Merge remote-tracking branch 'prgs/master' into feat/issue-495-canonical-next-action-comments

# Conflicts:
#	skills/llm-project-workflow/SKILL.md

skills/llm-project-workflow/SKILL.md

@@ -184,3 +184,15 @@ Ready-to-copy task prompts live in [`templates/`](templates/):
 Releases follow SemVer from remote `master` only, after full test suite passes.
 See [`templates/release-tag.md`](templates/release-tag.md) and
 `scripts/release-tag`.
+
+## Bootstrap Review Path (#557)
+
+Self-hosted MCP workflow fixes can deadlock live review daemons. Do not bypass
+gates with raw API, direct imports, or root checkout edits.
+
+If and only if a controller posts a durable `BOOTSTRAP REVIEW AUTHORIZATION
+(#557)` record, follow:
+
+`docs/bootstrap-review-path.md`
+
+Otherwise stop with BLOCKED + DIAGNOSE. Bootstrap never weakens normal PR gates.