check

# `/gflow:check` — Quality gates Run in order. Stop and report if a step fails after the fix pass. ## Steps These steps mirror the CI `test` job in `.github/workflows/ci.yml` **in the same order**. Any command that CI runs as a *verify* (`--check`) is run here as a verify too — see step 4. **1. Repo hygiene + doc links + website-docs PII guard** (read-only — CI runs all three; a broken doc link or a private identifier in the published `website/docs/` mirror fails CI) ```bash PYTHONUTF8=1 uv run python scripts/ci/check_repo_hygiene.py PYTHONUTF8=1 uv run python scripts/ci/check_doc_links.py PYTHONUTF8=1 uv run python scripts/ci/check_website_docs_pii.py PYTHONUTF8=1 uv run python scripts/ci/generate_website_docs.py --check PYTHONUTF8=1 uv run python scripts/ci/check_council_memory.py ``` `generate_website_docs.py --check` fails on either half of the published-site contract: - `DRIFT:` — canonical `docs/` changed but the `website/docs/` mirror was not regenerated. Fix with `uv run python scripts/ci/generate_website_docs.py` and stage `website/docs/`. - `NAV-ORPHAN:` — a page is published but no `nav:` entry in `website/mkdocs.yml` points at it, so it is live but unreachable. Add the entry under the right nav section. **1b. Surface blast radius — MCP↔CLI parity and the other mirrors** (read-only; MANDATORY whenever the change touches a CLI command, option, flag help text, exit code, or user-facing error string) `tests/mcp/test_cli_parity.py` is a **command-level...