Validate visible rendered provenance

Authored-By: Codex (GPT-5) <noreply@openai.com>

README.md

@@ -38,6 +38,8 @@ jobs:
           pr-title: ${{ github.event.pull_request.title }}
           pr-author: ${{ github.event.pull_request.user.login }}
           pr-body: ${{ github.event.pull_request.body }}
+          server-url: ${{ github.server_url }}
+          token: ${{ github.token }}
           base-sha: ${{ github.event.pull_request.base.sha }}
           head-sha: ${{ github.event.pull_request.head.sha }}
 ```
@@ -53,6 +55,8 @@ job — the step still fails, but the job cannot block the PR.
 | `pr-title` | yes | PR title — `github.event.pull_request.title` |
 | `pr-author` | no | PR author login — `github.event.pull_request.user.login`; `dfritz` is exempt |
 | `pr-body` | yes | PR description — `github.event.pull_request.body` |
+| `server-url` | yes | Gitea server URL — `github.server_url` |
+| `token` | yes | Gitea Actions token — `github.token` |
 | `base-sha` | yes | Base commit — `github.event.pull_request.base.sha` |
 | `head-sha` | yes | Head commit — `github.event.pull_request.head.sha` |
 
@@ -73,9 +77,9 @@ The check validates four things for every non-break-glass Agent PR:
    `Fixes bug-<id>` automation token and the matching navigable
    `https://agenthub.fritzlab.net/bug-<id>` URL. Every PR has a separate
    `## Attribution` section containing the canonical `Authored-By`
-   product/model watermark. Agent-authored PR bodies cannot contain HTML
-   comment or fenced code delimiters, so required provenance cannot be hidden
-   from readers.
+   product/model watermark. The action asks Gitea to render the body and checks
+   the rendered `<h2>` sections; fenced, commented, scripted, or collapsed
+   copies do not satisfy the visible provenance contract.
 
 4. **Commit attribution** — every commit in `base-sha..head-sha`, including
    commits on `chore/` branches, ends with