Two Commits per Refactor: A Diff Gate That Keeps Pins Away From the Move

Most messy-repo refactors fail at review, not at runtime. The riskiest commit is the one that edits...