From b8f57e1f8b748a740017f937f04aea5d8cad0ad5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:17:19 +0900
Subject: [PATCH 01/76] docs: establish product technical gap baseline

---
 AGENTS.md                                    |   2 +
 CHANGELOG.md                                 |   4 +
 docs/product-technical-gap-baseline.md       | 236 +++++++++++++++++++
 tests/test_product_technical_gap_baseline.py |  49 ++++
 4 files changed, 291 insertions(+)
 create mode 100644 docs/product-technical-gap-baseline.md
 create mode 100644 tests/test_product_technical_gap_baseline.py

diff --git a/AGENTS.md b/AGENTS.md
index bd6a96a11..e9dac04e6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -3,6 +3,8 @@
 <!-- CWL-ENTRY -->
 > **Agents: read the master context FIRST.** Before any work, read [`docs/CWL-MASTER-CONTEXT.md`](docs/CWL-MASTER-CONTEXT.md) (mission · naruon-as-platform + inter-component UML · cross-cutting disciplines · conventions · roadmap · current state), the live **GitHub Project #1** <https://github.com/orgs/ContextualWisdomLab/projects/1> (work/roadmap source of truth), the full spec **ContextualWisdomLab/naruon#974**, and operate the Project per [`docs/agent-github-project-protocol.md`](docs/agent-github-project-protocol.md). The repo/Project — not any private agent memory — is the source of truth.
 
+Before selecting a product gap or repository, read [`docs/product-technical-gap-baseline.md`](docs/product-technical-gap-baseline.md). It binds the current PR inventory, product/technical acceptance targets, ownership boundaries, and the next-action loop to live evidence; revalidate every SHA, review, and Check before acting.
+
 Materialize accepts only exact SHA-256 pins or a bounded relative `-r` include (no `.`/`..`); a lone `--require-hashes` directive is not trust evidence. See [`docs/doctoring/hourly-nvidia-nim-autofix.md`](docs/doctoring/hourly-nvidia-nim-autofix.md).
 Conflict-scope roots fail closed when the immediate parent directory is a symbolic link.
 OriginWeave hourly NVIDIA NIM repair is a thin caller at minute 10. See [`docs/doctoring/originweave-hourly-review-caller.md`](docs/doctoring/originweave-hourly-review-caller.md).
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d2f9f24d..f27bc91b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## [Unreleased]
+
+- Documented the live product and technical gap baseline, current open-PR inventory, ownership boundaries, acceptance criteria, and buyer next-action loop in `docs/product-technical-gap-baseline.md`.
+
 All notable changes to the organization automation repository are documented in
 this file. The format follows Keep a Changelog, and versioned releases follow
 Semantic Versioning where the repository publishes a release.
diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
new file mode 100644
index 000000000..05420a91f
--- /dev/null
+++ b/docs/product-technical-gap-baseline.md
@@ -0,0 +1,236 @@
+# Product and Technical Gap Baseline
+
+검토 기준일: **2026-08-20 (Asia/Seoul)**  
+대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
+현재 보호된 `main`: `aa8503f4383e8328d89104796bc3e9f7da810376`  
+현재 열린 PR 수: **98** (아래 표에 이 스냅샷의 전체 목록 포함)
+
+이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
+
+## 1. 근거와 범위
+
+### 1.1 우선순위가 높은 근거
+
+1. [CWL Master Context](CWL-MASTER-CONTEXT.md): naruon의 이메일 우선 플랫폼 경계, DIKW, no-ask 자동 해결, 다층·다중소속·시간·프라이버시 원칙.
+2. [naruon #974](https://github.com/ContextualWisdomLab/naruon/issues/974): `docs/planning/naruon-platform-plan.md`를 추가한 병합된 제품/IA/User Story/Use Case/Architecture 기준.
+3. [GitHub Project #1](https://github.com/orgs/ContextualWisdomLab/projects/1): 로드맵의 live source of truth. 이 스냅샷에서 확인한 조회 한도 내 항목은 Done 68, In Progress 3, Todo 29, 총 100개이며 P0 19, P1 2, P2 14, P3 5, P4 2, P5 31, Ops 25, Decision 2개다.
+4. 중앙 ADR·doctoring·계약 문서: 보호된 main에 존재하는 [organization readiness doctoring](doctoring/organization-commercial-readiness-loop.md)와 현재 열린 [adaptive orchestration PR #1145](https://github.com/ContextualWisdomLab/.github/pull/1145), [Figma 경계 PR #1146](https://github.com/ContextualWisdomLab/.github/pull/1146), [ecosystem catalogue PR #1147](https://github.com/ContextualWisdomLab/.github/pull/1147). PR에만 있는 파일은 병합된 근거로 취급하지 않는다.
+
+### 1.2 제품 경계
+
+구매자가 사는 핵심 결과는 “흩어진 enterprise context를 판단 가능한 구조로 만들고, 사람이 다음 행동을 승인할 수 있게 하는 것”이다. naruon은 이메일 호스트나 전자결재 시스템이 아니라 고객 소유 데이터에 연결되는 이메일 workspace/platform이다. 중앙 `.github`은 제품 기능을 대신 소유하지 않고, 정확한 HEAD·리뷰·Checks·증거·변경권한을 보장하는 control plane이다.
+
+핵심 구매 여정은 다음과 같다.
+
+1. 여러 계정·언어의 이메일에서 한 사건의 thread와 sender 의미를 찾는다.
+2. 변경된 일정의 최신 truth, 변경 이력, commitment status와 충돌을 계산한다.
+3. work/personal/project/band 등 겹치는 norm group을 선택하고, 관계·권한·유효기간을 고려한다.
+4. 다른 context에는 필요한 결과(예: unavailable)만 consent·audit 기반으로 공개한다.
+5. 사람은 근거·confidence·다음 행동을 보고 예외만 수정하며, 외부 writeback은 승인한다.
+
+## 2. PRD / TRD / UML 기준
+
+### 2.1 PRD acceptance
+
+| ID | 구매자가 확인할 결과 | 수용 증거 |
+|---|---|---|
+| PRD-01 | “이 메일/보낸 사람이 왜 중요한가”를 찾는다 | hybrid retrieval, sender ontology, source segment provenance |
+| PRD-02 | 일정 이동과 RSVP/commitment 충돌을 놓치지 않는다 | temporal event history, confirmed > tentative > desired weighting, conflict test |
+| PRD-03 | 같은 사람이 여러 조직·팀·밴드에 소속되어도 권한을 뒤섞지 않는다 | reified relationship, multi-membership/norm-group resolution, ecological-fallacy test |
+| PRD-04 | private reason을 노출하지 않고 필요한 consequence만 공유한다 | consented minimal-disclosure bridge, audit trail, revocation test |
+| PRD-05 | 사용자가 모델 선택을 관리하지 않아도 품질을 우선해 자동 라우팅한다 | contextual-orchestrator `auto`, capability-before-cost, unpriced-is-not-free evidence |
+| PRD-06 | 결과를 독립 제품 또는 naruon plugin으로 동일하게 쓴다 | versioned manifest/API, connector contract, standalone/submodule integration test |
+
+### 2.2 TRD target
+
+- **Platform plane:** naruon web/API, customer-VPC connector, Postgres/pgvector document KG, plugin registry, versioned extension points.
+- **Evidence/control plane:** central `.github`, OpenCode/Noema/Strix, exact-source and exact-head binding, bounded hourly loops, no credential fallback, protected merge.
+- **AI plane:** contextual-orchestrator adaptive routing; role별 reasoning effort, workflow depth, recursion, decomposition, verifier/synthesis를 quality evidence에 따라 배분.
+- **Compute plane:** 수리과학·psychometrics의 계산 레이어와 속도·안정성·보안이 핵심인 hot path는 Rust 경계를 우선 검토하며, GPU/CPU multithreading과 낮은 context switching을 benchmark로 입증한다. Python/JS는 orchestration/API adapter로 제한한다.
+- **Data plane:** 모든 영속 객체는 두 단어 이상 `snake_case`를 기본으로 하고 3NF를 지키며, 관계·evidence·confidence·validity·disclosure를 별도 정규화한다.
+- **UX plane:** UI 제품만 Figma/Storybook/design token을 사용한다. 중앙 `.github`는 UI 없는 인프라 레포지터리이므로 Figma File ID는 **N/A (UI scope 없음)**이며, UI PR은 별도 ADR에 실제 File ID를 기록한다.
+
+### 2.3 UML-level dependency
+
+```mermaid
+flowchart LR
+  User[Buyer / human judgment] --> Naruon[naruon email workspace]
+  Naruon --> Connector[Customer-VPC connector]
+  Naruon --> DocKG[Document KG / Postgres + pgvector]
+  Naruon --> Plugins[Versioned plugin boundary]
+  Plugins --> Verticals[BandScope / Wardnet / Inkspan / ScopeWeave]
+  Naruon --> Orch[contextual-orchestrator auto]
+  Orch --> Models[Embedding / response / audio / image / multimodal]
+  Orch --> Batch[pg-llm-batch]
+  Control[central .github] --> Review[OpenCode / Noema / Strix]
+  Control --> Checks[Checks + SBOM + provenance]
+  Review --> Merge[Protected exact-head merge]
+  Merge --> Control
+```
+
+## 3. Gap register
+
+우선순위는 구매자 체감, 보안/증거 위험, 선행 의존성 순서다.
+
+| Gap ID | 현재 관측 | 구매자 영향 | 우선 구현/검증 |
+|---|---|---|---|
+| G-01 | 열린 PR 98개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
+| G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
+| G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
+| G-04 | 98개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
+| G-05 | ecosystem contract/catalog PR은 존재하지만 naruon의 실제 plugin 소비·standalone 실행·connector round-trip 증거가 제한적이다 | 구매자는 “연결 가능” 문서와 실제 설치 가능한 제품을 구별할 수 없다 | manifest/version compatibility, command/event envelope, consumer smoke, rollback/upgrade contract를 조직 유관 레포에서 증명한다 |
+| G-06 | naruon #974와 Project #1은 제품 목표를 정의하지만 E1/E2/E3의 live implementation evidence가 이 중앙 레포에 없다 | 이메일 검색·일정 충돌이라는 killer workflow가 문서에만 머문다 | naruon에서 thread/sender ontology → temporal commitment/conflict → human correction slice를 독립 PR로 delivery한다 |
+| G-07 | multi-level/multi-membership/temporal 관계 원칙은 master context에 있으나 모든 소비 저장소의 schema/API가 동일한 reified relationship contract를 보장하는지는 미확인이다 | 개인 단위로 집계하거나 전역 권한을 적용하는 atomistic/ecological fallacy 위험이 남는다 | relationship, membership, norm_group, validity window, evidence, confidence, disclosure를 정규화하고 cross-context golden tests를 만든다 |
+| G-08 | embedding·DOM·sender/receiver 의미 단위 chunking과 base64 image의 OCR/object/tag/position-index 설계가 ecosystem contract에 부분적으로만 반영됐다 | 검색은 되지만 실제 그림 위치와 의미를 회수하지 못해 편집·문서·메일 업무가 끊긴다 | semantic unit chunk schema와 image asset/region/ocr/tag embeddings를 별도 entity로 설계하고 source offset/DOM path를 보존한다 |
+| G-09 | 100% coverage/docstring은 중앙 PR별로 증거가 있으나 조직 소비 레포의 frontend interaction/i18n/design-token/real-data accuracy 증거가 동일한지 미확인이다 | “green CI”가 실제 고객 시나리오 정확성을 보장하지 않는다 | domain-specific RMSE/reproducibility/audio/visual/browser acceptance와 edge matrix를 required evidence로 만든다 |
+| G-10 | math/psychometrics의 Rust+GPU/CPU path와 시간·다층·다중소속 모델은 fast-mlsirm/psychometrics-commons 등 제품 레포의 책임이다 | 계산 정확도·성능·모델 해석 가능성을 Python glue만으로 보장할 수 없다 | Rust core, GPU/CPU benchmark, temporal/multilevel/multiple-membership fixtures, RMSE/recovery/ablation을 제품 PR에 묶는다 |
+| G-11 | UI가 있는 제품의 Figma/Storybook inventory와 token/interaction/i18n 테스트는 중앙 control plane에서 소유할 수 없다 | 제품 간 UI가 달라지고 buyer onboarding이 일관되지 않는다 | 각 UI repo가 실제 Figma File ID ADR, Storybook inventory, shared token package, keyboard/edge/i18n tests를 소유한다 |
+| G-12 | CSAP/SOC 2 통제 목표와 PII masking 대안은 doctoring에 흩어져 있으며 evidence-to-control mapping의 live completeness가 미확인이다 | PII를 마스킹하면 업무가 멈추고, 원문 접근을 허용하면 감사·유출 위험이 커진다 | consent/purpose/access lease, field-level encryption/tokenization, redaction-at-egress, audit/revocation와 CSAP/SOC 2 evidence map을 구현한다 |
+| G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | bounded receipt schema, exact next action, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
+| G-14 | release/changelog/version 증거가 각 PR에 분산되고 현재 central repo 보호 main의 release candidate가 명확하지 않다 | 구매자는 어떤 기능이 supportable release인지 확인할 수 없다 | merge 후 release readiness ledger, CHANGELOG, semantic version/tag, rollback/operability evidence를 함께 갱신한다 |
+
+## 4. 현재 PR inventory (live snapshot)
+
+다음 표는 기준선 작성 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
+
+| PR | title | head SHA | base | merge state | review decision |
+|---|---|---|---|---|---|
+| #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
+| #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
+| #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `c3636cc2962a24e50e0f1b545f22fed824df26f8` | main | BLOCKED | — |
+| #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `071a9cedf4b4c637ca5d88765684078d437655af` | main | BLOCKED | — |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `03eab731ac9635379b4999dd15160f89f492af11` | main | BLOCKED | — |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
+| #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
+| #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
+| #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
+| #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
+| #1146 | fix(figma): retain style references and component sets | `f8641765942a919d49b64292a810f96ee3476fcf` | main | DIRTY | CHANGES_REQUESTED |
+| #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
+| #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
+| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |
+| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `8193f0a12e733a2370b7384df42f05919f624c57` | main | BEHIND | — |
+| #1114 | fix(strix): retry transient visibility API failures | `61a82288fddd714a80abb201839631897490f7a9` | main | BLOCKED | CHANGES_REQUESTED |
+| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `1e854d0e8547fbaa32d5cd2ab180bd5e07e3df69` | main | BEHIND | — |
+| #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `4e233c48ecfadf3d3af9ec30f9158da5052102b6` | main | BLOCKED | — |
+| #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
+| #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |
+| #1105 | chore(deps): bump openai from 2.54.0 to 3.1.0 | `4f6e3f63e72111c29329b9bc0a767127a1315e9d` | main | BEHIND | — |
+| #1104 | chore(deps): bump charset-normalizer from 3.4.7 to 3.5.1 | `97ffca37a169e41c15da8976fcb3484a3ee526ff` | main | BEHIND | — |
+| #1103 | chore(deps): bump google-cloud-resource-manager from 1.17.0 to 1.18.0 | `d76211d0038afe90b8374dfa1fa6e1dae680ced5` | main | BEHIND | — |
+| #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `430a3b63c7e081bd89ffea38755b26d982c5e755` | main | BEHIND | CHANGES_REQUESTED |
+| #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `6181c705e244aa39db6d14a117c037e3090e7696` | main | BEHIND | CHANGES_REQUESTED |
+| #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `22c3e8874238ac2196657823860e7673d0f8676e` | main | BEHIND | — |
+| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `b87f66e1632992c5acb1df6e96889a39f76fca4a` | main | BEHIND | CHANGES_REQUESTED |
+| #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `c2e164621755cd275c9b4aef78ff511fc6eb7ca2` | main | BEHIND | — |
+| #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `6bb0d991098cb70a8f3e0df09a5a9424b867117f` | main | BEHIND | CHANGES_REQUESTED |
+| #1089 | fix(opencode): system llvm for cargo-llvm-cov (v3 concurrency) | `cd7d72c64443572c77343f1456a52b54f956240e` | main | BEHIND | — |
+| #1088 | feat(automation): run mightyETL hourly NVIDIA NIM review repair | `38e9d80c908f060f738a7e890ae509a66cf7b2a5` | main | BEHIND | — |
+| #1087 | feat(automation): run life-os hourly NVIDIA NIM review repair | `cdb5d773c93628a6f22450fc9dafbc0d7495e40c` | main | BEHIND | — |
+| #1086 | feat(automation): repair the LineageWeave buyer-surface stack hourly | `1759b47ecb8f0bde886e90e1cb9b734c305cefc8` | main | BLOCKED | — |
+| #1085 | feat(automation): run kaefa hourly NVIDIA NIM review repair | `49596268d4a2ebf9979c893ad883f9ae47472d17` | main | BEHIND | CHANGES_REQUESTED |
+| #1084 | feat(automation): run aFIPC hourly NVIDIA NIM review repair | `9448d1d79abc00c80736b3bd0f69e928e331ca19` | main | BEHIND | — |
+| #1083 | feat(automation): run pg-llm-batch hourly NVIDIA NIM review repair | `ce713d98ec556abf29cde32100268642160344a2` | main | BEHIND | CHANGES_REQUESTED |
+| #1082 | feat(automation): run semantic-data-portal hourly NVIDIA NIM review repair | `ddc024ffa5b5af0f2ed8d5d5a84b615093abcbad` | main | BEHIND | CHANGES_REQUESTED |
+| #1080 | feat(automation): run newsdom-api hourly NVIDIA NIM review repair | `6f3e279cd47c5c4e694ef94ea5d86c613a7ee2d3` | main | BEHIND | CHANGES_REQUESTED |
+| #1079 | feat(automation): run Appguardrail hourly NVIDIA NIM review repair | `6dfe18379c325ce866b223b43e7a7a3729a57025` | main | BEHIND | — |
+| #1078 | feat(automation): run Scopeweave hourly NVIDIA NIM review repair | `d078d62f03dba8f4caaa6971096c053ac2b317d4` | main | BEHIND | — |
+| #1077 | feat(automation): run noema hourly NVIDIA NIM review repair | `3fe974dbedd91d118ec446aa3927386d33f2dba0` | main | BEHIND | CHANGES_REQUESTED |
+| #1076 | feat(automation): run pg-erd-cloud hourly NVIDIA NIM review repair | `3eb45141bd4792bec83d8a719c233c47aa814d9d` | main | BEHIND | CHANGES_REQUESTED |
+| #1075 | feat(automation): run codec-carver hourly NVIDIA NIM review repair | `65113968dd0c703e8e879b08bdfb533b6b6dc79f` | main | BEHIND | CHANGES_REQUESTED |
+| #1074 | feat(automation): run Keyverse hourly NVIDIA NIM review repair | `4e880101d8a78c11fcd4555bf21bd0e53bebca4f` | main | BEHIND | CHANGES_REQUESTED |
+| #1070 | feat(automation): run Wardnet hourly NVIDIA NIM review repair | `b1cbe69d60a22f33fa3aaff82c4cd7efccf888ce` | main | BLOCKED | CHANGES_REQUESTED |
+| #1068 | feat(automation): run contextual-orchestrator hourly NVIDIA NIM review repair | `e1307c37d177b1efa297bdd6871d958ba03d9731` | main | BEHIND | — |
+| #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
+| #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
+| #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
+| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `ba7249ef754e73ab9088f566990bea60e42b9def` | main | BEHIND | — |
+| #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `dc954d216d115c4ba0334e374963a13539e7bad8` | main | BEHIND | — |
+| #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
+| #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
+| #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |
+| #1050 | fix(security): reject dot path components before dependency-review compare | `948de32e869e1656e7ae1ba770b16c0b652f4c29` | main | BEHIND | — |
+| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `7a17f0c663f5515ce7bab7acda0f6588fe54e435` | main | BEHIND | — |
+| #1036 | fix(ci): bind stub-scan evidence and cap hourly fleet work at 12 | `1ac4d90af45f3106afd92fc81a0ec43cb43881bd` | main | BEHIND | — |
+| #1035 | docs(automation): retarget closed-unmerged #840 and #906 lineage | `271fc60592b9eb02cf81ff5281f9c2d0b36b9067` | main | DIRTY | — |
+| #1027 | fix(automation): stop mention sweep on already-exceeded rate limits | `2cd701fdb4a59cd4ebc28107bce5c3c13e1889e9` | main | BEHIND | — |
+| #1026 | feat(actions): inventory orphaned workflow identities | `1e84d65f38b2112c56d9ce7828a041ad3c198b07` | main | BLOCKED | — |
+| #1024 | docs(ai): standardize adaptive contextual-orchestrator consumers | `4fbe9961e92748e88bf129d435ed69682fb49a34` | main | BLOCKED | — |
+| #1015 | fix(coverage): defer interpreter-specific wheel gaps | `53f05d3d6f55ab1eeba730851439fd1d31db8e41` | main | BLOCKED | — |
+| #1009 | fix(strix): bind evidence to exact workflow artifacts | `805f4d32463aeef1b7557eb416fc5eb809874368` | main | BLOCKED | CHANGES_REQUESTED |
+| #1002 | fix(review): fail closed when required check is not a verdict | `5fe83ff0d3c8d6c8d645190076aad0271f75b78d` | main | BEHIND | — |
+| #991 | fix(automation): reuse review node_id for mention eyes | `1fa547ae56c3cb829dfbba3177c2ec0c3fa41fe3` | main | BEHIND | — |
+| #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
+| #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
+| #941 | fix(semgrep): make the pinned image digest authoritative | `52e6af04a7b1953dc18a0b34faacf81c403bf86a` | main | DIRTY | CHANGES_REQUESTED |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `050f2b036d90e4b6a9f9e85683efcbfb5c4d3fdd` | main | BEHIND | CHANGES_REQUESTED |
+| #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
+| #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
+| #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
+| #931 | fix(security): contain sandbox paths and output | `19fa59f9828f4407b43902adc7795e8b8039cb8a` | main | DIRTY | CHANGES_REQUESTED |
+| #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `d0e59199c887980224841b11872837b52ec464ac` | main | DIRTY | CHANGES_REQUESTED |
+| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
+| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `3ed996caed8a69eaf40021343859bba0729e9da5` | main | DIRTY | CHANGES_REQUESTED |
+| #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
+| #918 | chore(security): align all CodeQL actions to v4.37.6 | `2e3029d2c6d80066c01d82930ea6aa2ada0ea319` | main | DIRTY | CHANGES_REQUESTED |
+| #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |
+| #901 | security(deploy-pages): declare minimal secret contract | `1b6246af7405489ecc78f8413f678fa9348db2e4` | main | DIRTY | CHANGES_REQUESTED |
+| #899 | fix(scheduler): fail after summarized action errors | `41e2e6bd236cdba988cb2cae23b4cb5b66783951` | main | BLOCKED | CHANGES_REQUESTED |
+| #897 | fix(security): fail closed on unavailable dependency review | `d52b13075f614ee0da8f61571f2c8ed02430ff34` | main | BLOCKED | CHANGES_REQUESTED |
+| #896 | docs: establish authoritative automation control-plane specifications | `784bc9ff36b12b3d476d9caf5daaea415a58c847` | main | DIRTY | CHANGES_REQUESTED |
+| #882 | feat: eradicate production-only demo stubs across the organization | `4e9dc54762845fc7742a375bbe0e9197a4d40b14` | main | BLOCKED | CHANGES_REQUESTED |
+| #834 | fix(noema): replay OIDC envelope repair on current main | `93d3102ea1b96f2aae3ac1f0e6c5d83c664ce7c1` | main | BLOCKED | CHANGES_REQUESTED |
+| #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
+| #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
+| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `178f969a069d5c105f00a054a36001d2fc36cef3` | main | DIRTY | CHANGES_REQUESTED |
+| #807 | fix(coverage): validate nested npm metadata through canonical pins | `cb4596cbe8f82db215f6f4a1216a5998f728c9b1` | main | BLOCKED | CHANGES_REQUESTED |
+| #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
+| #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
+| #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `07c1358b151b610de1dab37d543534934c16829e` | main | BEHIND | CHANGES_REQUESTED |
+| #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
+
+## 5. 실행 루프와 고객의 다음 행동
+
+각 hourly pass는 아래 순서를 유지한다.
+
+1. 조직·repo 책임 경계를 확인하고, current default branch SHA와 PR head SHA를 새로 읽는다.
+2. 열린 PR 하나를 선택해 review threads, formal review commit SHA, required Checks와 failure logs를 확인한다.
+3. 실패가 코드 결함이면 root cause를 해당 PR의 최소 범위에서 수정하고, 원격 agent의 concurrent commit은 normal forward history로 보존한다.
+4. 현실적인 domain test, edge test, docstring/branch coverage, security/SBOM, actionlint/browser evidence를 실행한다.
+5. 새 head에서 Checks를 재실행하고 independent current-head approval을 다시 요청한다.
+6. protected ruleset의 approval·resolved thread·terminal Checks·exact head를 모두 충족할 때만 normal merge한다. 조건이 안 되면 merge하지 않고 다음 PR로 진행한다.
+7. PR이 소진되면 Project #1과 소비 repo에서 가장 큰 buyer gap을 선택해 새 PR을 만들고, 이 문서의 Gap ID를 연결한다.
+
+운영자는 receipt의 `next_action`만 실행하면 된다. 예를 들어 `PR_REVIEW_MERGE_TOKEN` 부재는 토큰 값을 로그에 남기지 말고 secret을 provision한 후 다음 hourly pass를 기다리며, Strix Caido bootstrap failure는 runner/container readiness를 복구한 후 같은 exact head를 재검증한다.
+
+## 6. Compliance and data boundary
+
+- PII 원문을 무조건 masking하여 업무를 끊지 않는다. 대신 purpose-bound access lease, field-level encryption/tokenization, consented minimal-disclosure consequence, audited access, revocation, retention/deletion을 사용한다. `COPILOT_GITHUB_TOKEN`은 사용하지 않는다.
+- 모델·리뷰·sandbox·Checks·merge·release는 서로 다른 authority다. 하나의 PASS를 approval이나 release로 승격하지 않는다.
+- 모든 untrusted input, repository patch, image/base64 payload, model output은 data로 취급하고 command/credential로 해석하지 않는다.
+- demo/synthetic fixture는 unit test에만 두며 production seed/fixture에는 포함하지 않는다.
+
+## 7. APA 7th references
+
+American Institute of Certified Public Accountants. (2017). *2017 trust services criteria for security, availability, processing integrity, confidentiality, and privacy*. AICPA.
+
+International Organization for Standardization. (2022). *ISO/IEC 27001:2022 information security, cybersecurity and privacy protection—Information security management systems—Requirements*. ISO.
+
+International Organization for Standardization. (2023). *ISO/IEC 42001:2023 information technology—Artificial intelligence—Management system*. ISO.
+
+National Institute of Standards and Technology. (2023). *Artificial intelligence risk management framework (AI RMF 1.0)* (NIST AI 100-1). U.S. Department of Commerce. https://doi.org/10.6028/NIST.AI.100-1
+
+World Wide Web Consortium. (2023). *Web Content Accessibility Guidelines (WCAG) 2.2*. https://www.w3.org/TR/WCAG22/
+
+Lewis, P., Perez, E., Piktus, A., Petroni, F., Karpukhin, V., Goyal, N., Küttler, H., Lewis, M., Yih, W.-t., Rocktäschel, T., Riedel, S., & Kiela, D. (2020). Retrieval-augmented generation for knowledge-intensive NLP tasks. *Advances in Neural Information Processing Systems, 33*, 9459–9474.
+
+Tang, Y., Cetin, E., Xu, J., Sun, Q., Nielsen, S., Richard, V., Goda, H., Tymchenko, I., Nguyen, N., Lee, H., Ashiga, M., Kotyan, S., Kuroki, S., & Clanuwat, T. (2026). *Sakana Fugu technical report* [Technical report]. arXiv. https://doi.org/10.48550/arXiv.2606.21228
+
+Zhang, S., Yu, Y., Li, Y., Zhao, W., Yang, Y., Zhang, Y., & Liu, T. (2025). *Conductor: Learning to route multi-agent workflows* [Preprint]. arXiv. https://doi.org/10.48550/arXiv.2512.04388
+
+Xu, J., Sun, Q., Schwendeman, P., Nielsen, S., Cetin, E., & Tang, Y. (2026). *TRINITY: An evolved LLM coordinator* [Preprint]. arXiv. https://doi.org/10.48550/arXiv.2512.04695
diff --git a/tests/test_product_technical_gap_baseline.py b/tests/test_product_technical_gap_baseline.py
new file mode 100644
index 000000000..8b914c1c5
--- /dev/null
+++ b/tests/test_product_technical_gap_baseline.py
@@ -0,0 +1,49 @@
+"""Regression checks for the central product and technical gap baseline."""
+
+import re
+from pathlib import Path
+
+
+BASELINE = Path("docs/product-technical-gap-baseline.md")
+
+
+def test_baseline_binds_current_governance_sources_and_buyer_contract() -> None:
+    """The baseline must point agents to live product and governance evidence."""
+    source = BASELINE.read_text(encoding="utf-8")
+
+    for marker in (
+        "CWL Master Context",
+        "naruon #974",
+        "GitHub Project #1",
+        "PRD acceptance",
+        "TRD target",
+        "UML-level dependency",
+        "Figma File ID",
+        "APA 7th references",
+        "G-01",
+        "G-14",
+        "exact-head",
+        "independent current-head approval",
+        "COPILOT_GITHUB_TOKEN",
+    ):
+        assert marker in source
+
+
+def test_baseline_inventory_contains_sha_bound_open_pr_rows() -> None:
+    """The captured inventory must include a SHA and disposition for each row."""
+    source = BASELINE.read_text(encoding="utf-8")
+    rows = [line for line in source.splitlines() if line.startswith("| #")]
+
+    assert len(rows) >= 90
+    for row in rows:
+        assert re.search(r"`[0-9a-f]{40}`", row), row
+        assert any(state in row for state in ("BLOCKED", "BEHIND", "DIRTY")), row
+
+
+def test_baseline_links_existing_local_evidence() -> None:
+    """Every local evidence link in the baseline resolves from the docs folder."""
+    for relative_path in (
+        "CWL-MASTER-CONTEXT.md",
+        "doctoring/organization-commercial-readiness-loop.md",
+    ):
+        assert (BASELINE.parent / relative_path).is_file(), relative_path

