53db8140 · Gate: require the agent's service account to have made every push, not just a matching commit email · Oct 27, 2026