fix: ignore repository-local worktrees and operational state [ticket-099]

[tom-sapletta-com]

Scope

Publishes the remaining local Git ignore rules for hidden and legacy worktrees and private .subactor operational directories. Adds .gitignore to the existing governance workstream ownedPaths; no protected checker, lock or required check is changed. Ticket-099 is the minimal bounded intent committed atomically with this material configuration change.

Validation

Local managed governance passed with zero errors and warnings. The pre-commit overlap guard passed for all observed checkouts. Ignore-boundary checks keep .subactor/manifest.json visible. Required CI and independent Validator approval are still required for this exact head.

Preserved work

PR #117 remains separate and unmerged: its project2.sh change is in a runtime-bound legacy checkout. This PR does not change that script, the runtime checkout, generated project reports, or raw local tool state. Git ignore rules do not imply filtering by external analysis tools.

[ifuri-validator-agent]

Validator approval after policy checks for exact head 83273015571638d97d2b3804f6397198b98bbc4d.

Ticket: ticket-099
Correlation ID: todo2code-pr120-publication-20260910
Model: openrouter/z-ai/glm-5.3-flash
Reviewed diff chunks: 1
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 1 diff chunk(s). Adds repository-local ignore rules for worktrees and .subactor operational state, extends the governance workstream ownership to .gitignore, and commits the bounded ticket-099 intent atomically. All required checks (verify, Java adapter (JDK 17 required), koru / code-review) pass. SKIPPING entries are on non-required checks and are observations only. No protected gates, locks, or required checks are modified; diff matches the declared allowedPaths.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Semantic review prerequisite: satisfied; policy 676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7.

Actual PR impact radar

Exact range: 7ef144ab6e918ba91f3e6aba812d25b4f40f16a1...83273015571638d97d2b3804f6397198b98bbc4d
Change digest: 15197c018108e13f42d464d038965bf444a43c197a2d4967a66f05538583720e
Score: 48/100 (M), estimated 50 min, split recommended: true
Affected services/components: repository-wide/unclassified

Machine-readable radar JSONL and SVG

{"actual_change":{"additions":66,"base_sha":"7ef144ab6e918ba91f3e6aba812d25b4f40f16a1","binary_files":0,"categories":{"code":1,"configuration":2,"docs":1},"change_digest":"15197c018108e13f42d464d038965bf444a43c197a2d4967a66f05538583720e","comparison":"7ef144ab6e918ba91f3e6aba812d25b4f40f16a1...83273015571638d97d2b3804f6397198b98bbc4d","deletions":0,"file_count":4,"files":["gitignore","governance/manifest.json","project/ticket-099/README.md","project/ticket-099/intent.json"],"head_sha":"83273015571638d97d2b3804f6397198b98bbc4d","service_count":0,"services":[]},"assessment_mode":"observed-pr","axes":{"coupling":4,"delivery":2,"scope":2,"uncertainty":3,"validation":1},"complexity":"M","confidence":0.9,"diagnostics":["RADAR-ACCEPTANCE-MISSING","RADAR-BUDGET-EXCEEDED"],"estimate":{"budget_minutes":30,"minutes":50,"within_budget":false},"impact":{"components":["governance","project","repository-root","subactor"],"files":["gitignore","governance/manifest.json","project/ticket-099/README.md","project/ticket-099/intent.json","subactor/manifest.json"],"public_interfaces":[],"runtime_dependencies":0},"schema":"subactor.ticket-radar/v1","score":48,"split":{"parts":[{"estimated_minutes":10,"name":"Implement governance","scope":["governance"]},{"estimated_minutes":10,"name":"Implement project","scope":["project"]},{"estimated_minutes":10,"name":"Implement repository-root","scope":["repository-root"]},{"estimated_minutes":10,"name":"Implement subactor","scope":["subactor"]},{"estimated_minutes":15,"name":"Validate and project to trackers","scope":["tests","planfile","github/gitlab/jira projections"]}],"reason":"estimated_minutes_exceed_budget","recommended":true},"standards":[{"id":"wellmanifest/dsl","revision":"6c60fc4e0dd1f1bb74f46a7745e28019908d1203","version":"0.1.0-dev"},{"id":"wellmanifest/ticket-lifecycle","revision":"5bf581907a87b46a13a73e6c033d3abe4d9a306f","version":"0.1.0-dev"},{"id":"wellmanifest/git-lifecycle","revision":"7d77d4b7af57e69bc75c3a0290b3a4805c5c4438","version":"0.2.0-dev"},{"id":"wellmanifest/logs","revision":"48c284ef7a069055c0bcb6b900147ce5e65f8b43","version":"0.3.0"}],"ticket_ref":"ticket-099"}

