From 5f9805173a356f79018b29f69d6660b25c21ceaa Mon Sep 17 00:00:00 2001
From: mfowler <mfowler.email@protonmail.com>
Date: Mon, 15 Jun 2026 06:22:40 +0000
Subject: [PATCH] fix: veto check matches all-caps '## VETO <reason>', not '##
 Veto log' header

---
 run-harness-bench.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/run-harness-bench.sh b/run-harness-bench.sh
index 75fbfea..c19dd84 100755
--- a/run-harness-bench.sh
+++ b/run-harness-bench.sh
@@ -156,7 +156,8 @@ run_one() {  # <variant> <rep>
   ( cd "$run/work-adv" && python -m unittest -q ) >/dev/null 2>&1 && tests=yes
   local out; out="$( cd "$run/work-adv" && python calc.py '2+3*4' 2>/dev/null )"
   [ "$out" = "14" ] && cli=yes
-  local veto=no; grep -rqiE '##[[:space:]]*VETO' "$run/work-adv/machine-docs/" 2>/dev/null && veto=yes
+  # standing veto = an all-caps "## VETO <reason>" header; NOT "## Veto log" (a ledger header)
+  local veto=no; grep -rqE '^##[[:space:]]*VETO[[:space:]]' "$run/work-adv/machine-docs/" 2>/dev/null && veto=yes
   local success=NO
   [ "$done" = yes ] && [ "$tests" = yes ] && [ "$cli" = yes ] && [ "$veto" = no ] && success=YES