test(ai): make the retarget slot-legality rows discriminate in both directions - #7480

Investigator 1/3: Investigator 1 of 3 reviewed 34 PRs from contributor 'matthewevans' (shard of 100 candidate PRs). All hydrated patches are consistent with legitimate membership in the phase-rs/phase project — a Magic: The Gathering rules engine. The five PRs with full patch coverage (7382, 7412, 7398, 7392, 7383) show benign engine fixes, serialization migrations, test coverage, and changelog updates. No credential exfiltration, hidden network calls, dependency manipulation, obfuscated code, CI tampering, or permission broadening was found in any reviewed file. The contributor is an organization MEMBER, all activity is concentrated in a single repository, and the code quality and review context (automated coverage reports, CodeRabbit summaries) are normal. 24 PRs in this shard were metadata-only (patches omitted for latency), and 5 were preview/truncated; this limits confidence to medium despite the clean signals in fully hydrated PRs. Investigator 2/3: Investigator-2 shard review of 33 PRs for matthewevans (all targeting phase-rs/phase). Five PRs had full patch hydration and were adversarially reviewed at patch level; none exhibited malicious or backdoor behavior. Reviewed patches consisted of: (1) a defensive parser refactor for passive-voice damage triggers with explicit remainder guards and adversarial tests, (2-3) automated MTG deck-list data refreshes with no executable code, (4) documentation-only additions to agent skill definitions, and (5) a platform-gating build fix for Linux-only test tools. The contributor is a repository MEMBER. Twenty-eight PRs in this shard were metadata-only or preview-truncated and could not be patch-reviewed; their titles and file paths are consistent with legitimate engine fixes, test coverage, and data maintenance. No cross-repository PR targeting was observed. Confidence is medium rather than high because 70 of 100 candidate PRs were omitted globally, so patch-level coverage is incomplete. Investigator 3/3: Investigator 3 reviewed the assigned shard of 33 candidate PRs for matthewevans (30 hydrated). All five PRs with full patch mode were adversarially reviewed and found clean: two were automated MTGJSON catalog date bumps (crates/engine/data/mtgjson-vintage), and three were substantive Magic: The Gathering engine bug fixes with accompanying integration tests (legacy trigger snapshot pruning in game_state.rs, legacy mana-spend trigger deserialization in mana.rs, and dead replacement-drain avoidance in replacement.rs). None of the reviewed patches introduced suspicious execution paths, network calls, dependency changes, CI tampering, obfuscation, or permission broadening. The remaining 25 PRs in this shard were either preview mode with truncated patches or metadata-only and were marked unknown. The contributor is a MEMBER of the target organization (phase-rs), all PRs target a single repository (phase-rs/phase), there is no cross-repo activity to unrelated projects, no unsolicited PRs, and no rejected PRs. No credible malicious or backdoor evidence was found in any reviewable patch. Patch-level safety guard downgraded the result to caution: 70 PRs were metadata-only after compact hydration.