ci(queen): take the bees' work out of the container from the cloud, not a laptop

[gHashTag]

Closes #4601

The container exports (it holds no push credential by design); nothing in the cloud pushed what it exported, so the chain ran only while somebody's laptop did. Measured this morning: last bee branch on GitHub 10:33 yesterday, 59 accepted issues whose work never left the container, swarm at 0 of 20 lanes.

export_push.py reads the export list, fetches each branch as a bundle and pushes it; the workflow runs every 20 minutes and on demand. It never forces, and it names the one secret it needs (QUEEN_EXPORT_TOKEN = the agent server's TRIOS_API_TOKEN) instead of skipping quietly. queen-publish.yml already runs on a push to queen-*, so the pull request follows by itself.

Self-test: 4 fixtures (oldest first, nothing for a branch level with the base, only queen-<issue> names, the limit honoured).

🤖 Generated with Claude Code

[github-actions]

📓 NotebookLM Notebook linked to this PR

• Notebook ID: b83263109fb055dc
• URL: https://notebooklm.google.com/notebook/b83263109fb055dc

This notebook contains session context, decisions, and artifacts for this work.

[github-actions]

PR Dashboard

Generated at: 2026-09-23 03:06:46 UTC

• ci(queen): take the bees' work out of the container from the cloud, not a laptop #4602 ci(queen): take the bees' work out of the container from the cloud, not a laptop | Created: 2026-09-23 | Updated: 2026-09-23 | 22 failing / 28 total
• feat(specs/skills): trinity/connect-accounts #4600 feat(specs/skills): trinity/connect-accounts | Created: 2026-09-22 | Updated: 2026-09-22 | 7 failing / 32 total
• Port part 1 of 2 of tools/check_withdrawn_live.py to specs/port/tools/check_withdrawn_live.t27 (8 functions) #4581 Port part 1 of 2 of tools/check_withdrawn_live.py to specs/port/tools/check_withdrawn_live.t27 (8 functions) | Created: 2026-09-22 | Updated: 2026-09-22 | 9 failing / 31 total
• Port part 1 of 2 of tools/check_coq_in_build.py to specs/port/tools/check_coq_in_build.t27 (8 functions) #4578 Port part 1 of 2 of tools/check_coq_in_build.py to specs/port/tools/check_coq_in_build.t27 (8 functions) | Created: 2026-09-22 | Updated: 2026-09-22 | 8 failing / 31 total
• Implement the 1 empty function body in specs/test_framework/verilog_bench_harness.t27 #4565 Implement the 1 empty function body in specs/test_framework/verilog_bench_harness.t27 | Created: 2026-09-21 | Updated: 2026-09-21 | 0 failing / 2 total
• Implement part 2 of 2 of the empty bodies in specs/vm/jit_semantics.t27 (4 functions) #4563 Implement part 2 of 2 of the empty bodies in specs/vm/jit_semantics.t27 (4 functions) | Created: 2026-09-21 | Updated: 2026-09-21 | 8 failing / 31 total
• The C tests handed cc a clang-only flag: 23 red on gcc, and the silent half compiled nothing #4551 The C tests handed cc a clang-only flag: 23 red on gcc, and the silent half compiled nothing | Created: 2026-09-21 | Updated: 2026-09-22 | 5 failing / 44 total
• classify: the browser could not tell a Markdown file from a broken spec (refs #2133) #4541 classify: the browser could not tell a Markdown file from a broken spec (refs #2133) | Created: 2026-09-21 | Updated: 2026-09-22 | 7 failing / 41 total
• Implement the 1 empty function body in specs/test_framework/graph_drift_detection.t27 #4536 Implement the 1 empty function body in specs/test_framework/graph_drift_detection.t27 | Created: 2026-09-21 | Updated: 2026-09-21 | 8 failing / 31 total
• Nothing builds bindings/wasm-explorer, which is how the artifact it replaces drifted in the first place #4498 Nothing builds bindings/wasm-explorer, which is how the artifact it replaces drifted in the first place | Created: 2026-09-21 | Updated: 2026-09-21 | 6 failing / 30 total
• specs/functions: render-job-run, morph-images-generate -- a failed delivery is not delivered #4123 specs/functions: render-job-run, morph-images-generate -- a failed delivery is not delivered | Created: 2026-09-17 | Updated: 2026-09-17 | 4 failing / 30 total
