Connect inventory, signed state, worker results, and actual current-head CI. Inventory reads retry transient GitHub 502/503/504 failures up to three times; writes and authorization failures are never retried by that adapter. The runtime enforces required checks, requests missing CI, cancels attempts past 45 minutes while retaining their locks until completion, and fingerprints bounded failure evidence for no-progress escalation.

One authenticated maintenance comment shows the inspected head, reported verification, hash-renewal rationale, or a concrete human decision. It applies owned labels and pings a human owner once per new blocker; opting out removes only maintenance labels. Explicit provisioning initializes an absent state branch and never resets existing state.

Validation: focused runtime/readiness/worker/presentation/provision tests, including real proposal application, signed run identity, opt-out cleanup, pending CI, timeout retention, comment-size bounds, and failure evidence. Independently reviewed.