grim8/23/2026, 1:28:32 AM

An open-git repo could never pass. The derived default gate is built from the
baseline rules with no forge awareness, and every baseline rule except
english-only declares forges: ["github"]. So the gate carried four rules that
could only ever skip — and one skip trips the fail-closed floor, which sent
every pull request to review no matter what the rules found. english-only
passed underneath and it made no difference.

deriveDefaultWorkflow now takes the repo's forge and leaves those rules out.
Skipping is for a read that might come back; a rule the catalog declares
unusable on this forge is settled, and adding it only to skip it is a dead
gate. Omitting the argument filters nothing, so every other caller is unchanged.

Also: the e2e harness arms the repo for the run and restores the prior value.
Repos land armed: false and the worker logged 'repo not armed — event ingested,
run skipped', producing no verdict at all.

Verified live against open-git.com/boring/playground: a non-latin title blocks
(check failed), a latin title passes (check success).

Parentf12fe28