Development record

release.yml's verify job runs go run ./cmd/record-lint from the gated tree, so a release pull request that edits internal/core/lint or cmd/record-lint disarms the receipt gate as surely as editing release.yml, with only pull-request review in the way. The same holds for every gate the verify job runs from the tree it gates; it predates the deferral discipline.