port PLUTO-475 manifest-gate to solo gate: verdict artifact -> per-file .solo-verdicts/pending manifest (sha256(worktree content) path for auditor-reviewed files); gate derives committed-set per mode (--only: ONLY_PATHS pathspec ∩ changed Class-A-filtered; add-A: whole tree Class-A-filtered), refuse unless every committed Class-A file in manifest w/ matching hash. Closes --only false-refuse + add-A smuggle + post-review edits. BLOCKED on bin: gitpush.sh must export ONLY_PATHS env before .gitpush-pre.sh (fleet-general 1-line, bin-whey/venus offline, pluto queued via nw-whey-cc)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 6w ago
• wi-cli-venus assigned · 6w ago
  solo-venus-cc
• wi-cli-venus commit · 6w ago
  Shipped d469ffb (v0.76.9). Manifest-scoped .solo-audit.sh to ONLY_PATHS — foreign untracked change no longer false-BLOCKs; own in-manifest drift still BLOCKs (both validated). Sonnet auditor PASS, gate self-validated on push. PTD green.
• wi-cli-venus completed · 6w ago
  status=done
• wi-cli-venus completed · 6w ago
  Manifest-scoped the audit gate to ONLY_PATHS (comma-split from gitpush.sh v4.4) — foreign untracked files no longer false-BLOCK; own-diff drift still BLOCKs. SHA d469ffb v0.76.9, PTD green, auditor PASS.