{"parentUuid":null,"isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":"Read-only enumeration task in C:\\Users\\decid\\Documents\\projects\\spt-core. Do NOT run cargo, tests, or any build; do NOT edit files except the one output file named below.\n\nRead docs/INFRA-REGISTER.md in full (it is ~3,400 lines; read it in chunks with offset/limit until you reach the end — do not stop early). Produce a draft sweep table for the gater at:\nC:\\Users\\decid\\Documents\\projects\\spt-core\\REGISTER-SWEEP-0671-DRAFT.md\n\nFor EVERY entry id (IR-1 … IR-76, and any others present), one row:\n| id | title (≤8 words) | status field as written | trigger condition as written (≤25 words, quote it) | size guess | lane-linked? (name the lane/issue if the entry says so) | last touched date in the entry |\n\nThen a second section \"Candidates\" listing entry ids whose trigger condition mentions any of these facts, which are now true as of 2026-09-06: v0.67.1 shipped (golden 34017906638 att4 green, tag 04e32c8c); WEBSERVE milestone #272 GREENLIT with waves W0–W3 (serving registry, cross-node proxy over Iroh streams, attachments, docs facets, bootstrap LAN listener); a new docs-site [service] manifest section published; nextest --no-fail-fast now mandatory in driver templates; io-events seq-reset bug #277 filed; IR-76 (golden Windows box shared with builders; three-arm pre-flight) filed. For each candidate, one line saying WHICH fact matches WHICH words in its trigger. Do not rule; do not recommend. Quote, do not paraphrase, the status and trigger text.\n\nFinish with a count line: \"N entries enumerated, M candidates\" and the line number of the last entry you read, so the gater can verify you reached the end of the file."},"uuid":"6e9b2a03-173c-44a7-80ee-cbe2c7402c81","timestamp":"2026-09-06T11:16:00.679Z","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"6e9b2a03-173c-44a7-80ee-cbe2c7402c81","isSidechain":true,"agentId":"a854aff5dd30b27ec","attachment":{"type":"deferred_tools_delta","addedNames":["EnterWorktree","ExitWorktree","Monitor","NotebookEdit","SendMessage","TaskStop","WebFetch","WebSearch","mcp__claude_ai_Google_Drive__authenticate","mcp__claude_ai_Google_Drive__complete_authentication","mcp__plugin_screen-timelapse_screen-timelapse__compile_subset_grid","mcp__plugin_screen-timelapse_screen-timelapse__delete_repository_session","mcp__plugin_screen-timelapse_screen-timelapse__delete_screenshot_profile","mcp__plugin_screen-timelapse_screen-timelapse__delete_timing_profile","mcp__plugin_screen-timelapse_screen-timelapse__get_capture_status","mcp__plugin_screen-timelapse_screen-timelapse__list_repository_frames","mcp__plugin_screen-timelapse_screen-timelapse__list_repository_sessions","mcp__plugin_screen-timelapse_screen-timelapse__list_screenshot_profiles","mcp__plugin_screen-timelapse_screen-timelapse__list_timing_profiles","mcp__plugin_screen-timelapse_screen-timelapse__list_windows","mcp__plugin_screen-timelapse_screen-timelapse__save_screenshot_profile","mcp__plugin_screen-timelapse_screen-timelapse__save_timing_profile","mcp__plugin_screen-timelapse_screen-timelapse__start_capture","mcp__plugin_screen-timelapse_screen-timelapse__start_repository_capture"],"addedLines":["EnterWorktree","ExitWorktree","Monitor","NotebookEdit","SendMessage","TaskStop","WebFetch","WebSearch","mcp__claude_ai_Google_Drive__authenticate","mcp__claude_ai_Google_Drive__complete_authentication","mcp__plugin_screen-timelapse_screen-timelapse__compile_subset_grid","mcp__plugin_screen-timelapse_screen-timelapse__delete_repository_session","mcp__plugin_screen-timelapse_screen-timelapse__delete_screenshot_profile","mcp__plugin_screen-timelapse_screen-timelapse__delete_timing_profile","mcp__plugin_screen-timelapse_screen-timelapse__get_capture_status","mcp__plugin_screen-timelapse_screen-timelapse__list_repository_frames","mcp__plugin_screen-timelapse_screen-timelapse__list_repository_sessions","mcp__plugin_screen-timelapse_screen-timelapse__list_screenshot_profiles","mcp__plugin_screen-timelapse_screen-timelapse__list_timing_profiles","mcp__plugin_screen-timelapse_screen-timelapse__list_windows","mcp__plugin_screen-timelapse_screen-timelapse__save_screenshot_profile","mcp__plugin_screen-timelapse_screen-timelapse__save_timing_profile","mcp__plugin_screen-timelapse_screen-timelapse__start_capture","mcp__plugin_screen-timelapse_screen-timelapse__start_repository_capture"],"removedNames":[],"wireHiddenNames":[],"readdedNames":[]},"type":"attachment","uuid":"9bc64bc5-5fbf-4fc4-b55f-ca1240a03560","timestamp":"2026-09-06T11:16:00.919Z","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"9bc64bc5-5fbf-4fc4-b55f-ca1240a03560","isSidechain":true,"agentId":"a854aff5dd30b27ec","attachment":{"type":"skill_listing","content":"- _gstack-command: