168a28d2c5
improvise-52eq: the AGENTS.md recipe searched `bd show` output for "not found" and printed "all resolve" when there was none, so a bd that was missing, failing or never run passed the audit. scripts/bd-audit-ids keeps the file scan and exclusions, then `comm -23`s the cited ids against `bd list --all --limit 0 --json`. A dead id is exit 1 and is named. A bd that does not answer is exit 3, never a pass. scripts/bd-audit-ids-test.sh has eight cases on a throwaway repo with a fake bd. The old recipe as a rival fails 7 of the 8. Disabling the comparison fails the dead-id case, and an empty exclusion list fails the pass case. CI runs it with the other named suites. The "One environment note" now reports which forms the guard refused and allowed, as observed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VdfEGXA7aJ6ftMsCc9PJze