Record the objective, acceptance criteria, and canonical workspace before repository work begins.

Create a deterministic, concise inventory using ripgrep, Git, manifests, and a symlink/junction scan.

Persist a concrete plan after inspection and before any write is allowed.

Execute one planned test/lint/check/build command from the untrusted repository without a shell, fingerprinting the workspace before and after. Repository-controlled code can spawn processes, access the network, or destructively mutate files; a detected mutation makes verification fail. Alternatively, record specific evidence that no executable tests apply.

Return the append-only evidence state and current quality-gate stage for a task.

Refuse PASS unless inspection, plan, post-change verification, diff summary, and every acceptance-evidence item exist.