From 1e16f9fbd7ddb7781e34cedebfce4d860cfcc5de Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:26:24 +0900
Subject: [PATCH 02/76] docs: refresh gap inventory after loop repairs

---
 docs/product-technical-gap-baseline.md | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 05420a91f..3b50774a0 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -91,23 +91,24 @@ flowchart LR
 
 ## 4. 현재 PR inventory (live snapshot)
 
-다음 표는 기준선 작성 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
+다음 표는 기준선 PR의 live update 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. 기준선 자체인 #1163과 이후 이 루프에서 새로 검증한 head는 별도 행으로 갱신했다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `b8f57e1f8b748a740017f937f04aea5d8cad0ad5` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `c3636cc2962a24e50e0f1b545f22fed824df26f8` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `071a9cedf4b4c637ca5d88765684078d437655af` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `19b53a7d22ce8eb26aa780e24eea2a742240b3ea` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `03eab731ac9635379b4999dd15160f89f492af11` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `f8641765942a919d49b64292a810f96ee3476fcf` | main | DIRTY | CHANGES_REQUESTED |
+| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | CHANGES_REQUESTED |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |

From 620fb4fd0f9c7ad410b808af654be0aaba4efb2f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:44:05 +0900
Subject: [PATCH 03/76] docs: refresh live PR baseline heads

---
 docs/product-technical-gap-baseline.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 3b50774a0..73454fbe4 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -96,19 +96,19 @@ flowchart LR
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `b8f57e1f8b748a740017f937f04aea5d8cad0ad5` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `1e16f9fbd7ddb7781e34cedebfce4d860cfcc5de` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `c3636cc2962a24e50e0f1b545f22fed824df26f8` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `19b53a7d22ce8eb26aa780e24eea2a742240b3ea` | main | BLOCKED | — |
-| #1155 | Fix duplicate repository dispatch scheduler runs | `03eab731ac9635379b4999dd15160f89f492af11` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `f19549cde7c8afbe4ab23f44a1814f770d741930` | main | BLOCKED | — |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | CHANGES_REQUESTED |
+| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |

From 275afa1c8fcc963d63389766ba5dc6dd30709afd Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:47:38 +0900
Subject: [PATCH 04/76] docs: record sentinel scope repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 73454fbe4..8a01502bb 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,7 +101,7 @@ flowchart LR
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `f19549cde7c8afbe4ab23f44a1814f770d741930` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `558c437f2903009b3f810fdb52a9ed63cb1ccea2` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |

From 75bb4597d52481f751498d711a449ce27d7d1b58 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:51:56 +0900
Subject: [PATCH 05/76] docs: refresh latest sentinel head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 8a01502bb..a3ad72a89 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,7 +101,7 @@ flowchart LR
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `558c437f2903009b3f810fdb52a9ed63cb1ccea2` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `dee25282af855dda4f45989367cb83e7b52801ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |

From 7a9f4643e3de6e592f7041a98e61af67ad87f0d0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:52:33 +0900
Subject: [PATCH 06/76] docs: bind baseline to its current head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index a3ad72a89..18fd1a936 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -96,7 +96,7 @@ flowchart LR
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `1e16f9fbd7ddb7781e34cedebfce4d860cfcc5de` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `75bb4597d52481f751498d711a449ce27d7d1b58` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |

From 89e579cf53353593735bbdbb6fcbf2c4e543723a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:54:13 +0900
Subject: [PATCH 07/76] docs: refresh open PR count

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 18fd1a936..05d410c11 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -3,7 +3,7 @@
 검토 기준일: **2026-08-20 (Asia/Seoul)**  
 대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
 현재 보호된 `main`: `aa8503f4383e8328d89104796bc3e9f7da810376`  
-현재 열린 PR 수: **98** (아래 표에 이 스냅샷의 전체 목록 포함)
+현재 열린 PR 수: **99** (아래 표에 이 스냅샷의 전체 목록 포함)
 
 이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
 
@@ -77,7 +77,7 @@ flowchart LR
 | G-01 | 열린 PR 98개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
 | G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
 | G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
-| G-04 | 98개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
+| G-04 | 99개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
 | G-05 | ecosystem contract/catalog PR은 존재하지만 naruon의 실제 plugin 소비·standalone 실행·connector round-trip 증거가 제한적이다 | 구매자는 “연결 가능” 문서와 실제 설치 가능한 제품을 구별할 수 없다 | manifest/version compatibility, command/event envelope, consumer smoke, rollback/upgrade contract를 조직 유관 레포에서 증명한다 |
 | G-06 | naruon #974와 Project #1은 제품 목표를 정의하지만 E1/E2/E3의 live implementation evidence가 이 중앙 레포에 없다 | 이메일 검색·일정 충돌이라는 killer workflow가 문서에만 머문다 | naruon에서 thread/sender ontology → temporal commitment/conflict → human correction slice를 독립 PR로 delivery한다 |
 | G-07 | multi-level/multi-membership/temporal 관계 원칙은 master context에 있으나 모든 소비 저장소의 schema/API가 동일한 reified relationship contract를 보장하는지는 미확인이다 | 개인 단위로 집계하거나 전역 권한을 적용하는 atomistic/ecological fallacy 위험이 남는다 | relationship, membership, norm_group, validity window, evidence, confidence, disclosure를 정규화하고 cross-context golden tests를 만든다 |

From 2b5d574547c38e1263249d63013d6cefe397db33 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:00:23 +0900
Subject: [PATCH 08/76] docs: bind security repair heads

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 05d410c11..3e7a5e8fc 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -99,9 +99,9 @@ flowchart LR
 | #1163 | docs: establish live product and technical gap baseline | `75bb4597d52481f751498d711a449ce27d7d1b58` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `dee25282af855dda4f45989367cb83e7b52801ed` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |

From 001c1cf61377b01b7a87160bef2e21801d708830 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:05:35 +0900
Subject: [PATCH 09/76] docs: refresh gap baseline self snapshot

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 3e7a5e8fc..c05470b7e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -74,7 +74,7 @@ flowchart LR
 
 | Gap ID | 현재 관측 | 구매자 영향 | 우선 구현/검증 |
 |---|---|---|---|
-| G-01 | 열린 PR 98개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
+| G-01 | 열린 PR 99개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
 | G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
 | G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
 | G-04 | 99개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
@@ -96,7 +96,7 @@ flowchart LR
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `75bb4597d52481f751498d711a449ce27d7d1b58` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `2b5d574547c38e1263249d63013d6cefe397db33` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |

From f60feddfdf041868d672ff23463510bd6755ecfb Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:19:39 +0900
Subject: [PATCH 10/76] docs: record refreshed review heads

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index c05470b7e..5be93a573 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -95,7 +95,7 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
-| #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
+| #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
 | #1163 | docs: establish live product and technical gap baseline | `2b5d574547c38e1263249d63013d6cefe397db33` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
@@ -171,9 +171,9 @@ flowchart LR
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
-| #931 | fix(security): contain sandbox paths and output | `19fa59f9828f4407b43902adc7795e8b8039cb8a` | main | DIRTY | CHANGES_REQUESTED |
+| #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `d0e59199c887980224841b11872837b52ec464ac` | main | DIRTY | CHANGES_REQUESTED |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `3ed996caed8a69eaf40021343859bba0729e9da5` | main | DIRTY | CHANGES_REQUESTED |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From 2f5d8cf810b2933821b4b95c941da2295bf723a6 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:22:52 +0900
Subject: [PATCH 11/76] docs: record Scorecard repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 5be93a573..3e6b2ad16 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -175,7 +175,7 @@ flowchart LR
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
 | #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
-| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `3ed996caed8a69eaf40021343859bba0729e9da5` | main | DIRTY | CHANGES_REQUESTED |
+| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
 | #918 | chore(security): align all CodeQL actions to v4.37.6 | `2e3029d2c6d80066c01d82930ea6aa2ada0ea319` | main | DIRTY | CHANGES_REQUESTED |
 | #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |

From e5dc15b6483a21488f7e3f06972f016f4d4c7474 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:26:01 +0900
Subject: [PATCH 12/76] docs: record dependency repair heads

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 3e6b2ad16..fddbf74d8 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -177,9 +177,9 @@ flowchart LR
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
-| #918 | chore(security): align all CodeQL actions to v4.37.6 | `2e3029d2c6d80066c01d82930ea6aa2ada0ea319` | main | DIRTY | CHANGES_REQUESTED |
+| #918 | chore(security): align all CodeQL actions to v4.37.6 | `c143b495c94159125961a65ec484fa2c6918d360` | main | BLOCKED | — |
 | #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |
-| #901 | security(deploy-pages): declare minimal secret contract | `1b6246af7405489ecc78f8413f678fa9348db2e4` | main | DIRTY | CHANGES_REQUESTED |
+| #901 | security(deploy-pages): declare minimal secret contract | `b0379e5961db85b92eee2263d2f8db1b59f05c2f` | main | BLOCKED | — |
 | #899 | fix(scheduler): fail after summarized action errors | `41e2e6bd236cdba988cb2cae23b4cb5b66783951` | main | BLOCKED | CHANGES_REQUESTED |
 | #897 | fix(security): fail closed on unavailable dependency review | `d52b13075f614ee0da8f61571f2c8ed02430ff34` | main | BLOCKED | CHANGES_REQUESTED |
 | #896 | docs: establish authoritative automation control-plane specifications | `784bc9ff36b12b3d476d9caf5daaea415a58c847` | main | DIRTY | CHANGES_REQUESTED |

From 9f4f9508a2c32fb0e91424ca9002bfd41a3357f0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:29:38 +0900
Subject: [PATCH 13/76] docs: record process-group repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index fddbf74d8..c7b74960e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -187,7 +187,7 @@ flowchart LR
 | #834 | fix(noema): replay OIDC envelope repair on current main | `93d3102ea1b96f2aae3ac1f0e6c5d83c664ce7c1` | main | BLOCKED | CHANGES_REQUESTED |
 | #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
 | #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
-| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `178f969a069d5c105f00a054a36001d2fc36cef3` | main | DIRTY | CHANGES_REQUESTED |
+| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `5a099cd7a4ce8bb5724401da901a63236980c284` | main | BLOCKED | — |
 | #807 | fix(coverage): validate nested npm metadata through canonical pins | `cb4596cbe8f82db215f6f4a1216a5998f728c9b1` | main | BLOCKED | CHANGES_REQUESTED |
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |

From 618c25ef1c1c6d5ae77228bc723e0718c8760443 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:35:45 +0900
Subject: [PATCH 14/76] docs: record current integration repair heads

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index c7b74960e..854bda681 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -111,10 +111,10 @@ flowchart LR
 | #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
-| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |
-| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `8193f0a12e733a2370b7384df42f05919f624c57` | main | BEHIND | — |
+| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |
+| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `0c700f6f931986d58bd0005ea2d248ca2e459d77` | main | BLOCKED | — |
 | #1114 | fix(strix): retry transient visibility API failures | `61a82288fddd714a80abb201839631897490f7a9` | main | BLOCKED | CHANGES_REQUESTED |
-| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `1e854d0e8547fbaa32d5cd2ab180bd5e07e3df69` | main | BEHIND | — |
+| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `ed42fda7fc712f09930c8c4c0398aa261291c960` | main | BLOCKED | — |
 | #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `4e233c48ecfadf3d3af9ec30f9158da5052102b6` | main | BLOCKED | — |
 | #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
 | #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |

From 547b564cb5464be84cc7dfbe65cc2036ae20c8b2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:38:40 +0900
Subject: [PATCH 15/76] docs: bind redaction repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 854bda681..8a8c73b5d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -103,7 +103,7 @@ flowchart LR
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
-| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `b3f00c51602a145eabd3d332583ed07b6cf12a88` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |

From 20c5d7024df7279598dd9edd1db3b5639c65ccb8 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:39:58 +0900
Subject: [PATCH 16/76] docs: bind coordinator failure to credential gap

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 8a8c73b5d..27c17654d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -86,7 +86,7 @@ flowchart LR
 | G-10 | math/psychometrics의 Rust+GPU/CPU path와 시간·다층·다중소속 모델은 fast-mlsirm/psychometrics-commons 등 제품 레포의 책임이다 | 계산 정확도·성능·모델 해석 가능성을 Python glue만으로 보장할 수 없다 | Rust core, GPU/CPU benchmark, temporal/multilevel/multiple-membership fixtures, RMSE/recovery/ablation을 제품 PR에 묶는다 |
 | G-11 | UI가 있는 제품의 Figma/Storybook inventory와 token/interaction/i18n 테스트는 중앙 control plane에서 소유할 수 없다 | 제품 간 UI가 달라지고 buyer onboarding이 일관되지 않는다 | 각 UI repo가 실제 Figma File ID ADR, Storybook inventory, shared token package, keyboard/edge/i18n tests를 소유한다 |
 | G-12 | CSAP/SOC 2 통제 목표와 PII masking 대안은 doctoring에 흩어져 있으며 evidence-to-control mapping의 live completeness가 미확인이다 | PII를 마스킹하면 업무가 멈추고, 원문 접근을 허용하면 감사·유출 위험이 커진다 | consent/purpose/access lease, field-level encryption/tokenization, redaction-at-egress, audit/revocation와 CSAP/SOC 2 evidence map을 구현한다 |
-| G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | bounded receipt schema, exact next action, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
+| G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다. Main run `32359911521`은 `PR_REVIEW_MERGE_TOKEN` 미설정 시 즉시 실패하고 receipt artifact도 만들지 못했다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | #1161의 `skipped_credential_unavailable` receipt와 다음 행동 문구를 exact-head Checks로 검증한 뒤 병합하고, bounded receipt schema, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
 | G-14 | release/changelog/version 증거가 각 PR에 분산되고 현재 central repo 보호 main의 release candidate가 명확하지 않다 | 구매자는 어떤 기능이 supportable release인지 확인할 수 없다 | merge 후 release readiness ledger, CHANGELOG, semantic version/tag, rollback/operability evidence를 함께 갱신한다 |
 
 ## 4. 현재 PR inventory (live snapshot)

From e53aebc497e5c6e55962fb7a752d49bdc6fa3069 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:42:21 +0900
Subject: [PATCH 17/76] docs: record OSV governance repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 27c17654d..e27f2510e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -174,7 +174,7 @@ flowchart LR
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
 | #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
-| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
+| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
 | #918 | chore(security): align all CodeQL actions to v4.37.6 | `c143b495c94159125961a65ec484fa2c6918d360` | main | BLOCKED | — |

