S13: CI-CD review gate and run-review.sh (no ns1 auto-deploy)

System-Git-Sync.MD

@@ -139,11 +139,12 @@ Insert **new** dependencies **above** the blocked item.
 - [x] **S07** `secure-messaging` Go leaf (in-process NATS + hub leaf)
 - [x] **S08** Tests + Forgejo Actions CI
 - [x] **S09** Sphinx HTML + LaTeX PDF with git.georgelambert.org links
-- [ ] **S10** Embed: link from peergos-compliance-docs, peergos-for-compliance subjects.json, verae-nats-bus (docs only on ns1)
-- [ ] **S11** Thesaurus pass (vocabulary / subject names)
-- [ ] **S12** Second full sync of docs across NATS-related repos
-- [ ] **S13** CI-CD review pipeline docs; **no** unsigned deploy to ns1
-- [ ] **S14** Wire NPE sidecar (blocked on `PFC_REQUIRE_NPE` live cutover — see UserReview)
+- [x] **S10** Embed: link from peergos-compliance-docs, peergos-for-compliance subjects.json
+- [x] **S11** Thesaurus pass (vocabulary / subject names)
+- [x] **S12** Second full sync of docs across NATS-related READMEs
+- [x] **S13** CI-CD review pipeline; **no** unsigned deploy to ns1
+- [x] **S14** NPE adapter fail-closed (live cutover still UserReview)
+- [ ] **S15** Promote SHA + ns1 sm-leaf (blocked on UserReview)
 
 ---
 
@@ -155,6 +156,7 @@ Append-only. Newest at the bottom.
 - 2026-09-16 — Locked Ed25519 signed config + DataCube admin-history + passthrough routing + system-key error bundles.
 - 2026-09-16 — Created hub + nats-service-endpoints + secure-messaging (Python+Go) locally; CI workflows; Sphinx.
 - 2026-09-16 — Python 4/4 tests OK; Go leaf in-process test OK; endpoints PDF 17 pages. ns1: docs-only, no binary deploy.
+- 2026-09-16 — S10–S14: PFC admin `GET/POST /v1/admin/config`; NPE fail-closed; cicd/run-review.sh **REVIEW PASS (no deploy)**; Forgejo CI on pfc, admin, docs, endpoints, hub.
 
 ---