check

# `/gflow:check` — Quality gates Run in order. Stop and report if a step fails after the fix pass. ## Steps These steps mirror the CI `test` job in `.github/workflows/ci.yml` **in the same order**. Any command that CI runs as a *verify* (`--check`) is run here as a verify too — see step 4. **1. Repo hygiene + doc links + website-docs PII guard** (read-only — CI runs all three; a broken doc link or a private identifier in the published `website/docs/` mirror fails CI) ```bash PYTHONUTF8=1 uv run python scripts/ci/check_repo_hygiene.py PYTHONUTF8=1 uv run python scripts/ci/check_doc_links.py PYTHONUTF8=1 uv run python scripts/ci/check_website_docs_pii.py PYTHONUTF8=1 uv run python scripts/ci/generate_website_docs.py --check ``` The last check fails on either half of the published-site contract: - `DRIFT:` — canonical `docs/` changed but the `website/docs/` mirror was not regenerated. Fix with `uv run python scripts/ci/generate_website_docs.py` and stage `website/docs/`. - `NAV-ORPHAN:` — a page is published but no `nav:` entry in `website/mkdocs.yml` points at it, so it is live but unreachable. Add the entry under the right nav section. **2. Auto-fix lint and formatting** (rewrites files in place) ```bash uv run ruff check --fix src tests uv run ruff format src tests ``` Report which files were modified. **If this rewrote anything, those files are part of the change — stage them.** CI does not run the auto-fix; it runs the `--check` verify in step 4 against th...