[vchamarthi]

Adds --fail-on-warning to repo validate, matching repo budget, so a CI job can fail on a validation warning. Default behavior is unchanged.

Evidence

• base: 61e0355 (vchamarthi/dokimi main, synced from intel/dokimi)
• command: experiment_safe.py running check.py (builds a one-task toy repo whose guidance.also_scan matches nothing, parses repo validate <dir> --manifest ... without and with --fail-on-warning) against a copy of the tree at base and at the branch
• before: no flag exits 0 with warning: guidance/also_scan matches no file; --fail-on-warning is dokimi: error: unrecognized arguments, exit 2
• after: no flag still exits 0 with the same warning; --fail-on-warning prints the warning and exits 1
• not claimed: the new pytest test_repo_validate_fail_on_warning fails at base under the sandbox (git rev-parse failed: Operation not permitted: '/dev/null', the sandbox denies /dev/null) and was not run green; make ci-local was not run. The check script stubbed the git tree listing.

Blast radius

repo validate only: one optional flag, default off. Errors still exit 1; output and exit codes without the flag are unchanged. Contract doc usage line and a changelog fragment updated.

Overlap

• checked: intel/dokimi
• intel/dokimi open: 19
• vchamarthi/dokimi open: 7
• feat(repo): skill/skill-catalog arms, cache tokens, MCP config when repo ships one intel/dokimi#137 not the same: arms and cache tokens; shares only the contract doc.
• feat(repos): built-in review graders dokimi:review_seeds and dokimi:review_replay intel/dokimi#120 not the same: review graders; shares only the contract doc.
• feat(repo): Codex and Copilot CLI harness profiles, native review mode intel/dokimi#116 not the same: harness profiles; shares only the contract doc.
• repo scan: L0 rules for parity with oneDAL static_check (D6) intel/dokimi#115 not the same: scan L0 rules; shares only the contract doc.
• feat(repo): compare flags comparisons with no headroom intel/dokimi#114 not the same: compare headroom flag; shares only the contract doc.
• ci: reusable repo-eval workflow (validate, scan, tasks check) with dokimi pinned intel/dokimi#113 not the same: reusable CI workflow; shares the contract doc and test_repo_manifest.py but does not add a validate flag.
• feat(repo): --delegation and an execution id for repo run cells intel/dokimi#107 not the same: repo run delegation; shares only the contract doc.
• ci(docs): flag docs pages whose depends_on code a PR changes intel/dokimi#92 not the same: docs CI check; shares only the contract doc.
• feat(repo): repo budget --out writes the inventory as JSON #9 not the same: repo budget --out; different subcommand, same files, no conflicting hunk expected.
• feat(repo): repo fetch --json prints the pinned sha as JSON #8 not the same: repo fetch --json; different subcommand, same files, no conflicting hunk expected.

Created with claude-sonnet-5-5.

[vchamarthi]

Superseded by intel#149 and intel#150.