review the commit that installs the gate

The mechanism carries the credential patterns it enforces, so the diff that
adds it matches its own rules. The tree is exempted by manifest; the commit
is reviewed here.

.publication-history-allowlist.txt

@@ -0,0 +1,5 @@
+# reviewed 2026-08-24: the mechanism install commit contains the scanner's own
+# rule definitions, including the credential patterns it enforces. A gate cannot
+# enter a repository it protects without its patterns appearing in that diff.
+# The tree is exempted by manifest; the commit is reviewed here.
+e1eede989303e1ecaf79aa4e29f4b0868769126c