ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

---

Summary by Gitar

• CI validation scripts:
  • Added vendored validate-a2ml.sh and validate-k9.sh validation scripts in .githooks/
  • Updated dogfood-gate.yml workflow to execute local validation scripts instead of remote actions

_{This will update automatically on new commits.}

[gitar-bot]

CI failed: CI validation failed because A2ML manifest files are missing required identity fields and K9 contract files are missing the 'K9!' magic number and pedigree name.

Overview

Two validation jobs failed during CI due to incorrectly formatted manifest and contract files introduced or exposed in the repository: A2ML manifest validation failed due to missing identity fields, and K9 contract validation failed due to missing magic numbers and pedigree metadata.

Failures

A2ML Manifest Validation Failure (confidence: high)

• Type: test
• Affected jobs: 90125766290
• Related to change: yes
• Root cause: The validation script .githooks/validate-a2ml.sh found an error in the repository's .a2ml files: "Missing required identity field (agent-id, name, or project)".
• Suggested fix: Inspect the .a2ml manifest files, ensure all required identity fields (agent-id, name, or project) are present, and re-run the validation script locally.

K9 Contract Validation Failure (confidence: high)

• Type: test
• Affected jobs: 90125766297
• Related to change: yes
• Root cause: The validation script .githooks/validate-k9.sh found errors in K9 contracts (such as missing the 'K9!' magic number on the first non-empty line and missing the 'name' field in the pedigree block).
• Suggested fix: Update the K9 contract files to include 'K9!' as the first non-empty line and add the required 'name' field within their pedigree blocks.

Summary

• Change-related failures: 2 failures (A2ML manifest validation error and K9 contract validation error)
• Infrastructure/flaky failures: 0 failures
• Recommended action: Update the affected A2ML manifests and K9 contract files to comply with the validation requirements.

Code Review ✅ Approved

Vendors validation scripts into .githooks/ and updates the dogfood-gate.yml workflow to run them locally instead of relying on remote actions. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)