This repo experiments with an execution boundary for pull requests: repository mutations are classified, required authority is determined, and a contract declares the authority allowed.
The runtime produces a “meaning artifact” explaining the CI decision.