From 6b3878a11fb97d3430e1f1158f39dd204dbfaa44 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:44:13 +0900
Subject: [PATCH 18/76] docs: record Semgrep repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index e27f2510e..37fd47e23 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -166,7 +166,7 @@ flowchart LR
 | #991 | fix(automation): reuse review node_id for mention eyes | `1fa547ae56c3cb829dfbba3177c2ec0c3fa41fe3` | main | BEHIND | — |
 | #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
 | #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
-| #941 | fix(semgrep): make the pinned image digest authoritative | `52e6af04a7b1953dc18a0b34faacf81c403bf86a` | main | DIRTY | CHANGES_REQUESTED |
+| #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
 | #939 | fix: keep cross-repo OpenCode evidence healthy | `050f2b036d90e4b6a9f9e85683efcbfb5c4d3fdd` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |

From 319c29a2b9e512d7e12731aed49aea1a1571b4b7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:06:26 +0900
Subject: [PATCH 19/76] docs: refresh exact-head PR baseline

---
 docs/product-technical-gap-baseline.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 37fd47e23..5df786fc6 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -147,14 +147,14 @@ flowchart LR
 | #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
 | #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
-| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `ba7249ef754e73ab9088f566990bea60e42b9def` | main | BEHIND | — |
+| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `5bd705be8d5e3ea5e85ee38dfda9c809ccb4eb9f` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `dc954d216d115c4ba0334e374963a13539e7bad8` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `3eac8c1f78ebb82272429d1804f3d039b5da86b8` | main | BEHIND | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
 | #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
 | #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |
 | #1050 | fix(security): reject dot path components before dependency-review compare | `948de32e869e1656e7ae1ba770b16c0b652f4c29` | main | BEHIND | — |
-| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `7a17f0c663f5515ce7bab7acda0f6588fe54e435` | main | BEHIND | — |
+| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `b78f361780bbddfb54d63f78ffa13a56c8f76ab0` | main | BEHIND | — |
 | #1036 | fix(ci): bind stub-scan evidence and cap hourly fleet work at 12 | `1ac4d90af45f3106afd92fc81a0ec43cb43881bd` | main | BEHIND | — |
 | #1035 | docs(automation): retarget closed-unmerged #840 and #906 lineage | `271fc60592b9eb02cf81ff5281f9c2d0b36b9067` | main | DIRTY | — |
 | #1027 | fix(automation): stop mention sweep on already-exceeded rate limits | `2cd701fdb4a59cd4ebc28107bce5c3c13e1889e9` | main | BEHIND | — |
@@ -163,11 +163,11 @@ flowchart LR
 | #1015 | fix(coverage): defer interpreter-specific wheel gaps | `53f05d3d6f55ab1eeba730851439fd1d31db8e41` | main | BLOCKED | — |
 | #1009 | fix(strix): bind evidence to exact workflow artifacts | `805f4d32463aeef1b7557eb416fc5eb809874368` | main | BLOCKED | CHANGES_REQUESTED |
 | #1002 | fix(review): fail closed when required check is not a verdict | `5fe83ff0d3c8d6c8d645190076aad0271f75b78d` | main | BEHIND | — |
-| #991 | fix(automation): reuse review node_id for mention eyes | `1fa547ae56c3cb829dfbba3177c2ec0c3fa41fe3` | main | BEHIND | — |
+| #991 | fix(automation): reuse review node_id for mention eyes | `ac496b0cf993f0bd7a058cb297566c6da63d77d3` | main | BEHIND | — |
 | #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
 | #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
 | #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
-| #939 | fix: keep cross-repo OpenCode evidence healthy | `050f2b036d90e4b6a9f9e85683efcbfb5c4d3fdd` | main | BEHIND | CHANGES_REQUESTED |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `a78991a3ada7a11efa2c4b41f3042b4143e8d1d1` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
@@ -188,7 +188,7 @@ flowchart LR
 | #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
 | #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
 | #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `5a099cd7a4ce8bb5724401da901a63236980c284` | main | BLOCKED | — |
-| #807 | fix(coverage): validate nested npm metadata through canonical pins | `cb4596cbe8f82db215f6f4a1216a5998f728c9b1` | main | BLOCKED | CHANGES_REQUESTED |
+| #807 | fix(coverage): validate nested npm metadata through canonical pins | `362479dfa8f675dec59cf86d220736c651e3d83e` | main | BLOCKED | CHANGES_REQUESTED |
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |

From a5c3fc44f2cc8a3e46af73d0c27cc10af785f344 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:17:12 +0900
Subject: [PATCH 20/76] docs: record latest security and coverage heads

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 5df786fc6..381dbc88e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -147,7 +147,7 @@ flowchart LR
 | #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
 | #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
-| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `5bd705be8d5e3ea5e85ee38dfda9c809ccb4eb9f` | main | BEHIND | — |
+| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
 | #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `3eac8c1f78ebb82272429d1804f3d039b5da86b8` | main | BEHIND | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
@@ -167,7 +167,7 @@ flowchart LR
 | #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
 | #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
 | #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
-| #939 | fix: keep cross-repo OpenCode evidence healthy | `a78991a3ada7a11efa2c4b41f3042b4143e8d1d1` | main | BEHIND | CHANGES_REQUESTED |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `663b53d025424b32625d7a935fbbbe09d33b78c5` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
@@ -192,7 +192,7 @@ flowchart LR
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `07c1358b151b610de1dab37d543534934c16829e` | main | BEHIND | CHANGES_REQUESTED |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `30eb18762af9d8a6208c18d0bc01b6abba366023` | main | BEHIND | CHANGES_REQUESTED |
 | #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
 
 ## 5. 실행 루프와 고객의 다음 행동

From bd607f1ddf6f2643378f9010f584a01a03935702 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:24:14 +0900
Subject: [PATCH 21/76] docs: record current PyO3 peer-gate head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 381dbc88e..a0c0a6b66 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -192,7 +192,7 @@ flowchart LR
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `30eb18762af9d8a6208c18d0bc01b6abba366023` | main | BEHIND | CHANGES_REQUESTED |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `1053a14387e53298dc5de887d6637288eb446a70` | main | BEHIND | CHANGES_REQUESTED |
 | #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
 
 ## 5. 실행 루프와 고객의 다음 행동

From cd2cc184bc538e8eab3a7528c2e2e52b495cfa05 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:30:42 +0900
Subject: [PATCH 22/76] docs: record latest native peer-gate head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index a0c0a6b66..bf8bf747c 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -192,7 +192,7 @@ flowchart LR
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `1053a14387e53298dc5de887d6637288eb446a70` | main | BEHIND | CHANGES_REQUESTED |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `6146bb99f7e4ffc2ce6ddc9d5d7f2b934ad26f2f` | main | BEHIND | CHANGES_REQUESTED |
 | #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
 
 ## 5. 실행 루프와 고객의 다음 행동

From 1ccb4c2e8e7b11032fe969e9a081cf1fdf59931e Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:41:22 +0900
Subject: [PATCH 23/76] docs: record current coverage artifact head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index bf8bf747c..19ecf658d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -173,7 +173,7 @@ flowchart LR
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `87506eceb152eb563190aea1e0dea5b143101f24` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From de2b90916a3558f52ac0be862b843cf210c9f613 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:44:02 +0900
Subject: [PATCH 24/76] docs: record current mhtml gateway head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 19ecf658d..8e430a00d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -124,7 +124,7 @@ flowchart LR
 | #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `430a3b63c7e081bd89ffea38755b26d982c5e755` | main | BEHIND | CHANGES_REQUESTED |
 | #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `6181c705e244aa39db6d14a117c037e3090e7696` | main | BEHIND | CHANGES_REQUESTED |
 | #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `22c3e8874238ac2196657823860e7673d0f8676e` | main | BEHIND | — |
-| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `b87f66e1632992c5acb1df6e96889a39f76fca4a` | main | BEHIND | CHANGES_REQUESTED |
+| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `0a1aa80e994b73ed50a2c0242aac1b3abf37a3af` | main | BEHIND | CHANGES_REQUESTED |
 | #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `c2e164621755cd275c9b4aef78ff511fc6eb7ca2` | main | BEHIND | — |
 | #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `6bb0d991098cb70a8f3e0df09a5a9424b867117f` | main | BEHIND | CHANGES_REQUESTED |
 | #1089 | fix(opencode): system llvm for cargo-llvm-cov (v3 concurrency) | `cd7d72c64443572c77343f1456a52b54f956240e` | main | BEHIND | — |

From 9c0dee5163042f19b02e6398cd53d79194548edc Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:46:14 +0900
Subject: [PATCH 25/76] docs: refresh newest pull request inventory

---
 docs/product-technical-gap-baseline.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 8e430a00d..54853c54f 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -95,8 +95,10 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
+| #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
+| #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `2b5d574547c38e1263249d63013d6cefe397db33` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `de2b90916a3558f52ac0be862b843cf210c9f613` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |

From 9d7755a1d66c0653b90f10016cc0002ade360363 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:57:26 +0900
Subject: [PATCH 26/76] docs: record latest artifact contract head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 54853c54f..c8a881a23 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -175,7 +175,7 @@ flowchart LR
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `87506eceb152eb563190aea1e0dea5b143101f24` | main | BLOCKED | — |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `dd7f7a43eb843a0ba64cffcf7704afe46cb455c7` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From c398e22fe8bf759c5dd1acabec60ef96fbc734a7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 21:18:39 +0900
Subject: [PATCH 27/76] docs: refresh PR 1057 current head evidence

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index c8a881a23..10278a16f 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -151,7 +151,7 @@ flowchart LR
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
 | #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `3eac8c1f78ebb82272429d1804f3d039b5da86b8` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `674ace3a` | main | BEHIND | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
 | #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
 | #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |

From fc6c06cd0e9f9b3440a7261e47e93f71c395bed9 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 21:21:09 +0900
Subject: [PATCH 28/76] docs: bind PR 1057 evidence to rebased head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 10278a16f..82211bcfc 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -151,7 +151,7 @@ flowchart LR
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
 | #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `674ace3a` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `d51496ddb0f33de836e6b1ecb1b8339d8cca5cd5` | main | BLOCKED | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
 | #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
 | #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |

From e244ad5bca90ce6f6414cd89329fcb99e25159ba Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:17:19 +0900
Subject: [PATCH 29/76] docs: establish product technical gap baseline

---
 AGENTS.md                                    |   2 +
 CHANGELOG.md                                 |   4 +
 docs/product-technical-gap-baseline.md       | 236 +++++++++++++++++++
 tests/test_product_technical_gap_baseline.py |  49 ++++
 4 files changed, 291 insertions(+)
 create mode 100644 docs/product-technical-gap-baseline.md
 create mode 100644 tests/test_product_technical_gap_baseline.py

diff --git a/AGENTS.md b/AGENTS.md
index bd6a96a11..e9dac04e6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -3,6 +3,8 @@
 <!-- CWL-ENTRY -->
 > **Agents: read the master context FIRST.** Before any work, read [`docs/CWL-MASTER-CONTEXT.md`](docs/CWL-MASTER-CONTEXT.md) (mission · naruon-as-platform + inter-component UML · cross-cutting disciplines · conventions · roadmap · current state), the live **GitHub Project #1** <https://github.com/orgs/ContextualWisdomLab/projects/1> (work/roadmap source of truth), the full spec **ContextualWisdomLab/naruon#974**, and operate the Project per [`docs/agent-github-project-protocol.md`](docs/agent-github-project-protocol.md). The repo/Project — not any private agent memory — is the source of truth.
 