Router for the gstack skill suite. (gstack)\n- autoplan: Auto-review pipeline — reads the full CEO, design, eng, and DX review skills from disk and runs them sequentially with auto-decisions using 6 decision principles. (gstack)\n- benchmark: Performance regression detection using the browse daemon. (gstack)\n- benchmark-models: Cross-model benchmark for gstack skills. (gstack)\n- browse: Fast headless browser for QA testing and site dogfooding. (gstack)\n- canary: Post-deploy canary monitoring. (gstack)\n- careful: Safety guardrails for destructive commands. (gstack)\n- caveman: Ultra-compressed communication mode. Cuts token usage ~75% by dropping filler, articles, and pleasantries while keeping full technical accuracy. Use when user says \"caveman mode\", \"talk like caveman\", \"use caveman\", \"less tokens\", \"be brief\", or invokes /caveman.\n- ccs-delegation: Auto-activate CCS CLI delegation for deterministic tasks. Parses user input, auto-selects optimal profile (glm/kimi/custom) from ~/.ccs/config.json, enhances prompts with context, executes via `ccs {profile} -p \"task\"` or `ccs {profile}:continue`, and reports results. Triggers on \"use ccs [task]\" patterns, typo/test/refactor keywords. Excludes complex architecture, security-critical code, performance optimization, breaking changes.\n- checkpoint: Save and resume working state checkpoints. Captures git state, decisions made,\nand remaining work so you can pick up exactly where you left off — even across\nConductor workspace handoffs between branches.\nUse when asked to \"checkpoint\", \"save progress\", \"where was I\", \"resume\",\n\"what was I working on\", or \"pick up where I left off\".\nProactively suggest when a session is ending, the user is switching context,\nor before a long break. (gstack)\n- code-review: Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes — Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/spec asked for?). Runs both reviews in parallel sub-agents and reports them side by side. Use when the user wants to review a branch, a PR, work-in-progress changes, or asks to \"review since X\".\n- codebase-design: Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.\n- codex: OpenAI Codex CLI wrapper — three modes. (gstack)\n- connect-chrome: Launch GStack Browser — AI-controlled Chromium with the sidebar extension baked in.\n- context-restore: Restore working context saved earlier by /context-save. (gstack)\n- context-save: Save working context. (gstack)\n- cso: Chief Security Officer mode. (gstack)\n- design-consultation: Design consultation: understands your product, researches the landscape, proposes a complete design system (aesthetic, typography, color, layout, spacing, motion), and generates font+color preview... (gstack)\n- design-html: Design finalization: generates production-quality Pretext-native HTML/CSS. (gstack)\n- design-review: Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them. (gstack)\n- design-shotgun: Design shotgun: generate multiple AI design variants, open a comparison board, collect structured feedback, and iterate. (gstack)\n- devex-review: Live developer experience audit. (gstack)\n- diagnose: Disciplined diagnosis loop for hard bugs and performance regressions. Reproduce → minimise → hypothesise → instrument → fix → regression-test. Use when user says \"diagnose this\" / \"debug this\", reports a bug, says something is broken/throwing/failing, or describes a performance regression.\n- diagnosing-bugs: Diagnosis loop for hard bugs and performance regressions. Use when the user says \"diagnose\"/\"debug this\", or reports something broken/throwing/failing/slow.