feat(pr-workflow): add the `/mms-evidence` orchestrator, runners, and publish gate - #84

Draft

MajorLift wants to merge 65 commits into

mainfrom

jongsun/add/pr-validate-falsifying-test

Commits on Aug 6, 2026

feat(pr-workflow): add pr-validate and falsifying-test skills
MajorLift
committed
f2dcc71
Restore the MetaMask-planning link in the step-waiver item
MajorLift
committed
76bc15d
Move `falsifying-test` to the `testing` domain
MajorLift
committed
1e81dd3
Add `D6` substitution A/B lane and sync `pr-validate` references
MajorLift
committed
f1c9023
Move the AEP run procedure behind a reference
MajorLift
committed
3f87dd6
Restore the full `pr-validate` description
MajorLift
committed
64c97a1
Actually restore the `pr-validate` description
MajorLift
committed
1aa3bb8
Rename `pr-validate` to `evidence`
MajorLift
committed
25680db
Repair unresolvable references in `evidence` and `falsifying-test`
MajorLift
committed
d66ffe8
Follow the engine renames in the catalog and `falsifying-test`
MajorLift
committed
e42a77f
Add a lane index to the evidence catalog, and fix lane placement
MajorLift
committed
8105056
Add build-duration lanes `D7` and `G6`
MajorLift
committed
947c0d9
Inline the publishing non-negotiables, which a real run ignored entirely
MajorLift
committed
2fc64a3
Add `falsify-probe.sh` — the runner that makes a lane reproducible
MajorLift
committed
2c981de
Add `capture.sh` so the C9 and D3 analyses stop needing an operator to retype them
MajorLift
committed
75d89ee
Add `selector-recompute.sh` — lane C4 gets a runner
MajorLift
committed
1b34a27
Add `tsc-substitution.sh` — a runner for the tsc-blindspots lane
MajorLift
committed
572650e
Diff the error sets rather than requiring a clean baseline
MajorLift
committed
ec04e2c
Add `attest-gate.sh` — eight mechanical checks before anything is published
MajorLift
committed
6fa3c1f
Standardise the provenance marker across every runner
MajorLift
committed
e8acad3
Add `render-count.sh` — the component half of lane C4
MajorLift
committed
50bf8f3
Guard the runners against the failures that masquerade as findings
MajorLift
committed
d89bbcc
Give the orchestrator a runner registry, with limits and synthesis rules
MajorLift
committed
b351799
State the bar: float concerns, do not close them
MajorLift
committed
d000eb8
Report what each measurement runner did not cover
MajorLift
committed
07002d6
Require a validation run to float something for review
MajorLift
committed
fe96614
Stop the runners from cutting the part a reader needed
MajorLift
committed
7eab362
Reference artifacts by name in the publishable block
MajorLift
committed
1c13e87
Stop the gate failing runs whose environment is not the repo's
MajorLift
committed
b8224d3
Let the caller say where its tool puts the finding
MajorLift
committed
5b8b710
Write for the reviewer, not for a user of this skill
MajorLift
committed
7a84732
Move the output template into the skill, where corrections can land
MajorLift
committed
08c615a
Require a finding, not a printout
MajorLift
committed
34bd6d9
Check where the disclaimer is, not just that it is there
MajorLift
committed
0174725
Stop a script's summary of itself passing as a capture
MajorLift
committed
40dee2e
Ask for a medium, not for better text
MajorLift
committed
a56ad92
Move the measurement to CI, where the run URL is the capture
MajorLift
committed
da9f593
Pin the runner source, and say so when it is missing
MajorLift
committed
16e03a3
Require the target repo, make install opt-out, drop the consumer-install framing
MajorLift
committed
17f345c
Make every runner say whether a reader can verify it
MajorLift
committed
da3c1ed
Cite what exists; capture what you ran
MajorLift
committed
5998799
Fold the runner-workflow fixes back from where they were found
MajorLift
committed
88f97a3
Name the commit in the command line, so an A/B pair is not one line twice
MajorLift
committed
9f3ffa1
Stop a broken substitution reading as a divergence
MajorLift
committed
b276586
Require a run to measure the PR's range, and to say where its reach ends
MajorLift
committed
8a8e185
Require an instrument to publish the effect it had, not the instruction it took
MajorLift
committed
e0c83c2
Point `falsifying-test` at the harness, and separate it from its sibling
MajorLift
committed
8ece574
Rename `falsifying-test` to `red-on-base`
MajorLift
committed
76ec7f9
Move `red-on-base` out; this PR is the instrument
MajorLift
committed
90c10fb
Check where the run is going, not only what it says
MajorLift
committed
e82571d
Bring the runner fixes back from the branch CI was actually running
MajorLift
committed
68c0587
Check that a figure in the prose traces to an exhibit
MajorLift
committed
506df35
Stop check 12 passing when it could not run
MajorLift
committed
8241ac1
Point references at the renamed `lavamoat-policy` skill
MajorLift
committed
a2506b8
Give the diligence format a gate with `attest-gate.sh --diligence`
MajorLift
committed
f81508b
Remove private-repo and personal references from a public skill
MajorLift
committed
0573b35
Take the artifact bucket and test fork out of the published text
MajorLift
committed
e5a33db
Restore what the privacy scrub broke: a working jq filter and bucket setup
MajorLift
committed
4511f65
Enforce the evidence rules where the model cannot route around them
MajorLift
committed
87b1fc5
Add `attest` — the publish gate, ported from a personal command
MajorLift
committed
fe2eded
Add `gate-controls.sh`, and scope the gate to evidence artifacts
MajorLift
committed
e636742
Check that the gate is wired, not only that it works
MajorLift
committed
f4bebca
Fail closed when the body cannot be read
MajorLift
committed
fa22023
Ship `hooks/`, and assert that the bundle contract holds
MajorLift
committed
edf65a3
Run the bundle contract check in CI
MajorLift
committed
d6d0c82