Keep review obligations visible and reconcile owner evidence (RISK-WP-0006, RISK-WP-0007)

check_all runs every check stage even when one fails; malformed dates are
reported rather than aborting; accepted findings and closure evidence are
shown; defer requires a valid future date. Adds SCOPE.md, the scope
assessment, the open-findings source review and a unittest suite. Stops
tracking __pycache__.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 6903@bnt-lap001
Assistant-Session: 8319e8a8-ffa6-4eb3-b8bf-b29945628f89

tools/check_all.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python3
+"""Run all read-only checks, retaining failures without hiding later reports."""
+import pathlib
+import subprocess
+import sys
+
+TOOLS = pathlib.Path(__file__).resolve().parent
+STAGES = (("register_index.py", "--check"), ("register_check.py",), ("inbox_check.py",))
+
+
+def main() -> int:
+    failed = False
+    for stage in STAGES:
+        try:
+            result = subprocess.run([sys.executable, str(TOOLS / stage[0]), *stage[1:]])
+            failed = result.returncode != 0 or failed
+        except OSError as exc:
+            print(f"{stage[0]}: could not run: {exc}", flush=True)
+            failed = True
+        print(flush=True)
+    return int(failed)
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())