v2.5.0 — preprint v3.7.0: E12 replay-divergence pilot; hourly owner-only PR gatekeeper

Preprint v3.7.0 — Zenodo DOI 10.5281/zenodo.23604695

• E12-pilot (pre-registered): the Byzantine spot-check's ε = 1e-4 replay rule fails on CPU for a thread-count change alone (2.6e-4 / 2.5e-4) and for a second host (1.5e-4); bit-identical execution reproduces exactly; the tampered control sits at 1.25e-3 with 96/96 adapter tensors above ε versus 3–5/96 for honest divergence. The rule is re-specified as execution-class matched with a per-class ε and a tensor-count term; GPU classes and the bf16 cell remain open.
• Hourly PR gatekeeper (scripts/pr_gatekeeper.py): owner-only merge authority (git author callensxavier@gmail.com on every commit, PR author xaviercallens), PRSecurityScanner + forbidden-pattern scan + GWAYA audit + pytest + Lean + paper pipeline; everything else is checked and held; PR text is data. Branch protection on main blocks forced pushes and deletions. This release's own PR (#115) was first refused by the gate (a task id cited in the body without functional changes) and merged only after the body stopped claiming it.
• Provenance lock 33/33; ledger P12a–d; is_peer_review: false.