forked from mosaicstack/stack
rev-974 review 68 @ 033b2ffb: RR1-RR12 all PASS. RR7 is the strong one — all four binding predicates proved RED against the old e7b29219 verifier, and the original attack under the old interface returned exit 0 with exempted_steps=1, proving the PRIOR DEFECT rather than merely unsupported syntax. The remaining blocker was metadata, not code: the live PR body still said "DO NOT MERGE" and "the exemption will not be implemented", describing an earlier head. Verified independently — the controls were injected in 3931b0e2/9455cd6a/25ac5971/ef9d23ab and the final delta does not touch .woodpecker/ci.yml at all. The body was true when written and went stale as the branch evolved. That is D-38 one layer out: the PR that binds evidence to its subject shipped a description that was not bound to its subject, and D-36's staleness class on provider metadata rather than a repo file. Fixed as metadata only. Head confirmed unmoved at 033b2ffb from both provider and git, body SHA-256 b0198d98 matched the author's reported digest byte-for-byte, both stale strings absent. Because the commit never moved, the twelve results stand and no third review round is owed — only the discharge of the finding by the reviewer who raised it. Exact-head CI #2193: success, 9 children, 9/9 success including clone, read from -f json (D-33). Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>