[imran-siddique]

Adds test_every_lock_keeps_every_input to the repository gates: every package named in a requirements/*.in must still be pinned in its .txt lock.

Dependabot's pip updater recompiles requirements/test.txt for one interpreter, so it drops agentrust-trace, which carries python_version >= '3.11'. It has done that on every pip update since the locks went in with #50: #52 (closed), #56 (repaired by hand in dd8a9b1) and #68 (open, red). Each time the failure showed up as ModuleNotFoundError: agentrust_trace in three tests, not as a lock problem.

With this gate, #68's lock fails with test.txt lost ['agentrust-trace']; recompile with the uv command in test.in. On main it passes, and the suite goes from 128 to 129 tests, all green. The fix on a Dependabot branch stays the same: run the command in the .in header.

Generated with Claude Code