Merge Gating and Branch Protection

FFA-001 reproduces a gate that accepts a passing receipt for the wrong commit

GitHub selects required status checks by name alone, so a green badge says nothing about which commit, which workflow, or which changed files it covered. A synthetic fixture shows a downstream gate merging on exactly that gap.