fix(tui): strip terminal controls from status-line text

.github/PULL_REQUEST_TEMPLATE.md

@@ -10,27 +10,15 @@
 
 <!-- How was this tested? -->
 
-## Risk classification
+## Approval
 
-<!-- Classify honestly; exactly one box must be checked — the exact-head gate fails closed on zero or multiple. The checked class selects the merge path (issue #4703). -->
-
-- [ ] `low-risk` — ordinary fix/maintenance; the repository owner may use the explicit `merge-self-approved` solo verdict (no independent human review; the verdict name itself records this) with a risk-record comment bound to the exact head.
-- [ ] `regression-risk` — fix with material regression risk; requires one assigned independent domain reviewer whose authenticated exact-head `APPROVED` review the gate verifies (`extra:independent:<login>`; the token alone never suffices).
-- [ ] `high-risk` — large refactor, feature, or materially high-risk change (security/auth/install/remove/public API/destructive lifecycle/architecture); requires one assigned independent domain reviewer with an authenticated exact-head `APPROVED` review (`extra:independent:<login>`).
-
-## GJC verdict
-
-<!-- Paste one exact-head verdict. reviewer-id is the reviewer's GitHub login. merge-approved requires an authenticated exact-head APPROVED review from an identity distinct from the PR author — the author can never reach it. The repository owner may instead use merge-self-approved, the explicitly named solo force path for a low-risk change with a valid risk-record comment; its name records that no independent human reviewed. Otherwise write needs-human and stop. -->
-
-```text
-gajae.pr-review-verdict.v1 <merge-approved|merge-self-approved|merge-blocked|needs-human> sha256:<exact-base...head-diff-hash> reviewer:<architect|critic|human> reviewer-id:<identity> evidence:<ci-run-url-or-local-command>
-```
+Merges to `dev` require one approving GitHub review from a write-access maintainer on the current head. Agent reviews (`architect`/`critic`) are advisory comments.
 
 ---
 
 - [ ] Target branch is `dev`
 - [ ] `bun check` passes
 - [ ] Tested locally
 - [ ] Changelog fragment added under `packages/<pkg>/changelog.d/` (if user-facing)
-- [ ] Verdict above matches the exact PR head, not an earlier commit
+- [ ] Human approval or the required agent/owner verdict matches the exact PR head, not an earlier commit
 - [ ] Risk classification above matches the actual review path taken

.github/actions/build-native/action.yml

@@ -37,7 +37,7 @@ runs:
    steps:
       - uses: dtolnay/rust-toolchain@5b842231ba77f5c045dba54ac5560fed2db780e2  # nightly
         with:
-           toolchain: nightly-2026-04-29
+           toolchain: nightly-2026-08-12
            components: ${{ inputs.rust_checks == 'true' && 'clippy, rustfmt' || '' }}
            targets: ${{ inputs.target }}
       - name: Prepend rustup toolchain bin to PATH
@@ -93,13 +93,16 @@ runs:
            # Tag builds ship the size-tuned dist profile (strip=debuginfo,
            # fat LTO, panic=unwind preserved); PR/branch builds keep ci.
            PI_NATIVE_PROFILE: ${{ (startsWith(github.ref, 'refs/tags/v') || inputs.nightly_version != '') && 'dist' || '' }}
+           PCRE2_SYS_STATIC: "1"
            CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER: aarch64-linux-gnu-gcc
         run: bun run ci:build:native
       - name: Upload native addon(s)
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
         with:
            name: pi-natives-${{ inputs.platform }}-${{ inputs.arch }}${{ inputs.variant && format('-{0}', inputs.variant) || '' }}-h${{ inputs.hash }}
-           path: packages/natives/native/pi_natives.${{ inputs.platform }}-${{ inputs.arch }}*.node
+           path: |
+              packages/natives/native/pi_natives.${{ inputs.platform }}-${{ inputs.arch }}*.node
+              packages/natives/native/pi_natives.${{ inputs.platform }}-${{ inputs.arch }}*.node.provenance.json
            if-no-files-found: error
            # Explicit so the rust-hash canary lookup keeps working even if org
            # defaults shift; bump if Rust source ever stays stable for >90 days