policy: exception entries for the t27o release workflows and the queen publish jobs (Refs #8996, Refs #9092)

[gHashTag]

Adds the four owner-approved workflow paths to tools/policy/foreign-exceptions.txt, per the owner's instruction of 2026-10-12:

• .github/workflows/t27o-release.yml and .github/workflows/t27o-golden.yml — PR release: t27o standalone binary, cosign keyless signing, and the reusable golden-spec Action (Refs #8996) #9147 (Refs t27o: ship a standalone signed binary and a GitHub Action (runs in the user's CI) #8996): tag build + cosign keyless signing, and the reusable golden-spec job
• .github/workflows/brain-seal-refresh.yml and .github/workflows/queen-publish.yml — PR ci: one queen-publish job opens the derived-record PRs the labs' verdicts allow (Closes #9092) #9117 (Refs Derived-record PR opener: one queen-publish.yml job opens the PRs the labs' seal and ledger verdicts allow #9092): queen publish jobs open the derived-record PRs the labs' verdicts ask for

Machinery formats a resolver genuinely parses (GitHub Actions), not project self-description. The foreign-line budget still applies unchanged. Once merged, #9147 and #9117 update-branch and their own-language gates read these entries from the new base.

🤖 Generated with Claude Code

[github-actions]

PR Dashboard

Generated at: 2026-10-11 19:44:30 UTC

• t27o: the oracle samples every match arm, so text predicates can no longer pass vacuously (Closes #9102) #9161 t27o: the oracle samples every match arm, so text predicates can no longer pass vacuously (Closes #9102) | Created: 2026-10-11 | Updated: 2026-10-11 | 16 failing / 29 total
• policy: exception entries for the t27o release workflows and the queen publish jobs (Refs #8996, Refs #9092) #9160 policy: exception entries for the t27o release workflows and the queen publish jobs (Refs #8996, Refs #9092) | Created: 2026-10-11 | Updated: 2026-10-11 | 13 failing / 25 total
• chore: remove all mentions of the DARPA CLARA program (Refs #3003) #9159 chore: remove all mentions of the DARPA CLARA program (Refs #3003) | Created: 2026-10-11 | Updated: 2026-10-11 | 30 failing / 55 total
• Port scripts/gen_w706.py (Python, 3 functions) to specs/port/scripts/gen_w706.t27 #9150 Port scripts/gen_w706.py (Python, 3 functions) to specs/port/scripts/gen_w706.t27 | Created: 2026-10-11 | Updated: 2026-10-11 | 6 failing / 29 total
• feat(wasm): MVP - AI-generated FPGA interpreter executing WASM #9148 feat(wasm): MVP - AI-generated FPGA interpreter executing WASM | Created: 2026-10-11 | Updated: 2026-10-11 | 9 failing / 37 total
• release: t27o standalone binary, cosign keyless signing, and the reusable golden-spec Action (Refs #8996) #9147 release: t27o standalone binary, cosign keyless signing, and the reusable golden-spec Action (Refs #8996) | Created: 2026-10-11 | Updated: 2026-10-11 | 8 failing / 29 total
• gen-rust: eight constructs that passed test-report now compile under rustc (Closes #8891) #9135 gen-rust: eight constructs that passed test-report now compile under rustc (Closes #8891) | Created: 2026-10-11 | Updated: 2026-10-11 | 6 failing / 42 total
• Port trios-chat CR-CHAT-00: lib.rs data and decisions as lib.t27 (Refs #8880) #9131 Port trios-chat CR-CHAT-00: lib.rs data and decisions as lib.t27 (Refs #8880) | Created: 2026-10-11 | Updated: 2026-10-11 | 5 failing / 33 total
• Port gHashTag/trinity:src/phi-engine/tvc/tvc_phi_integration.zig (Zig, 6 functions) to specs/port/trinity/src/phi-engine #9130 Port gHashTag/trinity:src/phi-engine/tvc/tvc_phi_integration.zig (Zig, 6 functions) to specs/port/trinity/src/phi-engine | Created: 2026-10-11 | Updated: 2026-10-11 | 5 failing / 29 total
• ci: one queen-publish job opens the derived-record PRs the labs' verdicts allow (Closes #9092) #9117 ci: one queen-publish job opens the derived-record PRs the labs' verdicts allow (Closes #9092) | Created: 2026-10-11 | Updated: 2026-10-11 | 5 failing / 24 total
