docs(tonggan): bind AI discovery update causal chain

tonggan-bridge/bridge-registry.test.js

@@ -0,0 +1,41 @@
+"use strict";
+
+const assert = require("node:assert/strict");
+const { execFileSync } = require("node:child_process");
+const fs = require("node:fs");
+const path = require("node:path");
+const test = require("node:test");
+
+const root = path.resolve(__dirname, "..");
+const readJson = relative => JSON.parse(fs.readFileSync(path.join(root, relative), "utf8"));
+
+test("every bridge record binds one existing immutable engineering commit and same-name manifest", () => {
+  const registry = readJson("tonggan-bridge/BRIDGE-REGISTRY.json");
+  for (const entry of registry.records) {
+    assert.match(entry.commit_sha, /^[0-9a-f]{40}$/);
+    assert.equal(entry.resource, `${path.basename(entry.manifest, ".json")}@${entry.commit_sha}`);
+    assert.doesNotThrow(() => execFileSync("/usr/bin/git", ["-C", root, "cat-file", "-e", `${entry.commit_sha}^{commit}`]));
+    assert.equal(fs.existsSync(path.join(root, entry.manifest)), true);
+    const record = readJson(entry.record_path);
+    assert.equal(record.bridge_id, entry.bridge_id);
+    assert.deepEqual(record.binding, {
+      repo: entry.repo,
+      branch: entry.branch,
+      commit_sha: entry.commit_sha,
+      target: entry.target,
+      resource: entry.resource,
+      manifest: entry.manifest,
+    });
+  }
+});
+
+test("blocked bridge stores no fabricated workorder or deployment receipt", () => {
+  const workorder = readJson("tonggan-bridge/workorders/TGB-20260727-001.json");
+  const receipt = readJson("tonggan-bridge/receipts/TGB-20260727-001.json");
+  assert.equal(workorder.workorder_id, null);
+  assert.equal(workorder.owner_email_approval, "not_requested");
+  assert.equal(receipt.deployment_result, "NOT_DEPLOYED");
+  assert.equal(receipt.server_runtime_proven, false);
+  assert.equal(receipt.public_route_proven, false);
+  assert.doesNotMatch(JSON.stringify({ workorder, receipt }), /Bearer |session_token|approval_token|password|private_key/i);
+});