signoff-driverlisted

# Sign-off driver A merge needs one independent review for each check a repository requires. Independent means the reviewer did not write the change and carries none of the author's context. This skill states how to run those reviews and how to record them. ## Terms - **Review skill**: a skill holding the criteria for one check. Its directory name starts with `review-`. - **Review library**: the directory in the repository holding copies of those skills, by convention `.review-skills/`. A gate reads the library from the commit being pushed, so a copy that is not committed does not count. - **almanac**: the tool that copies a skill into a review library and records its commit and hash. `almanac sync --check` reports a copy that drifted. - **gaff**: the tool that runs a repository's checks from its git hooks. `gaff reviews` prints the required list. - **Merge gate**: the script a repository runs before a push. It reads the sign-off record and refuses a push that is short one. - **Sign-off record**: a git note on the pushed commit, under the `refs/notes/reviews` ref. ## The required set A repository names its required checks in its own configuration. Where the tool `gaff` manages that configuration, `gaff reviews` prints the names, one to a line. Otherwise read the repository's documented list. Every required name must have a copy in the review library, and every copy must be required. A gate that checks both directions stops a commit from dropping a chec