• Spec: the review jam -- which case a stuck pull request is in, and the Queen's action (specs/automation/review-jam.t27) #9060 Spec: the review jam -- which case a stuck pull request is in, and the Queen's action (specs/automation/review-jam.t27) | Created: 2026-10-11 | Updated: 2026-10-11 | 2 failing / 30 total
• docs(agents): new functionality is written in .t27 only #8936 docs(agents): new functionality is written in .t27 only | Created: 2026-10-11 | Updated: 2026-10-11 | 4 failing / 24 total
• Port tools/queen/needs_boundary.py (Python, 8 functions) to specs/port/tools/queen/needs_boundary.t27 #8924 Port tools/queen/needs_boundary.py (Python, 8 functions) to specs/port/tools/queen/needs_boundary.t27 | Created: 2026-10-11 | Updated: 2026-10-11 | 4 failing / 30 total
• Port gHashTag/trinity:src/tri/gen_lru_cache_impl.zig (Zig, 6 functions) to specs/port/trinity/src/tri/gen_lru_cache_impl #8923 Port gHashTag/trinity:src/tri/gen_lru_cache_impl.zig (Zig, 6 functions) to specs/port/trinity/src/tri/gen_lru_cache_impl | Created: 2026-10-11 | Updated: 2026-10-11 | 4 failing / 29 total
• Port gHashTag/trinity:src/tri/tri_battle.zig (Zig, 2 functions) to specs/port/trinity/src/tri/tri_battle.t27 #8892 Port gHashTag/trinity:src/tri/tri_battle.zig (Zig, 2 functions) to specs/port/trinity/src/tri/tri_battle.t27 | Created: 2026-10-11 | Updated: 2026-10-11 | 1 failing / 31 total
• t27b verilog: pin declarations, and the TRI-NET board top in .t27 with no hand Verilog or XDC (Closes #8889) #8890 t27b verilog: pin declarations, and the TRI-NET board top in .t27 with no hand Verilog or XDC (Closes #8889) | Created: 2026-10-11 | Updated: 2026-10-11 | 7 failing / 41 total
• spec fix: 1 specs in specs/queen the reference blocks -- rewrite them in t27 (1 of 1) #8879 spec fix: 1 specs in specs/queen the reference blocks -- rewrite them in t27 (1 of 1) | Created: 2026-10-11 | Updated: 2026-10-11 | 7 failing / 30 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-02/src/double_ratchet_sending_chain_rotation_guard.rs (Rust, 1 funct #8878 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-02/src/double_ratchet_sending_chain_rotation_guard.rs (Rust, 1 funct | Created: 2026-10-11 | Updated: 2026-10-11 | 4 failing / 30 total
• isa: S05 TRI-27 specs state the emulator fixed in gHashTag/trinity#1250 (Closes #5614) #8876 isa: S05 TRI-27 specs state the emulator fixed in gHashTag/trinity#1250 (Closes #5614) | Created: 2026-10-11 | Updated: 2026-10-11 | 1 failing / 29 total
• Port gHashTag/trinity:src/vibeec/updated_codex.zig (Zig, 5 functions) to specs/port/trinity/src/vibeec/updated_codex.t27 #8874 Port gHashTag/trinity:src/vibeec/updated_codex.zig (Zig, 5 functions) to specs/port/trinity/src/vibeec/updated_codex.t27 | Created: 2026-10-11 | Updated: 2026-10-11 | 2 failing / 29 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-02/src/ratchet_replay_window_guard.rs (Rust, 2 functions) to specs/p #8873 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-02/src/ratchet_replay_window_guard.rs (Rust, 2 functions) to specs/p | Created: 2026-10-11 | Updated: 2026-10-11 | 1 failing / 31 total
• Port scripts/tri-doc-sync.py (Python, 1 function) to specs/port/scripts/tri-doc-sync.t27 #8850 Port scripts/tri-doc-sync.py (Python, 1 function) to specs/port/scripts/tri-doc-sync.t27 | Created: 2026-10-10 | Updated: 2026-10-11 | 3 failing / 33 total
• gen-verilog: an entry parameter named clk/rst_n/en is declared once; a void body's last call stays a statement (Closes #5649, Closes #5650, Closes #5651) #8844 gen-verilog: an entry parameter named clk/rst_n/en is declared once; a void body's last call stays a statement (Closes #5649, Closes #5650, Closes #5651) | Created: 2026-10-10 | Updated: 2026-10-11 | 7 failing / 42 total
