* test(#4802): failing-first — acknowledge must refuse an unparseable-frontmatter target instead of splicing over it
* fix(#4802): audit acknowledge refuses targets whose frontmatter fails to parse — never splices the marker-marked object over the file
* chore(#4802): backfill changeset PR number (4895)
---------
Co-authored-by: sim <sim@local>
* test(#4794): failing-first — could-not-parse must answer an unmeasured shape; a directory context path fails closed
* fix(#4794): could-not-parse answers an unmeasured shape (null counts, unreadable ids, no uncovered); a non-file context path fails closed
* chore(#4794): backfill changeset PR number (4889)
* test(#4794): skip the directory-identity probe when the platform cannot discriminate (windows runner volume collapse, measured)
Two consecutive windows conformance runs failed the probe with measured identical
(dev, ino) for two distinct mkdtemp directories (dev=3606225537, ino=9007199255243448
for both) — a runner-volume property, not a regression in the guard. On such a
platform the guard's identity containment degrades to refuse-everything (fail-closed,
documented); the probe asserts capability, so the honest response is an explicit
t.skip carrying the measurement (ADR-2719 §6), not a red lane for every PR.
---------
Co-authored-by: sim <sim@local>
