Raise the mesh as it is in the gate, call a baseline that does not compose an error, and let a check run by hand as the seat runs it

The gate composed 0 of 4 machines with the change and without, and passed every change: the store it
raised held each module's bus credential but no account for it (issue 203's refusal), no outward links
(so no filter could be composed), and refused settings the mesh holds. Now the account is minted with
its credential, the facts carry each machine's outward links (a stand-in for an older snapshot), the
mesh's layers are kept as held, and a withheld path keeps a path's shape. A machine the mesh composes
that the gate cannot raise makes the verdict an error, never a pass; the verdict alone is on stdout.

A merge-check.sh that passed on an agent's machine failed on the build seat: a newer gofmt, siblings at
a feature branch, another user. `mesh-controller check-here` runs builder.Check with the ask the
controller would make, from facts that now name the toolchains and the refs cloned beside; a failed
script is said by what failed. (novox/hq issues 282, 283)

internal/builder/check_test.go

@@ -414,3 +414,18 @@ func TestABuildSaysWhetherItsCommitIsOnTheTrunk(t *testing.T) {
 		t.Errorf("a repository with no origin reads as trunk %q, on %v", trunk, on)
 	}
 }
+
+// **Issue 283**: a failed merge-check.sh was said by its last line — a bare "FAIL", or the name of a file
+// gofmt listed — which named nothing a reader could act on. The status says what failed.
+func TestAFailedScriptIsSaidByWhatFailed(t *testing.T) {
+	for out, want := range map[string]string{
+		"not gofmt'd:\ninternal/bootstrap/publish_test.go\n":                                                                 "not gofmt'd by the toolchain's gofmt: internal/bootstrap/publish_test.go",
+		"ok  \tx/a\t1s\n--- FAIL: TestTheInstallersFirstUserList (0.59s)\n    t.go:37: refused\nFAIL\nFAIL\tx/b\t1s\nFAIL\n": "--- FAIL: TestTheInstallersFirstUserList (0.59s)",
+		"ok  \tx/a\t1s\nFAIL\tx/b [build failed]\nFAIL\n":                                                                    "FAIL\tx/b [build failed]",
+		"npm ERR! missing script: typecheck\n":                                                                               "npm ERR! missing script: typecheck",
+	} {
+		if got := whatFailed(out); got != want {
+			t.Errorf("%q is said as %q, not %q", out, got, want)
+		}
+	}
+}