gate: Shorashim between a caller and a model, with the fringe and rebuke once (bishe'arecha step 4)

Devarim 6:9 / 11:20 — on your gates. POST /gate/anthropic/v1/messages and
POST /gate/openai/v1/chat/completions take the model's own request shape
under the caller's own upstream key (x-api-key, or Authorization with the
courtyard key in X-Shorashim-Key), forward it unchanged (OTP inets/ssl,
verify_peer; the Korban socket is serial, so the upstream call is made
in the Vav Pipeline and the reply enters as korban like every bedikah),
examine the reply with the request in hand — sources = the system prompt
and the user turns, query = the last user turn; the model's prior turns
are not sources — and deliver it with its fringe (Bamidbar 15:39): a
trailer on the last text block naming ref, verdict, the rules with their
verses and sentences; X-Shorashim-Bedikah / X-Shorashim-Verdict; a
`shorashim` object. A non-200 passes through as it came; a reply with
no text is not delivered; stream is refused.

Rebuke once (Vayikra 19:17; X-Shorashim-Rebuke: once): a lo_tov reply is
answered once more with the finding; the second reply is examined like
the first, its record carries rebukes: <first ref> (migration
20261007000002), and it is delivered marked with both. Never a third.

Manna: one api_calls_external per upstream call, gathered before any
call. Stateless: no conversation, no key kept; the log is the path class.
Gate.bearer accepts X-Shorashim-Key. Construction §3.10, Tamid §1.1,
KOHEN "Standing at the gate", bishearecha §I/§III/§VII marked built.
Elixir 592/0 (+14 gate tests incl. a real httpc round trip to a local
model double), L3 9/0.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

specs/bishearecha.md

@@ -48,7 +48,12 @@ through the gate — no caller has to supply them), and delivers the reply
 with its verdict attached. Construction §3.10 (to be written) specifies
 the protocol. The bedikah endpoint remains for an output brought by hand.
 
-**Status.** Not built. The ingress and the keys exist; the gate does not.
+**Status.** Built (2026-10-07): `POST /gate/anthropic/v1/messages`,
+`POST /gate/openai/v1/chat/completions` — the model's own request shape,
+the caller's own upstream key, forwarded unchanged; sources = the system
+prompt and the user turns; Construction §3.10, Tamid §1.1. The upstream
+call is made in the Vav Pipeline (the Korban socket is serial); the
+reply enters as korban like every bedikah.
 
 ## II. The hand and between the eyes — Devarim 6:8, 11:18
 
@@ -90,7 +95,11 @@ sentences. Shorashim's own responses already carry `disclosure`; the
 pass-through reply does not. (Every generation: the mark is attached by
 the gate, never by the model — the model does not sew its own fringe.)
 
-**Status.** Not built (depends on I).
+**Status.** Built (2026-10-07): the trailer on the last text block,
+`X-Shorashim-Bedikah` / `X-Shorashim-Verdict`, and the `shorashim`
+object on every delivered reply. A reply the model sends with no text
+block is not delivered; a non-200 from the model passes as it came,
+marked `none`.
 
 ## IV. The king's copy, from before the priests — Devarim 17:18–20
 
@@ -207,7 +216,10 @@ persists.
 **Architecture.** Gate option `rebuke: once`. The record (`bedikot`)
 gains a link from the second examination to the first.
 
-**Status.** Not built (depends on I).
+**Status.** Built (2026-10-07): `X-Shorashim-Rebuke: once`;
+`bedikot.rebukes` (migration 20261007000002). The rebuke names the
+rules, their verses and the sentences; the second reply is examined like
+the first and delivered marked with both. Never a third.
 
 ## VIII. The scroll as witness; read before all every seventh year — Devarim 31:9–13, 26
 
@@ -308,6 +320,7 @@ In the order the text argues it, and by dependency:
    *Done 2026-10-07.*
 4. **The gate** (I), with the fringe (III) and the rebuke (VII) — the
    architecture's centre; the first three make it worth standing at.
+   *Done 2026-10-07.*
 5. **The hakhel cycle and record** (VIII).
 6. **The second scroll** — the priests' copy of the mesorah (IV) — the
    largest work, and the one that turns "no Jewish source named" into