Sub-ticket of VENUS-113 port PLUTO-475 manifest-gate to solo gate: verdict artifact -> per-file .solo-verdicts/pending manifest (sha256(worktree content) path for auditor-reviewed files); gate derives committed-set per mode (--only: ONLY_PATHS pathspec ∩ changed Class-A-filtered; add-A: whole tree Class-A-filtered), refuse unless every committed Class-A file in manifest w/ matching hash. Closes --only false-refuse + add-A smuggle + post-review edits. BLOCKED on bin: gitpush.sh must export ONLY_PATHS env before .gitpush-pre.sh (fleet-general 1-line, bin-whey/venus offline, pluto queued via nw-whey-cc) · venus