• specs/functions: payment-ai-server-process -- claim-invoice before crediting #4116 specs/functions: payment-ai-server-process -- claim-invoice before crediting | Created: 2026-09-17 | Updated: 2026-09-17 | 4 failing / 30 total
• specs/functions: crm-proactive-sweep -- one step per seller after the 502 runs #4113 specs/functions: crm-proactive-sweep -- one step per seller after the 502 runs | Created: 2026-09-17 | Updated: 2026-09-17 | 4 failing / 30 total
• specs/functions: withdraw five functions from the registry (code-only/unregistered) #4038 specs/functions: withdraw five functions from the registry (code-only/unregistered) | Created: 2026-09-17 | Updated: 2026-09-17 | 4 failing / 30 total
• Feed the swarm from CI, with fuel that does not run out #3978 Feed the swarm from CI, with fuel that does not run out | Created: 2026-09-17 | Updated: 2026-09-17 | 6 failing / 28 total
• specs: bind every tool and skill to the Queen, and name a domain lead #3833 specs: bind every tool and skill to the Queen, and name a domain lead | Created: 2026-09-15 | Updated: 2026-09-15 | 4 failing / 30 total
• agent-provider-chain: probe 4 of the reserve, 402 with max_tokens bounded #3683 agent-provider-chain: probe 4 of the reserve, 402 with max_tokens bounded | Created: 2026-09-15 | Updated: 2026-09-15 | 0 failing / 30 total
• specs/automation: inngest-functions-status.t27 (lastRun без проб, lastProbe отдельно) + inngest-probe-suite VERSION 2 #3593 specs/automation: inngest-functions-status.t27 (lastRun без проб, lastProbe отдельно) + inngest-probe-suite VERSION 2 | Created: 2026-09-13 | Updated: 2026-09-13 | 5 failing / 30 total
• fix(ci): make the JSON gate strict, and make the one file it refuses legal #3395 fix(ci): make the JSON gate strict, and make the one file it refuses legal | Created: 2026-09-07 | Updated: 2026-09-07 | 0 failing / 30 total
• coq(CorePhi): replace proofs that were never checked by a compiler #3343 coq(CorePhi): replace proofs that were never checked by a compiler | Created: 2026-09-06 | Updated: 2026-09-06 | 5 failing / 32 total
• chore(ci)(deps): bump actions/attest-build-provenance from 1 to 4 #3001 chore(ci)(deps): bump actions/attest-build-provenance from 1 to 4 | Created: 2026-09-01 | Updated: 2026-09-14 | 1 failing / 31 total
• chore(ci)(deps): bump softprops/action-gh-release from 2 to 3 #3000 chore(ci)(deps): bump softprops/action-gh-release from 2 to 3 | Created: 2026-09-01 | Updated: 2026-09-14 | 1 failing / 29 total
• chore(ci)(deps): bump github/codeql-action from 3 to 4 #2999 chore(ci)(deps): bump github/codeql-action from 3 to 4 | Created: 2026-09-01 | Updated: 2026-09-14 | 1 failing / 31 total
• Land the formal verification harness on master (it has never run) #2727 Land the formal verification harness on master (it has never run) | Created: 2026-08-27 | Updated: 2026-09-05 | 5 failing / 24 total
• chore(deps)(deps): bump thiserror from 2.0.18 to 2.0.20 #2693 chore(deps)(deps): bump thiserror from 2.0.18 to 2.0.20 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total
• chore(deps)(deps): bump hyper from 1.10.1 to 1.11.0 #2692 chore(deps)(deps): bump hyper from 1.10.1 to 1.11.0 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 33 total
• chore(deps)(deps): bump base64 from 0.22.1 to 0.23.1 #2691 chore(deps)(deps): bump base64 from 0.22.1 to 0.23.1 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total
• chore(deps)(deps): bump serde from 1.0.228 to 1.0.229 #2690 chore(deps)(deps): bump serde from 1.0.228 to 1.0.229 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total
• chore(deps)(deps): bump uuid from 1.23.2 to 1.25.0 #2689 chore(deps)(deps): bump uuid from 1.23.2 to 1.25.0 | Created: 2026-08-24 | Updated: 2026-08-28 | 3 failing / 34 total

Summary

Status	Count
Total Open PRs	29
PRs with Failing Checks	25
PRs with All Checks Green	4
READY	3
FAILING	25
PENDING	0
NO CHECKS YET	0

These columns do not partition: 3 + 25 + 0 + 0 = 28, and there are 29 open PRs. A PR is being counted twice or not at all.

Seal Status

• ⚠️ STALE -- sha256(compiler.rs)=403499176a5d != manifest seal=87e5cbd3ad94.
  The committed NMSE numbers were certified against an older compiler.rs.
  Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).