Cheap guard against the deploy/git divergence: a fix built locally but uncommitted/un-pushed is a guaranteed Adversary cold-build mismatch. Added to the builder prompt claim discipline + plan.md §6.1. (Lighter than binding the deploy to a git rev — iteration speed + the Adversary's cold-from-git verify is the real safety net.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>