+Before selecting a product gap or repository, read [`docs/product-technical-gap-baseline.md`](docs/product-technical-gap-baseline.md). It binds the current PR inventory, product/technical acceptance targets, ownership boundaries, and the next-action loop to live evidence; revalidate every SHA, review, and Check before acting.
+
 Materialize accepts only exact SHA-256 pins or a bounded relative `-r` include (no `.`/`..`); a lone `--require-hashes` directive is not trust evidence. See [`docs/doctoring/hourly-nvidia-nim-autofix.md`](docs/doctoring/hourly-nvidia-nim-autofix.md).
 Conflict-scope roots fail closed when the immediate parent directory is a symbolic link.
 OriginWeave hourly NVIDIA NIM repair is a thin caller at minute 10. See [`docs/doctoring/originweave-hourly-review-caller.md`](docs/doctoring/originweave-hourly-review-caller.md).
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d2f9f24d..f27bc91b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## [Unreleased]
+
+- Documented the live product and technical gap baseline, current open-PR inventory, ownership boundaries, acceptance criteria, and buyer next-action loop in `docs/product-technical-gap-baseline.md`.
+
 All notable changes to the organization automation repository are documented in
 this file. The format follows Keep a Changelog, and versioned releases follow
 Semantic Versioning where the repository publishes a release.
diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
new file mode 100644
index 000000000..05420a91f
--- /dev/null
+++ b/docs/product-technical-gap-baseline.md
@@ -0,0 +1,236 @@
+# Product and Technical Gap Baseline
+
+검토 기준일: **2026-08-20 (Asia/Seoul)**  
+대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
+현재 보호된 `main`: `aa8503f4383e8328d89104796bc3e9f7da810376`  
+현재 열린 PR 수: **98** (아래 표에 이 스냅샷의 전체 목록 포함)
+
+이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
+
+## 1. 근거와 범위
+
+### 1.1 우선순위가 높은 근거
+
+1. [CWL Master Context](CWL-MASTER-CONTEXT.md): naruon의 이메일 우선 플랫폼 경계, DIKW, no-ask 자동 해결, 다층·다중소속·시간·프라이버시 원칙.
+2. [naruon #974](https://github.com/ContextualWisdomLab/naruon/issues/974): `docs/planning/naruon-platform-plan.md`를 추가한 병합된 제품/IA/User Story/Use Case/Architecture 기준.
+3. [GitHub Project #1](https://github.com/orgs/ContextualWisdomLab/projects/1): 로드맵의 live source of truth. 이 스냅샷에서 확인한 조회 한도 내 항목은 Done 68, In Progress 3, Todo 29, 총 100개이며 P0 19, P1 2, P2 14, P3 5, P4 2, P5 31, Ops 25, Decision 2개다.
+4. 중앙 ADR·doctoring·계약 문서: 보호된 main에 존재하는 [organization readiness doctoring](doctoring/organization-commercial-readiness-loop.md)와 현재 열린 [adaptive orchestration PR #1145](https://github.com/ContextualWisdomLab/.github/pull/1145), [Figma 경계 PR #1146](https://github.com/ContextualWisdomLab/.github/pull/1146), [ecosystem catalogue PR #1147](https://github.com/ContextualWisdomLab/.github/pull/1147). PR에만 있는 파일은 병합된 근거로 취급하지 않는다.
+
+### 1.2 제품 경계
+
+구매자가 사는 핵심 결과는 “흩어진 enterprise context를 판단 가능한 구조로 만들고, 사람이 다음 행동을 승인할 수 있게 하는 것”이다. naruon은 이메일 호스트나 전자결재 시스템이 아니라 고객 소유 데이터에 연결되는 이메일 workspace/platform이다. 중앙 `.github`은 제품 기능을 대신 소유하지 않고, 정확한 HEAD·리뷰·Checks·증거·변경권한을 보장하는 control plane이다.
+
+핵심 구매 여정은 다음과 같다.
+
+1. 여러 계정·언어의 이메일에서 한 사건의 thread와 sender 의미를 찾는다.
+2. 변경된 일정의 최신 truth, 변경 이력, commitment status와 충돌을 계산한다.
+3. work/personal/project/band 등 겹치는 norm group을 선택하고, 관계·권한·유효기간을 고려한다.
+4. 다른 context에는 필요한 결과(예: unavailable)만 consent·audit 기반으로 공개한다.
+5. 사람은 근거·confidence·다음 행동을 보고 예외만 수정하며, 외부 writeback은 승인한다.
+
+## 2. PRD / TRD / UML 기준
+
+### 2.1 PRD acceptance
+
+| ID | 구매자가 확인할 결과 | 수용 증거 |
+|---|---|---|
+| PRD-01 | “이 메일/보낸 사람이 왜 중요한가”를 찾는다 | hybrid retrieval, sender ontology, source segment provenance |
+| PRD-02 | 일정 이동과 RSVP/commitment 충돌을 놓치지 않는다 | temporal event history, confirmed > tentative > desired weighting, conflict test |
+| PRD-03 | 같은 사람이 여러 조직·팀·밴드에 소속되어도 권한을 뒤섞지 않는다 | reified relationship, multi-membership/norm-group resolution, ecological-fallacy test |
+| PRD-04 | private reason을 노출하지 않고 필요한 consequence만 공유한다 | consented minimal-disclosure bridge, audit trail, revocation test |
+| PRD-05 | 사용자가 모델 선택을 관리하지 않아도 품질을 우선해 자동 라우팅한다 | contextual-orchestrator `auto`, capability-before-cost, unpriced-is-not-free evidence |
+| PRD-06 | 결과를 독립 제품 또는 naruon plugin으로 동일하게 쓴다 | versioned manifest/API, connector contract, standalone/submodule integration test |
+
+### 2.2 TRD target
+
+- **Platform plane:** naruon web/API, customer-VPC connector, Postgres/pgvector document KG, plugin registry, versioned extension points.
+- **Evidence/control plane:** central `.github`, OpenCode/Noema/Strix, exact-source and exact-head binding, bounded hourly loops, no credential fallback, protected merge.
+- **AI plane:** contextual-orchestrator adaptive routing; role별 reasoning effort, workflow depth, recursion, decomposition, verifier/synthesis를 quality evidence에 따라 배분.
+- **Compute plane:** 수리과학·psychometrics의 계산 레이어와 속도·안정성·보안이 핵심인 hot path는 Rust 경계를 우선 검토하며, GPU/CPU multithreading과 낮은 context switching을 benchmark로 입증한다. Python/JS는 orchestration/API adapter로 제한한다.
+- **Data plane:** 모든 영속 객체는 두 단어 이상 `snake_case`를 기본으로 하고 3NF를 지키며, 관계·evidence·confidence·validity·disclosure를 별도 정규화한다.
+- **UX plane:** UI 제품만 Figma/Storybook/design token을 사용한다. 중앙 `.github`는 UI 없는 인프라 레포지터리이므로 Figma File ID는 **N/A (UI scope 없음)**이며, UI PR은 별도 ADR에 실제 File ID를 기록한다.
+
+### 2.3 UML-level dependency
+
+```mermaid
+flowchart LR
+  User[Buyer / human judgment] --> Naruon[naruon email workspace]
+  Naruon --> Connector[Customer-VPC connector]
+  Naruon --> DocKG[Document KG / Postgres + pgvector]
+  Naruon --> Plugins[Versioned plugin boundary]
+  Plugins --> Verticals[BandScope / Wardnet / Inkspan / ScopeWeave]
+  Naruon --> Orch[contextual-orchestrator auto]
+  Orch --> Models[Embedding / response / audio / image / multimodal]
+  Orch --> Batch[pg-llm-batch]
+  Control[central .github] --> Review[OpenCode / Noema / Strix]
+  Control --> Checks[Checks + SBOM + provenance]
+  Review --> Merge[Protected exact-head merge]
+  Merge --> Control
+```
+
+## 3. Gap register
+
+우선순위는 구매자 체감, 보안/증거 위험, 선행 의존성 순서다.
+
+| Gap ID | 현재 관측 | 구매자 영향 | 우선 구현/검증 |
+|---|---|---|---|
+| G-01 | 열린 PR 98개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
+| G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
+| G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
+| G-04 | 98개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
+| G-05 | ecosystem contract/catalog PR은 존재하지만 naruon의 실제 plugin 소비·standalone 실행·connector round-trip 증거가 제한적이다 | 구매자는 “연결 가능” 문서와 실제 설치 가능한 제품을 구별할 수 없다 | manifest/version compatibility, command/event envelope, consumer smoke, rollback/upgrade contract를 조직 유관 레포에서 증명한다 |
+| G-06 | naruon #974와 Project #1은 제품 목표를 정의하지만 E1/E2/E3의 live implementation evidence가 이 중앙 레포에 없다 | 이메일 검색·일정 충돌이라는 killer workflow가 문서에만 머문다 | naruon에서 thread/sender ontology → temporal commitment/conflict → human correction slice를 독립 PR로 delivery한다 |
+| G-07 | multi-level/multi-membership/temporal 관계 원칙은 master context에 있으나 모든 소비 저장소의 schema/API가 동일한 reified relationship contract를 보장하는지는 미확인이다 | 개인 단위로 집계하거나 전역 권한을 적용하는 atomistic/ecological fallacy 위험이 남는다 | relationship, membership, norm_group, validity window, evidence, confidence, disclosure를 정규화하고 cross-context golden tests를 만든다 |
+| G-08 | embedding·DOM·sender/receiver 의미 단위 chunking과 base64 image의 OCR/object/tag/position-index 설계가 ecosystem contract에 부분적으로만 반영됐다 | 검색은 되지만 실제 그림 위치와 의미를 회수하지 못해 편집·문서·메일 업무가 끊긴다 | semantic unit chunk schema와 image asset/region/ocr/tag embeddings를 별도 entity로 설계하고 source offset/DOM path를 보존한다 |
+| G-09 | 100% coverage/docstring은 중앙 PR별로 증거가 있으나 조직 소비 레포의 frontend interaction/i18n/design-token/real-data accuracy 증거가 동일한지 미확인이다 | “green CI”가 실제 고객 시나리오 정확성을 보장하지 않는다 | domain-specific RMSE/reproducibility/audio/visual/browser acceptance와 edge matrix를 required evidence로 만든다 |
+| G-10 | math/psychometrics의 Rust+GPU/CPU path와 시간·다층·다중소속 모델은 fast-mlsirm/psychometrics-commons 등 제품 레포의 책임이다 | 계산 정확도·성능·모델 해석 가능성을 Python glue만으로 보장할 수 없다 | Rust core, GPU/CPU benchmark, temporal/multilevel/multiple-membership fixtures, RMSE/recovery/ablation을 제품 PR에 묶는다 |
+| G-11 | UI가 있는 제품의 Figma/Storybook inventory와 token/interaction/i18n 테스트는 중앙 control plane에서 소유할 수 없다 | 제품 간 UI가 달라지고 buyer onboarding이 일관되지 않는다 | 각 UI repo가 실제 Figma File ID ADR, Storybook inventory, shared token package, keyboard/edge/i18n tests를 소유한다 |
+| G-12 | CSAP/SOC 2 통제 목표와 PII masking 대안은 doctoring에 흩어져 있으며 evidence-to-control mapping의 live completeness가 미확인이다 | PII를 마스킹하면 업무가 멈추고, 원문 접근을 허용하면 감사·유출 위험이 커진다 | consent/purpose/access lease, field-level encryption/tokenization, redaction-at-egress, audit/revocation와 CSAP/SOC 2 evidence map을 구현한다 |
+| G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | bounded receipt schema, exact next action, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
+| G-14 | release/changelog/version 증거가 각 PR에 분산되고 현재 central repo 보호 main의 release candidate가 명확하지 않다 | 구매자는 어떤 기능이 supportable release인지 확인할 수 없다 | merge 후 release readiness ledger, CHANGELOG, semantic version/tag, rollback/operability evidence를 함께 갱신한다 |
+
+## 4. 현재 PR inventory (live snapshot)
+
+다음 표는 기준선 작성 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
+
+| PR | title | head SHA | base | merge state | review decision |
+|---|---|---|---|---|---|
+| #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
+| #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
+| #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `c3636cc2962a24e50e0f1b545f22fed824df26f8` | main | BLOCKED | — |
+| #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `071a9cedf4b4c637ca5d88765684078d437655af` | main | BLOCKED | — |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `03eab731ac9635379b4999dd15160f89f492af11` | main | BLOCKED | — |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
+| #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
+| #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
+| #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
+| #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
+| #1146 | fix(figma): retain style references and component sets | `f8641765942a919d49b64292a810f96ee3476fcf` | main | DIRTY | CHANGES_REQUESTED |
+| #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
+| #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
+| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |
+| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `8193f0a12e733a2370b7384df42f05919f624c57` | main | BEHIND | — |
+| #1114 | fix(strix): retry transient visibility API failures | `61a82288fddd714a80abb201839631897490f7a9` | main | BLOCKED | CHANGES_REQUESTED |
+| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `1e854d0e8547fbaa32d5cd2ab180bd5e07e3df69` | main | BEHIND | — |
+| #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `4e233c48ecfadf3d3af9ec30f9158da5052102b6` | main | BLOCKED | — |
+| #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
+| #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |
+| #1105 | chore(deps): bump openai from 2.54.0 to 3.1.0 | `4f6e3f63e72111c29329b9bc0a767127a1315e9d` | main | BEHIND | — |
+| #1104 | chore(deps): bump charset-normalizer from 3.4.7 to 3.5.1 | `97ffca37a169e41c15da8976fcb3484a3ee526ff` | main | BEHIND | — |
+| #1103 | chore(deps): bump google-cloud-resource-manager from 1.17.0 to 1.18.0 | `d76211d0038afe90b8374dfa1fa6e1dae680ced5` | main | BEHIND | — |
+| #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `430a3b63c7e081bd89ffea38755b26d982c5e755` | main | BEHIND | CHANGES_REQUESTED |
+| #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `6181c705e244aa39db6d14a117c037e3090e7696` | main | BEHIND | CHANGES_REQUESTED |
+| #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `22c3e8874238ac2196657823860e7673d0f8676e` | main | BEHIND | — |
+| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `b87f66e1632992c5acb1df6e96889a39f76fca4a` | main | BEHIND | CHANGES_REQUESTED |
+| #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `c2e164621755cd275c9b4aef78ff511fc6eb7ca2` | main | BEHIND | — |
+| #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `6bb0d991098cb70a8f3e0df09a5a9424b867117f` | main | BEHIND | CHANGES_REQUESTED |
+| #1089 | fix(opencode): system llvm for cargo-llvm-cov (v3 concurrency) | `cd7d72c64443572c77343f1456a52b54f956240e` | main | BEHIND | — |
+| #1088 | feat(automation): run mightyETL hourly NVIDIA NIM review repair | `38e9d80c908f060f738a7e890ae509a66cf7b2a5` | main | BEHIND | — |
+| #1087 | feat(automation): run life-os hourly NVIDIA NIM review repair | `cdb5d773c93628a6f22450fc9dafbc0d7495e40c` | main | BEHIND | — |
+| #1086 | feat(automation): repair the LineageWeave buyer-surface stack hourly | `1759b47ecb8f0bde886e90e1cb9b734c305cefc8` | main | BLOCKED | — |
+| #1085 | feat(automation): run kaefa hourly NVIDIA NIM review repair | `49596268d4a2ebf9979c893ad883f9ae47472d17` | main | BEHIND | CHANGES_REQUESTED |
+| #1084 | feat(automation): run aFIPC hourly NVIDIA NIM review repair | `9448d1d79abc00c80736b3bd0f69e928e331ca19` | main | BEHIND | — |
+| #1083 | feat(automation): run pg-llm-batch hourly NVIDIA NIM review repair | `ce713d98ec556abf29cde32100268642160344a2` | main | BEHIND | CHANGES_REQUESTED |
+| #1082 | feat(automation): run semantic-data-portal hourly NVIDIA NIM review repair | `ddc024ffa5b5af0f2ed8d5d5a84b615093abcbad` | main | BEHIND | CHANGES_REQUESTED |
+| #1080 | feat(automation): run newsdom-api hourly NVIDIA NIM review repair | `6f3e279cd47c5c4e694ef94ea5d86c613a7ee2d3` | main | BEHIND | CHANGES_REQUESTED |
+| #1079 | feat(automation): run Appguardrail hourly NVIDIA NIM review repair | `6dfe18379c325ce866b223b43e7a7a3729a57025` | main | BEHIND | — |
+| #1078 | feat(automation): run Scopeweave hourly NVIDIA NIM review repair | `d078d62f03dba8f4caaa6971096c053ac2b317d4` | main | BEHIND | — |
+| #1077 | feat(automation): run noema hourly NVIDIA NIM review repair | `3fe974dbedd91d118ec446aa3927386d33f2dba0` | main | BEHIND | CHANGES_REQUESTED |
+| #1076 | feat(automation): run pg-erd-cloud hourly NVIDIA NIM review repair | `3eb45141bd4792bec83d8a719c233c47aa814d9d` | main | BEHIND | CHANGES_REQUESTED |
+| #1075 | feat(automation): run codec-carver hourly NVIDIA NIM review repair | `65113968dd0c703e8e879b08bdfb533b6b6dc79f` | main | BEHIND | CHANGES_REQUESTED |
+| #1074 | feat(automation): run Keyverse hourly NVIDIA NIM review repair | `4e880101d8a78c11fcd4555bf21bd0e53bebca4f` | main | BEHIND | CHANGES_REQUESTED |
+| #1070 | feat(automation): run Wardnet hourly NVIDIA NIM review repair | `b1cbe69d60a22f33fa3aaff82c4cd7efccf888ce` | main | BLOCKED | CHANGES_REQUESTED |
+| #1068 | feat(automation): run contextual-orchestrator hourly NVIDIA NIM review repair | `e1307c37d177b1efa297bdd6871d958ba03d9731` | main | BEHIND | — |
+| #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
+| #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
+| #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
+| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `ba7249ef754e73ab9088f566990bea60e42b9def` | main | BEHIND | — |
+| #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `dc954d216d115c4ba0334e374963a13539e7bad8` | main | BEHIND | — |
+| #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
+| #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
+| #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |
+| #1050 | fix(security): reject dot path components before dependency-review compare | `948de32e869e1656e7ae1ba770b16c0b652f4c29` | main | BEHIND | — |
+| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `7a17f0c663f5515ce7bab7acda0f6588fe54e435` | main | BEHIND | — |
+| #1036 | fix(ci): bind stub-scan evidence and cap hourly fleet work at 12 | `1ac4d90af45f3106afd92fc81a0ec43cb43881bd` | main | BEHIND | — |
+| #1035 | docs(automation): retarget closed-unmerged #840 and #906 lineage | `271fc60592b9eb02cf81ff5281f9c2d0b36b9067` | main | DIRTY | — |
+| #1027 | fix(automation): stop mention sweep on already-exceeded rate limits | `2cd701fdb4a59cd4ebc28107bce5c3c13e1889e9` | main | BEHIND | — |
+| #1026 | feat(actions): inventory orphaned workflow identities | `1e84d65f38b2112c56d9ce7828a041ad3c198b07` | main | BLOCKED | — |
+| #1024 | docs(ai): standardize adaptive contextual-orchestrator consumers | `4fbe9961e92748e88bf129d435ed69682fb49a34` | main | BLOCKED | — |
+| #1015 | fix(coverage): defer interpreter-specific wheel gaps | `53f05d3d6f55ab1eeba730851439fd1d31db8e41` | main | BLOCKED | — |
+| #1009 | fix(strix): bind evidence to exact workflow artifacts | `805f4d32463aeef1b7557eb416fc5eb809874368` | main | BLOCKED | CHANGES_REQUESTED |
+| #1002 | fix(review): fail closed when required check is not a verdict | `5fe83ff0d3c8d6c8d645190076aad0271f75b78d` | main | BEHIND | — |
+| #991 | fix(automation): reuse review node_id for mention eyes | `1fa547ae56c3cb829dfbba3177c2ec0c3fa41fe3` | main | BEHIND | — |
+| #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
+| #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
+| #941 | fix(semgrep): make the pinned image digest authoritative | `52e6af04a7b1953dc18a0b34faacf81c403bf86a` | main | DIRTY | CHANGES_REQUESTED |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `050f2b036d90e4b6a9f9e85683efcbfb5c4d3fdd` | main | BEHIND | CHANGES_REQUESTED |
+| #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
+| #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
+| #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
+| #931 | fix(security): contain sandbox paths and output | `19fa59f9828f4407b43902adc7795e8b8039cb8a` | main | DIRTY | CHANGES_REQUESTED |
+| #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `d0e59199c887980224841b11872837b52ec464ac` | main | DIRTY | CHANGES_REQUESTED |
+| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
+| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `3ed996caed8a69eaf40021343859bba0729e9da5` | main | DIRTY | CHANGES_REQUESTED |
+| #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
+| #918 | chore(security): align all CodeQL actions to v4.37.6 | `2e3029d2c6d80066c01d82930ea6aa2ada0ea319` | main | DIRTY | CHANGES_REQUESTED |
+| #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |
+| #901 | security(deploy-pages): declare minimal secret contract | `1b6246af7405489ecc78f8413f678fa9348db2e4` | main | DIRTY | CHANGES_REQUESTED |
+| #899 | fix(scheduler): fail after summarized action errors | `41e2e6bd236cdba988cb2cae23b4cb5b66783951` | main | BLOCKED | CHANGES_REQUESTED |
+| #897 | fix(security): fail closed on unavailable dependency review | `d52b13075f614ee0da8f61571f2c8ed02430ff34` | main | BLOCKED | CHANGES_REQUESTED |
+| #896 | docs: establish authoritative automation control-plane specifications | `784bc9ff36b12b3d476d9caf5daaea415a58c847` | main | DIRTY | CHANGES_REQUESTED |
+| #882 | feat: eradicate production-only demo stubs across the organization | `4e9dc54762845fc7742a375bbe0e9197a4d40b14` | main | BLOCKED | CHANGES_REQUESTED |
+| #834 | fix(noema): replay OIDC envelope repair on current main | `93d3102ea1b96f2aae3ac1f0e6c5d83c664ce7c1` | main | BLOCKED | CHANGES_REQUESTED |
+| #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
+| #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
+| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `178f969a069d5c105f00a054a36001d2fc36cef3` | main | DIRTY | CHANGES_REQUESTED |
+| #807 | fix(coverage): validate nested npm metadata through canonical pins | `cb4596cbe8f82db215f6f4a1216a5998f728c9b1` | main | BLOCKED | CHANGES_REQUESTED |
+| #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
+| #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
+| #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `07c1358b151b610de1dab37d543534934c16829e` | main | BEHIND | CHANGES_REQUESTED |
+| #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
+
+## 5. 실행 루프와 고객의 다음 행동
+
+각 hourly pass는 아래 순서를 유지한다.
+
+1. 조직·repo 책임 경계를 확인하고, current default branch SHA와 PR head SHA를 새로 읽는다.
+2. 열린 PR 하나를 선택해 review threads, formal review commit SHA, required Checks와 failure logs를 확인한다.
+3. 실패가 코드 결함이면 root cause를 해당 PR의 최소 범위에서 수정하고, 원격 agent의 concurrent commit은 normal forward history로 보존한다.
+4. 현실적인 domain test, edge test, docstring/branch coverage, security/SBOM, actionlint/browser evidence를 실행한다.
+5. 새 head에서 Checks를 재실행하고 independent current-head approval을 다시 요청한다.
+6. protected ruleset의 approval·resolved thread·terminal Checks·exact head를 모두 충족할 때만 normal merge한다. 조건이 안 되면 merge하지 않고 다음 PR로 진행한다.
+7. PR이 소진되면 Project #1과 소비 repo에서 가장 큰 buyer gap을 선택해 새 PR을 만들고, 이 문서의 Gap ID를 연결한다.
+
+운영자는 receipt의 `next_action`만 실행하면 된다. 예를 들어 `PR_REVIEW_MERGE_TOKEN` 부재는 토큰 값을 로그에 남기지 말고 secret을 provision한 후 다음 hourly pass를 기다리며, Strix Caido bootstrap failure는 runner/container readiness를 복구한 후 같은 exact head를 재검증한다.
+
+## 6. Compliance and data boundary
+
+- PII 원문을 무조건 masking하여 업무를 끊지 않는다. 대신 purpose-bound access lease, field-level encryption/tokenization, consented minimal-disclosure consequence, audited access, revocation, retention/deletion을 사용한다. `COPILOT_GITHUB_TOKEN`은 사용하지 않는다.
+- 모델·리뷰·sandbox·Checks·merge·release는 서로 다른 authority다. 하나의 PASS를 approval이나 release로 승격하지 않는다.
+- 모든 untrusted input, repository patch, image/base64 payload, model output은 data로 취급하고 command/credential로 해석하지 않는다.
+- demo/synthetic fixture는 unit test에만 두며 production seed/fixture에는 포함하지 않는다.
+
+## 7. APA 7th references
+
+American Institute of Certified Public Accountants. (2017). *2017 trust services criteria for security, availability, processing integrity, confidentiality, and privacy*. AICPA.
+
+International Organization for Standardization. (2022). *ISO/IEC 27001:2022 information security, cybersecurity and privacy protection—Information security management systems—Requirements*. ISO.
+
+International Organization for Standardization. (2023). *ISO/IEC 42001:2023 information technology—Artificial intelligence—Management system*. ISO.
+
+National Institute of Standards and Technology. (2023). *Artificial intelligence risk management framework (AI RMF 1.0)* (NIST AI 100-1). U.S. Department of Commerce. https://doi.org/10.6028/NIST.AI.100-1
+
+World Wide Web Consortium. (2023). *Web Content Accessibility Guidelines (WCAG) 2.2*. https://www.w3.org/TR/WCAG22/
+
+Lewis, P., Perez, E., Piktus, A., Petroni, F., Karpukhin, V., Goyal, N., Küttler, H., Lewis, M., Yih, W.-t., Rocktäschel, T., Riedel, S., & Kiela, D. (2020). Retrieval-augmented generation for knowledge-intensive NLP tasks. *Advances in Neural Information Processing Systems, 33*, 9459–9474.
+
+Tang, Y., Cetin, E., Xu, J., Sun, Q., Nielsen, S., Richard, V., Goda, H., Tymchenko, I., Nguyen, N., Lee, H., Ashiga, M., Kotyan, S., Kuroki, S., & Clanuwat, T. (2026). *Sakana Fugu technical report* [Technical report]. arXiv. https://doi.org/10.48550/arXiv.2606.21228
+
+Zhang, S., Yu, Y., Li, Y., Zhao, W., Yang, Y., Zhang, Y., & Liu, T. (2025). *Conductor: Learning to route multi-agent workflows* [Preprint]. arXiv. https://doi.org/10.48550/arXiv.2512.04388
+
+Xu, J., Sun, Q., Schwendeman, P., Nielsen, S., Cetin, E., & Tang, Y. (2026). *TRINITY: An evolved LLM coordinator* [Preprint]. arXiv. https://doi.org/10.48550/arXiv.2512.04695
diff --git a/tests/test_product_technical_gap_baseline.py b/tests/test_product_technical_gap_baseline.py
new file mode 100644
index 000000000..8b914c1c5
--- /dev/null
+++ b/tests/test_product_technical_gap_baseline.py
@@ -0,0 +1,49 @@
+"""Regression checks for the central product and technical gap baseline."""
+
+import re
+from pathlib import Path
+
+
+BASELINE = Path("docs/product-technical-gap-baseline.md")
+
+
+def test_baseline_binds_current_governance_sources_and_buyer_contract() -> None:
+    """The baseline must point agents to live product and governance evidence."""
+    source = BASELINE.read_text(encoding="utf-8")
+
+    for marker in (
+        "CWL Master Context",
+        "naruon #974",
+        "GitHub Project #1",
+        "PRD acceptance",
+        "TRD target",
+        "UML-level dependency",
+        "Figma File ID",
+        "APA 7th references",
+        "G-01",
+        "G-14",
+        "exact-head",
+        "independent current-head approval",
+        "COPILOT_GITHUB_TOKEN",
+    ):
+        assert marker in source
+
+
+def test_baseline_inventory_contains_sha_bound_open_pr_rows() -> None:
+    """The captured inventory must include a SHA and disposition for each row."""
+    source = BASELINE.read_text(encoding="utf-8")
+    rows = [line for line in source.splitlines() if line.startswith("| #")]
+
+    assert len(rows) >= 90
+    for row in rows:
+        assert re.search(r"`[0-9a-f]{40}`", row), row
+        assert any(state in row for state in ("BLOCKED", "BEHIND", "DIRTY")), row
+
+
+def test_baseline_links_existing_local_evidence() -> None:
+    """Every local evidence link in the baseline resolves from the docs folder."""
+    for relative_path in (
+        "CWL-MASTER-CONTEXT.md",
+        "doctoring/organization-commercial-readiness-loop.md",
+    ):
+        assert (BASELINE.parent / relative_path).is_file(), relative_path

From 792a765af904b97e808eb9cd730e2a91adc5812b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:26:24 +0900
Subject: [PATCH 30/76] docs: refresh gap inventory after loop repairs

---
 docs/product-technical-gap-baseline.md | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 05420a91f..3b50774a0 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -91,23 +91,24 @@ flowchart LR
 
 ## 4. 현재 PR inventory (live snapshot)
 
-다음 표는 기준선 작성 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
+다음 표는 기준선 PR의 live update 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. 기준선 자체인 #1163과 이후 이 루프에서 새로 검증한 head는 별도 행으로 갱신했다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `b8f57e1f8b748a740017f937f04aea5d8cad0ad5` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `c3636cc2962a24e50e0f1b545f22fed824df26f8` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `071a9cedf4b4c637ca5d88765684078d437655af` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `19b53a7d22ce8eb26aa780e24eea2a742240b3ea` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `03eab731ac9635379b4999dd15160f89f492af11` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `f8641765942a919d49b64292a810f96ee3476fcf` | main | DIRTY | CHANGES_REQUESTED |
+| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | CHANGES_REQUESTED |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |

From 506ab2b8e8b0ec1cfe68cbb387412c63010a7f16 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:44:05 +0900
Subject: [PATCH 31/76] docs: refresh live PR baseline heads

---
 docs/product-technical-gap-baseline.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 3b50774a0..73454fbe4 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -96,19 +96,19 @@ flowchart LR
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `b8f57e1f8b748a740017f937f04aea5d8cad0ad5` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `1e16f9fbd7ddb7781e34cedebfce4d860cfcc5de` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `c3636cc2962a24e50e0f1b545f22fed824df26f8` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `19b53a7d22ce8eb26aa780e24eea2a742240b3ea` | main | BLOCKED | — |
-| #1155 | Fix duplicate repository dispatch scheduler runs | `03eab731ac9635379b4999dd15160f89f492af11` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `f19549cde7c8afbe4ab23f44a1814f770d741930` | main | BLOCKED | — |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | CHANGES_REQUESTED |
+| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |

From 9a2b197eab5028f184cab6aadbb0108cf9f8605a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:47:38 +0900
Subject: [PATCH 32/76] docs: record sentinel scope repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 73454fbe4..8a01502bb 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,7 +101,7 @@ flowchart LR
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `f19549cde7c8afbe4ab23f44a1814f770d741930` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `558c437f2903009b3f810fdb52a9ed63cb1ccea2` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |

From d3523a4756b60a07526ceef322b5f4ed45a00ac4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:51:56 +0900
Subject: [PATCH 33/76] docs: refresh latest sentinel head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 8a01502bb..a3ad72a89 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,7 +101,7 @@ flowchart LR
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `558c437f2903009b3f810fdb52a9ed63cb1ccea2` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `dee25282af855dda4f45989367cb83e7b52801ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |

From a3f341a1bc6da0d81b010578394d4054e0931cd1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:52:33 +0900
Subject: [PATCH 34/76] docs: bind baseline to its current head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index a3ad72a89..18fd1a936 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -96,7 +96,7 @@ flowchart LR
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `1e16f9fbd7ddb7781e34cedebfce4d860cfcc5de` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `75bb4597d52481f751498d711a449ce27d7d1b58` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |

From 6ecc86dc971f45c390b9d267f3f5ee0e7d4031b7 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 18:54:13 +0900
Subject: [PATCH 35/76] docs: refresh open PR count

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 18fd1a936..05d410c11 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -3,7 +3,7 @@
 검토 기준일: **2026-08-20 (Asia/Seoul)**  
 대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
 현재 보호된 `main`: `aa8503f4383e8328d89104796bc3e9f7da810376`  
-현재 열린 PR 수: **98** (아래 표에 이 스냅샷의 전체 목록 포함)
+현재 열린 PR 수: **99** (아래 표에 이 스냅샷의 전체 목록 포함)
 
 이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
 
@@ -77,7 +77,7 @@ flowchart LR
 | G-01 | 열린 PR 98개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
 | G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
 | G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
-| G-04 | 98개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
+| G-04 | 99개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
 | G-05 | ecosystem contract/catalog PR은 존재하지만 naruon의 실제 plugin 소비·standalone 실행·connector round-trip 증거가 제한적이다 | 구매자는 “연결 가능” 문서와 실제 설치 가능한 제품을 구별할 수 없다 | manifest/version compatibility, command/event envelope, consumer smoke, rollback/upgrade contract를 조직 유관 레포에서 증명한다 |
 | G-06 | naruon #974와 Project #1은 제품 목표를 정의하지만 E1/E2/E3의 live implementation evidence가 이 중앙 레포에 없다 | 이메일 검색·일정 충돌이라는 killer workflow가 문서에만 머문다 | naruon에서 thread/sender ontology → temporal commitment/conflict → human correction slice를 독립 PR로 delivery한다 |
 | G-07 | multi-level/multi-membership/temporal 관계 원칙은 master context에 있으나 모든 소비 저장소의 schema/API가 동일한 reified relationship contract를 보장하는지는 미확인이다 | 개인 단위로 집계하거나 전역 권한을 적용하는 atomistic/ecological fallacy 위험이 남는다 | relationship, membership, norm_group, validity window, evidence, confidence, disclosure를 정규화하고 cross-context golden tests를 만든다 |

