feat(gates): wire GATE 0 into the four orchestrator skill restatements

The include is authoritative, but feat/bugfix/ship-feature/init-project
each restate the verify loop inline — an orchestrator following the
restatement alone would have skipped the floor. Each now carries the
GATE 0 bullet ahead of GATE 1 (4 new structure locks, flip-tested).
The contract-interview weight table stops promising a hotfix oracle
nothing executes: hotfix runs no floor, the hotfixer runs the suite
itself. CHANGELOG extended with the wiring + the RED result.

lib/contract-interview.md

@@ -140,10 +140,11 @@ Print one line to the user, then continue the flow:
 | init-project | Full. The interviewer's PROJECT BRIEF pours into the contract (V1 features → criteria). |
 | onboard | Audit-scope contract (interview answers → what to audit, which axes). |
 
-Oracles follow the same proportion. hotfix: the build/tests criterion carries
-its `CHECK:`, nothing else. feat / bugfix: the suite criterion at minimum, and
-for bugfix the regression test the DIAGNOSIS names — its `CHECK:` runs that
-test alone, so a green result means the reproduction actually flipped.
+Oracles follow the same proportion. hotfix: none — that flow runs no floor
+(and no verifier); the hotfixer runs build/tests itself. feat / bugfix: the
+suite criterion at minimum, and for bugfix the regression test the DIAGNOSIS
+names — its `CHECK:` runs that test alone, so a green result means the
+reproduction actually flipped.
 ship-feature / init-project: build, suite, and every criterion a command can
 settle. onboard: audit criteria are mostly judgement — leave them oracle-free
 rather than invent a check that cannot fail.

lib/tests/loops-heavy.test.sh

@@ -27,6 +27,7 @@ tf "shf enrich at gate"       "$SHF" "ENRICH the STEP 0e contract"
 tf "shf gated marker"         "$SHF" "[gated <date>]"
 tf "shf verify+secure step"   "$SHF" "STEP 5 — VERIFY + SECURE"
 tf "shf uses shared include"  "$SHF" "lib/verify-secure-loop.md"
+tf "shf gate0 floor"          "$SHF" "GATE 0 — deterministic floor"
 tf "shf judges enriched"      "$SHF" "ENRICHED contract"
 tf "shf orthogonal to review" "$SHF" "DISTINCT axis from STEP 6 code review"
 
@@ -36,6 +37,7 @@ tf "ini criteria from V1"     "$INI" "V1 FEATURES (each testable)"
 tf "ini enrich at gate1"      "$INI" "ENRICH the STEP 1 contract"
 tf "ini verify+secure step"   "$INI" "STEP 9 — VERIFY + SECURE"
 tf "ini uses shared include"  "$INI" "lib/verify-secure-loop.md"
+tf "ini gate0 floor"          "$INI" "GATE 0 — deterministic floor"
 tf "ini adds security gate"   "$INI" "adds the security gate init-project previously lacked"
 
 echo "-- onboard (explicit NO-LOOP audit) --"

lib/tests/loops-light.test.sh

@@ -57,6 +57,7 @@ tf "feat contract step"         "$FSK" "STEP 0.7 — CONTRACT"
 tf "feat contract-interview"    "$FSK" "lib/contract-interview.md"
 tf "feat verify+secure step"    "$FSK" "STEP 4 — VERIFY + SECURE"
 tf "feat uses shared include"   "$FSK" "lib/verify-secure-loop.md"
+tf "feat gate0 floor"           "$FSK" "GATE 0 — deterministic floor"
 tf "feat nominal 1+1 dispatch"  "$FSK" "verifier + one security dispatch"
 tf "feat dispatches feater"     "$FSK" 'subagent_type="feater"'
 
@@ -65,6 +66,7 @@ tf "bug contract step"          "$BSK" "STEP 3.5 — CONTRACT"
 tf "bug diagnosis feeds it"     "$BSK" "feeds it: REQUEST verbatim"
 tf "bug fresh gates"            "$BSK" "the two fresh gates per"
 tf "bug uses shared include"    "$BSK" "lib/verify-secure-loop.md"
+tf "bug gate0 floor"            "$BSK" "GATE 0 — deterministic floor"
 tf "bug dispatches bugfixer"    "$BSK" 'subagent_type="bugfixer"'
 
 echo "── agents/bugfixer.md (bugfix executor — sonnet, no Agent) ──"