fix(security,verify): keep the security reference-alias read tolerant but LOUD, narrow verify with a named finding #3220
single-claim-path-guard.yml
on: pull_request
No other open PR may claim the same single-writer path
11s