Adopt released Ota v1.6.25 governance #4

Job	Run time
Strict replay-input policy refusal	11s
verify-native-macos / ota.refusal-canary.workflow.selfhost (macos/native)	9s
verify-native-windows / ota.verify.verify (windows/native)	3m 32s
verify-native-macos / ota.verify.verify (macos/native)	2m 21s
verify-native-linux / ota.refusal-canary.task.selfhost-up (linux/native)	9s
verify-native-linux / ota.refusal-canary.workflow.selfhost (linux/native)	10s
verify-native-macos / ota.refusal-canary.task.selfhost-up (macos/native)	11s
Ubuntu bounded container runtime proof	1m 40s
Contract-to-CI drift gate	7s
verify-native-linux / ota.verify.verify (linux/native)	2m 16s
ubuntu-latest bounded runtime proof	1m 12s
macos-latest bounded runtime proof	1m 53s
verify-native-windows / ota.refusal-canary.workflow.selfhost (windows/native)	16s
windows-latest bounded runtime proof	1m 52s
verify-container-linux / ota.refusal-canary.task.selfhost-up (linux/container)	9s
verify-container-linux / ota.verify.verify (linux/container)	2m 34s
verify-native-windows / ota.refusal-canary.task.selfhost-up (windows/native)	20s
verify-container-linux / ota.refusal-canary.workflow.selfhost (linux/container)	9s
	19m 11s

Navigation Menu