🐛 fix(ci): share one PR-reach reader across the three PR-visible gates (D-157)

CHANGELOG.md

@@ -94,6 +94,8 @@ repository still gets a decision, never by following the link; no release carrie
 - :memo: docs(e11): delete the false cost claim; reason 1 carries Shape D alone (F3-01)
 - :memo: docs(ci): D-159 recorded a residual that does not exist (ORPH-01..04)
 - :memo: docs(release): correct the residual the gate documents (R3-01)
+- :memo: docs(ci): withdraw three falsifiable claims from the PR-reach reader (D-157)
+- :memo: docs(ci): withdraw the third copy of the retracted claim (D-157)
 
 ### Features
 - :sparkles: feat(audit): measure REL-03/REL-07 by real mutation run, not by name
@@ -109,6 +111,10 @@ repository still gets a decision, never by following the link; no release carrie
 - :bug: fix(ci): run the -count=1 wiring pin in the PR-visible verify job
 - :bug: fix(ci): pin COUNT1-F01 and refuse a merged gate step
 - :bug: fix(ci): bump golangci-lint to v2.13.1 for Go 1.27 (D-158)
+- :bug: fix(ci): close two PR-reach fail-opens the review found end-to-end (D-157)
+- :bug: fix(ci): read flush block sequences and whole branch names (D-157)
+- :bug: fix(ci): strip CR, and close the one fail-open direction by construction (D-157)
+- :bug: fix(ci): refuse globs on branches-ignore, grade disarm keys by name (D-157)
 
 ### Refactoring
 - :recycle: refactor(audit): pin REL-03 and REL-07 by test name, demote source shape
@@ -133,6 +139,8 @@ repository still gets a decision, never by following the link; no release carrie
 - :white_check_mark: test(hack): the bash-3.2-clean assertion could not fail (BASH32-F01)
 - :white_check_mark: test(hack): close two gate fail-opens found by review (BASH32-F01)
 - :white_check_mark: test(ci): wire release-verify-test into task check (D-159)
+- :white_check_mark: test(ci): share PR-reach and cross-pin the three PR-visible gates (D-157)
+- :white_check_mark: test(ci): grade the shared PR-reach helper itself, on fixtures (D-157)
 ## [0.3.0] - 2026-08-18
 
 ### Chores