A green CI job is not proof that an agent patch preserved the test world. Fixtures can be rewritten to match new output. Property suites can shrink their domain or their iteration budget. Flaky tests can turn into unnamed skips. Merge on a lockfile and two matching receipts, not on a single passing run.
The protocol below is a proposal with runnable scoring code. It is not a report of production incident rates, and it does not assume a particular CI vendor.
The test world is the proof, not the job status
The test world is the set of objects that give tests their meaning. Three parts matter on an agent diff.
Fixture bytes and their content digest.