From 2b9fab98c5881d0208cce0062a59adf94b5798da Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:00:23 +0900
Subject: [PATCH 36/76] docs: bind security repair heads

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 05d410c11..3e7a5e8fc 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -99,9 +99,9 @@ flowchart LR
 | #1163 | docs: establish live product and technical gap baseline | `75bb4597d52481f751498d711a449ce27d7d1b58` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `e2c003171e65c631ac8f12143e04f810fdad0576` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `dee25282af855dda4f45989367cb83e7b52801ed` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |

From 62ac6c6d05ac474701ca32970d04e69c40ff7179 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:05:35 +0900
Subject: [PATCH 37/76] docs: refresh gap baseline self snapshot

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 3e7a5e8fc..c05470b7e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -74,7 +74,7 @@ flowchart LR
 
 | Gap ID | 현재 관측 | 구매자 영향 | 우선 구현/검증 |
 |---|---|---|---|
-| G-01 | 열린 PR 98개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
+| G-01 | 열린 PR 99개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
 | G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
 | G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
 | G-04 | 99개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
@@ -96,7 +96,7 @@ flowchart LR
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
 | #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `75bb4597d52481f751498d711a449ce27d7d1b58` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `2b5d574547c38e1263249d63013d6cefe397db33` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |

From ff15b4affa02e5c1130241746c0712457f20375f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:19:39 +0900
Subject: [PATCH 38/76] docs: record refreshed review heads

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index c05470b7e..5be93a573 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -95,7 +95,7 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
-| #1162 | fix: use review credentials for agent dispatch | `c64e0e8cbacb93f5a0d7f162b30bcc4715912897` | main | BLOCKED | — |
+| #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
 | #1163 | docs: establish live product and technical gap baseline | `2b5d574547c38e1263249d63013d6cefe397db33` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
@@ -171,9 +171,9 @@ flowchart LR
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
-| #931 | fix(security): contain sandbox paths and output | `19fa59f9828f4407b43902adc7795e8b8039cb8a` | main | DIRTY | CHANGES_REQUESTED |
+| #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `d0e59199c887980224841b11872837b52ec464ac` | main | DIRTY | CHANGES_REQUESTED |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `3ed996caed8a69eaf40021343859bba0729e9da5` | main | DIRTY | CHANGES_REQUESTED |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From 8a10920cd7b56430e252d3fd5cfe420554485def Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:22:52 +0900
Subject: [PATCH 39/76] docs: record Scorecard repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 5be93a573..3e6b2ad16 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -175,7 +175,7 @@ flowchart LR
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
 | #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
-| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `3ed996caed8a69eaf40021343859bba0729e9da5` | main | DIRTY | CHANGES_REQUESTED |
+| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
 | #918 | chore(security): align all CodeQL actions to v4.37.6 | `2e3029d2c6d80066c01d82930ea6aa2ada0ea319` | main | DIRTY | CHANGES_REQUESTED |
 | #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |

From b7e23732e5b0c7b0121287dc2ca48e788d28c1e0 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:26:01 +0900
Subject: [PATCH 40/76] docs: record dependency repair heads

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 3e6b2ad16..fddbf74d8 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -177,9 +177,9 @@ flowchart LR
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
-| #918 | chore(security): align all CodeQL actions to v4.37.6 | `2e3029d2c6d80066c01d82930ea6aa2ada0ea319` | main | DIRTY | CHANGES_REQUESTED |
+| #918 | chore(security): align all CodeQL actions to v4.37.6 | `c143b495c94159125961a65ec484fa2c6918d360` | main | BLOCKED | — |
 | #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |
-| #901 | security(deploy-pages): declare minimal secret contract | `1b6246af7405489ecc78f8413f678fa9348db2e4` | main | DIRTY | CHANGES_REQUESTED |
+| #901 | security(deploy-pages): declare minimal secret contract | `b0379e5961db85b92eee2263d2f8db1b59f05c2f` | main | BLOCKED | — |
 | #899 | fix(scheduler): fail after summarized action errors | `41e2e6bd236cdba988cb2cae23b4cb5b66783951` | main | BLOCKED | CHANGES_REQUESTED |
 | #897 | fix(security): fail closed on unavailable dependency review | `d52b13075f614ee0da8f61571f2c8ed02430ff34` | main | BLOCKED | CHANGES_REQUESTED |
 | #896 | docs: establish authoritative automation control-plane specifications | `784bc9ff36b12b3d476d9caf5daaea415a58c847` | main | DIRTY | CHANGES_REQUESTED |

From 4cc1e886974777297a128bc280fcff48f9239291 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:29:38 +0900
Subject: [PATCH 41/76] docs: record process-group repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index fddbf74d8..c7b74960e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -187,7 +187,7 @@ flowchart LR
 | #834 | fix(noema): replay OIDC envelope repair on current main | `93d3102ea1b96f2aae3ac1f0e6c5d83c664ce7c1` | main | BLOCKED | CHANGES_REQUESTED |
 | #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
 | #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
-| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `178f969a069d5c105f00a054a36001d2fc36cef3` | main | DIRTY | CHANGES_REQUESTED |
+| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `5a099cd7a4ce8bb5724401da901a63236980c284` | main | BLOCKED | — |
 | #807 | fix(coverage): validate nested npm metadata through canonical pins | `cb4596cbe8f82db215f6f4a1216a5998f728c9b1` | main | BLOCKED | CHANGES_REQUESTED |
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |

From ef3e0574db8881705387d1c9df0e7d889956aaa1 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:35:45 +0900
Subject: [PATCH 42/76] docs: record current integration repair heads

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index c7b74960e..854bda681 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -111,10 +111,10 @@ flowchart LR
 | #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
-| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `41a59e16234bf6cfb01cdd3fd58172d4681d4859` | main | BEHIND | — |
-| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `8193f0a12e733a2370b7384df42f05919f624c57` | main | BEHIND | — |
+| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |
+| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `0c700f6f931986d58bd0005ea2d248ca2e459d77` | main | BLOCKED | — |
 | #1114 | fix(strix): retry transient visibility API failures | `61a82288fddd714a80abb201839631897490f7a9` | main | BLOCKED | CHANGES_REQUESTED |
-| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `1e854d0e8547fbaa32d5cd2ab180bd5e07e3df69` | main | BEHIND | — |
+| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `ed42fda7fc712f09930c8c4c0398aa261291c960` | main | BLOCKED | — |
 | #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `4e233c48ecfadf3d3af9ec30f9158da5052102b6` | main | BLOCKED | — |
 | #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
 | #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |

From 2982ec90e6485f9bd22e2bd61a14e0477289b883 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:38:40 +0900
Subject: [PATCH 43/76] docs: bind redaction repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 854bda681..8a8c73b5d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -103,7 +103,7 @@ flowchart LR
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
-| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `48dcca4f98b41dc1f891c3addffec5f0949d14fd` | main | BLOCKED | — |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `b3f00c51602a145eabd3d332583ed07b6cf12a88` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |

From fda9caeee88bb0c5da5cea11a138f099b48e3e1a Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:39:58 +0900
Subject: [PATCH 44/76] docs: bind coordinator failure to credential gap

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 8a8c73b5d..27c17654d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -86,7 +86,7 @@ flowchart LR
 | G-10 | math/psychometrics의 Rust+GPU/CPU path와 시간·다층·다중소속 모델은 fast-mlsirm/psychometrics-commons 등 제품 레포의 책임이다 | 계산 정확도·성능·모델 해석 가능성을 Python glue만으로 보장할 수 없다 | Rust core, GPU/CPU benchmark, temporal/multilevel/multiple-membership fixtures, RMSE/recovery/ablation을 제품 PR에 묶는다 |
 | G-11 | UI가 있는 제품의 Figma/Storybook inventory와 token/interaction/i18n 테스트는 중앙 control plane에서 소유할 수 없다 | 제품 간 UI가 달라지고 buyer onboarding이 일관되지 않는다 | 각 UI repo가 실제 Figma File ID ADR, Storybook inventory, shared token package, keyboard/edge/i18n tests를 소유한다 |
 | G-12 | CSAP/SOC 2 통제 목표와 PII masking 대안은 doctoring에 흩어져 있으며 evidence-to-control mapping의 live completeness가 미확인이다 | PII를 마스킹하면 업무가 멈추고, 원문 접근을 허용하면 감사·유출 위험이 커진다 | consent/purpose/access lease, field-level encryption/tokenization, redaction-at-egress, audit/revocation와 CSAP/SOC 2 evidence map을 구현한다 |
-| G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | bounded receipt schema, exact next action, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
+| G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다. Main run `32359911521`은 `PR_REVIEW_MERGE_TOKEN` 미설정 시 즉시 실패하고 receipt artifact도 만들지 못했다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | #1161의 `skipped_credential_unavailable` receipt와 다음 행동 문구를 exact-head Checks로 검증한 뒤 병합하고, bounded receipt schema, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
 | G-14 | release/changelog/version 증거가 각 PR에 분산되고 현재 central repo 보호 main의 release candidate가 명확하지 않다 | 구매자는 어떤 기능이 supportable release인지 확인할 수 없다 | merge 후 release readiness ledger, CHANGELOG, semantic version/tag, rollback/operability evidence를 함께 갱신한다 |
 
 ## 4. 현재 PR inventory (live snapshot)

From aa8ab4d811d5cec4385ff966bb0b1945508a92bf Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:42:21 +0900
Subject: [PATCH 45/76] docs: record OSV governance repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 27c17654d..e27f2510e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -174,7 +174,7 @@ flowchart LR
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
 | #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
-| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `12596fae331760b1b3184872d276d3d54f7b840a` | main | DIRTY | — |
+| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
 | #918 | chore(security): align all CodeQL actions to v4.37.6 | `c143b495c94159125961a65ec484fa2c6918d360` | main | BLOCKED | — |

From 4271c242706bf9424c383800ec8b4583d173e224 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 19:44:13 +0900
Subject: [PATCH 46/76] docs: record Semgrep repair head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index e27f2510e..37fd47e23 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -166,7 +166,7 @@ flowchart LR
 | #991 | fix(automation): reuse review node_id for mention eyes | `1fa547ae56c3cb829dfbba3177c2ec0c3fa41fe3` | main | BEHIND | — |
 | #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
 | #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
-| #941 | fix(semgrep): make the pinned image digest authoritative | `52e6af04a7b1953dc18a0b34faacf81c403bf86a` | main | DIRTY | CHANGES_REQUESTED |
+| #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
 | #939 | fix: keep cross-repo OpenCode evidence healthy | `050f2b036d90e4b6a9f9e85683efcbfb5c4d3fdd` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |

From 99b1ce44cdb836e1341e21537302b98dc66a168d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:06:26 +0900
Subject: [PATCH 47/76] docs: refresh exact-head PR baseline

---
 docs/product-technical-gap-baseline.md | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 37fd47e23..5df786fc6 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -147,14 +147,14 @@ flowchart LR
 | #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
 | #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
-| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `ba7249ef754e73ab9088f566990bea60e42b9def` | main | BEHIND | — |
+| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `5bd705be8d5e3ea5e85ee38dfda9c809ccb4eb9f` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `dc954d216d115c4ba0334e374963a13539e7bad8` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `3eac8c1f78ebb82272429d1804f3d039b5da86b8` | main | BEHIND | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
 | #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
 | #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |
 | #1050 | fix(security): reject dot path components before dependency-review compare | `948de32e869e1656e7ae1ba770b16c0b652f4c29` | main | BEHIND | — |
-| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `7a17f0c663f5515ce7bab7acda0f6588fe54e435` | main | BEHIND | — |
+| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `b78f361780bbddfb54d63f78ffa13a56c8f76ab0` | main | BEHIND | — |
 | #1036 | fix(ci): bind stub-scan evidence and cap hourly fleet work at 12 | `1ac4d90af45f3106afd92fc81a0ec43cb43881bd` | main | BEHIND | — |
 | #1035 | docs(automation): retarget closed-unmerged #840 and #906 lineage | `271fc60592b9eb02cf81ff5281f9c2d0b36b9067` | main | DIRTY | — |
 | #1027 | fix(automation): stop mention sweep on already-exceeded rate limits | `2cd701fdb4a59cd4ebc28107bce5c3c13e1889e9` | main | BEHIND | — |
@@ -163,11 +163,11 @@ flowchart LR
 | #1015 | fix(coverage): defer interpreter-specific wheel gaps | `53f05d3d6f55ab1eeba730851439fd1d31db8e41` | main | BLOCKED | — |
 | #1009 | fix(strix): bind evidence to exact workflow artifacts | `805f4d32463aeef1b7557eb416fc5eb809874368` | main | BLOCKED | CHANGES_REQUESTED |
 | #1002 | fix(review): fail closed when required check is not a verdict | `5fe83ff0d3c8d6c8d645190076aad0271f75b78d` | main | BEHIND | — |
-| #991 | fix(automation): reuse review node_id for mention eyes | `1fa547ae56c3cb829dfbba3177c2ec0c3fa41fe3` | main | BEHIND | — |
+| #991 | fix(automation): reuse review node_id for mention eyes | `ac496b0cf993f0bd7a058cb297566c6da63d77d3` | main | BEHIND | — |
 | #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
 | #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
 | #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
-| #939 | fix: keep cross-repo OpenCode evidence healthy | `050f2b036d90e4b6a9f9e85683efcbfb5c4d3fdd` | main | BEHIND | CHANGES_REQUESTED |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `a78991a3ada7a11efa2c4b41f3042b4143e8d1d1` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
@@ -188,7 +188,7 @@ flowchart LR
 | #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
 | #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
 | #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `5a099cd7a4ce8bb5724401da901a63236980c284` | main | BLOCKED | — |
-| #807 | fix(coverage): validate nested npm metadata through canonical pins | `cb4596cbe8f82db215f6f4a1216a5998f728c9b1` | main | BLOCKED | CHANGES_REQUESTED |
+| #807 | fix(coverage): validate nested npm metadata through canonical pins | `362479dfa8f675dec59cf86d220736c651e3d83e` | main | BLOCKED | CHANGES_REQUESTED |
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |

From 9906339b6dcecceddb486b6b3f401ee6ce8a513b Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:17:12 +0900
Subject: [PATCH 48/76] docs: record latest security and coverage heads

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 5df786fc6..381dbc88e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -147,7 +147,7 @@ flowchart LR
 | #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
 | #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
-| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `5bd705be8d5e3ea5e85ee38dfda9c809ccb4eb9f` | main | BEHIND | — |
+| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
 | #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `3eac8c1f78ebb82272429d1804f3d039b5da86b8` | main | BEHIND | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
@@ -167,7 +167,7 @@ flowchart LR
 | #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
 | #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
 | #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
-| #939 | fix: keep cross-repo OpenCode evidence healthy | `a78991a3ada7a11efa2c4b41f3042b4143e8d1d1` | main | BEHIND | CHANGES_REQUESTED |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `663b53d025424b32625d7a935fbbbe09d33b78c5` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
@@ -192,7 +192,7 @@ flowchart LR
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `07c1358b151b610de1dab37d543534934c16829e` | main | BEHIND | CHANGES_REQUESTED |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `30eb18762af9d8a6208c18d0bc01b6abba366023` | main | BEHIND | CHANGES_REQUESTED |
 | #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
 
 ## 5. 실행 루프와 고객의 다음 행동

From a821be76fcd2b1223dd02532fdbf3003787f6692 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:24:14 +0900
Subject: [PATCH 49/76] docs: record current PyO3 peer-gate head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 381dbc88e..a0c0a6b66 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -192,7 +192,7 @@ flowchart LR
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `30eb18762af9d8a6208c18d0bc01b6abba366023` | main | BEHIND | CHANGES_REQUESTED |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `1053a14387e53298dc5de887d6637288eb446a70` | main | BEHIND | CHANGES_REQUESTED |
 | #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
 
 ## 5. 실행 루프와 고객의 다음 행동

From 34a9c38c95340bdb8955466f570ebda850898a31 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:30:42 +0900
Subject: [PATCH 50/76] docs: record latest native peer-gate head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index a0c0a6b66..bf8bf747c 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -192,7 +192,7 @@ flowchart LR
 | #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
 | #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
 | #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `1053a14387e53298dc5de887d6637288eb446a70` | main | BEHIND | CHANGES_REQUESTED |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `6146bb99f7e4ffc2ce6ddc9d5d7f2b934ad26f2f` | main | BEHIND | CHANGES_REQUESTED |
 | #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
 
 ## 5. 실행 루프와 고객의 다음 행동

From dbb2ecf33b258d2ef7895681ef9db22b448def08 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:41:22 +0900
Subject: [PATCH 51/76] docs: record current coverage artifact head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index bf8bf747c..19ecf658d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -173,7 +173,7 @@ flowchart LR
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `3d622bd552bb91370452a1886936e040eae458d6` | main | BLOCKED | — |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `87506eceb152eb563190aea1e0dea5b143101f24` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From 6f2a1215e76a36d4784703d08c01ce4705892e44 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:44:02 +0900
Subject: [PATCH 52/76] docs: record current mhtml gateway head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 19ecf658d..8e430a00d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -124,7 +124,7 @@ flowchart LR
 | #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `430a3b63c7e081bd89ffea38755b26d982c5e755` | main | BEHIND | CHANGES_REQUESTED |
 | #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `6181c705e244aa39db6d14a117c037e3090e7696` | main | BEHIND | CHANGES_REQUESTED |
 | #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `22c3e8874238ac2196657823860e7673d0f8676e` | main | BEHIND | — |
-| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `b87f66e1632992c5acb1df6e96889a39f76fca4a` | main | BEHIND | CHANGES_REQUESTED |
+| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `0a1aa80e994b73ed50a2c0242aac1b3abf37a3af` | main | BEHIND | CHANGES_REQUESTED |
 | #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `c2e164621755cd275c9b4aef78ff511fc6eb7ca2` | main | BEHIND | — |
 | #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `6bb0d991098cb70a8f3e0df09a5a9424b867117f` | main | BEHIND | CHANGES_REQUESTED |
 | #1089 | fix(opencode): system llvm for cargo-llvm-cov (v3 concurrency) | `cd7d72c64443572c77343f1456a52b54f956240e` | main | BEHIND | — |

From 697ef12ddb22b6ce219e43eb022c1bd59ee13e77 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:46:14 +0900
Subject: [PATCH 53/76] docs: refresh newest pull request inventory

---
 docs/product-technical-gap-baseline.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 8e430a00d..54853c54f 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -95,8 +95,10 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
+| #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
+| #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `2b5d574547c38e1263249d63013d6cefe397db33` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `de2b90916a3558f52ac0be862b843cf210c9f613` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |

From 104d52b70a82b99619159d0d808817305d9577be Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 20:57:26 +0900
Subject: [PATCH 54/76] docs: record latest artifact contract head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 54853c54f..c8a881a23 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -175,7 +175,7 @@ flowchart LR
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `87506eceb152eb563190aea1e0dea5b143101f24` | main | BLOCKED | — |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `dd7f7a43eb843a0ba64cffcf7704afe46cb455c7` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From 048077ae39b21bda380137e25d49f27da3bb4ad2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 21:18:39 +0900
Subject: [PATCH 55/76] docs: refresh PR 1057 current head evidence

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index c8a881a23..10278a16f 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -151,7 +151,7 @@ flowchart LR
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
 | #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `3eac8c1f78ebb82272429d1804f3d039b5da86b8` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `674ace3a` | main | BEHIND | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
 | #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
 | #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |

From b542ddab7f648cfeb86258ba3ccf96d1fc341ef4 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 21:21:09 +0900
Subject: [PATCH 56/76] docs: bind PR 1057 evidence to rebased head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 10278a16f..82211bcfc 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -151,7 +151,7 @@ flowchart LR
 | #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
 | #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
 | #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `674ace3a` | main | BEHIND | — |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `d51496ddb0f33de836e6b1ecb1b8339d8cca5cd5` | main | BLOCKED | — |
 | #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
 | #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
 | #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |

From d156f720c77ba889a3e0be67c014b7dc38ed4f50 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 21:32:17 +0900
Subject: [PATCH 57/76] docs: bind PR 928 evidence to merged-base head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 82211bcfc..fb747dbef 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -175,7 +175,7 @@ flowchart LR
 | #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `dd7f7a43eb843a0ba64cffcf7704afe46cb455c7` | main | BLOCKED | — |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `9315e4ae87074549f0147627fa3ff55f673091ae` | main | BLOCKED | — |
 | #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
 | #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
 | #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |

From 9f4b0dcdd754235228cce1ee246513ec6370d74c Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 21:57:57 +0900
Subject: [PATCH 58/76] docs: refresh repaired PR evidence heads

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index fb747dbef..a1a9abb97 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -105,7 +105,7 @@ flowchart LR
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
-| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `b3f00c51602a145eabd3d332583ed07b6cf12a88` | main | BLOCKED | — |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `4757c68c44e6157966870979ff814cfe8c3a3557` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
@@ -172,7 +172,7 @@ flowchart LR
 | #939 | fix: keep cross-repo OpenCode evidence healthy | `663b53d025424b32625d7a935fbbbe09d33b78c5` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
-| #932 | fix(sbom): preserve Markdown report integrity | `9df515e07b60b66014bbe96fe83ed70718837b10` | main | BEHIND | CHANGES_REQUESTED |
+| #932 | fix(sbom): preserve Markdown report integrity | `eb10d8cbd52e4a1639fbbfdd4bae5eaafa8340f6` | main | BLOCKED | — |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
 | #928 | fix(opencode): bind coverage artifacts to workflow attempts | `9315e4ae87074549f0147627fa3ff55f673091ae` | main | BLOCKED | — |

From f4e8c52f40ddb6acd5f27c182f2972d70b184b16 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:03:53 +0900
Subject: [PATCH 59/76] docs: record Orgmetra caller gap evidence

---
 docs/product-technical-gap-baseline.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index a1a9abb97..ab5bb40ed 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -95,6 +95,7 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
+| #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
 | #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |

From 4fa15f62fbe3862979665bbc03216e25c7ca64c2 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:09:24 +0900
Subject: [PATCH 60/76] docs: refresh Storybook coverage evidence head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index ab5bb40ed..f0263609e 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,7 +101,7 @@ flowchart LR
 | #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
 | #1163 | docs: establish live product and technical gap baseline | `de2b90916a3558f52ac0be862b843cf210c9f613` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
-| #1159 | fix(coverage): classify Storybook development evidence | `a41903339f1df37bd1b7a7e8b969121c3598f5dc` | main | BLOCKED | — |
+| #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |

