chore: sync public mirror from internal

[haasonsaas]

Summary

• sync the sanitized public tree from evalops/maestro-internal
• keep evalops/maestro as a generated public mirror of the private source of truth
• preserve public-owned CI and trusted-publishing workflows from the public checkout
• internal source SHA: 5b2944dcc9db531b174958cb07c81e06db6a9084
• last generated public sync base: 41a542d8d775f9fd5f25e6a83ef304668da21f2b
• previewed public-tree drift: 16 file(s) to copy/update and 0 stale file(s) to delete
• public-only commits since last generated sync: 2

Source-of-truth status

Public Mirror Drift Audit

• package: @evalops/maestro
• private source: https://github.com/evalops/maestro-internal@main (5b2944dcc9db)
• public projection: https://github.com/evalops/maestro@main (1126f3fa39c4)
• files to copy or update: 16
• stale files to delete: 0
• result: drift detected
• invariant: public_projection_has_drift

Sample Changed Paths

• copy/update .github/PUBLIC_TREE_MIRROR_BOUNDARY.md
• copy/update docs/protocols/platform-runtime-conformance.md
• copy/update docs/protocols/release-surface-conformance.json
• copy/update scripts/check-platform-runtime-conformance.mjs
• copy/update scripts/check-release-mirror-contract.mjs
• copy/update scripts/check-release-surface-conformance.mjs
• copy/update scripts/plan-ci-checks.mjs
• copy/update scripts/plan-nx-test-command.mjs
• copy/update scripts/prepare-public-release-mirror.mjs
• copy/update test/scripts/check-release-mirror-contract.test.ts
• copy/update test/scripts/ci-guardrails.test.ts
• copy/update test/scripts/platform-runtime-conformance.test.ts
• copy/update test/scripts/prepare-public-release-mirror.test.ts
• copy/update test/scripts/release-observability-query-contract.test.ts
• copy/update test/scripts/smoke-published-replay-e2e.test.ts
• copy/update test/scripts/verify-published-replay-evidence.test.ts

Guidance

Let internal main generate and merge the public sync PR before relying on public main.

Drift sample

• copy/update .github/PUBLIC_TREE_MIRROR_BOUNDARY.md
• copy/update docs/protocols/platform-runtime-conformance.md
• copy/update docs/protocols/release-surface-conformance.json
• copy/update scripts/check-platform-runtime-conformance.mjs
• copy/update scripts/check-release-mirror-contract.mjs
• copy/update scripts/check-release-surface-conformance.mjs
• copy/update scripts/plan-ci-checks.mjs
• copy/update scripts/plan-nx-test-command.mjs
• copy/update scripts/prepare-public-release-mirror.mjs
• copy/update test/scripts/check-release-mirror-contract.test.ts
• copy/update test/scripts/ci-guardrails.test.ts
• copy/update test/scripts/platform-runtime-conformance.test.ts
• copy/update test/scripts/prepare-public-release-mirror.test.ts
• copy/update test/scripts/release-observability-query-contract.test.ts
• copy/update test/scripts/smoke-published-replay-e2e.test.ts
• copy/update test/scripts/verify-published-replay-evidence.test.ts

Public-only commits since last generated sync

• 1126f3f chore: sync release mirror for main
• b7c029f chore: sync release mirror for main

Validation

• generated by the sync-public-release-mirror workflow in public-tree mode

Test Plan

• generated by the sync-public-release-mirror workflow in public-tree mode
• public-source-provenance require-internal-pr check confirms internal source PR lineage
• CI, integration, rust-hosted-conformance, coverage, Socket, and Cursor checks must pass before merge

Staged Rollout

• Staging is unnecessary for this generated mirror PR: it does not independently promote user-visible behavior. It mirrors already-reviewed internal source from evalops/maestro-internal@5b2944dcc9db531b174958cb07c81e06db6a9084, including existing hidden/evaluation surfaces, and keeps public package parity behind the established public-source-provenance gate.

Supersedes

• updates existing generated public sync PR chore: sync public mirror from internal #703 to internal source 5b2944dcc9db531b174958cb07c81e06db6a9084

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 72dddc2b7a

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a276e5acfa

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".