<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128" role="img"><title>ticket-099: fix: ignore repository-local worktrees and operational state [ticket-099]</title><rect width="128" height="128" rx="12" fill="#f8fafc"/><g stroke-width="1"><polygon points="64,55 72,61 69,71 59,71 56,61" fill="none" stroke="#d7dde5"/><polygon points="64,47 80,59 74,78 54,78 48,59" fill="none" stroke="#d7dde5"/><polygon points="64,38 89,56 79,85 49,85 39,56" fill="none" stroke="#d7dde5"/><polygon points="64,30 97,53 84,92 44,92 31,53" fill="none" stroke="#d7dde5"/><polygon points="64,21 105,51 89,99 39,99 23,51" fill="none" stroke="#d7dde5"/><line x1="64" y1="64" x2="64" y2="21" stroke="#aab4c0"/><line x1="64" y1="64" x2="105" y2="51" stroke="#aab4c0"/><line x1="64" y1="64" x2="89" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="39" y2="99" stroke="#aab4c0"/><line x1="64" y1="64" x2="23" y2="51" stroke="#aab4c0"/></g><polygon points="64,47 97,53 79,85 59,71 48,59" fill="#fb923c" fill-opacity="0.45" stroke="#c2410c" stroke-width="2"/><circle cx="64" cy="64" r="3" fill="#c2410c"/><g font-family="sans-serif" font-size="7" fill="#334155"><text x="64" y="11" text-anchor="middle">SCO</text><text x="114" y="48" text-anchor="middle">COU</text><text x="95" y="107" text-anchor="middle">UNC</text><text x="33" y="107" text-anchor="middle">VAL</text><text x="14" y="48" text-anchor="middle">DEL</text></g><text x="64" y="124" text-anchor="middle" font-family="sans-serif" font-size="8" fill="#0f172a">M · 50m</text></svg>

Merge will be attempted after this approval when explicitly authorized. ## Decision record (recomputable)

DECISION D-099-2688
TICKET ticket-099
HEAD_SHA 83273015571638d97d2b3804f6397198b98bbc4d
CORRELATION_ID todo2code-pr120-publication-20260910
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["koru / code-review=PASS","Live OpenRouter contract (opt-in)=SKIPPING","governance=SKIPPING","verify=PASS","Java adapter (JDK 17 required)=PASS","governance / enforce=PASS","governance / remote lifecycle=PASS","verify=PASS","Java adapter (JDK 17 required)=PASS"]
INPUT required_checks = ["verify","Java adapter (JDK 17 required)","koru / code-review"]
INPUT required_checks_source = "protected registry + GitHub applied rules (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT semantic_review_assessment = {"schema":"subactor.validator/semantic-review-assessment/v1","subject":{"repository":"autogrammar/todo2code","pull_request":120,"head_sha":"83273015571638d97d2b3804f6397198b98bbc4d","base_sha":"7ef144ab6e918ba91f3e6aba812d25b4f40f16a1","diff_sha256":"df281785e92e0cda0ed04671fc5785f6f2a0cd5fe006e5c1e7bb85e223f91fdf"},"policy":{"policy_schema":"subactor.validator/semantic-review-policy/v1","policy_version":1,"policy_sha256":"676cb4516bbfed2a000e40b9b1b6e4a430ecc761ec546aeb53d721a1905cfdd7","required":true,"critical_paths":[".governance/manifest.json"],"observed_paths":[".gitignore",".governance/manifest.json","project/ticket-099/README.md","project/ticket-099/intent.json"]},"grounding":"full-diff-not-per-finding-proof","execution_authority":false,"status":"satisfied","reason":null,"review_sha256":"e7721cabdc941e1ab5b15f146925d267afb4f13c67e03ed05bae07011cfbc823","unresolved":[]}
INPUT superseded_checks = []
INPUT ticket_radar_receipt = {"schema":"subactor.ticket-radar/v1","base_sha":"7ef144ab6e918ba91f3e6aba812d25b4f40f16a1","head_sha":"83273015571638d97d2b3804f6397198b98bbc4d","change_digest":"15197c018108e13f42d464d038965bf444a43c197a2d4967a66f05538583720e","score":48,"complexity":"M","estimated_minutes":50,"split_recommended":true,"services":[],"authority":"ADVISORY","promotion":"FORBIDDEN"}
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "openrouter/z-ai/glm-5.3-flash"
ASSERT VERDICT_AUTHORITY != "ADVISORY"