Offline deterministic engineering-trust certificates for repositories, with no telemetry.
Checks a coding agent's handback against the pull request's GitHub record. No model decides.
