[ZeroPoint95]

Changes

• Add the missing changelog entry docs/changes/unreleased/2571-exec-scratch-outside-workspace.md (kind: fixed, invalidates HEADLESS.md's old scratch-lands-in---dir claim), which repairs the light gate's changelog step and, with it, the aggregate check on PR exec: codeaf exec leaves its turn trace untracked in the person's repository (.codeaf/trace) #2571.
• No code changes: the fix is the deferred AGENTS.md-required entry on top of the existing repair commit bb96ac1 (exec scratch moved outside the workspace via WithScratch), leaving the verified behavior and both e2e acceptance tests intact and passing.
• All light-gate steps verified on head 3a11000 — go build ./..., go vet ./..., make fmt-check, the packed-corpus gate, and changelog-check (115 entries well formed) — with the add-entry condition now satisfied against base b0dfe97.
• Final change: 4 files, +133/−5.

Closes #1758.

Validation

• test: accepted by the owner as it stands, with these unresolved:
  • go test ./cmd/codeaf -count=1 · failed
  • go test ./cmd/codeaf -run TestTheTaskDoorKeepsTheRealDoRecordAndItsWholeBill -count=1 · failed
  • go test ./internal/home -count=1 · failed
• Passed locally: cd . && go test ./internal/exec -count=1.
• Passed locally: cd . && cp cmd/codeaf/exec.go /tmp/exec.go.prooffix && git checkout -- cmd/codeaf/exec.go && go test ./cmd/codeaf -run 'TestExecLeavesTheGitRepositoryClean|TestExecGitStatusShowsOnlyTheFileItEdited' -count=1.
• Passed locally: cd . && go test ./internal/namelaw -count=1.
• Proof · 6 of 6 claims shown locally. GitHub CI is checked after publishing.
• ✓ Both CI failures on PR exec: codeaf exec leaves its turn trace untracked in the person's repository (.codeaf/trace) #2571 trace to one cause: the light gate's changelog step — the PR added no docs/changes/unreleased/ entry, and the check job fails only downstream (its step echoes 'light gate: failure; touched packages: success').
• ✓ The missing entry now exists and follows docs/rules/changelog.md: kind fixed, surface [build, docs], one invalidates item restating the old HEADLESS.md scratch claim ('Scratch lands in --dir' / 'Also where its scratch lands') and the new behavior, plus a body noting pre-dirtied repos keep their old untracked .codeaf/.
• ✓ Every remaining light-gate step passes locally on the new head 3a11000, so the gate's only failure is the one repaired; the check job needs no separate fix (touched packages already passed remotely).

by codeaf factory

Factory-Approval: evt_070087be factory 3a11000

[ZeroPoint95]

test PR - closing