A landing that changed the manifest rules left $JOBS_STATE_DIR/bin/job-check at the rules of an earlier main, and the next submit was refused by them. bench/after-land.sh now runs jobs/scripts/install-job-check.sh as its last step, skipped by --dry-run; a failure is one line on stderr and never changes the exit status.