fix(quality): close registry silent-defeat paths

scripts/gate-provider-binding-control.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+
+import { assessProviderEvidence } from './gate-history.mjs';
+
+const records = [
+  {
+    commit: 'subject-a',
+    number: 7,
+    status: 'success',
+    steps: [{ name: 'gate-verify', status: 'success' }],
+  },
+  {
+    commit: 'subject-b',
+    number: 7,
+    status: 'success',
+    steps: [{ name: 'gate-verify', status: 'success' }],
+  },
+];
+const result = assessProviderEvidence('subject-a', records);
+if (
+  result.state === 'terminal-failure' &&
+  /duplicate pipeline identity across commits/i.test(result.detail)
+) {
+  process.stderr.write(`${result.detail}\n`);
+  process.exit(1);
+}
+process.stdout.write(
+  `cross-commit duplicate was not rejected: ${result.state} (${result.detail})\n`,
+);
+process.exit(0);