grim7/12/2026, 7:48:42 AM

- ai-review removed from DEFAULT_WORKFLOW baseline ⇒ non-baseline rule; the
  single source deriveDefaultWorkflow + ruleExecutes both read, so /rules
  display and execution agree (absent ⇒ off, enabled ⇒ opts in)
- RULE_CATALOG gains optIn marker + voice blurb; /rules renders opt-in-off as
  an 'enable' offer, not a silent toggle
- scratch ai-review row set false; keyless skip pinned (opted in + no key ⇒
  skipped, counts toward the floor)
- replay CI gate (frozen corpus) unchanged: 13 unchanged / 2 flips
- ledgered: operator flag service (Databuddy) stays dashboard-only, never in
  the worker eval path (replay invariant)

Parent4279ab9