Derive the send-door registry from the real send primitives so an unlisted door fails CI; always-on staff alerts on a module-related send ask the mode
Status is DERIVED from each row’s own PR, decision and prod-evidence links by
bin/refresh-tracker send-door-registry-derived — never typed. Last refreshed
2026-11-04 09:12Z.
Every row opens: when it was added, why it exists, and the links that prove it. Rows waiting on a human carry a Decide → link straight to the answerable question on the decisions page. Statuses are re-derived from live PR, decision and prod-evidence state by bin/refresh-trackers; nothing here is typed by hand. Merged and shipped both count as done (Gera, 2026-10-19); a prod_evidence permalink is what moves a row from Merged to Shipped.