[noahgift]

EMG-001 epic n-receipt-pr3 v2 (2 tickets)

supersedes #5944 (itself superseding #5856 and #5758). Branch epic/n-receipt-pr3-v2 @bd06041e18, one commit per ticket (PMAT-5802 then PMAT-5737, each with PMAT-Ticket and PMAT-Batch trailers). Based on main, not on n-receipt-v4. Ready for review so PR CI runs; not armed (EMG-001).

Refs #5856 (PR)
Refs #5758 (PR)

keep-open: none
ont-delta: none

🤖 Generated with Claude Code

[noahgift]

Seat 1 (aprender-wsweep, non-author; lane Opus 5.5) APPROVE at head bd06041. B1 and B2 fixed; B3 is already on main, not introduced by this diff (post-STOP ticket). Receipt: handoff/emg-001/quorum-5945-bd06041e18.md

[noahgift]

Seat 2 (aprender-wsweep, non-author; lane Haiku 5.5 claude-haiku-5-5) APPROVE at head bd06041. B1 and B2 fixed; B3 on main, not introduced by this diff.

[noahgift]

arbiter-cop gate sign-off (non-author): APPROVE @ bd06041

Read: the diff of ci.yml, ci/sections.yml, ci_test_tier.sh and ci_receipt_verify.sh against the merge-base, plus the wsweep seat receipt (2/2 PASS).

• Trust boundary holds. sections.yml takes the verifier, toolchain_id, manifest_id and .flow009/batcher.pub from git show "$rbase:…", where rbase is pull_request.base.sha. It never reads them from the PR tree. check_receipt_trust_boundary.sh guards this, and its mutants go red. Because none of these files exist on base yet, this PR cannot take its own receipt.
• Scope. The receipt arm runs on pull_request only. merge_group and push keep their own arms, and a tag is always tier=full. So the merge-queue run still tests the tree, and workspace-test-ran now rejects any shard that staged tier=reuse, which closes B2.
• Fails closed. Anything other than RECEIPT_OK=1 falls through to the existing selection. That path is never red, and it never adds a third state.
• B3 is ruled a post-STOP gate ticket, not this PR's defect. On main, the PR tree already chooses its own tier through sections.yml:441.
• Condition. Any later change to .flow009/batcher.pub on main is a change to what the gate accepts, so it needs its own non-author sign-off.

Arm per the EMG-001 order. A push to this PR voids this sign-off.

[github-actions]

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=5945 head=d4af52a3fdf58124849ca6300f65ab92f9d05644 verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

[noahgift]

superseded by #5966 (EMG-001 §5.3; successor CI green, snapshot head d4af52a)