fix(ci): record tracebloc-website as on-train in the caller inventory

[LukasWodka]

Turns audit green on develop. It is red right now, and this is the only finding.

What happened

Two PRs that had to agree landed eleven minutes apart:

release-train#14	enrolled tracebloc-website in the train — repos.yml now lists it with prod_branch: main
.github#131	added repo-inventory.yml, which recorded tracebloc-website: release_train: false

Neither was wrong on its own. Together they contradict, and the cross-repo consistency check in caller-drift.py caught it on the first run after both merged:

tracebloc-website: release-train/repos.yml says on-train=True, the inventory
says False. A repo joining the train without an fr-gate caller is an
ungated staging -> prod hop.

The warning text is generic; the hop is gated

Worth stating plainly so nobody reads this as a live exposure. That second sentence is the rule's stated rationale, not a measurement of this repo. tracebloc-websitedoes have fr-gate-caller.yml on develop, and the inventory already lists fr-gate.yml: required for it. Its caller set is byte-identical to design-system's, an established on-train repo. Only the boolean was stale.

I also confirmed prod_branch: main is the right target: main carries the release commits (main release (#384)), and masterdoes not exist on this repo — the refs API and git ls-remote agree, only develop, main and staging are present.

Verified

• Independent cross-check — compared every release_train boolean in the inventory against the 11 repos in release-train/repos.yml. Exactly one mismatch, the one the audit named. Nothing else drifted.
• Both directions proven. CI is red on develop with false; the live audit against all 20 repos exits 0 with true — "Audited 20 of 20 on the develop-first branch. No drift."
• caller-drift-selftest.py: 42 pass, 0 fail.

The class of defect, not just the instance

This is the coupling #1415 exists to surface: repos.yml and the inventory are two files in two repos that must agree, and nothing made #14 update the second one. The guard caught it within minutes of the contradiction existing, which is the outcome we wanted — but the durable fix is that enrolling a repo in the train is a two-file change, and that belongs in the train's own enrolment docs rather than in reviewers' heads. Filing that separately rather than widening this PR.

🤖 Generated with Claude Code

---

Note

Low Risk
Single boolean inventory correction with no workflow or runtime behavior change; aligns metadata so CI passes.

Overview
Sets tracebloc-website’s release_train flag from false to true in repo-inventory.yml so it matches release-train/repos.yml after that repo was enrolled on the train.

This clears the caller-drift / audit failure that compared the two sources and reported the only cross-repo mismatch; caller expectations for tracebloc-website are unchanged (fr-gate.yml remains required).

^{Reviewed by Cursor Bugbot for commit c8fc19e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[LukasWodka]

Duplicate of #132, which was opened 40 seconds earlier and documents the reason inline. Verification from this branch posted there.