fix(P03): honest execution — real rollback, honest orchestrator, git-native verification

---ci---
project: ci
phase: 3
milestone: v0.5
status: complete
decisions:
  - id: D-026
    decision: Phase 3 Honest Execution complete
    rationale: All HONEST requirements covered; no more fake success returns
    confidence: 0.95
    alternatives: []
requirements:
  covered: [HONEST-01, HONEST-02, HONEST-03]
---/ci---

src/verification/behavioral.ts

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { execSync } from "node:child_process";
 import { VerificationLayer, VerificationResult, VerificationCheck } from "./types.js";
 
 const TEST_FRAMEWORK_PATTERNS = [
@@ -106,15 +107,59 @@ export class BehavioralVerification extends VerificationLayer {
   }
 
   private checkSpecificationRequirements(projectPath: string): VerificationCheck {
-    const specPath = path.join(projectPath, ".ci", "specification.md");
+    const reqPath = path.join(projectPath, ".ci", "REQUIREMENTS.md");
+    const projectPath_md = path.join(projectPath, ".ci", "PROJECT.md");
+
+    const specPath = reqPath;
     if (!fs.existsSync(specPath)) {
+      const altPath = projectPath_md;
+      if (!fs.existsSync(altPath)) {
+        return this.check(
+          "Specification requirements traceable",
+          "skipped",
+          "No REQUIREMENTS.md or PROJECT.md found"
+        );
+      }
+      return this.checkFromProjectMd(altPath);
+    }
+
+    const content = fs.readFileSync(specPath, "utf-8");
+    const requirements = content
+      .split("\n")
+      .filter((line) => /^\|.*\|.*\|.*\|/.test(line) && !line.includes("REQ-ID") && !line.includes("---"))
+      .map((line) => {
+        const cols = line.split("|").map((c) => c.trim()).filter(Boolean);
+        return cols.length >= 2 ? cols[1] : "";
+      })
+      .filter(Boolean);
+
+    if (requirements.length === 0) {
+      const listRequirements = content
+        .split("\n")
+        .filter((line) => line.trim().startsWith("- "))
+        .map((line) => line.trim().slice(2));
+      if (listRequirements.length === 0) {
+        return this.check(
+          "Specification requirements traceable",
+          "warning",
+          "No requirements found in REQUIREMENTS.md"
+        );
+      }
       return this.check(
         "Specification requirements traceable",
-        "skipped",
-        "No specification file found"
+        "pass",
+        `Found ${listRequirements.length} requirement(s)`
       );
     }
 
+    return this.check(
+      "Specification requirements traceable",
+      "pass",
+      `Found ${requirements.length} requirement(s) in REQUIREMENTS.md`
+    );
+  }
+
+  private checkFromProjectMd(specPath: string): VerificationCheck {
     const content = fs.readFileSync(specPath, "utf-8");
     const requirements = content
       .split("\n")
@@ -129,7 +174,7 @@ export class BehavioralVerification extends VerificationLayer {
       return this.check(
         "Specification requirements traceable",
         "warning",
-        "No requirements found in specification"
+        "No requirements found in PROJECT.md"
       );
     }