feat(spec): refuse unknown keys inside manifest: — ManifestSchema goes strict (the #8687 door one level down)
#4026
os-samsingle-claim-path-guard.yml
on: pull_request
No other open PR may claim the same single-writer path
20s