Lock C2FLR against a GitHub issue. Whoever gets a fixing PR merged — human or agent — is paid trustlessly: FDC attests the merge for public repos, the Confidential Compute verifier covers private ones.