- Pin RC hash 0480b2d8e8 (tag site-02-rc1) as the
only commit SITE-02 Phase 1-5 evidence may cite.
- Record SHA-256 digests of the security-relevant files at the frozen hash and
the frozen tree hash, so later phases can re-verify before citing.
- Record reviewer/owner assignment state: all 11 human roles PENDING ASSIGNMENT;
AI identities and AI signatures are invalid for these roles by construction.
- Record applied governance: fail-closed Actions variables
(NIGIG_SITE_02_SECURITY_APPROVED=false, NIGIG_SITE_02_APPROVED_COMMIT=sentinel
that never matches a SHA), exact-commit gate verified at
.forgejo/workflows/nigig-site.yml:936-950, exact-hash CI dispatch baseline.
- Stage branch/tag protection payloads in tools/site02/phase0/ (application
requires repo-admin permission the scoped token lacks).
- Keep every gate tripwire intact: header UNASSIGNED markers and NOT APPROVED /
PROPOSED decisions unchanged; the release gate still fails closed.
Phase-0-freeze: 0480b2d8e8
Recorded-by: AI agent (Arena.ai Agent Mode) under repo-owner authorization,
scoped API token, 2026-09-27
