and depin.prove rewards superseded by mint-on-acceptance (Closes #5412) | Created: 2026-10-01 | Updated: 2026-10-02 | 6 failing / 32 total
• Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/lib/container/image-loader.ts (TypeScript, 2 functions) to sp #5320 Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/lib/container/image-loader.ts (TypeScript, 2 functions) to sp | Created: 2026-09-30 | Updated: 2026-10-03 | 0 failing / 3 total
• A "using" in prose became an import; and the per-spec delta check compared strings #5215 A "using" in prose became an import; and the per-spec delta check compared strings | Created: 2026-09-29 | Updated: 2026-10-03 | 10 failing / 42 total
• Auto-loop 2026-09-29: silent-discard parser family + loop infrastructure #5084 Auto-loop 2026-09-29: silent-discard parser family + loop infrastructure | Created: 2026-09-28 | Updated: 2026-10-06 | 0 failing / 2 total
• Carry wave-loop-898's stranded work: green lean 24/24 (fixes red lean CI), mcp registry spec, research corpus #5081 Carry wave-loop-898's stranded work: green lean 24/24 (fixes red lean CI), mcp registry spec, research corpus | Created: 2026-09-28 | Updated: 2026-10-02 | 10 failing / 36 total
• Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/api/services/queen-brief-shape.ts (TypeScript, 2 functions) t #4911 Port gHashTag/BrowserOS:trios/agent-server/apps/server/src/api/services/queen-brief-shape.ts (TypeScript, 2 functions) t | Created: 2026-09-27 | Updated: 2026-10-03 | 0 failing / 3 total
• Seals: 0 of 1072 specs verify, 928 with an unchanged spec_hash — gate it or remove it #4887 Seals: 0 of 1072 specs verify, 928 with an unchanged spec_hash — gate it or remove it | Created: 2026-09-27 | Updated: 2026-10-03 | 10 failing / 41 total
• Wave Loop 473 — compiler-backend aggregate tail / live cold-POR CCLK sweep #4801 Wave Loop 473 — compiler-backend aggregate tail / live cold-POR CCLK sweep | Created: 2026-09-24 | Updated: 2026-10-03 | 0 failing / 3 total
• Bare for statements: 2 loops recovered, and 235 of the 240 sites I cited were out of scope #4777 Bare for statements: 2 loops recovered, and 235 of the 240 sites I cited were out of scope | Created: 2026-09-24 | Updated: 2026-10-03 | 6 failing / 32 total
• Generic type parameters dropped from the declaration and kept in the body: -23 errors #4745 Generic type parameters dropped from the declaration and kept in the body: -23 errors | Created: 2026-09-24 | Updated: 2026-10-03 | 0 failing / 3 total
• Implement the 8 empty function bodies in specs/vsa/packed_vsa.t27 #4729 Implement the 8 empty function bodies in specs/vsa/packed_vsa.t27 | Created: 2026-09-24 | Updated: 2026-10-03 | 7 failing / 32 total
• Wave 684: occlusion four deep, and the two files no list ever reached #4660 Wave 684: occlusion four deep, and the two files no list ever reached | Created: 2026-09-23 | Updated: 2026-10-03 | 7 failing / 32 total
• Capture given/when/then and render them: 6540 clauses, and 169 specs share one unfilled placeholder #4642 Capture given/when/then and render them: 6540 clauses, and 169 specs share one unfilled placeholder | Created: 2026-09-23 | Updated: 2026-10-03 | 7 failing / 32 total
• Implement part 2 of 2 of the empty bodies in specs/git/diff.t27 (7 functions) #4634 Implement part 2 of 2 of the empty bodies in specs/git/diff.t27 (7 functions) | Created: 2026-09-23 | Updated: 2026-10-03 | 0 failing / 3 total
• Port part 1 of 2 of tools/check_withdrawn_live.py to specs/port/tools/check_withdrawn_live.t27 (8 functions) #4581 Port part 1 of 2 of tools/check_withdrawn_live.py to specs/port/tools/check_withdrawn_live.t27 (8 functions) | Created: 2026-09-22 | Updated: 2026-10-03 | 6 failing / 31 total
• Port part 1 of 2 of tools/check_coq_in_build.py to specs/port/tools/check_coq_in_build.t27 (8 functions) #4578 Port part 1 of 2 of tools/check_coq_in_build.py to specs/port/tools/check_coq_in_build.t27 (8 functions) | Created: 2026-09-22 | Updated: 2026-10-03 | 6 failing / 32 total
• Implement the 1 empty function body in specs/test_framework/verilog_bench_harness.t27 #4565 Implement the 1 empty function body in specs/test_framework/verilog_bench_harness.t27 | Created: 2026-09-21 | Updated: 2026-10-03 | 0 failing / 3 total
• Implement part 2 of 2 of the empty bodies in specs/vm/jit_semantics.t27 (4 functions) #4563 Implement part 2 of 2 of the empty bodies in specs/vm/jit_semantics.t27 (4 functions) | Created: 2026-09-21 | Updated: 2026-10-03 | 7 failing / 32 total
• Implement the 1 empty function body in specs/test_framework/graph_drift_detection.t27 #4536 Implement the 1 empty function body in specs/test_framework/graph_drift_detection.t27 | Created: 2026-09-21 | Updated: 2026-10-03 | 0 failing / 3 total
• Feed the swarm from CI, with fuel that does not run out #3978 Feed the swarm from CI, with fuel that does not run out | Created: 2026-09-17 | Updated: 2026-10-02 | 6 failing / 28 total

Summary

Status	Count
Total Open PRs	50
PRs with Failing Checks	36
PRs with All Checks Green	14
READY	12
FAILING	36
PENDING	0
NO CHECKS YET	0

These columns do not partition: 12 + 36 + 0 + 0 = 48, and there are 50 open PRs. A PR is being counted twice or not at all.

Seal Status

• ⚠️ STALE -- sha256(compiler.rs)=3c78f3c7ffb7 != manifest seal=87e5cbd3ad94.
  The committed NMSE numbers were certified against an older compiler.rs.
  Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).