fix

Fix the defect in the request that accompanied this invocation (a GitHub issue URL or number, or free text). Not done until every gate below is met and the PR says so.

The task. A GitHub reference → gh issue view <ref> --json title,body,comments; quote it. Name the failure in one sentence: what the vendor did, what the code did next. Anything the issue states about the vendor — what it supports, why it fails, what a field means — is a claim, the diagnosis included. No .veris/run.sh and no direct-tier .veris/setup.json → stop; setup runs first. A setup.json with "tier": "direct" replaces run.sh: run the flow directly against the wired sandbox and read the trace where a gate reads the receipt (direct.md). Sandbox lifecycle and every /veris/* call: reference/twin.md.

The diagnosis. Before any sandbox: read the code path the issue names and enumerate every distinct defect that could produce the symptom — the vendor's failures and the repository's own (state lost between requests, a queue, a cache, a race), which no twin can represent. The manual's fault catalog is one hypothesis source, never the selector: the twin confirms a diagnosis chosen from code evidence, it does not choose it.