Release: Review-Auto Sandbox Proposal Runner

Forgeflow 4.3.58 lands Phase 5 of the review-auto sandbox path. Safe findings can now produce isolated, validated proposal artifacts before any real checkout apply flow exists.

Sandbox Proposal Runner

• New /forgeflow-review-autofix-sandbox --proposal <json> command generates local proposal artifacts without mutating the source checkout.
• New run-review-autofix-sandbox.js helper copies the checkout into an isolated temp sandbox, applies explicit deterministic operations there, and runs declared focused validation there.
• Successful runs write proposal.json, proposal.md, and proposal.diff under .forgeflow/<project>/review-auto/proposals/.

Safety Boundaries

• The runner reuses the Phase 4 policy contract and rejects findings that are not eligible for sandbox proposals.
• Absolute paths, parent traversal, source symlinks, and symlinked proposal-output directories are rejected.
• The runner does not generate patches from prose, apply fixes to the real checkout, commit, push, call GitHub, or dispatch workers.

Install And Docs Wiring

• The helper is managed by install, update, health, runtime inventory, and release-readiness checks.
• README and wiki command references now describe the Phase 5 proposal path beside the Phase 4 classifier and evidence commands.
• The release gate now includes the sandbox runner focused test.

Validation

• Full scripts/forgeflow/test-*.js suite
• node scripts/forgeflow/test-run-review-autofix-sandbox.js
• node scripts/forgeflow/test-install-manifest.js
• node scripts/forgeflow/test-runtime-helper-contract.js
• node scripts/forgeflow/test-command-coverage.js
• node scripts/forgeflow/test-doc-links.js
• node scripts/forgeflow/smoke-check.js --mode source --json
• node scripts/forgeflow/render-release-readiness.js --json
• git diff --check