[patrickchin]

The website-only gate classifier must not be replaceable by the PR it classifies. Load its code from the base commit, protect its path alongside other gate wiring, and retain API journeys for every dev promotion. Align the website wait budget with the existing site-preview deployment window.

Adds a real-Git regression where the head replaces the classifier, plus workflow/path protection assertions. Scope, release-confidence, trust, selective-preview, and YAML checks pass locally. Updates the gate design and bug record.

This completes the CI fix for #524 before production promotion; follows #525 through dev’s protected workflow.

[cloudflare-workers-and-pages]

Deploying harpa-pro-viewer with    Cloudflare Pages

Latest commit:	9f6c94f
Status:	⚡️  Build in progress...

View logs

[github-actions]

🚀 API preview deployed

• URL: https://harpa-pro-api-pr-526.fly.dev
• Readyz: https://harpa-pro-api-pr-526.fly.dev/readyz
• Admin readyz: https://harpa-pro-api-pr-526.fly.dev/admin/readyz
• Admin origin: https://pr-526.harpa-pro-admin.pages.dev
• Dashboard origin: https://pr-526.harpa-pro-dashboard.pages.dev
• App DB: Neon branch pr-526
• Admin DB: Neon branch pr-526
• Password accounts: configured test/demo groups seeded by the release command
• Commit: 9f6c94f411067ed66d3aecd24d640874c06ba5fa

To point a dev/preview mobile build at this preview, call
setApiBaseUrlOverride("https://harpa-pro-api-pr-526.fly.dev")
from the in-app dev menu (lib/api/base-url.ts).

This app is automatically destroyed when the PR closes.