test: capture held-merge and resume evidence

[aryeko]

Summary

• add opt-in real-effect smoke coverage for protected-branch held merge, PR/status/comment block surfacing, and RESUME-3 repeated-effect idempotency
• classify live GitHub review-protection refusal messages as held-by-review instead of conflict/unknown
• commit dated evidence records and update status docs so MERGE-5 and RESUME-3 are no longer described as open while SEC-2 remains open

Real-effect evidence

• Held merge smoke: EVRUN_HELD_MERGE_SMOKE=1 ... corepack pnpm exec vitest run packages/jig-sdk/tests/smoke/evrun-held-merge-resume.smoke.test.ts
  • result: 1 passed, 1 skipped, duration 10.59s
  • sandbox PR: test: held merge smoke edit jig-smoke-target#20, closed after capture
  • observed done-not-landed, held-by-review, jig/block failure status, and PR block comment
• Resume idempotency smoke: EVRUN_RESUME_IDEMPOTENCY_SMOKE=1 ... corepack pnpm exec vitest run packages/jig-sdk/tests/smoke/evrun-held-merge-resume.smoke.test.ts
  • result: 1 passed, 1 skipped, duration 10.52s
  • sandbox PR: test: resume idempotency smoke edit jig-smoke-target#22, closed after capture
  • observed runner-action.skipped-repeated-effect with reason: already-landed; PR count stayed 1 before and after resume
• Sandbox cleanup: PRs docs: reconcile the records seam and record the policy-gate simplification #18-fix: implement Phase R remediation #22 closed and branches deleted; main branch protection left in place with one approving review and admin enforcement

Verification

• corepack pnpm exec vitest run packages/jig-sdk/tests/providers.real-forge.p7.unit.test.ts packages/jig-sdk/tests/smoke/evrun-held-merge-resume.smoke.test.ts
• corepack pnpm check
  • 55 test files passed, 5 skipped
  • 673 tests passed, 7 skipped
  • branch coverage: 91.08%
• git diff --check
• golden fixtures byte-identical: no diff under tests/fixtures/m5b-local-mvp/golden-run-record-*.json

Notes

• No coverage threshold, exclusion list, or golden fixture changes.
• SEC-2 / strong no-phone-home remains out of scope and open.

[aryeko]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Can't wait for the next one!

Reviewed commit: cfeae0e395

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".