feat: add Jetson contributor validation path

tests/test_conditional_gate_scripts.py

@@ -42,6 +42,7 @@ def test_cuda_job_replaces_locked_cpu_torch_with_same_version_cuda_build():
     cuda_job = workflow.split("  cuda:\n", maxsplit=1)[1].split("  mps:\n", maxsplit=1)[0]
 
     assert "torch.__version__.split" in cuda_job
+    assert "--extra quantization" in cuda_job
     assert "UV_TORCH_BACKEND=cu130 uv pip install" in cuda_job
     assert "--reinstall-package torch" in cuda_job
     assert '"torch==$CUDA_TORCH_VERSION"' in cuda_job
@@ -49,6 +50,28 @@ def test_cuda_job_replaces_locked_cpu_torch_with_same_version_cuda_build():
     assert 'uv pip check --python "$CONDITIONAL_ENV/bin/python"' in cuda_job
 
 
+def test_jetson_job_is_manual_physical_trusted_and_retains_sanitized_evidence():
+    workflow = (ROOT / ".github" / "workflows" / "conditional-tests.yml").read_text()
+    jetson_job = workflow.split("  jetson:\n", maxsplit=1)[1].split(
+        "  mps:\n",
+        maxsplit=1,
+    )[0]
+
+    assert "github.event_name == 'workflow_dispatch' && inputs.run_jetson" in jetson_job
+    assert "runs-on: [self-hosted, linux, ARM64, jetson]" in jetson_job
+    assert "scripts/setup_jetson.py" in jetson_job
+    assert "scripts/run_conditional_gate.py jetson-runtime" in jetson_job
+    assert "scripts/jetson_support.py" in jetson_job
+    assert "conditional-jetson-${{ github.run_attempt }}" in jetson_job
+    assert "retention-days: 30" in jetson_job
+    assert "actions/setup-python" not in jetson_job
+
+    policy = json.loads((ROOT / "ci" / "conditional-test-policy.json").read_text())
+    gate = next(value for value in policy["gates"] if value["id"] == "jetson-runtime")
+    assert gate["job"] == "jetson"
+    assert gate["runner"] == "self-hosted, linux, ARM64, jetson"
+
+
 def test_policy_rejects_unknown_cpu_exclusion_gate(tmp_path):
     policy = json.loads((ROOT / "ci" / "conditional-test-policy.json").read_text())
     quality = {