fix(ci): bind terminal-green evidence to PR head

docs/scratchpads/1000-rm-61-ci-contract-exemption.md

@@ -88,7 +88,7 @@ The nine-case contract harness was written before the verifier. First execution
 - Exact #2188 record: exit 0, 10 children, 9 success + 1 named exemption.
 - Historical set: #2158/#2167/#2184/#2186 pass with no exemption; #2170/#2175/#2182/#2187/#2188 pass with one named exemption; #2180/#2181 remain red because independent failures exist.
 - Provider controls: #2189 and #2191 both exit 1 under the verifier; neither is exempted.
-- Unit harness: 9/9 cases pass after the red-first checkpoint.
+- Unit harness: initial 9/9 cases passed after the red-first checkpoint; review remediation expands this to 12 cases with expected-head match/missing/mismatch coverage.
 - Test-membership guard: PASS, population 45; 26 enumerated, 19 signed exclusions; all 39 surface paths present.
 - Python compile: PASS.
 - `pnpm typecheck`: PASS, 45/45 tasks.
@@ -96,6 +96,13 @@ The nine-case contract harness was written before the verifier. First execution
 - `pnpm format:check`: PASS after moving local evidence outside the repository tree.
 - `test:framework-shell`: RM-61 and all preceding suites passed, then the pre-existing wake assertion aborted with exit 97 because this host's Bash 5.2.15 reports `BASH_LINENO [3 5]` where that suite requires `[3 4]`. RM-61 does not modify the wake suite; the command is not fully runnable on this host as written and no substitute result is claimed.
 
+## Independent review
+
+- Review 67 / comment 20403 at exact head `e7b29219e11efd0a19395156ac0b154bec0c3a73`: **REQUEST CHANGES**.
+- Blocker: the verifier echoed the pipeline commit but did not bind it to the current PR head; mutating only #2188's commit still returned terminal-green.
+- Remediation: require `--expect-commit <full-40>`, add a pipeline anomaly on missing/mismatched record commits, emit expected and observed values, wire both CI documentation and the merge-gate baseline to pass provider PR head, and add match/missing/mismatch tests.
+- This binding is not prohibited head-based clustering policy: it proves the evidence belongs to the commit under verdict. Runner/node/time/head correlation remains excluded from the teardown signature itself.
+
 ## Documentation checklist
 
 - [x] CI contract documented in the canonical framework CI/CD guide.