From 491e6f4cd3c034d92db9e38f2e75a904bdf041b5 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:13:36 +0900
Subject: [PATCH 61/76] docs: refresh Figma fallback evidence head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index f0263609e..08c219115 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -111,7 +111,7 @@ flowchart LR
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `38fbf9fc86af0e03bde334958616086707244373` | main | BLOCKED | — |
+| #1146 | fix(figma): retain style references and component sets | `83759d97c9ad4c396a2c57106a04cb73fe7de348` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |

From da640014fbd11d01f33e7a3df1e4a1355f09200f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:30:06 +0900
Subject: [PATCH 62/76] docs: record normal base updates and coverage proof

---
 docs/product-technical-gap-baseline.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 08c219115..89546d7b6 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -106,12 +106,12 @@ flowchart LR
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
-| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `4757c68c44e6157966870979ff814cfe8c3a3557` | main | BLOCKED | — |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `83759d97c9ad4c396a2c57106a04cb73fe7de348` | main | BLOCKED | — |
+| #1146 | fix(figma): retain style references and component sets | `54cb0220ca95603831dc8defeedd766d47cf4a62` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |
@@ -173,7 +173,7 @@ flowchart LR
 | #939 | fix: keep cross-repo OpenCode evidence healthy | `663b53d025424b32625d7a935fbbbe09d33b78c5` | main | BEHIND | CHANGES_REQUESTED |
 | #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
 | #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
-| #932 | fix(sbom): preserve Markdown report integrity | `eb10d8cbd52e4a1639fbbfdd4bae5eaafa8340f6` | main | BLOCKED | — |
+| #932 | fix(sbom): preserve Markdown report integrity | `509690b9edac82b4ca1e2f6689526796a4f50838` | main | BLOCKED | — |
 | #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
 | #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
 | #928 | fix(opencode): bind coverage artifacts to workflow attempts | `9315e4ae87074549f0147627fa3ff55f673091ae` | main | BLOCKED | — |

From bc136fcc4f6f47f57e381624e66213f8007bb56d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:32:59 +0900
Subject: [PATCH 63/76] docs: bind baseline PR row to current head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 89546d7b6..98d49dbce 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -99,7 +99,7 @@ flowchart LR
 | #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `de2b90916a3558f52ac0be862b843cf210c9f613` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `da640014fbd11d01f33e7a3df1e4a1355f09200f` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |

From 3b0e0043c1433f9d7a0366740fad7f858603fae3 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:37:48 +0900
Subject: [PATCH 64/76] docs: refresh agent dispatch evidence head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 98d49dbce..b1b4b6fef 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -98,7 +98,7 @@ flowchart LR
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
 | #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
-| #1162 | fix: use review credentials for agent dispatch | `a885441bb4d9b09dabf7d3bf4c39eee1bd0dc4cc` | main | BLOCKED | — |
+| #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
 | #1163 | docs: establish live product and technical gap baseline | `da640014fbd11d01f33e7a3df1e4a1355f09200f` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |

From e0c96d567a0ecf67340b64f6fdccb7567a4f9769 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:43:42 +0900
Subject: [PATCH 65/76] docs: refresh baseline PR head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index b1b4b6fef..e9d89a42b 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -99,7 +99,7 @@ flowchart LR
 | #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `da640014fbd11d01f33e7a3df1e4a1355f09200f` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `3b0e0043c1433f9d7a0366740fad7f858603fae3` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |

From 9a474ed5eb7dc4d134515ebcc1b44f76c3cf8da6 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 22:53:45 +0900
Subject: [PATCH 66/76] docs: refresh live PR inventory

---
 docs/product-technical-gap-baseline.md | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index e9d89a42b..761ae9d50 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -2,8 +2,8 @@
 
 검토 기준일: **2026-08-20 (Asia/Seoul)**  
 대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
-현재 보호된 `main`: `aa8503f4383e8328d89104796bc3e9f7da810376`  
-현재 열린 PR 수: **99** (아래 표에 이 스냅샷의 전체 목록 포함)
+현재 보호된 `main`: `6479989bbff475404cc2cccc468d5fb1d6c632e5`
+현재 열린 PR 수: **100** (아래 표에 이 스냅샷의 전체 목록 포함)
 
 이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
 
@@ -95,12 +95,14 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
+| #1169 | fix(security): keep baseline-only Strix outages non-blocking | `24893cee8fbb33791fe77629efa35ce2d8fb7076` | main | BLOCKED | — |
+| #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
 | #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `3b0e0043c1433f9d7a0366740fad7f858603fae3` | main | BLOCKED | — |
-| #1161 | fix: make hourly coordinator credential absence auditable | `42929f348f8f88ac8d93db6acff233d1748a4803` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `e0c96d567a0ecf67340b64f6fdccb7567a4f9769` | main | BLOCKED | — |
+| #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |

From 2ebaba21f1269063da2c31bbaba95a1b606397ae Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:04:34 +0900
Subject: [PATCH 67/76] docs: record replay guard head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 761ae9d50..1f830ada3 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -98,7 +98,7 @@ flowchart LR
 | #1169 | fix(security): keep baseline-only Strix outages non-blocking | `24893cee8fbb33791fe77629efa35ce2d8fb7076` | main | BLOCKED | — |
 | #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
-| #1166 | fix(ci): recognize replacement tests in existing files | `634303023cea09e8496b8abd10ec47d5ca76f732` | main | BLOCKED | — |
+| #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
 | #1163 | docs: establish live product and technical gap baseline | `e0c96d567a0ecf67340b64f6fdccb7567a4f9769` | main | BLOCKED | — |

From a758566b2d211f8a728aaa1fa71e0263020c5728 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:08:36 +0900
Subject: [PATCH 68/76] docs: record mention sweep head

---
 docs/product-technical-gap-baseline.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 1f830ada3..beee88159 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -99,7 +99,7 @@ flowchart LR
 | #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
 | #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
-| #1165 | fix(automation): yield completed mention repositories fairly | `941e4bdf7e11157c3f9b596bd6648e7491501054` | main | BLOCKED | — |
+| #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
 | #1163 | docs: establish live product and technical gap baseline | `e0c96d567a0ecf67340b64f6fdccb7567a4f9769` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |

From 4780ea085db9ef6b14d5a89d8566d3d8df37280f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:14:57 +0900
Subject: [PATCH 69/76] docs: refresh gap baseline heads

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index beee88159..698e3083b 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,10 +101,10 @@ flowchart LR
 | #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `e0c96d567a0ecf67340b64f6fdccb7567a4f9769` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `a758566b` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `d1da60569c079f59b211a2495cbe0fdb6a7a1d02` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd79` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |

From 639553dbc9773ed79c7b8290bccbc359970ec95d Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:20:53 +0900
Subject: [PATCH 70/76] docs: record lock discovery review

---
 docs/product-technical-gap-baseline.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 698e3083b..82bf6cf7d 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,11 +101,11 @@ flowchart LR
 | #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `a758566b` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `4780ea08` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd79` | main | BLOCKED | — |
-| #1157 | fix(coverage): discover hash-pinned requirements lock files | `107c572ab1ea077333c1199e98c734957a305ff6` | main | BLOCKED | — |
+| #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae` | main | BLOCKED | — |
 | #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |

From ac0650f1ffe92e355ca3e41531787456988ed628 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:39:57 +0900
Subject: [PATCH 71/76] docs: record Strix and scheduler review heads

---
 docs/product-technical-gap-baseline.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 82bf6cf7d..fdec1bd26 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -101,15 +101,15 @@ flowchart LR
 | #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
 | #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `4780ea08` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `639553db` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd79` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `d4948f21818a351db22292a686b361581f33b6ed` | main | BLOCKED | — |
-| #1155 | Fix duplicate repository dispatch scheduler runs | `5ef1fc6bb4aa7b2abc8e393f4a1abc45b4425e33` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `0270c9cb` | main | BLOCKED | — |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `6ce2fe83` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
-| #1153 | fix(strix): fail closed on incomplete provider scans | `e21951d73fbe05a3b9dda871b18c7480f1fe3e41` | main | BLOCKED | — |
+| #1153 | fix(strix): fail closed on incomplete provider scans | `a0fe0501` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |

From e0432a4442db1a6e5a1a47a22b964203379b708f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Thu, 20 Aug 2026 23:47:48 +0900
Subject: [PATCH 72/76] docs: refresh live PR gap baseline

---
 docs/product-technical-gap-baseline.md | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index fdec1bd26..e3a4766b8 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -100,18 +100,18 @@ flowchart LR
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
 | #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
-| #1162 | fix: use review credentials for agent dispatch | `fad1ed4de66e090d31881348a7c3c3f6518aa177` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `639553db` | main | BLOCKED | — |
+| #1162 | fix: use review credentials for agent dispatch | `e530ef197bab1a3f4a4b3331c0504f9f0bd6a1cc` | main | BLOCKED | — |
+| #1163 | docs: establish live product and technical gap baseline | `ac0650f1ffe92e355ca3e41531787456988ed628` | main | BLOCKED | — |
 | #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd79` | main | BLOCKED | — |
-| #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `0270c9cb` | main | BLOCKED | — |
-| #1155 | Fix duplicate repository dispatch scheduler runs | `6ce2fe83` | main | BLOCKED | — |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd790ba12161ad6385a46d9e3e60371103b4` | main | BLOCKED | — |
+| #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae506e777b3a21885173f8c86b2e5f2a31` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `7655ab630f954d27deaff365b0b21c437bf5bd34` | main | BLOCKED | — |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `6ce2fe8339571637708752568d008a43c2277dbd` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
-| #1153 | fix(strix): fail closed on incomplete provider scans | `a0fe0501` | main | BLOCKED | — |
-| #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `a37fecbe96c01f5d3638085876371313713823c4` | main | BLOCKED | — |
-| #1150 | feat: add read-only Actions queue health evidence | `3196c2db08f84235aaf58bf612806e75d2b33023` | main | BLOCKED | — |
+| #1153 | fix(strix): fail closed on incomplete provider scans | `a0fe0501b6a4d0f3c532b5feeaf7a7038db41bb4` | main | BLOCKED | — |
+| #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `77165e64aea6e448632100c366680f98a9e46152` | main | BLOCKED | — |
+| #1150 | feat: add read-only Actions queue health evidence | `7bbd13393b7d7bfc7f76b544d4e33fc572ccb471` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
 | #1146 | fix(figma): retain style references and component sets | `54cb0220ca95603831dc8defeedd766d47cf4a62` | main | BLOCKED | — |
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |

From 10bfbc9a9ea478210baf150aea9d7d9236bc2036 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 00:38:42 +0900
Subject: [PATCH 73/76] docs: refresh live PR gap baseline

---
 docs/product-technical-gap-baseline.md | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index e3a4766b8..71e9d18f2 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -95,6 +95,10 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
+| #1172 | fix(autofix): resolve live NVIDIA NIM models instead of a retired pin | `fddd6ee51d70891e41424ba78801a1871a303d4e` | main | BLOCKED | — |
+| #1171 | fix: refuse scheduler head mutations that cannot start required checks | `fd9305869e133b9aaec9b0ecdafeb0ac1953f4d2` | main | BLOCKED | — |
+| #1170 | feat: route OpenCode reviews through contextual gateway | `0bd7630912937ce4274ed207a7a35ecf24bfee17` | main | BLOCKED | — |
+| #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1169 | fix(security): keep baseline-only Strix outages non-blocking | `24893cee8fbb33791fe77629efa35ce2d8fb7076` | main | BLOCKED | — |
 | #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
@@ -106,10 +110,10 @@ flowchart LR
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd790ba12161ad6385a46d9e3e60371103b4` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae506e777b3a21885173f8c86b2e5f2a31` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `7655ab630f954d27deaff365b0b21c437bf5bd34` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `2ba74d0dba1ccaf20fc5460bafa0f6c3b241be68` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `6ce2fe8339571637708752568d008a43c2277dbd` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
-| #1153 | fix(strix): fail closed on incomplete provider scans | `a0fe0501b6a4d0f3c532b5feeaf7a7038db41bb4` | main | BLOCKED | — |
+| #1153 | fix(strix): fail closed on incomplete provider scans | `9a4d1e1439bbafa8781971fbf22ab695ae126271` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `77165e64aea6e448632100c366680f98a9e46152` | main | BLOCKED | — |
 | #1150 | feat: add read-only Actions queue health evidence | `7bbd13393b7d7bfc7f76b544d4e33fc572ccb471` | main | BLOCKED | — |
 | #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
@@ -118,9 +122,9 @@ flowchart LR
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |
 | #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `0c700f6f931986d58bd0005ea2d248ca2e459d77` | main | BLOCKED | — |
-| #1114 | fix(strix): retry transient visibility API failures | `61a82288fddd714a80abb201839631897490f7a9` | main | BLOCKED | CHANGES_REQUESTED |
+| #1114 | fix(strix): retry transient visibility API failures | `21beb66a98e30168146ee48c6593f58dd954d180` | main | BLOCKED | — |
 | #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `ed42fda7fc712f09930c8c4c0398aa261291c960` | main | BLOCKED | — |
-| #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `4e233c48ecfadf3d3af9ec30f9158da5052102b6` | main | BLOCKED | — |
+| #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `5ae4bd244cccc69bdbe8b23eef32504e33026cf5` | main | BLOCKED | — |
 | #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
 | #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |
 | #1105 | chore(deps): bump openai from 2.54.0 to 3.1.0 | `4f6e3f63e72111c29329b9bc0a767127a1315e9d` | main | BEHIND | — |

From 170d4a6ad537dc252ab39e7c4f601425634ee220 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 01:33:53 +0900
Subject: [PATCH 74/76] docs: refresh live gap baseline heads

---
 docs/product-technical-gap-baseline.md | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index 71e9d18f2..d4198d731 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -1,6 +1,6 @@
 # Product and Technical Gap Baseline
 
-검토 기준일: **2026-08-20 (Asia/Seoul)**  
+검토 기준일: **2026-08-21 (Asia/Seoul)**
 대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
 현재 보호된 `main`: `6479989bbff475404cc2cccc468d5fb1d6c632e5`
 현재 열린 PR 수: **100** (아래 표에 이 스냅샷의 전체 목록 포함)
@@ -74,10 +74,10 @@ flowchart LR
 
 | Gap ID | 현재 관측 | 구매자 영향 | 우선 구현/검증 |
 |---|---|---|---|
-| G-01 | 열린 PR 99개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
+| G-01 | 열린 PR 100개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
 | G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
 | G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
-| G-04 | 99개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
+| G-04 | 100개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
 | G-05 | ecosystem contract/catalog PR은 존재하지만 naruon의 실제 plugin 소비·standalone 실행·connector round-trip 증거가 제한적이다 | 구매자는 “연결 가능” 문서와 실제 설치 가능한 제품을 구별할 수 없다 | manifest/version compatibility, command/event envelope, consumer smoke, rollback/upgrade contract를 조직 유관 레포에서 증명한다 |
 | G-06 | naruon #974와 Project #1은 제품 목표를 정의하지만 E1/E2/E3의 live implementation evidence가 이 중앙 레포에 없다 | 이메일 검색·일정 충돌이라는 killer workflow가 문서에만 머문다 | naruon에서 thread/sender ontology → temporal commitment/conflict → human correction slice를 독립 PR로 delivery한다 |
 | G-07 | multi-level/multi-membership/temporal 관계 원칙은 master context에 있으나 모든 소비 저장소의 schema/API가 동일한 reified relationship contract를 보장하는지는 미확인이다 | 개인 단위로 집계하거나 전역 권한을 적용하는 atomistic/ecological fallacy 위험이 남는다 | relationship, membership, norm_group, validity window, evidence, confidence, disclosure를 정규화하고 cross-context golden tests를 만든다 |
@@ -95,12 +95,11 @@ flowchart LR
 
 | PR | title | head SHA | base | merge state | review decision |
 |---|---|---|---|---|---|
+| #1173 | fix(strix): include Rust workspace context for CI scans | `a6764368c634e9ea3a49d162a560d771d518e37e` | main | BLOCKED | — |
 | #1172 | fix(autofix): resolve live NVIDIA NIM models instead of a retired pin | `fddd6ee51d70891e41424ba78801a1871a303d4e` | main | BLOCKED | — |
 | #1171 | fix: refuse scheduler head mutations that cannot start required checks | `fd9305869e133b9aaec9b0ecdafeb0ac1953f4d2` | main | BLOCKED | — |
 | #1170 | feat: route OpenCode reviews through contextual gateway | `0bd7630912937ce4274ed207a7a35ecf24bfee17` | main | BLOCKED | — |
-| #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1169 | fix(security): keep baseline-only Strix outages non-blocking | `24893cee8fbb33791fe77629efa35ce2d8fb7076` | main | BLOCKED | — |
-| #1168 | feat: route autofix through contextual orchestrator | `e30ce15fd2e53c43b24c6a782a306e82209d2b0d` | main | BLOCKED | — |
 | #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
 | #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
 | #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
@@ -110,7 +109,7 @@ flowchart LR
 | #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
 | #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd790ba12161ad6385a46d9e3e60371103b4` | main | BLOCKED | — |
 | #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae506e777b3a21885173f8c86b2e5f2a31` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `2ba74d0dba1ccaf20fc5460bafa0f6c3b241be68` | main | BLOCKED | — |
+| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `6aee33e2c07f8c16cea9ebf52f466196c5e38ce5` | main | BLOCKED | — |
 | #1155 | Fix duplicate repository dispatch scheduler runs | `6ce2fe8339571637708752568d008a43c2277dbd` | main | BLOCKED | — |
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `9a4d1e1439bbafa8781971fbf22ab695ae126271` | main | BLOCKED | — |
@@ -121,9 +120,9 @@ flowchart LR
 | #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
 | #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
 | #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |
-| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `0c700f6f931986d58bd0005ea2d248ca2e459d77` | main | BLOCKED | — |
+| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `cd9f0256c0e5d3c30f380e1473aa6966f0406f42` | main | BLOCKED | — |
 | #1114 | fix(strix): retry transient visibility API failures | `21beb66a98e30168146ee48c6593f58dd954d180` | main | BLOCKED | — |
-| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `ed42fda7fc712f09930c8c4c0398aa261291c960` | main | BLOCKED | — |
+| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `3068296010c9b8debd107652039cea175ea4db5a` | main | BLOCKED | — |
 | #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `5ae4bd244cccc69bdbe8b23eef32504e33026cf5` | main | BLOCKED | — |
 | #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
 | #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |

From 6aad0b87198b9da44ea32e901876251991359150 Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 01:34:58 +0900
Subject: [PATCH 75/76] docs: align additional gap inventory heads

---
 docs/product-technical-gap-baseline.md | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index d4198d731..ad2c94894 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -114,12 +114,12 @@ flowchart LR
 | #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
 | #1153 | fix(strix): fail closed on incomplete provider scans | `9a4d1e1439bbafa8781971fbf22ab695ae126271` | main | BLOCKED | — |
 | #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `77165e64aea6e448632100c366680f98a9e46152` | main | BLOCKED | — |
-| #1150 | feat: add read-only Actions queue health evidence | `7bbd13393b7d7bfc7f76b544d4e33fc572ccb471` | main | BLOCKED | — |
-| #1147 | feat(integration): add ecosystem capability catalogue | `9ac03e0c1f9f2e12f0d29d354f5e9541a1feffbb` | main | BLOCKED | — |
+| #1150 | feat: add read-only Actions queue health evidence | `4467d5a6e45d301ce83fcce8461ab17e2ff49122` | main | BLOCKED | — |
+| #1147 | feat(integration): add ecosystem capability catalogue | `db5e704203a7b005ebaa35688c268209670fd969` | main | BLOCKED | — |
 | #1146 | fix(figma): retain style references and component sets | `54cb0220ca95603831dc8defeedd766d47cf4a62` | main | BLOCKED | — |
-| #1145 | feat: enforce adaptive orchestration defaults | `f96c80b70d024bdaad13efd3a728caa4c1ce12bf` | main | BLOCKED | — |
-| #1143 | ci: schedule naruon hourly review repair | `3a7a7039741069d16204d40633d3a1cd754e376b` | main | BLOCKED | — |
-| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `6915bb9395bbe653f41db944c40186e7c3f8c153` | main | BLOCKED | — |
+| #1145 | feat: enforce adaptive orchestration defaults | `f8dd01dafd2c91f842a74677f2124528f3bce881` | main | BLOCKED | — |
+| #1143 | ci: schedule naruon hourly review repair | `361f9eb34f3297a68d7ea1f327f98538aded9199` | main | BLOCKED | — |
+| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `2bc3f627999569cd057f33e1ef510a0c621b429f` | main | BLOCKED | — |
 | #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `cd9f0256c0e5d3c30f380e1473aa6966f0406f42` | main | BLOCKED | — |
 | #1114 | fix(strix): retry transient visibility API failures | `21beb66a98e30168146ee48c6593f58dd954d180` | main | BLOCKED | — |
 | #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `3068296010c9b8debd107652039cea175ea4db5a` | main | BLOCKED | — |
@@ -129,12 +129,12 @@ flowchart LR
 | #1105 | chore(deps): bump openai from 2.54.0 to 3.1.0 | `4f6e3f63e72111c29329b9bc0a767127a1315e9d` | main | BEHIND | — |
 | #1104 | chore(deps): bump charset-normalizer from 3.4.7 to 3.5.1 | `97ffca37a169e41c15da8976fcb3484a3ee526ff` | main | BEHIND | — |
 | #1103 | chore(deps): bump google-cloud-resource-manager from 1.17.0 to 1.18.0 | `d76211d0038afe90b8374dfa1fa6e1dae680ced5` | main | BEHIND | — |
-| #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `430a3b63c7e081bd89ffea38755b26d982c5e755` | main | BEHIND | CHANGES_REQUESTED |
-| #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `6181c705e244aa39db6d14a117c037e3090e7696` | main | BEHIND | CHANGES_REQUESTED |
+| #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `2429d1f4e8471874749dafcf43ac21d09d04226b` | main | BLOCKED | — |
+| #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `4b62883a455589aa90e2604b171bdc08451aafa0` | main | BLOCKED | — |
 | #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `22c3e8874238ac2196657823860e7673d0f8676e` | main | BEHIND | — |
-| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `0a1aa80e994b73ed50a2c0242aac1b3abf37a3af` | main | BEHIND | CHANGES_REQUESTED |
+| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `ee4357f845a9d29a20f6265dc795a94c63aacf2f` | main | BLOCKED | — |
 | #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `c2e164621755cd275c9b4aef78ff511fc6eb7ca2` | main | BEHIND | — |
-| #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `6bb0d991098cb70a8f3e0df09a5a9424b867117f` | main | BEHIND | CHANGES_REQUESTED |
+| #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `cebc2c1a75b32c0daa786756da6f6212bf4b2aa4` | main | BLOCKED | — |
 | #1089 | fix(opencode): system llvm for cargo-llvm-cov (v3 concurrency) | `cd7d72c64443572c77343f1456a52b54f956240e` | main | BEHIND | — |
 | #1088 | feat(automation): run mightyETL hourly NVIDIA NIM review repair | `38e9d80c908f060f738a7e890ae509a66cf7b2a5` | main | BEHIND | — |
 | #1087 | feat(automation): run life-os hourly NVIDIA NIM review repair | `cdb5d773c93628a6f22450fc9dafbc0d7495e40c` | main | BEHIND | — |

