chore(work): finish 08-reviewer-prompt-update

docs/work/2026-05-14-ci-security-and-supply-chain/08-reviewer-prompt-update/_story.md

@@ -3,7 +3,7 @@ id: 08-reviewer-prompt-update
 epic: 2026-05-14-ci-security-and-supply-chain
 title: Sandcastle reviewer prompt update
 type: technical-story
-status: todo
+status: done
 feature: tooling
 depends-on: [02-socket-integration, 06-codeql-and-audit-signatures]
 blocks: [09-ci-security-guide-and-docs]
@@ -37,4 +37,4 @@ The sandcastle reviewer is the single composable gate for agent PRs (ADR-019 con
 
 ## Tasks
 
-- [ ] Extend `.sandcastle/reviewer.prompt.md` with a "CI security checks" section after the library-trace check: instruct the reviewer to read `gh run view` output for Socket `critical` findings and CodeQL `error` findings, reject on either with notes naming the finding and citing `docs/guides/ci-security.md` failure-mode hierarchy; one commit, all gates pass.
+- [x] Extend `.sandcastle/reviewer.prompt.md` with a "CI security checks" section after the library-trace check: instruct the reviewer to read `gh run view` output for Socket `critical` findings and CodeQL `error` findings, reject on either with notes naming the finding and citing `docs/guides/ci-security.md` failure-mode hierarchy; one commit, all gates pass.

docs/work/_state.json

@@ -1,5 +1,5 @@
 {
-  "updated_at": "2026-05-14T18:01:17.746Z",
+  "updated_at": "2026-05-14T18:05:18.377Z",
   "epics": {
     "2026-05-13-binder-wrap-helper": {
       "status": "done",
@@ -120,10 +120,10 @@
           ]
         },
         "08-reviewer-prompt-update": {
-          "status": "todo",
+          "status": "done",
           "title": "Sandcastle reviewer prompt update",
           "ac_total": 1,
-          "ac_completed": 0,
+          "ac_completed": 1,
           "depends_on": [
             "02-socket-integration",
             "06-codeql-and-audit-signatures"
@@ -258,11 +258,6 @@
     }
   },
   "ready": [
-    {
-      "epic": "2026-05-14-ci-security-and-supply-chain",
-      "story": "08-reviewer-prompt-update",
-      "title": "Sandcastle reviewer prompt update"
-    },
     {
       "epic": "2026-05-14-ci-security-and-supply-chain",
       "story": "09-ci-security-guide-and-docs",