…ion-bypass

fix: cron prompt injection scanner bypass for multi-word variants

…ion-bypass

fix: cron prompt injection scanner bypass for multi-word variants

…ion-bypass

fix: cron prompt injection scanner bypass for multi-word variants

Adds two new completion gates that fire alongside the Part 1/2 gates.

Closes hermes-jarvis#63 (PR-existence verification)
Closes hermes-jarvis#32 (doc-drift check)
Context: hermes-jarvis#61 (bootstrap-paradox case study)

## NousResearch#63 — verify_pr_urls_exist

When a verdict result or summary contains a GitHub PR URL pattern,
the dispatcher runs `gh pr view <url> --json number` to verify each
URL resolves. Phantom URLs (404 with "Not Found" / "Could not
resolve" / "no pull request" in stderr) reject the completion.

Indeterminate cases (gh missing, network error, unauthenticated) fall
open — workers can still complete in offline / broken-gh envs without
being trapped.

Catches the 2026-06-09 Tchalla case (hermes-jarvis#61): release-gate
reviewer blocked with "cannot run gh pr diff 42" on PR NousResearch#42 that
didn't exist. With this gate, his completion would have surfaced the
phantom URL specifically, prompting him to surface the real cause.

Opt-out: `metadata.x_phantom_pr_ok` with ≥20-char string reason.

## NousResearch#32 — verify_doc_drift

For tasks whose tenant slug encodes a version
(`marvel-swarm-vN-N-test`), the gate scans `README.md` / `README` in
the workspace for older `vX.Y` mentions outside a history-style
heading (`## History`, `## Older versions`, `## Previous versions`,
`## Archive`). Stale mentions reject the completion.

CHANGELOG.md is intentionally skipped — older versions are expected
there by definition.

Catches the 2026-06-09 agent-dashboard PR #1 case (hermes-jarvis#61):
README still said "v6.2 Marvel swarm test target" while the chain
was v6.6. No reviewer flagged it.

Opt-out: `metadata.x_doc_drift_ok` with ≥20-char string reason.

## Tests

19 new tests added to `test_kanban_completion_gates.py`:
- TestPRExistence (8) — no PR URL skipped, real passes, phantom
  rejects, mixed real+phantom flags only phantom, indeterminate falls
  open, summary scanned, dedup, opt-out
- TestDocDrift (10) — non-versioned tenant skips, no README skips,
  stale README rejects, current README passes, History section
  excused, CHANGELOG file excused, higher version not stale, scratch
  skipped, opt-out

83 passed in test_kanban_completion_gates.py (up from 64). Zero
regressions on adjacent paths.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…earch#32)

- `verify_pr_urls_exist` (closes hermes-jarvis#63) — scans verdict
  text + summary for GitHub PR URLs and runs `gh pr view` per URL.
  Phantom URLs (404) reject; indeterminate (gh missing / network)
  falls open. Strict 404 classification excludes DNS/network token
  patterns so "could not resolve host" stays indeterminate.
- `verify_doc_drift` (closes hermes-jarvis#32) — for tasks whose
  tenant slug encodes a version (marvel-swarm-vN-N-test), scans
  README.md/README for older vX.Y mentions outside a history section.
  Depth-aware section-tracking so `## History\n### v6.2 details`
  correctly excuses the subsection.

Opt-outs: x_phantom_pr_ok / x_doc_drift_ok (≥20-char string reasons).

Context: hermes-jarvis#61.

90 tests pass after two self-review passes.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>