Review repo-sentinel baseline before enabling a remote gate

[stacknil]

Context

repo-sentinel-lite is currently available only as a pre-push/manual full-repository hook in this repository. Promoting it directly to a required remote check would not create a trustworthy publication boundary yet.

Measured evidence

All output was kept redacted; this issue records counts only.

• Released repo-sentinel-lite v0.7.1: 146 unsuppressed error-level findings against current main.
• Current upstream baseline audit: 275 active, 27 stale, 153 unmatched, and 4 ambiguous entries.
• Upstream issue Deduplicate identical finding fingerprints in scan reports repo-sentinel-lite#51 found duplicate fingerprints in changed-files reports.
• Upstream PR fix(report): deduplicate finding fingerprints repo-sentinel-lite#52 fixed that defect: the consumer reproduction changed from 27 findings / 15 unique fingerprints to 15 / 15.

Decision

Do not add a blocking remote gate and do not regenerate the baseline automatically. A baseline refresh without review could suppress a real secret, while the current full scan would create excessive false-positive noise.

Acceptance criteria

• Consume a reviewed release that contains changed-files scanning, baseline audit, redacted output, and fingerprint deduplication, or explicitly pin an immutable reviewed commit.
• Manually classify ambiguous and unmatched findings without exposing token values in logs or issues.
• Confirm no real credential is present; rotate first if any real secret is found.
• Define the blocking policy: error-level changed-file findings fail; baseline drift remains a separate audit signal.
• Ensure the workflow runs for all relevant file changes with contents: read only.
• Add a synthetic pass/fail/redaction integration test before making the check required.
• Record rollback as removal of the remote job while retaining the local pre-push hook.

Non-goals

• No bulk baseline refresh for metric reduction.
• No claim that repo-sentinel replaces human authorization, PII review, or the canonical placeholder validator.