Every whole-tree scanning test (fences, one-seam, gate-declaration ratchets) runs on every PR via the guard union, so a PR cannot merge one that turns main red
Status is DERIVED from each row’s own PR, decision and prod-evidence links by
bin/refresh-tracker always-run-fences — never typed. Last refreshed
2026-09-29 15:47Z.
Every row opens: when it was added, why it exists, and the links that prove it. Rows waiting on a human carry a Decide → link straight to the answerable question on the decisions page. Statuses are re-derived from live PR, decision and prod-evidence state by bin/refresh-trackers; nothing here is typed by hand, and merged is not shipped until a prod_evidence permalink says the fix was exercised in production.