ShipGate

ShipGate is the only authority that can say SHIP. Scanners produce evidence; the gate binds a verdict to an exact artifact hash. Frontend state never overrides the gate.

Repo scan HTTP is not fully migrated yet — the local scan page accepts the handoff query honestly. Library scanners live in @wholestack/shipgate.