From e62086084b9d509b05b1e1eea510390753fe0ed8 Mon Sep 17 00:00:00 2001
From: Jakub Zych <jakub@keios.eu>
Date: Thu, 22 Oct 2026 13:36:12 +0200
Subject: [PATCH] chore(19.6.1-04): require CR-01 and WR-03 tests in the phase
 gate

The docker stage must refuse a tree that drops TestRolesCodeDeclaredCodeRefused or TestActionExtensionOutranked.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 scripts/check-phase19.6.1.sh | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/scripts/check-phase19.6.1.sh b/scripts/check-phase19.6.1.sh
index 8c3d040c..5e912bb9 100755
--- a/scripts/check-phase19.6.1.sh
+++ b/scripts/check-phase19.6.1.sh
@@ -78,9 +78,11 @@ DOCKER_TESTS=(
 	TestAdministratorsLastSuperuser TestAdministratorsLastSuperuserConcurrent
 	TestAdministratorsLifecycle TestAdministratorsRevocation
 	# Plan 03: the seam at run time (D-14, D-15), Roles (D-07, D-16, D-17,
-	# D-21).
-	TestActionExtensionRun TestRolesLifecycle TestRolesPermissionCeiling
-	TestRolesCodeDeclaredLocks
+	# D-21). Plan 04 gap closure: CR-01 code-declared capture and WR-03
+	# contributed outranking.
+	TestActionExtensionRun TestActionExtensionOutranked TestRolesLifecycle
+	TestRolesPermissionCeiling TestRolesCodeDeclaredLocks
+	TestRolesCodeDeclaredCodeRefused
 )
 
 # docker stage: SC-1 regression tests that pass unchanged.