[cschanhniem]

Summary

Restores the full trust-oriented CI gate surface after the manifest-verifier work.

What changes

• Keeps the verifier-focused lint gate that currently passes against the new verifier files.
• Restores the evidence and benchmark checks that make this repo scientifically useful:
  • evidence certificate validation;
  • leakage check;
  • doc-link regression guard;
  • benchmark regression gate;
  • multi-negative-set benchmark;
  • hidden-active enrichment benchmark;
  • expanded 500 AMP / 500 decoy benchmark;
  • easy-baseline, order-dependent, and per-family analyses;
  • recalibration policy version guard.

Why

OpenAMP is not credible if CI only runs unit tests and a demo. The repo's core asset is claim discipline: candidate-ranking changes must continue to face benchmark, evidence, leakage, and policy checks.

Tests

CI is the source of truth for this PR.