feat(gate): buckets, traits, and the checks the brief calls load-bearing

Measured this build against a documentation brief for public repos. The
five original checks covered roughly one of its ten sections, so this
adds what a single repo can answer on its own.

New: required README headings per class (Non-goals is the cheapest
trust-builder there is), in-repo version consistency across manifest /
badge / CHANGELOG / tag, badge honesty, boilerplate, licence-claim,
and relative links. Findings now carry a BUCKET beside the level -
broken / missing / weakening - and output is grouped by it, because
that is the order the work gets done in.

Traits are a second axis beside class: class is structural and readable
off the catalog, a trait says what the code does. `security` attaches
SECURITY.md and a Known limitations section. The two names carrying it
are proposed, not measured - that list is the operator's.

Solo-maintained settles a category: CONTRIBUTING, CODE_OF_CONDUCT and
MAINTAINERS are required by no class. Consumer-facing documents are
untouched by that; SECURITY.md exists for the stranger who finds a hole.

Three bugs found by running against llm-security, not by reading:
- ~30 link findings, all noise. Regexes inside code spans are
  `[...](...)` to a naive scanner. Strip code first.
- `file:` and other schemes were treated as repo-relative paths.
- Relative links were resolved against the repo root instead of the
  file they sit in, calling two files missing that sat next to the
  README linking them.
Same fix applied to the boilerplate check: a document ABOUT placeholder
detection was tripping the placeholder detector.

Also removed this repo's own static tests badge. There is no CI - the
forge has zero Actions runners registered - so it could never become
real, and it is the exact anti-pattern the gate now flags.

67 tests. Against llm-security every remaining finding is real and
matches the census's independent hand-measurement.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WYJ3FHLtVgzFXMZ6UF598h

register/repos.json

@@ -52,36 +52,76 @@
   },
 
   "$comment_classes": [
-    "Per class: which files are required, and which install form the README must",
-    "carry. A flat standard across all classes would demand a CONTRIBUTING from a",
-    "CSS library that takes no contributions, and a ROADMAP from a 5-line profile.",
-    "ROADMAP is deliberately absent everywhere: it is 0/18 today and is step 8,",
-    "drafted from STATE by a human. A gate that fails every repo teaches people to",
-    "switch the gate off."
+    "Per class: required files, required README headings, and the install form.",
+    "A flat standard across all classes would demand a ROADMAP from a 5-line",
+    "profile. ROADMAP is deliberately absent everywhere: it is 0/18 today and is",
+    "drafted from STATE by a human. A gate that fails every repo teaches people",
+    "to switch the gate off.",
+    "",
+    "CONTRIBUTING.md, CODE_OF_CONDUCT.md and MAINTAINERS.md are deliberately NOT",
+    "required anywhere. The maintainer works alone and the catalog's published",
+    "stance already says so — 'solo-maintained, fork-and-own; issues welcome as",
+    "signals, pull requests not accepted'. Contributor-facing documentation for a",
+    "project that accepts no contributors is theatre, and a CODE_OF_CONDUCT with",
+    "an unattended placeholder address is worse than none: it is a visible",
+    "unfinished template. This is NOT a rule against having them — files already",
+    "present are a separate cleanup decision, not a gate finding.",
+    "",
+    "Consumer-facing documentation is unaffected by working alone, and that is",
+    "the whole distinction: SECURITY.md, LICENSE, CHANGELOG, non-goals and honest",
+    "limitations exist for the reader, not for a contributor."
   ],
   "classes": {
     "plugin": {
       "required_files": ["README.md", "LICENSE", "CHANGELOG.md", ".claude-plugin/plugin.json"],
+      "required_headings": ["## Install", "## Non-goals", "## Changelog"],
       "install": "plugin"
     },
     "catalog": {
       "required_files": ["README.md", "LICENSE", "GOVERNANCE.md", "CONVENTIONS.md", ".claude-plugin/marketplace.json"],
+      "required_headings": ["## Install", "## Non-goals"],
       "install": "catalog"
     },
     "shared-asset": {
       "required_files": ["README.md", "LICENSE"],
+      "required_headings": ["## Non-goals"],
       "install": "vendor"
     },
     "org-profile": {
       "required_files": ["README.md"],
+      "required_headings": [],
       "install": "none"
     },
     "standalone": {
       "required_files": ["README.md", "LICENSE"],
+      "required_headings": ["## Install", "## Non-goals"],
       "install": "package"
     }
   },
 
+  "$comment_traits": [
+    "A SECOND axis, orthogonal to class. Class is structural (read off the",
+    "catalog and the remotes); a trait is about what the code DOES, which no",
+    "remote can tell you. `security` attaches the obligations a tool acquires by",
+    "handling untrusted input: a real disclosure channel, and limitations stated",
+    "with their mechanism.",
+    "",
+    "PROPOSED BY THE GATE'S AUTHOR, NOT MEASURED — the operator owns this list.",
+    "Marking a repo `security` decides that it owes a SECURITY.md, so adding or",
+    "removing a name here is a judgement, not a reading. These two were picked",
+    "because both process untrusted input as their stated purpose."
+  ],
+  "traits": {
+    "llm-security": ["security"],
+    "llm-ingestion-pipeline-security": ["security"]
+  },
+  "trait_requirements": {
+    "security": {
+      "required_files": ["SECURITY.md"],
+      "required_headings": ["## Known limitations"]
+    }
+  },
+
   "description_max_codepoints": 180,
   "$comment_length": [
     "180 codepoints, not bytes and not UTF-16 units. The same string measures 248",