Shell→dag P1: ci_workflow concat-built floor-peak/cgroup runners → emit(intent, Bash) via the landed If-band (foreign-executor; committed ci.yml byte-oracle) — brief: docs/plans/shell-to-dag-residual-census-and-arc-completion.md §1A + §3 Track 1 P1

[gunbai-bot]

Auto-opened by session-dashboard for session merry-hawk-665.
Pushing to session/merry-hawk-665 advances this PR.

Worker attestation

Before flipping this PR to ready for review, confirm each item:

• Title describes the change (not the session id or branch).
• PR body summarises what and why (replace the TODO below).
• Tests run: name the command (e.g. npm test, cargo test) and the result.
• If this closes a work item, the body contains a Closes #N directive.
• No commits on this branch are surprises (no fork/cherry-pick I did not make).
• No secrets / credentials / large binaries staged.

Summary

TODO: replace this paragraph with one or two sentences naming the change and its motivation. Reviewers read this first.

Test plan

• TODO: list the commands that ran (or "no tests changed; relied on CI") and the outcome.

[gunbai-bot]

Verified both blocking-review artifacts against current HEAD (53c9551):

@claude/claude-opus-4-7 (APPROVE) — confirmed:

• Floor-peak runners now live in src/v2/workflow/ci_floor_peak_emit.dag, emitted via orch_emit_pipeline + bash_orchestration_emit_medium(); dag/gunbc/ci_workflow.dag imports the three functions and no longer carries concat-built shell or the retired _shell_emit_dissolution_trigger Scaffold rows.
• ci_floor_peak_emit_refused_poison fail-closed path is live (lines 18–62): rejection surfaces poison so ci.yml drift goes red, not a silent fallback.
• medium_structure_containment roster 59→61 with counted entries for the two new workflow files; emit fns registered.

@cursor/composer-2.5 (APPROVE) — confirmed:

• Golden + perturbation RED controls in ci_floor_peak_emit_test.dag (ci_floor_peak_emit_band_holds, lines 82–122) match the ShellProgram -> DAG #6467 pattern.
• Committed ci.yml / falsifier.yml align with emitter output; no hand-Rust or unmarked shell runners introduced.

No code changes requested by either review. The only open CI item is emit_determinism on run 29301794965, which was canceled (not a determinism diff failure) when marking the PR ready re-triggered run 29303204103; fresh ci job is in progress on that run.

[gunbai-bot]

Verified @cursor/composer-2.5 APPROVE (review 37721) against current HEAD 9f00a89:

• P1 scope confirmed: floor-peak/cgroup runners in src/v2/workflow/ci_floor_peak_emit.dag via orch_emit_pipeline + If-band; dag/gunbc/ci_workflow.dag imports emit fns, dissolution Scaffold rows gone.
• Fail-closed poison at ci_floor_peak_emit.dag:18–62 matches established pattern; goldens + perturbation RED controls in ci_floor_peak_emit_test.dag.
• medium_structure_containment.dag: emit-fn whitelist, exception roster entries, baseline 59→61 — all present.
• emit_host_transport.dag node-http probe fix (9f00a89) is scoped to the already-rostered smoke harness (srv1-02 node_http=FAIL from missing curl); does not change the orchestration migration surface.

No findings to address. CI re-running on 9f00a89 (build green, ci pending).

[gunbai-bot]

Verified @claude/claude-opus-4-7 APPROVE (review 37723) against HEAD 9f00a89:

P1 migration — confirmed: ci_workflow.dag imports ci_floor_peak_emit, no remaining *_shell_emit_dissolution_trigger Scaffold rows or ci_floor_peak_shell_dissolve_note; transport is Pipeline/If/Run → orch_emit_pipeline. ci_floor_peak_emit_refused_poison (line 17) is fail-closed poison, not a widening fallback. Roster baseline 59→61 matches two new files.

Observation on emit_host_transport.dag:76 — agreed it is out of P1 scope. It is already isolated in its own commit (9f00a89: "Fix emit_host node_http smoke: probe with node http client instead of curl") — a CI unblock for srv1-02 node_http=FAIL (missing curl on PATH), not bundled into the floor-peak migration commits.

No blocking findings. APPROVE stands.