Parent: #127.
pr-hygiene.yml has live current-digest proof for commitlint default discovery, explicit config, PR title and label mutation/restoration. The stale job remains deliberately unproven because actions/stale enumerates and may mutate a repository-wide population rather than one run-scoped issue.
Acceptance criteria:
- create an isolated disposable issue/PR population that cannot touch unrelated repository state
- run the real reusable
stale job; do not copy its steps or claim skipped jobs
- grant only
issues: write and pull-requests: write to the exact caller/observer jobs
- observe the expected stale mutation, restore or delete every disposable object, and prove cleanup
- reject evidence when caller, observer, or cleanup is failed, cancelled, skipped, or missing
- preserve first failure; timings are telemetry only, with no artificial cancellation
- update
partial-runtime/proven_jobs, generated ledger and exact current digest only after a successful run
Parent: #127.
pr-hygiene.ymlhas live current-digest proof for commitlint default discovery, explicit config, PR title and label mutation/restoration. Thestalejob remains deliberately unproven becauseactions/staleenumerates and may mutate a repository-wide population rather than one run-scoped issue.Acceptance criteria:
stalejob; do not copy its steps or claim skipped jobsissues: writeandpull-requests: writeto the exact caller/observer jobspartial-runtime/proven_jobs, generated ledger and exact current digest only after a successful run