fix(e2e): fail closed during run lookup

Signed-off-by: Julie Yaunches <jyaunches@nvidia.com>

Author: jyaunches

.agents/skills/nemoclaw-maintainer-e2e/references/main-runs.md

@@ -90,6 +90,7 @@ gh workflow run .github/workflows/e2e.yaml \
 Do not dispatch again because the run is slow to appear. Find it with bounded reads:
 
 ```bash
+set -euo pipefail
 RUN_TITLE="E2E main (${CORRELATION_ID})"
 if [[ "$RUN_MODE" == full ]]; then
   RUN_TITLE="E2E full main (${CORRELATION_ID})"

.agents/skills/nemoclaw-maintainer-e2e/references/manual-pr.md

@@ -80,6 +80,7 @@ The trusted pre-checkout step requires current repository `maintain` or `admin`
 ## Find and Verify the Run
 
 ```bash
+set -euo pipefail
 RUN_TITLE="E2E PR #${PR_NUMBER} (${CORRELATION_ID})"
 MATCHES='[]'
 for POLL_INDEX in $(seq 1 30); do

test/maintainer-e2e-skill.test.ts

@@ -45,6 +45,7 @@ describe("nemoclaw-maintainer-e2e workflow routing", () => {
     expect(mainRuns).toContain("every release-required job must succeed");
     expect(mainRuns).toContain('-f "include_staging_brev_launchable=${INCLUDE_LAUNCHABLE}"');
     expect(mainRuns).toContain('RUN_TITLE="E2E full main (${CORRELATION_ID})"');
+    expect(mainRuns).toMatch(/Find it with bounded reads:\n\n```bash\nset -euo pipefail/u);
     expect(mainRuns).toContain('test "$RUN_SHA" = "$CANDIDATE_SHA"');
     expect(mainRuns).toContain("It is not a tag-authorization rule");
     expect(mainRuns).toContain("launchable-e2e.json");
@@ -76,6 +77,7 @@ describe("nemoclaw-maintainer-e2e workflow routing", () => {
     expect(manualPr).toContain('-f "base_sha=${BASE_SHA}"');
     expect(manualPr).toContain('-f "workflow_sha=${WORKFLOW_SHA}"');
     expect(manualPr).toContain("nemoclaw-e2e-dispatch-v2");
+    expect(manualPr).toMatch(/## Find and Verify the Run\n\n```bash\nset -euo pipefail/u);
     expect(manualPr).toContain("The Exact staging Brev Launchable path is not available");
   });
 });

test/release-candidate-evidence.test.ts

@@ -14,8 +14,22 @@ const evidencePath = path.join(
   ".agents/skills/nemoclaw-maintainer-cut-release-tag/references/candidate-evidence.md",
 );
 const evidence = fs.readFileSync(evidencePath, "utf8");
-const bashBlocks = [...evidence.matchAll(/```bash\n([\s\S]*?)```/gu)].map((match) => match[1]);
-const releaseEntryBlock = bashBlocks[1] ?? "";
+
+function bashBlockUnder(heading: string): string {
+  const headingStart = evidence.indexOf(heading);
+  if (headingStart === -1) {
+    throw new Error(`candidate-evidence.md is missing ${heading}`);
+  }
+  const nextHeading = evidence.indexOf("\n## ", headingStart + heading.length);
+  const section = evidence.slice(headingStart, nextHeading === -1 ? undefined : nextHeading);
+  const block = /```bash\n([\s\S]*?)```/u.exec(section)?.[1];
+  if (!block) {
+    throw new Error(`candidate-evidence.md is missing a bash block under ${heading}`);
+  }
+  return block;
+}
+
+const releaseEntryBlock = bashBlockUnder("## Release Entry and Pi Result");
 const temporaryDirectories: string[] = [];
 
 const shellHelpers = String.raw`