Why: precheck missed uninitialized submodules (git submodule status '-'
prefix), and the branch protection configured today plus the second live
probe outcome must be recorded honestly in the matrices.
Evidence: platform negative: direct push to protected main rejected
(pre-receive hook declined, Logging-System probe); second write-guard probe
confirmed session-start config loading (no hook run in the pre-config
session log).
Impact: precheck sub_dirty now counts '-' prefixed entries; A3 registered
enforced at platform layer across 11 repos; zcode matrix pending-live
annotated with the loading-timing proof.
Refs: policy/tool-adaptation-matrix.md; policy/tool-adaptation-zcode.md
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
修补批：1) precheck 盲区——子仓未初始化（git submodule status 前缀 - ）现计入 sub_dirty（快测：4 行样例命中 3）；2) 平台分支保护登记——11 组合仓 main 禁直推+拒绝陈旧候选，负例：直推被 pre-receive declined；3) zcode 矩阵 pending-live 补两次探针结论（配置随会话启动加载，本会话早于配置属预期）；4) adoption A3 升级 enforced(平台)。