Repo verify

Confirm — by running it — that a fix PR contains a test that genuinely fails before the fix and passes after. Static signals like "the PR touches a test file" don't establish that; only executing it does. Runs in a throwaway git worktree, so the working checkout is never touched.

Workflow

1. Pick a fix PR (or base/head SHAs):

   python3 scripts/verify_env.py /path/to/repo --pr 22
   # or: --base <sha> --head <sha>