A sendBakeAlert call that names no scope must be a deliberate choice: a new scope-less, non-fleet-level call fails review:self and CI Lint; today's sites frozen in a shrink-only allowlist; then reclassify and shrink.
Status is DERIVED from each row’s own PR, decision and prod-evidence links by
bin/refresh-tracker bake-alert-scope-ratchet — never typed. Last refreshed
2026-11-03 23:45Z.
Every row opens: when it was added, why it exists, and the links that prove it. Rows waiting on a human carry a Decide → link straight to the answerable question on the decisions page. Statuses are re-derived from live PR, decision and prod-evidence state by bin/refresh-trackers; nothing here is typed by hand. Merged and shipped both count as done (Gera, 2026-10-19); a prod_evidence permalink is what moves a row from Merged to Shipped.