verify: guarded-path PR must be held for manual review (not auto-merged)

[JSONbored]

Acceptance test for the hard-guardrail + manual-hold: a comment-only change in src/scoring/** (a guarded glob). Expected: gittensory reviews it but applies gittensory:needs-human-review (NOT ready-to-merge) and does NOT auto-merge — it falls to a human. Confirms the guardrail still holds after the diff-fetch (B) change to the changedPaths resolver. I will close this after confirming the hold.

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[ghost]

Note

🟦🟦🟦🟦🟦🟦🟦🟦🟦🟦🟦🟦

💡 Gittensory review — advisory only

0 files · no blockers · readiness 0/100

💡 Advisory only — PR closed before full evaluation. No late first comment was created.

Signal	Result	Evidence
Code review	✅ No blockers	synthesized
Gate result	⚠️ Skipped	#1068 is no longer open.

_{🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed}

---

💰 Earn for open-source contributions like this. Gittensor lets GitHub contributors earn for the work they already do — register to start earning →.

Checked by Gittensory, a quiet PR intelligence layer for OSS maintainers.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.28%. Comparing base (d7f4ccf) to head (4670d96).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1068   +/-   ##
=======================================
  Coverage   95.28%   95.28%           
=======================================
  Files         149      149           
  Lines       18053    18053           
  Branches     6535     6535           
=======================================
  Hits        17202    17202           
  Misses        363      363           
  Partials      488      488           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[JSONbored]

Closing — throwaway verification PR from the CI-policy/auto-merge debugging session; the fix shipped in #1075.