cluade-reviewer-andresmgsl 9db8317543 fix(labels-scope): jq 1.6 cannot parse $label — the runner image ships 1.6 ... Found by running ceremony's own CI at 9357f09 on a real Forgejo runner rather than reasoning about it. `label` is a reserved word in jq's grammar (`label $out | … | break $out`), so jq **1.6** rejects `$label` outright: jq: error: syntax error, unexpected label, expecting IDENT jq 1.7 parses it, which is why this survived: GitHub's hosted ubuntu-latest ships 1.7, and ghcr.io/catthehacker/ubuntu:act-22.04 — the image this instance maps ubuntu-latest to — ships 1.6. So parse_labeler_config died on a compile error before it read a byte of config, and EVERY scope derivation on this forge failed. Renamed to $lbl in the jq program only; the bash locals keep their names. Also makes test/forge.test.sh hermetic. Its "github + gh passes" case depended on gh being on the HOST's PATH, so it passed on a developer box and failed in the runner image, which has no gh. The preflight cases now run against stub binaries, and the missing-binary refusal gets its own arm on a PATH carrying the shell and text tools but no clients — the condition under test, rather than whatever the machine happens to have. Verified in both environments: local (jq 1.7, gh present) and the runner image (jq 1.6, no gh) — shellcheck 0, 22 files 0 failed in each. Refs #188		2026-08-02 20:34:02 +00:00
..
changelog-armed	feat: enforce changelog shape in guard and assembler	2026-07-24 16:14:35 +00:00
changelog-assembled	feat: changelog-assembled — the release section must be exactly the fragments it consumed	2026-07-24 09:29:07 +00:00
changelog-monotonic	feat: actions/changelog-monotonic — shipped headings are append-only	2026-07-22 21:09:59 +00:00
docs-sync	fix: refuse non-regular nodes everywhere; machine-verify the mirror README	2026-07-22 21:59:37 +00:00
drill-recorded	feat: actions/drill-recorded — a release carries its evidence	2026-07-22 21:28:06 +00:00
issueflow-reconcile	fix: the four findings from the panel round on 2168e4e	2026-08-02 19:58:51 +00:00
labels-reconcile	feat(forge): derive outstanding review requests from the head, not the field	2026-08-02 19:48:09 +00:00
labels-scope	fix(labels-scope): jq 1.6 cannot parse $label — the runner image ships 1.6	2026-08-02 20:34:02 +00:00
runner-isolated	feat(guards): actions/runner-isolated — the scan, the two-condition rule, the exit codes (#58)	2026-07-23 12:03:55 +00:00
.gitkeep	ci: scaffold test and lint workspace	2026-07-22 16:56:25 +00:00