durable acceptance close-readiness

review-orchestrator issue durable-acceptance-close-readiness evaluates docs/workflow-contracts/durable-acceptance-matrix.json and reports whether parent issue #980 is ready for a human close audit.

The gate treats deterministic coverage as blocking unless every deterministic required row is covered. planned or waived deterministic rows keep the parent issue not ready.

Live opt-in rows may remain planned or waived only when each row has:

• cleanup_required: true
• at least one infra_failure_classification
• waiver.rationale
• waiver.authority
• waiver.expires_or_reevaluate

The JSON output uses schema_version: "durable-acceptance-close-readiness.v1" and includes ready, deterministic blocking rows, invalid_rows for matrix contract errors, live opt-in invalid rows, waiver summaries, and required actions.

The text output is intended for the final audit comment:

review-orchestrator issue durable-acceptance-close-readiness --format text

opt-in live acceptance

Live GitHub mutation rows are exercised through an explicit opt-in command. The command records the confirmed target repository, actor, cleanup policy, infra failure classes, cleanup plan, cleanup result, and scenario artifact path without making live mutation part of normal CI:

review-orchestrator issue durable-acceptance-live \
  --scenario issue-create-unknown-outcome \
  --target-repo OWNER/TEST_REPO \
  --actor ACTOR \
  --cleanup on \
  --yes \
  --fake-github

--yes is required before any scenario can run, and --cleanup on is mandatory. The deterministic fake GitHub mode is the CI-safe acceptance path for unknown outcome, resume, duplicate-mutation avoidance, cleanup artifact writing, and infra classification coverage. Real live execution remains an operator opt-in activity and its artifacts must stay separate from deterministic validation.