docs(decisions): record gate result for bound-var-ephemeral-caches

Co-Authored-By: Claude Opus 5.5 <[email protected]>

decisions/2026-11-14-bound-var-ephemeral-caches.md

@@ -65,7 +65,12 @@ evictions).
   3584Mi scanner request schedules.
 - No Kyverno policy selects the non-app `gitea-actions` namespace for volume shape. None of the
   touched paths are in `infra/gitea/approval-policy.json` `sensitive_paths`.
-- Toolbox gate: see the PR description for the exact rc and stages that did not run.
+- Toolbox gate from this worktree (DEV_KUBECONFIG=/dev/null, ENGINE shim mounting the main
+  `.git`, spec repo mounted by dev.sh as a sibling), on the committed HEAD: **rc 3, UNDETERMINED,
+  not green.** "Stages that did not run: gitea-settings". `conformance` (L2/L3) logged SKIPPED, no
+  cluster. spec-immutability, approval-policy (N/A offline, proves nothing), decisions-log,
+  lint, l0 (incl. `flux-postbuild-substitution` and `vuln-scanner-supply-chain` PASS),
+  render-golden and l1 green.
 
 ## What I did NOT verify