rotate-reviewer-tokens.sh refuses to write any reviewer secret from a host that is not the designated publisher, so Fede's older second copy stops clobbering the pool
Status is DERIVED from each row’s own PR, decision and prod-evidence links by
bin/refresh-tracker reviewer-rotation-publisher-guard — never typed. Last refreshed
2026-10-22 04:55Z.
Every row opens: when it was added, why it exists, and the links that prove it. Rows waiting on a human carry a Decide → link straight to the answerable question on the decisions page. Statuses are re-derived from live PR, decision and prod-evidence state by bin/refresh-trackers; nothing here is typed by hand. Merged and shipped both count as done (Gera, 2026-10-19); a prod_evidence permalink is what moves a row from Merged to Shipped.