{
  "status": "H1 implementation authored in .worktrees/hertz-318-ci-reuse; ready for parent review and validation. No tests, formatters, lint, builds, commits, pushes, PRs, lifecycle actions or remote mutations executed.",
  "changed_paths": [
    ".github/workflows/ci.yml",
    ".github/ci/push-main-unit-reuse.py",
    ".github/ci/push-main-unit-reuse-selftest.py",
    "traceable-reqs.toml",
    "docs/GOLDEN-CI.md",
    "docs/INFRA-REGISTER.md"
  ],
  "contract": {
    "output": "changes.outputs.run-unit defaults to 'true'; only proven push refs/heads/main reuse emits 'false'. unit retains code == 'true' and additionally requires run-unit != 'false'. Original classifier, lint and traceability conditions remain unchanged.",
    "authentication": "changes job permissions are contents:read and actions:read. Helper step supplies github.token through GH_TOKEN; gh API calls explicitly target github.com. No token/API stderr logging.",
    "proof_chain": [
      "GET repos/{repository}/actions/workflows/ci.yml: verify workflow ID, path and name.",
      "Paginate workflow-specific runs filtered by pull_request and exact head SHA. Verify repository ID/name, same-repository head, workflow ID/path, event, SHA and completed/success status.",
      "Read current run, then its numbered attempt; verify both identities and completed/success status.",
      "Paginate that attempt's jobs; verify complete counts, unique IDs, and every job's run/attempt/SHA/completion. Require exactly one successful Linux unit and one successful Windows unit under the observed exact matrix names.",
      "Re-read current run to reject changed/in-progress attempts before publishing false. Never combine jobs across attempts."
    ],
    "fallback": "API errors, malformed data, permission/network failures, unavailable gh/token, partial/duplicate/changing pagination, >=1000 records, lookup deadline, unknown identity, incomplete units and absent PR proof request fresh units with UNIT_REUSE reason. Workflow catches helper process failure and writes run-unit=true; missing output also defaults true."
  },
  "selftests": "Authored deterministic offline tests exercising production main, gh response parsing, pagination and proof selection with fixture subprocess responses. Covers exact positive proof, non-main/PR/dispatch, absent PR proof, repository/workflow/event/SHA mismatch, failed/skipped/neutral/cancelled units, missing/duplicate platform, mixed attempts, partial reruns, rerun races, two-page run/job evidence, malformed/partial pagination, API/network/CLI failures and token-log protection. Wired into changes job. NOT EXECUTED.",
  "parent_validation_commands": [
    "python3 .github/ci/push-main-unit-reuse-selftest.py",
    "traceable-reqs check --json"
  ],
  "additional_parent_validation": "Independently parse/review ci.yml conditions and perform the requested production smoke/first-post-merge observation. Confirm proved main push skips both unit legs while lint/traceability execute; unproved SHA runs both units.",
  "research_evidence": "Read-only gh API inspection of historical PR run 35353733267 confirmed workflow_id 313426718, path .github/workflows/ci.yml, repository ID 1301147874, exact SHA 2f7df27a6efbfb84a07369d7cc754a836811a6f0, and the actual unit names. Attempt 1 Linux failed; attempt 2 contains both Linux and Windows successful jobs, each explicitly marked run_attempt=2. Historical API inspection is schema/provenance research, not execution or acceptance of the new helper.",
  "limitations": "No behavioral validation executed per assignment. IR-144 and GOLDEN-CI explicitly say implementation authored; first real post-merge acceptance remains pending. Conservative policy rejects fork evidence and failed-jobs-only attempts lacking the complete pair, even if a run-level aggregate is green."
}