[canblmz1]

Fix the release-candidate CI loop

PR #32 correctly consumes its changesets, but the generic contributor gate rejects the resulting version-only diff. Keep ordinary contributor Changesets validation, and accept consumed-changeset candidates only when they exactly reproduce versioning from their comparison base.

• Dependency-free preflight runs before pnpm setup/install in both readiness jobs.
• Strict paths/modes and complete changeset consumption are required; core/CLI manifests must match the base except stable version fields.
• After frozen installation, run the installed Changesets CLI directly in a detached base worktree and compare complete tracked Git trees.
• No branch-name/author allowlist, failed-check fallback, empty changeset, or skipped quality checks.

Verification

81/81 dependency-free script regressions passed independently, including 34 gate tests; syntax, YAML ordering and base/blob checks passed. Actual installed Changesets replay was not run locally (the process test uses a fake CLI). Exact-head full CI, then real replay on the refreshed release PR, remain required.

Only five files change: readiness workflow, helper/tests, root test command and contribution guidance. No publish workflow, permissions, secret, dependency or version changes. This is validation hardening, not hostile-PR process isolation.

No release is authorized by this PR. Keep #32 draft pending this fix, fresh candidate review, all expected checks and explicit publication approval.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.