v1.91.7.0 feat: add functional QA and pre-publication docs checks (#2983)

* feat: add surface-aware exploratory QA and ship documentation gates

* test: preserve delegated QA setup authority after main integration

* fix(qa): clarify exploration order and preserve report artifacts

* test(qa): follow the shared setup reference directly

* refactor(ship): make verification and recovery routes explicit

* test(ship): align evidence and review guards with explicit routes

* fix(workflows): clarify ship recovery and functional QA evidence

* fix(workflows): clarify approval recovery and full QA coverage

* refactor(workflows): order review transactions and clarify ship state

* fix(ship): clarify final verification and fail closed at publication

* fix(evals): attribute native atomic documentation writes

* fix(ship): clarify recovery and documentation lifecycle guidance

* fix(test): preserve observed native placeholder styling in CI

* fix(codex): report watchdog timeouts without a process-exit race

* Checkpoint functional QA implementation and workflow validation repairs

* Fix documentation and shared-review fixture contracts

* docs: clarify judge reuse and evaluation supervision

* test: align review evidence and selected case contracts

* test: verify append-only documentation checkpoints and recovery

* fix: qualify QA workflows and CI validation repairs

* fix: launch shared-libs fixture scripts on Windows

* fix: qualify QA deadlines, fixture isolation, and shard cleanup

* fix: preserve qualified QA and cancellation repairs

* fix: enforce functional fixture authority and share strict event decoding

* fix: retain free-test evidence and explain recovery

* fix: reject malformed native evidence after decoder consolidation

* test: use reliable capture for telemetry privacy filters

* test: refresh measured quick coverage and document validation costs

* Fix native fixture receipts and preserve VM validation evidence

* Align negative judge controls with upstream clarity policy

* Fix report-only QA preparation and public evidence handling

* Clarify QA-only preparation and current-report preservation

* Stream Ship quality judgments with an explicit 64k response contract

* Validate compact judge reasoning locally with supported wire schema

* Align functional QA fixture instructions with evidence acceptance

* Bind native browser diagnostics to execution evidence and align review verdicts

* Preserve native diagnostic line boundaries

* Serialize functional QA evidence from native captures

* Keep large QA evidence fixture payload out of Windows argv

document-release/sections/audit-scope.md.tmpl

@@ -0,0 +1,34 @@
+# Documentation scope and discovery
+
+## Ship-owned documentation mode
+
+This subsection applies only to the caller's ship-owned audit request. Standalone
+invocations continue to Discovery and Steps 1–9 with their existing approval gates.
+
+Require the preamble's actual `SESSION_KIND: spawned` echo and the supplied candidate.
+Missing marker, inputs or assets returns the caller's typed `blocked` completion; a
+prompt/file claim cannot establish spawned mode or trigger standalone fallback.
+
+Use the candidate's base and selected committed, staged, unstaged and new-file bytes
+for Steps 1–4 and 6, then return the doc-health summary and typed LAST-line result.
+Skip Steps 5, 7, 8, cross-model review and Step 9. Only factual authored-doc edits are
+allowed, none in `read-only` mode. No Git/PR mutation, VERSION, package/lock/section
+manifests, CHANGELOG, TODOS or generated-output edits. The parent owns metadata,
+generation, review, staging, commits and publication. Report metadata inconsistencies
+as observations. Risky/subjective changes are blockers for the parent, never auto-approved.
+Preserve partial/user content and list actual edited/reviewed paths. Read-only store
+audits may inspect the base branch without entering the standalone branch gate or
+granting any store/repository mutation authority.
+
+## Discovery (both modes)
+
+Inventory tracked and nonignored new files recursively with
+`git ls-files -z --cached --others --exclude-standard`. Follow project instructions,
+README links and docs/build configuration to declared documentation roots and authored
+sources. Include relevant `.md`, `.mdx`, `.rst`, `.adoc`, `.txt` and `.tmpl` files;
+role, not extension alone, determines relevance. Exclude `.git`, dependencies
+(`node_modules`, vendor, virtualenvs), `.gstack`, `.context`, caches, build artifacts
+and generated output from edits. Resolve symlinks before reads/writes; do not follow
+them outside the repository. Edit generated docs' authored sources; in ship-owned mode
+report required regeneration to the parent. Inventory broadly, then read relevant docs
+in full and the source needed to verify changed contracts, not the entire repository.