From f90c757c95d018e90dd6efad05b347af5046f90f Mon Sep 17 00:00:00 2001
From: Seongho Bae <me@seonghobae.me>
Date: Fri, 21 Aug 2026 13:59:23 +0900
Subject: [PATCH 76/76] docs: refresh live product technical gap baseline

---
 .../0002-product-technical-gap-baseline.md    |  10 +
 docs/product-technical-gap-baseline.md        | 214 ++++++++----------
 tests/test_product_technical_gap_baseline.py  |  25 +-
 3 files changed, 121 insertions(+), 128 deletions(-)
 create mode 100644 docs/adr/0002-product-technical-gap-baseline.md

diff --git a/docs/adr/0002-product-technical-gap-baseline.md b/docs/adr/0002-product-technical-gap-baseline.md
new file mode 100644
index 000000000..4d23b14a0
--- /dev/null
+++ b/docs/adr/0002-product-technical-gap-baseline.md
@@ -0,0 +1,10 @@
+# ADR-0002: Product and technical gap baseline
+
+- Status: accepted
+- Date: 2026-08-21
+- Scope: ContextualWisdomLab/.github control plane
+- Decision: Keep the buyer-facing product gap register and live PR metadata inventory in the baseline. Revalidate exact SHAs, reviews, threads, Checks, and rulesets before every merge.
+- Ownership: .github owns control-plane evidence; naruon and product repositories own product behavior and consumer smoke.
+- Figma File ID: N/A. This repository has no customer UI. A UI-owning repository must replace N/A with its real Figma File ID before a UI PR is accepted and must provide Storybook and design-token evidence.
+- Consequence: The document is an operational snapshot, not a merge authorization or substitute for protected GitHub review.
+
diff --git a/docs/product-technical-gap-baseline.md b/docs/product-technical-gap-baseline.md
index ad2c94894..fa45c7d9a 100644
--- a/docs/product-technical-gap-baseline.md
+++ b/docs/product-technical-gap-baseline.md
@@ -2,10 +2,10 @@
 
 검토 기준일: **2026-08-21 (Asia/Seoul)**
 대상: **ContextualWisdomLab/.github** 중앙 거버넌스·자동화 레포지터리와 이를 소비하는 naruon 생태계  
-현재 보호된 `main`: `6479989bbff475404cc2cccc468d5fb1d6c632e5`
-현재 열린 PR 수: **100** (아래 표에 이 스냅샷의 전체 목록 포함)
+현재 보호된 `main`: `55a8b576725451dfe0a21a57d36a2f1a41619b24`
+현재 열린 PR 수: **90** (아래 표에 이 스냅샷의 전체 목록 포함)
 
-이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
+이 문서는 제품·기술·운영 Gap을 현재 문서와 현재 GitHub 상태에 묶어 두는 기준선이다. 새 작업은 먼저 이 문서의 Gap ID를 PR 설명과 테스트 증거에 연결하고, PR의 정확한 exact HEAD·Checks·리뷰를 다시 수집한 뒤 구현한다. 표의 상태는 작성 시점의 관측값이므로, 병합 판단에는 재사용하지 않는다.
 
 ## 1. 근거와 범위
 
@@ -74,7 +74,7 @@ flowchart LR
 
 | Gap ID | 현재 관측 | 구매자 영향 | 우선 구현/검증 |
 |---|---|---|---|
-| G-01 | 열린 PR 100개 중 현재 main 기준 PR과 behind/dirty PR이 섞여 있고, 대부분 formal current-head approval이 없다 | “merge-ready”라고 믿은 변경이 실제 보호 규칙을 통과했는지 판단할 수 없다 | exact-head queue를 PR 단위로 재수집하고, stale approval/check를 폐기하며, 독립 approval + terminal required Checks 없이는 merge하지 않는다 |
+| G-01 | 열린 PR은 90개이고 metadata상 mergeable인 PR도 independent exact-head approval과 terminal required Checks를 자동으로 의미하지 않는다 | 안전하게 출시할 변경과 대기 중인 변경을 구별할 수 없다 | PR마다 current head, reviews, threads, required Checks를 재수집하고 보호 조건 미충족이면 merge하지 않는다 |
 | G-02 | #1162는 review credential route를 고치지만 current Checks가 queued/cancelled로 반복되며 router의 403 경로가 선행 main에 남아 있다 | 리뷰가 호출돼도 승인 증거가 생성되지 않아 자동화가 멈춘다 | #1162 current-head quality와 OpenCode/Noema/Strix를 재실행하고, 병합 뒤 router comment/dispatch의 403을 실제 PR에서 검증한다 |
 | G-03 | #1153의 Strix run은 `loginAsGuest`/Caido `127.0.0.1:48080` bootstrap 실패를 provider signal로 분류하지 않았다 | 취약점 0건이더라도 CI 인프라 결함이 보안 결과처럼 보이고 큐가 막힌다 | exact runtime signature를 불완전 evidence로 fail-closed 분류하고, vulnerability marker가 있으면 절대 neutralize하지 않는 regression을 유지한다 |
 | G-04 | 100개 live PR 중 많은 항목이 BEHIND 또는 CHANGES_REQUESTED이며, 자동 caller PR이 제품 기능보다 앞서 쌓였다 | 제품 개발 속도가 queue hygiene에 소모되고, stacking 순서가 불명확하다 | product/ownership boundary별로 stack을 재정렬하고, 오래된 PR은 current main으로 normal merge/rebase 후 변경 범위를 검증한다 |
@@ -89,120 +89,104 @@ flowchart LR
 | G-13 | hourly scheduler는 존재하지만 no-op/credential unavailable/queued Checks의 customer next action을 모든 caller가 동일한 receipt로 내는지 미확인이다. Main run `32359911521`은 `PR_REVIEW_MERGE_TOKEN` 미설정 시 즉시 실패하고 receipt artifact도 만들지 못했다 | 자동화가 실패해도 운영자가 무엇을 고쳐야 하는지 알 수 없다 | #1161의 `skipped_credential_unavailable` receipt와 다음 행동 문구를 exact-head Checks로 검증한 뒤 병합하고, bounded receipt schema, retry floor, single-flight, no secret fallback을 모든 caller contract test로 고정한다 |
 | G-14 | release/changelog/version 증거가 각 PR에 분산되고 현재 central repo 보호 main의 release candidate가 명확하지 않다 | 구매자는 어떤 기능이 supportable release인지 확인할 수 없다 | merge 후 release readiness ledger, CHANGELOG, semantic version/tag, rollback/operability evidence를 함께 갱신한다 |
 
-## 4. 현재 PR inventory (live snapshot)
+## 4. 열린 PR live inventory
 
-다음 표는 기준선 PR의 live update 직전 `gh pr list --state open --limit 100`으로 얻은 값이다. 기준선 자체인 #1163과 이후 이 루프에서 새로 검증한 head는 별도 행으로 갱신했다. merge 판단에는 사용하지 말고, 각 루프에서 `gh pr view <number>`로 다시 확인한다.
+아래는 GitHub PR search가 2026-08-21 13:xx KST에 반환한 90개 열린 PR의 number/title/head/base metadata다. MERGEABLE은 GitHub metadata일 뿐 protected merge 승인이나 required Checks PASS를 뜻하지 않는다. 다음 루프에서 모든 행의 live review, thread, Checks를 다시 확인한다.
 
