R3 gate #103: ci_uses_affected_set_selection → CONSUMER_LANDED + PASSING

[briansrls]

Summary

Promote §1.8 row #103 ci_uses_affected_set_selection (T-Workflow-As-Data + T-Verification) from DECLARED → CONSUMER_LANDED + PASSING. The implementation work landed in two sequenced PRs per the Slice 7 canvas staging — both are now merged:

• Layer 1 substrate (PR feat(ci): gunbc_ci affected gate selection from CIWorkflowDag + diff (#103) #2798, swift-wren-365, merged 2026-05-12 21:47Z): select_affected_gates over CIWorkflowDag + CiWorkflowDiff (gate-id touch set computation, TouchAll upstream of selection).
• Layer 2 BinaryShim consumer + path-regex removal (PR R3 Gap 7 T-WAD Slice 7 affected-set CI integration — consume affected-set lens output in BinaryShim CI selection (ci_uses_affected_set_selection gate) per Verification brief refresh PR #3018 #3033, jolly-bear-550, merged 2026-05-14 02:57Z): select_affected_gates_for_binary_shim consumes the affected-set lens receipt shape, falls back to the full roster on unknown narrowing, and .github/workflows/ci.yml is purged of paths: / paths-ignore: / dorny/paths-filter / changes: gating per canvas §5.

Verification

Three integration tests in src/v3/compiler/tests/integration/t_ci_workflow_as_data_demo_test.rs pin the gate predicate; all green at HEAD via cargo test -p v3-compiler --test integration:

• ci_uses_affected_set_selection_binary_shim_narrow_on_gunbc_ci_topology (:1017)
• ci_uses_affected_set_selection_binary_shim_unknown_receipt_full_roster (:1034)
• workflow_no_path_regex_policy_ci_yml (:1066) — enumerates tracked .github/workflows/*.{yml,yaml} via git ls-files and asserts no forbidden Layer-2 fingerprint from scripts/workflow-path-regex-forbidden-substrings.txt (single-authority list; companion shell ratchet at scripts/check-workflow-path-regex-inventory.sh).

Authority chain

• Slice 7 canvas: docs/design-t-wad-slice-7-binary-shim-affected-set-selection-canvas.md
• Upstream lens authority: PR docs(r3): add affected-set Introspect-lens prototype canvas #2713 + docs/design-affected-set-lens.md §2
• Harness / Layer 2 path-regex inventory ratchet: PR T-WAD Slice 7 pre-impl prequeue: harness contract + Layer 2 path-regex inventory ratchet #2766
• Brief: docs/briefs/r3-wave1-s6-slice7-affected-set-impl-worker.md

Test plan

• cargo test -p v3-compiler --test integration ci_uses_affected_set_selection — 2 passed
• cargo test -p v3-compiler --test integration workflow_no_path_regex_policy_ci_yml — 1 passed

🤖 Generated with Claude Code

[briansrls]

Review metadata

• Provider / model: codex / unknown
• Commit: 2d04d246 · Trigger: schedule
• Thinking: 172s wall

---

Non-blocking — Strengths

• docs/r3-program-plan.md Classified as design/docs; row #103’s promotion preserves the T-WAD intent by routing CI selection through BinaryShim affected-set receipts with fail-closed full-roster fallback and a path-regex ratchet.

✅ No blocking concerns for this docs-only status update.