cndgrr 0760d0c21f feat(guards): the vendored manifest guards ceremony own tree ... docs/VENDORED.txt is already machine-authoritative on the consumer side — actions/docs-sync reads it as the sole declaration and enforces "manifest union .ceremony/, nothing else". Nothing enforced the other end: a doctrine file landing at ceremony every root with nobody adding it to the manifest is a SILENT miss, because docs-sync only asserts byte-identity for the files the manifest names. Two directions, two mechanisms (#251 D2): manifest -> tree is a scan (regular, non-empty, tracked, no symlink, no directory, no .. escape); tree -> manifest is a closed-world rule over root *.md with a short in-script exemption list, because nothing in the tree answers "which files are vendorable". Refs #251		2026-08-04 10:16:16 +00:00
..
actionlint-all.sh	test: cover labels state machine	2026-07-22 18:19:49 +00:00
marker-check.sh	test: pin inline marker mention boundary	2026-08-03 23:05:05 +00:00
release-path.sh	feat: declare the release door path	2026-08-03 21:39:02 +00:00
self-ref-check.sh	feat: the reusable release workflow — both doors, one implementation	2026-07-22 19:55:39 +00:00
shellcheck-all.sh	fix: quote shellcheck file arguments	2026-07-22 16:58:20 +00:00
vendored-check.sh	feat(guards): the vendored manifest guards ceremony own tree	2026-08-04 10:16:16 +00:00