-| PR | title | head SHA | base | merge state | review decision |
+| PR | title | head SHA | base | metadata | mode |
 |---|---|---|---|---|---|
-| #1173 | fix(strix): include Rust workspace context for CI scans | `a6764368c634e9ea3a49d162a560d771d518e37e` | main | BLOCKED | — |
-| #1172 | fix(autofix): resolve live NVIDIA NIM models instead of a retired pin | `fddd6ee51d70891e41424ba78801a1871a303d4e` | main | BLOCKED | — |
-| #1171 | fix: refuse scheduler head mutations that cannot start required checks | `fd9305869e133b9aaec9b0ecdafeb0ac1953f4d2` | main | BLOCKED | — |
-| #1170 | feat: route OpenCode reviews through contextual gateway | `0bd7630912937ce4274ed207a7a35ecf24bfee17` | main | BLOCKED | — |
-| #1169 | fix(security): keep baseline-only Strix outages non-blocking | `24893cee8fbb33791fe77629efa35ce2d8fb7076` | main | BLOCKED | — |
-| #1167 | feat: add Orgmetra hourly review repair caller | `17ad155cad325cd159cb88a661e356ddcc5372cc` | develop | BLOCKED | — |
-| #1166 | fix(ci): recognize replacement tests in existing files | `9e6063dc0d7298e394de87fc8f28aa3e0a6dced8` | main | BLOCKED | — |
-| #1165 | fix(automation): yield completed mention repositories fairly | `38aef069b2d9f8148a5e479125585ae408306d86` | main | BLOCKED | — |
-| #1162 | fix: use review credentials for agent dispatch | `e530ef197bab1a3f4a4b3331c0504f9f0bd6a1cc` | main | BLOCKED | — |
-| #1163 | docs: establish live product and technical gap baseline | `ac0650f1ffe92e355ca3e41531787456988ed628` | main | BLOCKED | — |
-| #1161 | fix: make hourly coordinator credential absence auditable | `dbc3eca51444e46ce7a3a07ea818c72ad8bf124a` | main | BLOCKED | — |
-| #1159 | fix(coverage): classify Storybook development evidence | `5775073735360250ba5ef7bfaaf30b8f50d6dc1d` | main | BLOCKED | — |
-| #1158 | fix(osv): preserve immutable direct-source provenance | `f285fd790ba12161ad6385a46d9e3e60371103b4` | main | BLOCKED | — |
-| #1157 | fix(coverage): discover hash-pinned requirements lock files | `8c8c70ae506e777b3a21885173f8c86b2e5f2a31` | main | BLOCKED | — |
-| #1156 | 🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시 | `6aee33e2c07f8c16cea9ebf52f466196c5e38ce5` | main | BLOCKED | — |
-| #1155 | Fix duplicate repository dispatch scheduler runs | `6ce2fe8339571637708752568d008a43c2277dbd` | main | BLOCKED | — |
-| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `ded4d1ae4f8578f0c4eaad090be97dadc4ae4697` | main | BLOCKED | — |
-| #1153 | fix(strix): fail closed on incomplete provider scans | `9a4d1e1439bbafa8781971fbf22ab695ae126271` | main | BLOCKED | — |
-| #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `77165e64aea6e448632100c366680f98a9e46152` | main | BLOCKED | — |
-| #1150 | feat: add read-only Actions queue health evidence | `4467d5a6e45d301ce83fcce8461ab17e2ff49122` | main | BLOCKED | — |
-| #1147 | feat(integration): add ecosystem capability catalogue | `db5e704203a7b005ebaa35688c268209670fd969` | main | BLOCKED | — |
-| #1146 | fix(figma): retain style references and component sets | `54cb0220ca95603831dc8defeedd766d47cf4a62` | main | BLOCKED | — |
-| #1145 | feat: enforce adaptive orchestration defaults | `f8dd01dafd2c91f842a74677f2124528f3bce881` | main | BLOCKED | — |
-| #1143 | ci: schedule naruon hourly review repair | `361f9eb34f3297a68d7ea1f327f98538aded9199` | main | BLOCKED | — |
-| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `2bc3f627999569cd057f33e1ef510a0c621b429f` | main | BLOCKED | — |
-| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `cd9f0256c0e5d3c30f380e1473aa6966f0406f42` | main | BLOCKED | — |
-| #1114 | fix(strix): retry transient visibility API failures | `21beb66a98e30168146ee48c6593f58dd954d180` | main | BLOCKED | — |
-| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `3068296010c9b8debd107652039cea175ea4db5a` | main | BLOCKED | — |
-| #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `5ae4bd244cccc69bdbe8b23eef32504e33026cf5` | main | BLOCKED | — |
-| #1107 | chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.7 | `705b854214d4624c3276c62f92a105278ebec199` | main | BLOCKED | CHANGES_REQUESTED |
-| #1106 | chore(deps): bump typing-inspection from 0.4.2 to 0.4.4 | `ed7c4b2314f7acb3c1821fdd476e6078cbaad9fb` | main | BEHIND | CHANGES_REQUESTED |
-| #1105 | chore(deps): bump openai from 2.54.0 to 3.1.0 | `4f6e3f63e72111c29329b9bc0a767127a1315e9d` | main | BEHIND | — |
-| #1104 | chore(deps): bump charset-normalizer from 3.4.7 to 3.5.1 | `97ffca37a169e41c15da8976fcb3484a3ee526ff` | main | BEHIND | — |
-| #1103 | chore(deps): bump google-cloud-resource-manager from 1.17.0 to 1.18.0 | `d76211d0038afe90b8374dfa1fa6e1dae680ced5` | main | BEHIND | — |
-| #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `2429d1f4e8471874749dafcf43ac21d09d04226b` | main | BLOCKED | — |
-| #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `4b62883a455589aa90e2604b171bdc08451aafa0` | main | BLOCKED | — |
-| #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `22c3e8874238ac2196657823860e7673d0f8676e` | main | BEHIND | — |
-| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `ee4357f845a9d29a20f6265dc795a94c63aacf2f` | main | BLOCKED | — |
-| #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `c2e164621755cd275c9b4aef78ff511fc6eb7ca2` | main | BEHIND | — |
-| #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `cebc2c1a75b32c0daa786756da6f6212bf4b2aa4` | main | BLOCKED | — |
-| #1089 | fix(opencode): system llvm for cargo-llvm-cov (v3 concurrency) | `cd7d72c64443572c77343f1456a52b54f956240e` | main | BEHIND | — |
-| #1088 | feat(automation): run mightyETL hourly NVIDIA NIM review repair | `38e9d80c908f060f738a7e890ae509a66cf7b2a5` | main | BEHIND | — |
-| #1087 | feat(automation): run life-os hourly NVIDIA NIM review repair | `cdb5d773c93628a6f22450fc9dafbc0d7495e40c` | main | BEHIND | — |
-| #1086 | feat(automation): repair the LineageWeave buyer-surface stack hourly | `1759b47ecb8f0bde886e90e1cb9b734c305cefc8` | main | BLOCKED | — |
-| #1085 | feat(automation): run kaefa hourly NVIDIA NIM review repair | `49596268d4a2ebf9979c893ad883f9ae47472d17` | main | BEHIND | CHANGES_REQUESTED |
-| #1084 | feat(automation): run aFIPC hourly NVIDIA NIM review repair | `9448d1d79abc00c80736b3bd0f69e928e331ca19` | main | BEHIND | — |
-| #1083 | feat(automation): run pg-llm-batch hourly NVIDIA NIM review repair | `ce713d98ec556abf29cde32100268642160344a2` | main | BEHIND | CHANGES_REQUESTED |
-| #1082 | feat(automation): run semantic-data-portal hourly NVIDIA NIM review repair | `ddc024ffa5b5af0f2ed8d5d5a84b615093abcbad` | main | BEHIND | CHANGES_REQUESTED |
-| #1080 | feat(automation): run newsdom-api hourly NVIDIA NIM review repair | `6f3e279cd47c5c4e694ef94ea5d86c613a7ee2d3` | main | BEHIND | CHANGES_REQUESTED |
-| #1079 | feat(automation): run Appguardrail hourly NVIDIA NIM review repair | `6dfe18379c325ce866b223b43e7a7a3729a57025` | main | BEHIND | — |
-| #1078 | feat(automation): run Scopeweave hourly NVIDIA NIM review repair | `d078d62f03dba8f4caaa6971096c053ac2b317d4` | main | BEHIND | — |
-| #1077 | feat(automation): run noema hourly NVIDIA NIM review repair | `3fe974dbedd91d118ec446aa3927386d33f2dba0` | main | BEHIND | CHANGES_REQUESTED |
-| #1076 | feat(automation): run pg-erd-cloud hourly NVIDIA NIM review repair | `3eb45141bd4792bec83d8a719c233c47aa814d9d` | main | BEHIND | CHANGES_REQUESTED |
-| #1075 | feat(automation): run codec-carver hourly NVIDIA NIM review repair | `65113968dd0c703e8e879b08bdfb533b6b6dc79f` | main | BEHIND | CHANGES_REQUESTED |
-| #1074 | feat(automation): run Keyverse hourly NVIDIA NIM review repair | `4e880101d8a78c11fcd4555bf21bd0e53bebca4f` | main | BEHIND | CHANGES_REQUESTED |
-| #1070 | feat(automation): run Wardnet hourly NVIDIA NIM review repair | `b1cbe69d60a22f33fa3aaff82c4cd7efccf888ce` | main | BLOCKED | CHANGES_REQUESTED |
-| #1068 | feat(automation): run contextual-orchestrator hourly NVIDIA NIM review repair | `e1307c37d177b1efa297bdd6871d958ba03d9731` | main | BEHIND | — |
-| #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `d080c09161c92ffad7b9cf630ab774b6262eeba6` | main | BEHIND | — |
-| #1062 | fix(strix): map official modes without branch-selected dispatch | `74079e5bddd69bf7eac6d3b2492f25d598517905` | main | BEHIND | — |
-| #1061 | fix(scheduler): ignore manual Strix dispatch as merge evidence | `3865b1fccb3d5325b35f3bcf837613cb9ee6a1fd` | main | DIRTY | — |
-| #1060 | fix(opencode): prove asyncio coverage plugin without colliding #896 | `8edf65f1021c885c446da3aad2d892f3b248c603` | main | BEHIND | — |
-| #1058 | fix(operability): reject impossible control-plane SLI counts | `c2240af1e6e1d701c3a795ae60f0d89bc0ee738c` | main | BEHIND | — |
-| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `d51496ddb0f33de836e6b1ecb1b8339d8cca5cd5` | main | BLOCKED | — |
-| #1053 | fix(redaction): skip gh run view job/step prefixes | `cd4b30e560e651f3d2d3c4e418d8f51ee650f9a2` | main | BEHIND | — |
-| #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `030af95f78e2910191d5e7f53a771e26f87f4dee` | main | BEHIND | CHANGES_REQUESTED |
-| #1051 | fix(pip-audit): keep index-url locks hashed and reject symlink parents | `4deb1376d3bb661e9d9934511f46bbf52d9b5b1c` | main | BEHIND | CHANGES_REQUESTED |
-| #1050 | fix(security): reject dot path components before dependency-review compare | `948de32e869e1656e7ae1ba770b16c0b652f4c29` | main | BEHIND | — |
-| #1046 | fix(opencode): pass trusted visibility into the private free-model hook | `b78f361780bbddfb54d63f78ffa13a56c8f76ab0` | main | BEHIND | — |
-| #1036 | fix(ci): bind stub-scan evidence and cap hourly fleet work at 12 | `1ac4d90af45f3106afd92fc81a0ec43cb43881bd` | main | BEHIND | — |
-| #1035 | docs(automation): retarget closed-unmerged #840 and #906 lineage | `271fc60592b9eb02cf81ff5281f9c2d0b36b9067` | main | DIRTY | — |
-| #1027 | fix(automation): stop mention sweep on already-exceeded rate limits | `2cd701fdb4a59cd4ebc28107bce5c3c13e1889e9` | main | BEHIND | — |
-| #1026 | feat(actions): inventory orphaned workflow identities | `1e84d65f38b2112c56d9ce7828a041ad3c198b07` | main | BLOCKED | — |
-| #1024 | docs(ai): standardize adaptive contextual-orchestrator consumers | `4fbe9961e92748e88bf129d435ed69682fb49a34` | main | BLOCKED | — |
-| #1015 | fix(coverage): defer interpreter-specific wheel gaps | `53f05d3d6f55ab1eeba730851439fd1d31db8e41` | main | BLOCKED | — |
-| #1009 | fix(strix): bind evidence to exact workflow artifacts | `805f4d32463aeef1b7557eb416fc5eb809874368` | main | BLOCKED | CHANGES_REQUESTED |
-| #1002 | fix(review): fail closed when required check is not a verdict | `5fe83ff0d3c8d6c8d645190076aad0271f75b78d` | main | BEHIND | — |
-| #991 | fix(automation): reuse review node_id for mention eyes | `ac496b0cf993f0bd7a058cb297566c6da63d77d3` | main | BEHIND | — |
-| #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `de073535569b7e4904cac699df9f159ee8f93dd7` | main | BLOCKED | CHANGES_REQUESTED |
-| #946 | fix(review): publish substantive OpenCode LLM evidence | `efc069b56abf142312aa4f3bb7b5b98e3698b9c9` | main | BLOCKED | CHANGES_REQUESTED |
-| #941 | fix(semgrep): make the pinned image digest authoritative | `84b2b924547502db72856c657a171814e64142fb` | main | BLOCKED | — |
-| #939 | fix: keep cross-repo OpenCode evidence healthy | `663b53d025424b32625d7a935fbbbe09d33b78c5` | main | BEHIND | CHANGES_REQUESTED |
-| #935 | fix(strix): gate dependency manifest updates | `5392334fed731e3652b7bc9362fe8fa3c8332876` | main | BLOCKED | CHANGES_REQUESTED |
-| #933 | fix: retry Strix provider tool protocol failures | `c95197bab04c940a1e9ddfd621b044689df88c50` | main | BLOCKED | CHANGES_REQUESTED |
-| #932 | fix(sbom): preserve Markdown report integrity | `509690b9edac82b4ca1e2f6689526796a4f50838` | main | BLOCKED | — |
-| #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | BLOCKED | — |
-| #930 | fix(noema): fail closed on unsafe model endpoints | `43940c128bbe00b721cf8589039df04d15769576` | main | BLOCKED | CHANGES_REQUESTED |
-| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `9315e4ae87074549f0147627fa3ff55f673091ae` | main | BLOCKED | — |
-| #921 | chore(deps): bump google/osv-scanner-action/osv-scanner-action from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to f4cfcc01edc9c8b756a9b873b7a623ca674da51e | `60c708cc084d738ced9747792b3243e926663304` | main | BLOCKED | — |
-| #920 | chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 | `ed08a94ba3eaeb217b2b0e3cc4745483b18a162d` | main | BLOCKED | — |
-| #919 | chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 | `1c5a38eaa193dd3482b729ec7e9cd1a61bbe6e5f` | main | BLOCKED | — |
-| #918 | chore(security): align all CodeQL actions to v4.37.6 | `c143b495c94159125961a65ec484fa2c6918d360` | main | BLOCKED | — |
-| #904 | fix(opencode): include adversarial gate in fallback scope | `40565c9299d64c256caa63df1d9febff2092e516` | main | BLOCKED | CHANGES_REQUESTED |
-| #901 | security(deploy-pages): declare minimal secret contract | `b0379e5961db85b92eee2263d2f8db1b59f05c2f` | main | BLOCKED | — |
-| #899 | fix(scheduler): fail after summarized action errors | `41e2e6bd236cdba988cb2cae23b4cb5b66783951` | main | BLOCKED | CHANGES_REQUESTED |
-| #897 | fix(security): fail closed on unavailable dependency review | `d52b13075f614ee0da8f61571f2c8ed02430ff34` | main | BLOCKED | CHANGES_REQUESTED |
-| #896 | docs: establish authoritative automation control-plane specifications | `784bc9ff36b12b3d476d9caf5daaea415a58c847` | main | DIRTY | CHANGES_REQUESTED |
-| #882 | feat: eradicate production-only demo stubs across the organization | `4e9dc54762845fc7742a375bbe0e9197a4d40b14` | main | BLOCKED | CHANGES_REQUESTED |
-| #834 | fix(noema): replay OIDC envelope repair on current main | `93d3102ea1b96f2aae3ac1f0e6c5d83c664ce7c1` | main | BLOCKED | CHANGES_REQUESTED |
-| #831 | feat(opencode): add head-matched gold corpus tooling | `16f9ec8b49b7bae8c51f4fb27e373f53eb94bb05` | main | BLOCKED | CHANGES_REQUESTED |
-| #828 | fix(scheduler): require independent exact-head approval | `7e15d2ffc288ba447d95c4e43f776be03d06dd22` | main | BLOCKED | CHANGES_REQUESTED |
-| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `5a099cd7a4ce8bb5724401da901a63236980c284` | main | BLOCKED | — |
-| #807 | fix(coverage): validate nested npm metadata through canonical pins | `362479dfa8f675dec59cf86d220736c651e3d83e` | main | BLOCKED | CHANGES_REQUESTED |
-| #797 | release: attest exact sealed SBOM evidence | `bbf5519bd676e666869d5292b744245255345e8f` | main | BLOCKED | — |
-| #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `8c0e6b3823b3e595a08512616e3bcc10dd8e328d` | main | BLOCKED | CHANGES_REQUESTED |
-| #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | BEHIND | — |
-| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `6146bb99f7e4ffc2ce6ddc9d5d7f2b934ad26f2f` | main | BEHIND | CHANGES_REQUESTED |
-| #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | BEHIND | — |
-
+| #1192 | fix(strix): include contextual-orchestrator import context | `e6f3b3f76e67582a7408e29aab5fcd537f1ebbc1` | fix/strix-pr-head-python-context | MERGEABLE | ready |
+| #1190 | fix(coverage): bind Rust materializer to exact base SHA | `1a330c9e6e176a1f3ab57bda67e780673cc4ec7b` | cursor/opencode-review-surfaces-1bda | MERGEABLE | draft |
+| #1189 | docs: complete coordinator client docstring | `f05c9b218d4032ed11f9f393f013f316b7967c70` | main | MERGEABLE | ready |
+| #1188 | fix: grant hourly callers reusable workflow OIDC scope | `82cd117d279a9b870f185b136984d82bb3ac5236` | main | MERGEABLE | ready |
+| #1187 | fix(coverage): scope Rust evidence to changed packages | `e960321389d1b5858464ed7781fe5954c5f99624` | main | MERGEABLE | ready |
+| #1179 | ⚡ Bolt: [성능 개선] 레이블 스캔 시 O(N) 서브스트링 검증 선행 | `8a7944ab4bfde7fdc07c79adaa494898627d7ce3` | main | MERGEABLE | ready |
+| #1178 | chore: schedule contextual-orchestrator hourly review repair | `97b084ac28b5ccf6de7f68fd2e019d8da6f80143` | main | MERGEABLE | ready |
+| #1177 | fix(strix): retry exact model-quality warnings | `843ee9aa6d54053e4d32e700e71ccc120e102cdd` | main | MERGEABLE | ready |
+| #1176 | fix(governance): require central reviews for stacked PRs | `33b85a8cf48d5b6e0880d5071b360ffa46f83457` | main | MERGEABLE | ready |
+| #1175 | 🛡️ [보안 강화] sandboxed_web_e2e.py 내 subprocess 호출 시 명시적 shell=False 추가 | `5c8589e26ef94c7f78af3d62bd6ac4630b6deb56` | main | MERGEABLE | ready |
+| #1174 | fix(router): preserve dispatch when acknowledgement fails | `11f397988f871b7566e6e1c5dcf5fd82be905dc0` | main | MERGEABLE | ready |
+| #1173 | fix(strix): include Rust workspace context for CI scans | `eceb30ab7b0002254d618c81e47d04a63b6c24fe` | main | MERGEABLE | ready |
+| #1170 | feat: route OpenCode reviews through contextual gateway | `1f2b93ead7205b33712de1865d84c004d93be7ed` | main | MERGEABLE | ready |
+| #1168 | feat: route autofix through contextual orchestrator | `4888370952b6c2d14f71a52a47027b6ad8b48fcb` | main | MERGEABLE | ready |
+| #1167 | feat: add Orgmetra hourly review repair caller | `60934436cf7bdcb46754d6d13c4f0ac41e21f5f6` | main | MERGEABLE | ready |
+| #1166 | fix(ci): recognize replacement tests in existing files | `7234b6946940a0122cf07951e2be32df07988d9d` | main | MERGEABLE | ready |
+| #1165 | fix(automation): yield completed mention repositories fairly | `e6838a033a91e7c1a2a22287d5f9922df5a30977` | main | MERGEABLE | ready |
+| #1163 | docs: establish live product and technical gap baseline | `567f5bd1616708cddac85ec8a9ad0a7ed318a1d0` | main | MERGEABLE | ready |
+| #1162 | fix: use review credentials for agent dispatch | `908e9232057bcbe5458a57e183402146eeba7ec9` | main | MERGEABLE | ready |
+| #1161 | fix: make hourly coordinator credential absence auditable | `0958a512bd1b2642dd0c9bf9096efc312f9cca31` | main | MERGEABLE | ready |
+| #1159 | fix(coverage): classify Storybook development evidence | `7fbee6f482ec745b117f0d916a8de8dbb998e9e1` | main | MERGEABLE | ready |
+| #1158 | fix(osv): preserve immutable direct-source provenance | `75d7f5ffd25649b5da84dd267f8b3458996e031f` | main | MERGEABLE | ready |
+| #1157 | fix(coverage): discover hash-pinned requirements lock files | `afe42767562feff69e488a1034c9b5631541426d` | main | MERGEABLE | ready |
+| #1155 | Fix duplicate repository dispatch scheduler runs | `4b9a933d77a1d68459bf2c51abfbdba9e2d03d8b` | main | MERGEABLE | ready |
+| #1154 | ⚡ Bolt: 민감한 데이터 스크러버(Redaction) 루프 O(N) 성능 최적화 | `7dbcc388dde66e6f8194182e73ca3be1edda164e` | main | MERGEABLE | ready |
+| #1153 | fix(strix): fail closed on incomplete provider scans | `945d5d56ff826b8642c634e6cf0d14a8ec9be38a` | main | MERGEABLE | ready |
+| #1152 | fix(opencode): retry OpenCode after coverage blockers clear | `11491068712859e936e7ce4ed7f204f5c1157f0c` | main | MERGEABLE | ready |
+| #1150 | feat: add read-only Actions queue health evidence | `af65a69eb7308604a4fded9707ff987fcb9d0e80` | main | MERGEABLE | ready |
+| #1147 | feat(integration): add ecosystem capability catalogue | `390af196aac5ffea55d2d0198dffa999bd3be182` | main | MERGEABLE | ready |
+| #1146 | fix(figma): retain style references and component sets | `f661a8e0524742048c33cb0e90b81d446dbeabd4` | main | MERGEABLE | ready |
+| #1145 | feat: enforce adaptive orchestration defaults | `2451889cc80afa9101275e1356f8757fabc69b44` | main | MERGEABLE | ready |
+| #1143 | ci: schedule naruon hourly review repair | `d26e0cf320d87f7c11292afb894b475d84080451` | main | MERGEABLE | ready |
+| #1123 | feat(edge): standardize organization runtimes on Cloudflare Pingora | `58ee96cc3886164cff89e427ce927326bf8d2b03` | main | MERGEABLE | ready |
+| #1120 | Wire Noema to a same-job contextual-orchestrator sidecar | `101e6906cc3568beb99c19c28eaffb526bac335b` | main | MERGEABLE | draft |
+| #1114 | fix(strix): retry transient visibility API failures | `b44b198f0c254d099583ff63a6f8700b284c944f` | main | MERGEABLE | ready |
+| #1112 | fix(storage): reject embedded IPv4 rebinding hosts | `dc7e39cf7dff80c2e2ed8d348090394ddc643142` | main | MERGEABLE | draft |
+| #1108 | feat(automation): run free-router hourly NVIDIA NIM review repair | `fc889cee69c405417263bc4db156ab3b663ac43f` | main | MERGEABLE | ready |
+| #1101 | feat(automation): run EmbedRelay hourly NVIDIA NIM review repair | `33a403561cba252e8611333fe4c026ac3df5e68d` | main | MERGEABLE | ready |
+| #1100 | feat(automation): run RankWeave hourly NVIDIA NIM review repair | `1628c2e561262fb84af658c6e857868628733dc6` | main | MERGEABLE | ready |
+| #1097 | feat(automation): run html4tree hourly NVIDIA NIM review repair | `3366bb7dcc571fe36edde359430dc18ff77b7ca3` | main | MERGEABLE | ready |
+| #1095 | feat(automation): run mhtml-etl-gateway hourly NVIDIA NIM review repair | `6bb2634b69cdb8e68cdcfff3c6f1100bf4947e5b` | main | MERGEABLE | ready |
+| #1094 | feat(automation): run DiagramWeave hourly NVIDIA NIM review repair | `f1ac850f46b0abec627182ca88c3437151455ee3` | main | MERGEABLE | ready |
+| #1092 | feat(automation): run psychometrics-commons hourly NVIDIA NIM review repair | `949c737e29f4c4ccde64da69631b82c30923e005` | main | MERGEABLE | ready |
+| #1088 | feat(automation): run mightyETL hourly NVIDIA NIM review repair | `ac7f1ce8e0b2d356670091cb2a7b8e3cef5c06bd` | main | MERGEABLE | ready |
+| #1087 | feat(automation): run life-os hourly NVIDIA NIM review repair | `f7d386c9222ed3f073aaf232df0dde86e9d49899` | main | MERGEABLE | ready |
+| #1086 | feat(automation): repair the LineageWeave buyer-surface stack hourly | `f1b172e1a64b6cdf83a320f1e5172e54b0e0e787` | main | MERGEABLE | ready |
+| #1085 | feat(automation): run kaefa hourly NVIDIA NIM review repair | `1c5fbb66510254de7bc3adc81590382e8f261acb` | main | MERGEABLE | ready |
+| #1084 | feat(automation): run aFIPC hourly NVIDIA NIM review repair | `9e6fbdd3e86e807c7ef18f1b1016dce3325ea5cd` | main | MERGEABLE | ready |
+| #1083 | feat(automation): run pg-llm-batch hourly NVIDIA NIM review repair | `584141341346b7882fded053b459a7d4c16477a2` | main | MERGEABLE | ready |
+| #1082 | feat(automation): run semantic-data-portal hourly NVIDIA NIM review repair | `571bc1fc4dac2479075dec4c0812bd8fed68b520` | main | MERGEABLE | ready |
+| #1080 | feat(automation): run newsdom-api hourly NVIDIA NIM review repair | `631a66342eef64a7b93363db61be64a186668919` | main | MERGEABLE | ready |
+| #1079 | feat(automation): run Appguardrail hourly NVIDIA NIM review repair | `bb93fa5604f072af5941546ed2a900060e3ed047` | main | MERGEABLE | ready |
+| #1078 | feat(automation): run Scopeweave hourly NVIDIA NIM review repair | `b48509ef9dc0e0861c714998264597dc10e7c95a` | main | MERGEABLE | ready |
+| #1077 | feat(automation): run noema hourly NVIDIA NIM review repair | `e97130f4df7200a9550180407c3d2273a3872880` | main | MERGEABLE | ready |
+| #1076 | feat(automation): run pg-erd-cloud hourly NVIDIA NIM review repair | `479e52fb4db85e3223083ea8f60382b33c4c29b4` | main | MERGEABLE | ready |
+| #1075 | feat(automation): run codec-carver hourly NVIDIA NIM review repair | `471f9888616fabfa6ca3f1642d38e260786aaaf6` | main | MERGEABLE | ready |
+| #1074 | feat(automation): run Keyverse hourly NVIDIA NIM review repair | `298b6b8eef50ab4f096b9e5778403fad2f908e20` | main | MERGEABLE | ready |
+| #1070 | feat(automation): run Wardnet hourly NVIDIA NIM review repair | `5f899a472001f3cdaa22b20ada8d84d2cf314a00` | main | MERGEABLE | ready |
+| #1065 | fix(scheduler): fall back to REST when auto-rebase GraphQL transport fails | `44e098154f37108508b573cb5f7dfeff3fd246a3` | main | MERGEABLE | ready |
+| #1057 | fix(coverage): restore trusted LLVM 19 producer pin | `cbda28b701a2b6067c6d9e14cbb049307e7f0d94` | main | MERGEABLE | ready |
+| #1052 | fix(opencode): split review surfaces, give NIM two hours, and remove GitHub Models | `fe83dc0c2fe472d068477bb6a17c0820dee82aaa` | main | MERGEABLE | ready |
+| #1026 | feat(actions): inventory orphaned workflow identities | `ab51f489374764f25721e335321d55a7fae5a964` | main | MERGEABLE | ready |
+| #1024 | docs(ai): standardize adaptive contextual-orchestrator consumers | `a8e7e13592a4e98c4ecd70731afe878780032f07` | main | MERGEABLE | ready |
+| #1015 | fix(coverage): defer interpreter-specific wheel gaps | `1fe4e8887caab2213df91e15630fe3c48d6c0556` | main | MERGEABLE | ready |
+| #1009 | fix(strix): bind evidence to exact workflow artifacts | `99fee8b1b4ff4fc2219b98561cc4fea851c2f03a` | main | MERGEABLE | ready |
+| #1002 | fix(review): fail closed when required check is not a verdict | `23618c60d8eccb3a957fa3b9d7f61e1d4b648c28` | main | MERGEABLE | ready |
+| #991 | fix(automation): reuse review node_id for mention eyes | `8f0d57815c380c24f6c277c74e9172f2ea7d4324` | main | MERGEABLE | draft |
+| #949 | fix(opencode-review): discover multi-line run: blocks in safe_pytest_command | `811c0321f661b85c9270a85f36fc20fc0da13b42` | main | MERGEABLE | ready |
+| #946 | fix(review): publish substantive OpenCode LLM evidence | `9a756e89d123a33756edcd0289233b8bdc9fe906` | main | MERGEABLE | ready |
+| #941 | fix(semgrep): make the pinned image digest authoritative | `b88fe70691e49b4f1317890884c46852dd8eab7b` | main | MERGEABLE | ready |
+| #939 | fix: keep cross-repo OpenCode evidence healthy | `2c4c6c63c99cfe2f191acf55c3345f58ab9130ad` | main | MERGEABLE | ready |
+| #935 | fix(strix): gate dependency manifest updates | `374ffb75fa74cd95dc70d6b3c6998d548dc52e0b` | main | MERGEABLE | ready |
+| #933 | fix: retry Strix provider tool protocol failures | `d1c86904ba4f4adf99a44a3ebec9c02e123ac986` | main | MERGEABLE | ready |
+| #932 | fix(sbom): preserve Markdown report integrity | `1b2da1cef214cefb6eb58250e92c2849514ba548` | main | MERGEABLE | ready |
+| #931 | fix(security): contain sandbox paths and output | `c2f28e0a85f03b38739eac7cc827e280a4db1dab` | main | MERGEABLE | ready |
+| #930 | fix(noema): fail closed on unsafe model endpoints | `3d7ae8c37079a6692721dfd49b535f1fbf4216bd` | main | MERGEABLE | ready |
+| #928 | fix(opencode): bind coverage artifacts to workflow attempts | `33934d0ef2b98ba2e6d9abf6887e22c21680519a` | main | MERGEABLE | ready |
+| #904 | fix(opencode): include adversarial gate in fallback scope | `8398eec607b006eb576b00e9a19cca840b37c4af` | main | MERGEABLE | ready |
+| #901 | security(deploy-pages): declare minimal secret contract | `e1c99776a1c1c04b6b941799912b0e5c39dd8a0e` | main | MERGEABLE | ready |
+| #899 | fix(scheduler): fail after summarized action errors | `56ffdd1cc1bc235a39b0373a58430fb8c7b00afb` | main | MERGEABLE | ready |
+| #897 | fix(security): fail closed on unavailable dependency review | `1b29064aef7ca428303fb562d250a9698447e952` | main | MERGEABLE | ready |
+| #834 | fix(noema): replay OIDC envelope repair on current main | `7b64d26c157df3b0da13d8ed0e1cd8365ae47d1e` | main | MERGEABLE | ready |
+| #831 | feat(opencode): add head-matched gold corpus tooling | `958645f9326a8053cb03b291db5feb11cd87824b` | main | MERGEABLE | ready |
+| #828 | fix(scheduler): require independent exact-head approval | `ba270684dc1431af94dc44f48816ab1c44437369` | main | MERGEABLE | ready |
+| #821 | fix(ci): replace conflicted fatal OpenCode process-group prerequisite | `5f250b0966d21a893ebcae223a5531562cb09062` | main | CONFLICTING | ready |
+| #807 | fix(coverage): validate nested npm metadata through canonical pins | `cf4abba7086273743ce12e8c15a78e9623509fe6` | main | CONFLICTING | ready |
+| #796 | feat(automation): run Inkspan hourly NVIDIA NIM review repair | `fa7c32c6fc2de53c8739a03be32cd19c62a02ac9` | main | CONFLICTING | ready |
+| #790 | fix(coverage): retry transient trusted uv downloads | `afad81361377f1fe2e651018f1008a590f5344a5` | main | CONFLICTING | draft |
+| #789 | feat(coverage): add bounded PyO3 peer-evidence gate | `6146bb991ed041985233eefa33985b2e40a00721` | main | CONFLICTING | draft |
+| #785 | fix(coverage): materialize requirements-directory locks | `efd2ae85538bdb389da99f0fed6d1799ead5b343` | main | CONFLICTING | draft |
+
+#1191은 같은 시각에 closed/unmerged로 확인되었고, #1192의 base SHA는 닫힌 PR의 head d9479cf486f731e8efe582e7b029234e05b36cae를 사용한다. 이는 stacked descendant의 live metadata이지 parent가 main에 들어갔다는 뜻이 아니다.
 ## 5. 실행 루프와 고객의 다음 행동
 
 각 hourly pass는 아래 순서를 유지한다.
diff --git a/tests/test_product_technical_gap_baseline.py b/tests/test_product_technical_gap_baseline.py
index 8b914c1c5..4c566f911 100644
--- a/tests/test_product_technical_gap_baseline.py
+++ b/tests/test_product_technical_gap_baseline.py
@@ -5,10 +5,11 @@
 
 
 BASELINE = Path("docs/product-technical-gap-baseline.md")
+ADR = Path("docs/adr/0002-product-technical-gap-baseline.md")
 
 
 def test_baseline_binds_current_governance_sources_and_buyer_contract() -> None:
-    """The baseline must point agents to live product and governance evidence."""
+    """The baseline must point agents to product, governance, and buyer evidence."""
     source = BASELINE.read_text(encoding="utf-8")
 
     for marker in (
@@ -22,7 +23,7 @@ def test_baseline_binds_current_governance_sources_and_buyer_contract() -> None:
         "APA 7th references",
         "G-01",
         "G-14",
-        "exact-head",
+        "exact HEAD",
         "independent current-head approval",
         "COPILOT_GITHUB_TOKEN",
     ):
@@ -30,20 +31,18 @@ def test_baseline_binds_current_governance_sources_and_buyer_contract() -> None:
 
 
 def test_baseline_inventory_contains_sha_bound_open_pr_rows() -> None:
-    """The captured inventory must include a SHA and disposition for each row."""
+    """The captured inventory must include SHA and merge metadata for every row."""
     source = BASELINE.read_text(encoding="utf-8")
     rows = [line for line in source.splitlines() if line.startswith("| #")]
 
-    assert len(rows) >= 90
+    assert len(rows) == 90
     for row in rows:
-        assert re.search(r"`[0-9a-f]{40}`", row), row
-        assert any(state in row for state in ("BLOCKED", "BEHIND", "DIRTY")), row
+        assert re.search(r"[0-9a-f]{40}", row), row
+        assert any(state in row for state in ("MERGEABLE", "CONFLICTING")), row
 
 
-def test_baseline_links_existing_local_evidence() -> None:
-    """Every local evidence link in the baseline resolves from the docs folder."""
-    for relative_path in (
-        "CWL-MASTER-CONTEXT.md",
-        "doctoring/organization-commercial-readiness-loop.md",
-    ):
-        assert (BASELINE.parent / relative_path).is_file(), relative_path
+def test_baseline_records_the_ui_adr_boundary() -> None:
+    """The ADR states why a central UI file is not applicable."""
+    adr = ADR.read_text(encoding="utf-8")
+    assert "Figma File ID: N/A" in adr
+    assert "Storybook" in adr