Fix Receipts — state the goal and its probes, get a verified receipt

Failure modes

"no verification probes given — cannot verify a fix" — a fix with no probe cannot be verified, so the command abstains (exit 3) instead of running something it could not check. Add --probe.

"no --workflow given — Fix never guesses a route" — a false confident route is worse than an abstention, so the message names the runnable next step. Pass --workflow fix.

"probe contains shell metacharacters" — probes are argv lists. Rewrite the probe without pipes or redirection; if you need shell semantics, put them in a script and probe the script.

"cannot run: --run requires --scope" — an unscoped fix has no edit boundary to enforce, so --run refuses.

"SCOPE NOT VERIFIED — no git available" — attribution fell back to content hashes of the declared scope files, so edits elsewhere are undetectable. The run will not report success; review the tree by hand.

Probe reported SKIPPED — the command could not be executed (most often a missing binary). This is uncertainty, not a pass; the exit code is non-zero.