• specs/policy: linked_issue_prose states what check-linked-issue reads (Closes #5744) #8843 specs/policy: linked_issue_prose states what check-linked-issue reads (Closes #5744) | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 33 total
• tools/jtag: libftdi from $T27_LIBFTDI or the platform default, so B2 reads on Linux (Closes #7927) #8842 tools/jtag: libftdi from $T27_LIBFTDI or the platform default, so B2 reads on Linux (Closes #7927) | Created: 2026-10-10 | Updated: 2026-10-11 | 3 failing / 24 total
• Port gHashTag/trios:crates/trios-mesh-node/src/persist.rs (Rust, 5 functions) to specs/port/trios/crates/trios-mesh-node #8834 Port gHashTag/trios:crates/trios-mesh-node/src/persist.rs (Rust, 5 functions) to specs/port/trios/crates/trios-mesh-node | Created: 2026-10-10 | Updated: 2026-10-11 | 6 failing / 29 total
• Port scripts/ci/rebuild_evidence.sh (Shell, 1 function) to specs/port/scripts/ci/rebuild_evidence.t27 #8828 Port scripts/ci/rebuild_evidence.sh (Shell, 1 function) to specs/port/scripts/ci/rebuild_evidence.t27 | Created: 2026-10-10 | Updated: 2026-10-11 | 2 failing / 33 total
• Port gHashTag/trinity:fpga/openxc7-synth/gf16_add_top.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-synth/gf1 #8827 Port gHashTag/trinity:fpga/openxc7-synth/gf16_add_top.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-synth/gf1 | Created: 2026-10-10 | Updated: 2026-10-11 | 4 failing / 29 total
• Port gHashTag/trios:crates/trios-ext/rings/BRONZE-RING-EXT/xtask/src/main.rs (Rust, 3 functions) to specs/port/trios/cra #8824 Port gHashTag/trios:crates/trios-ext/rings/BRONZE-RING-EXT/xtask/src/main.rs (Rust, 3 functions) to specs/port/trios/cra | Created: 2026-10-10 | Updated: 2026-10-11 | 6 failing / 29 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-06/src/agent_context_window_budget_guard.rs (Rust, 1 function) to sp #8822 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-06/src/agent_context_window_budget_guard.rs (Rust, 1 function) to sp | Created: 2026-10-10 | Updated: 2026-10-11 | 3 failing / 31 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-02/src/dh_output_validation.rs (Rust, 1 function) to specs/port/trio #8806 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-02/src/dh_output_validation.rs (Rust, 1 function) to specs/port/trio | Created: 2026-10-10 | Updated: 2026-10-11 | 2 failing / 31 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-05/src/snapshot_atomicity_guard.rs (Rust, 1 function) to specs/port/ #8787 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-05/src/snapshot_atomicity_guard.rs (Rust, 1 function) to specs/port/ | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 30 total
• spec fix: 6 specs in specs/tri/collections the reference blocks -- rewrite them in t27 (2 of 4) #8773 spec fix: 6 specs in specs/tri/collections the reference blocks -- rewrite them in t27 (2 of 4) | Created: 2026-10-10 | Updated: 2026-10-11 | 6 failing / 29 total
• fpga: the TRI-NET node's 100 Mb/s board logic in t27 (MDIO, RGMII nibbles, JTAG status) (Closes #8770) #8772 fpga: the TRI-NET node's 100 Mb/s board logic in t27 (MDIO, RGMII nibbles, JTAG status) (Closes #8770) | Created: 2026-10-10 | Updated: 2026-10-11 | 7 failing / 39 total
• fix(specs): restore native JTAG verdict literals #8771 fix(specs): restore native JTAG verdict literals | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 31 total
• spec(queen): claim.t27 - the round's stateOfDispatch as a card, the review valve imported (Closes #8765) #8768 spec(queen): claim.t27 - the round's stateOfDispatch as a card, the review valve imported (Closes #8765) | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 31 total
• fix(memory): restore executable graph ingest policy #8755 fix(memory): restore executable graph ingest policy | Created: 2026-10-10 | Updated: 2026-10-10 | 3 failing / 31 total
