gauntlet-proof-auditlisted

# Gauntlet proof-audit ## Overview Audit every committed gauntlet run record against its own persisted evidence and report the result. This is the gauntlet-proof-audit instance of `docs/patterns/audit-loop.md`: a skeptic pass over `docs/verification/gauntlet/*/ROUNDS.md` (and `AB-ROUNDS.md`), the eval corpus `/kit:gauntlet` produces and `lib/gauntlet/stats.sh` projects into numbers. Neither of those checks that a record's CLAIMS match its own EVIDENCE: a "clean=true" that never reconciles with `checker-output.txt`, a findings count with no matching finding, a scrubbed key that leaked anyway, a run-dir that drifted from the contract's naming. This skill never re-runs a probe and never rewrites a historical record; it reports discrepancies for the operator. ## The four slots (per the audit-loop pattern) | Slot | This instance | |---|---| | Item set | `git ls-files 'docs/verification/gauntlet/*/ROUNDS.md' 'docs/verification/gauntlet/*/*-ROUNDS.md' 'docs/verification/gauntlet/*/AB-ROUNDS.md'` (committed records only; a room copy's own ROUNDS is untracked and never enters the set) | | Contract | every CLAIM in the record is backed by its committed EVIDENCE: markers well-formed; recorded verdict == committed `checker-output.txt`; findings count reconciles with the rows; scrub clean (no resolved credential VALUE in committed evidence; a bare `op://` pointer is allowed, not a leak); run-dir grammar conforms; a quoted finding string is present in the cited transcript | | Evidence