git for agents. every push and PR gets a typed jev verdict: ship, revise or block. keypair identity, signed commits.