• fix(specs): restore executable policies and corpus checks #8749 fix(specs): restore executable policies and corpus checks | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 31 total
• Port gHashTag/trinity:src/brain/angular_gyrus.zig (Zig, 4 functions) to specs/port/trinity/src/brain/angular_gyrus.t27 #8735 Port gHashTag/trinity:src/brain/angular_gyrus.zig (Zig, 4 functions) to specs/port/trinity/src/brain/angular_gyrus.t27 | Created: 2026-10-10 | Updated: 2026-10-11 | 1 failing / 31 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-07/src/replay_detection_window_guard.rs (Rust, 1 function) to specs/ #8734 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-07/src/replay_detection_window_guard.rs (Rust, 1 function) to specs/ | Created: 2026-10-10 | Updated: 2026-10-11 | 4 failing / 29 total
• Port scripts/gen_w692.py (Python, 3 functions) to specs/port/scripts/gen_w692.t27 #8718 Port scripts/gen_w692.py (Python, 3 functions) to specs/port/scripts/gen_w692.t27 | Created: 2026-10-10 | Updated: 2026-10-11 | 6 failing / 31 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-05/src/store_revision_monotonicity_guard.rs (Rust, 1 function) to sp #8674 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-05/src/store_revision_monotonicity_guard.rs (Rust, 1 function) to sp | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 31 total
• Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-04/src/wire_frame_integrity_guard.rs (Rust, 1 function) to specs/por #8673 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-04/src/wire_frame_integrity_guard.rs (Rust, 1 function) to specs/por | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 31 total
• docs(fpga): HARDWARE_SSOT records the TRI-NET node answering jobs over UDP #8538 docs(fpga): HARDWARE_SSOT records the TRI-NET node answering jobs over UDP | Created: 2026-10-10 | Updated: 2026-10-11 | 2 failing / 24 total
• fix(fpga): eth_reply.t27 sends one frame per receipt, to the sender, with a real checksum #8532 fix(fpga): eth_reply.t27 sends one frame per receipt, to the sender, with a real checksum | Created: 2026-10-10 | Updated: 2026-10-11 | 7 failing / 39 total
• gf16.t27 (L6 ceiling): gf16_extract_exponent returns 0 for every input; 3 invariants false under execution #8531 gf16.t27 (L6 ceiling): gf16_extract_exponent returns 0 for every input; 3 invariants false under execution | Created: 2026-10-10 | Updated: 2026-10-11 | 8 failing / 33 total
• Wave 683: one mistake in two copies, and a withdrawn explanation #8509 Wave 683: one mistake in two copies, and a withdrawn explanation | Created: 2026-10-10 | Updated: 2026-10-10 | 3 failing / 24 total
• Port gHashTag/trinity:fpga/openxc7-synth/uart_bridge_fixed.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-synt #8506 Port gHashTag/trinity:fpga/openxc7-synth/uart_bridge_fixed.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-synt | Created: 2026-10-10 | Updated: 2026-10-10 | 6 failing / 29 total
• Port gHashTag/trinity:src/tri_lang/content_registry.zig (Zig, 7 functions) to specs/port/trinity/src/tri_lang/content_re #8483 Port gHashTag/trinity:src/tri_lang/content_registry.zig (Zig, 7 functions) to specs/port/trinity/src/tri_lang/content_re | Created: 2026-10-10 | Updated: 2026-10-10 | 4 failing / 29 total
• Port gHashTag/trinity:src/tri/gen_splay_tree.zig (Zig, 5 functions) to specs/port/trinity/src/tri/gen_splay_tree.t27 #8470 Port gHashTag/trinity:src/tri/gen_splay_tree.zig (Zig, 5 functions) to specs/port/trinity/src/tri/gen_splay_tree.t27 | Created: 2026-10-10 | Updated: 2026-10-11 | 5 failing / 32 total

Summary

Status	Count
Total Open PRs	50
PRs with Failing Checks	50
PRs with All Checks Green	0
READY	0
FAILING	50
PENDING	0
NO CHECKS YET	0

Seal Status

• ⚠️ STALE -- sha256(compiler.rs)=6fc1fc5cb363 != manifest seal=87e5cbd3ad94.
  The committed NMSE numbers were certified against an older compiler.rs.
  Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).