[TMHSDigital]

Closes #363, #365, #366, #367, #395.

Issue	Gate	Hole	Fix
#365	release-gate.sh	The compare/commit APIs cap at 300 files in path order, so a big docs/gallery regeneration could hide a code change that sorts after it, and the release went out on Validate alone. Separately, SMOKE_TIMEOUT 3600 s was below the job's 75 min	300+ files count as "smoke applies". SMOKE_TIMEOUT defaults to 5400 s (75 min + 15 min queue)
#363	drift-check / release-doc-sync	Both composite actions run the meta-repo's Python at meta-repo-ref: the floating v1 tag, and v1.15.1 in the contents: write job	Both pass full SHAs: 7886cbe6 (= v1 = v1.19.2 today, so no behaviour change) and 9be79799 (= v1.15.1). The Validate pin step rejects a tag meta-repo-ref
#366	check_site_links.py	A relative link escaping the site resolved to a repo file in CI and passed; iframe/video/audio/source/embed src was never checked	Escaping links fail; those tags are checked
#395	check_skill_refs.py	Bare-path detection covered 4 directories, so a dead docs/technical-audit.md path shipped in vse-python	Every top-level directory plus relative markdown links; the vse-python line is linked
#367	asset_sheet.py	No butter-churn SELECT row, so its committed sheet couldn't be regenerated	Row added (^ChurnLow$). New tests/check_asset_sheet_select.py in Validate requires a row for every showcase piece and every CLAUDE.md asset reference

Evidence (local; no Blender needed). Each new check was falsified once.

• ci: release gate edge cases: >300-file pushes skip the smoke wait; SMOKE_TIMEOUT (60m) < smoke job timeout (75m) #365: tests/test_release_gate.py 12/12 OK, including the new test_truncated_file_list_waits_for_smoke and test_299_docs_files_still_skip_smoke. With the 300-file line deleted, the truncation test fails. Restored, it passes.
• ci: pinned composite actions still execute code from mutable tags (meta-repo-ref v1.15.1 / v1) (#306 incomplete) #363: the new grep reports release.yml:145: meta-repo-ref: v1.15.1 on main and nothing on this branch. SHAs were resolved via gh api …/git/tags/2bb837a2… (→ commit 9be79799) and …/commits/v1 (→ 7886cbe6). All three workflow files parse as YAML.
• testing: site link gate accepts links escaping the site root and ignores iframe/video/source src #366:
  • a scratch _site with <a href="../secret.txt"> (the file exists one level up), <iframe src="nope.html"> and a valid <video src="ok.mp4"> now gives 2 failures, exit 1: escaping link plus missing iframe; the video passes;
  • the real site gives 135 pages, 7137 internal references, 0 failures.
• testing: check_skill_refs only inspects snippets/examples/templates/rules prefixes, so vse-python ships a dead bare docs/ path (#334 gap) #395: before linking, the checker printed ::error::skills/vse-python/SKILL.md:150: bare repo path docs/technical-audit.md (exit 1). After, it passes. Regex spot checks: ](../../snippets/a.py) and ](docs/x.md) are flagged; absolute links are not.
• scripts: asset_sheet.py cannot regenerate the committed butter-churn sheet (missing SELECT row), and nothing enforces coverage #367: with asset_sheet.py reverted, the new check prints showcase piece 'butter-churn' has no SELECT row, exit 1. Restored, it passes.
  • Not run: the full Blender asset-sheet render for butter-churn. The row follows the piece's build_churn_mesh("ChurnLow", …) object name, the same <Name>Low convention as the other 75 rows.

🤖 Generated with Claude Code

[TMHSDigital]

CI evidence before merge: all checks pass ( 13 pass ). Blender Smoke on PR head: Blender 5.2.2 LTS / Blender 4.5.14 LTS. Summaries (happy path; falsifiers) per leg: 143 passed, 1 skipped, 0 failed;142 passed, 0 skipped, 0 failed;141 passed, 3 skipped, 0 failed;136 passed, 6 skipped, 0 failed;