fix: round 3 of the release review of 6.3.0

Round 3 (v6.2.0..96cb977, BLOCK: 1 BLOCKER, 8 MAJOR, 2 MINOR), each fixed
behind a test that failed first.

- Every allowlisted runner, not only git, takes plain words and a short list
  of options that only read: an option that writes a file or loads code
  (--test-reporter-destination, --outputFile, --junitxml, --basetemp,
  --import, --config, -p, -o, -exec, a reporter path) is on no list; after
  `npm test --` only paths follow; `make test` takes no VAR=value. A built-in
  node test reporter (tap, spec, dot, junit, lcov) stays allowed.
- /trekexecute: a restore the guard refuses (destructive git, in the mode
  that shows no prompts) or the operator declines is never recorded as
  reverted: simplify = "revert-refused" and the run stops before review; a
  refused step revert is reported with its paths.
- stepTestsOnly: a fixture document under tests/ is a test file, "e.g." is
  not a path, ./ is dropped; the plan-file sweep reads Files: with the same
  reader (fieldPaths); the validator hands its parsed fields over.
- plan-validator --steps-from asks for Verify: on a 1.8 plan too.
- skill frontmatter: a value starting with # is a hazard; a quote after an
  escaped backslash closes the value. Routing reads kind tags with hasOwn.
- release-check reads scope_sha_end as written (an all-digit sha keeps its
  leading zero), and Voyage's own artifacts under .claude/projects/ and
  .claude/voyage/ committed after the review do not count as unreviewed.

Suite 2170 (2168/0/2).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

lib/validators/plan-validator.mjs

@@ -40,7 +40,7 @@ import {
   sliceSteps, validatePlanHeadings, extractPlanVersion, extractPlanCeremony,
   parseStepFields, findSection, splitSections, findModuleCycle, parseMermaid, fencedBlocks,
   versionAtLeast, PLAN_VERSION_CURRENT, PLAN_VERSIONS_SUPPORTED, CEREMONY_VALUES,
-  ON_FAILURE_ACTIONS, onFailureAction, stepTestsOnly,
+  ON_FAILURE_ACTIONS, onFailureAction, stepTestsOnlyFromFields,
 } from '../parsers/plan-schema.mjs';
 import { validateAllManifests } from '../parsers/manifest-yaml.mjs';
 import { parseDocument } from '../util/frontmatter.mjs';
@@ -165,7 +165,7 @@ function checkRecovery(sections, opts) {
         `Step ${s.n}: \`On failure:\` does not open with a recovery word the executor reads`,
         `Open with one of ${ON_FAILURE_ACTIONS.join(' | ')}, then the specifics (\`retry once, then escalate\`).`));
     }
-    if (stepTestsOnly(s.body).testsOnly) {
+    if (stepTestsOnlyFromFields(f).testsOnly) {
       // The run-the-thing script alone is such a step too: `End-to-end:` rides on
       // the last step that builds behaviour (release review of 6.3.0, 2026-10-10).
       const e2e = f.has('End-to-end')
@@ -298,11 +298,13 @@ export function validatePlanContent(rawText, opts = {}) {
   // Phase 7.2) must be runnable steps whatever the plan's version: below 1.8
   // the step rules never ran, and a review step whose Verify is "re-run
   // /trekreview" validated and was executed (release review of 6.3.0,
-  // 2026-10-10). From 1.8 the rules below already cover every step.
+  // 2026-10-10). From 1.8 the rules below cover every step except one: none of
+  // them asks for a `Verify:`, so an appended step needs one on any version
+  // (round 3).
   const stepsFrom = Number.isInteger(opts.stepsFrom) && opts.stepsFrom > 0 ? opts.stepsFrom : null;
-  if (stepsFrom !== null && !versionAtLeast(planVersion, '1.8')) {
+  if (stepsFrom !== null) {
     const appended = sections.filter((s) => Number(s.n) >= stepsFrom);
-    const stepIssues = [
+    const stepIssues = versionAtLeast(planVersion, '1.8') ? [] : [
       ...checkSteps(appended).filter((i) => i.code !== 'PLAN_NO_END_TO_END'),
       ...checkRunnable(text, appended, { cwd: opts.cwd, stepsOnly: true }),
     ];

lib/validators/progress-validator.mjs

@@ -40,7 +40,7 @@ export const PROGRESS_REGRESSION_VALUES = ['passed', 'failed', 'unrunnable', 'no
 export const PROGRESS_PLAN_APPROVAL_VALUES = ['approved', 'not-checked']; // K2; not-checked = a session spec
 export const PROGRESS_ARCH_RULES_VALUES = ['pass', 'violation', 'not-measured']; // K5 exit 0 / 1 / 2
 export const PROGRESS_SCOPE_SWEEP_VALUES = ['pass', 'deviation', 'not-measured']; // K6 exit 0 / 1 / 2
-export const PROGRESS_SIMPLIFY_VALUES = ['applied', 'clean', 'reverted', 'not-run'];
+export const PROGRESS_SIMPLIFY_VALUES = ['applied', 'clean', 'reverted', 'revert-refused', 'not-run'];
 export const PROGRESS_REVIEW_GATE_EXITS = [0, 1, 2]; // K7: ALLOW/WARN, BLOCK, could not decide
 
 function checkStepFields(k, s, errors) {