feat(pre-push-safety-net): pin labeled evaluation inputs

benchmarks/measurements/2026-09-08-module-audit.json

@@ -1,9 +1,9 @@
 {
   "counts": {
     "load_bearing": 92,
-    "standalone_capability": 7
+    "standalone_capability": 8
   },
-  "modules": 99,
+  "modules": 100,
   "orphaned": [],
   "rows": [
     {
@@ -604,6 +604,12 @@
       "module": "provider.openrouter",
       "reason": "reachable from gate, map_gate, pair_gate or the CLI"
     },
+    {
+      "classification": "standalone_capability",
+      "importers": [],
+      "module": "push_inputs",
+      "reason": "pre-push-safety-net task 1.2: offline input provenance validator; python -m openultrasast.push_inputs"
+    },
     {
       "classification": "load_bearing",
       "importers": [
@@ -689,7 +695,8 @@
     {
       "classification": "load_bearing",
       "importers": [
-        "cli"
+        "cli",
+        "push_inputs"
       ],
       "module": "repos",
       "reason": "reachable from gate, map_gate, pair_gate or the CLI"
@@ -1068,8 +1075,11 @@
     "harness_ext": "HarnessX extension surface; loaded by name when the optional harness is present",
     "hunter_harness": "harness wiring for the tool hunter; used by the hunter path and by mcp",
     "mcp": "narrow MCP server over stdio; its own `ousast mcp` entry point and OpenCode integration",
+    "push_inputs": "pre-push-safety-net task 1.2: offline input provenance validator; python -m openultrasast.push_inputs",
     "skills": "skill router; consumed by mcp and by the OpenCode integration, not by the scan path",
     "slot_contract": "the slot/contract protocol stage_processors implements",
     "stage_processors": "HarnessX slot-contracted scan stages; pinned by the zero-dependency guard in test_gate"
-  }
+  },
+  "update_note": "Current tree inventory refreshed for pre-push-safety-net task 1.2 standalone input validator; filename retains the original audit date. No detection or ranking measurement.",
+  "updated_date": "2026-09-12"
 }