\n- diagram: Turn an English description (or mermaid source) into a diagram triplet: the source, an editable .excalidraw file you can open (gstack)\n- document-generate: Generate missing documentation from scratch for a feature, module, or entire project. (gstack)\n- document-release: Post-ship documentation update. (gstack)\n- domain-modeling: Build and sharpen a project's domain model. Use when the user wants to pin down domain terminology or a ubiquitous language, record an architectural decision, or when another skill needs to maintain the domain model.\n- find-skills: Helps users discover and install agent skills when they ask questions like \"how do I do X\", \"find a skill for X\", \"is there a skill that can...\", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.\n- freeze: Restrict file edits to a specific directory for the session. (gstack)\n- git-guardrails-claude-code: Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.\n- grilling: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.\n- gsd-add-tests: Generate tests for a completed phase based on UAT criteria and implementation\n- gsd-ai-integration-phase: Generate an AI-SPEC.md design contract for phases that involve building AI systems.\n- gsd-audit-fix: Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit\n- gsd-audit-milestone: Audit milestone completion against original intent before archiving\n- gsd-audit-uat: Cross-phase audit of all outstanding UAT and verification items\n- gsd-autonomous: Run all remaining phases autonomously — discuss→plan→execute per phase\n- gsd-capture: Capture ideas, tasks, notes, and seeds to their destination\n- gsd-cleanup: Archive accumulated phase directories from completed milestones\n- gsd-code-review: Review source files changed during a phase for bugs, security issues, and code quality problems\n- gsd-complete-milestone: Archive completed milestone and prepare for next version\n- gsd-config: Configure GSD settings — workflow toggles, advanced knobs, integrations, and model profile\n- gsd-debug: Systematic debugging with persistent state across context resets\n- gsd-discuss-phase: Gather phase context through adaptive questioning before planning.\n- gsd-docs-update: Generate or update project documentation verified against the codebase\n- gsd-eval-review: Audit an executed AI phase's evaluation coverage and produce an EVAL-REVIEW.md remediation plan.\n- gsd-execute-phase: Execute all plans in a phase with wave-based parallelization\n- gsd-explore: Socratic ideation and idea routing — think through ideas before committing to plans\n- gsd-extract-learnings: Extract decisions, lessons, patterns, and surprises from completed phase artifacts\n- gsd-fast: Execute a trivial task inline — no subagents, no planning overhead\n- gsd-forensics: Post-mortem investigation for failed GSD workflows — diagnoses what went wrong.\n- gsd-graphify: Build, query, and inspect the project knowledge graph in .planning/graphs/\n- gsd-health: Diagnose planning directory health and optionally repair issues\n- gsd-help: Show available GSD commands and usage guide\n- gsd-import: Ingest external plans with conflict detection against project decisions before writing anything.\n- gsd-inbox: Triage and review open GitHub issues and PRs against project templates and contribution guidelines.\n- gsd-ingest-docs: Bootstrap or merge a .planning/ setup from existing ADRs, PRDs, SPECs, and docs in a repo.\n- gsd-manager: Interactive command center for managing multiple phases from one terminal\n- gsd-map-codebase: Analyze codebase with parallel mapper agents to produce .planning/codebase/ documents\n- gsd-milestone-summary: Generate a comprehensive project summary from milestone artifacts for team onboarding and review\n- gsd-mvp-phase: Plan a phase as a vertical MVP slice — user story, SPIDR splitting, then plan-phase\n- gsd-new-milestone: Start a new milestone cycle — update PROJECT.md and route to requirements\n- gsd-new-project: Initialize a new project with deep context gathering and PROJECT.md\n- gsd-ns-context: codebase intelligence | map graphify docs learnings\n- gsd-ns-ideate: exploration capture | explore sketch spike spec capture\n- gsd-ns-manage: config workspace | workstreams thread update ship inbox\n- gsd-ns-project: project lifecycle | milestones audits summary\n- gsd-ns-review: quality gates | code review debug audit security eval ui\n- gsd-ns-workflow: workflow | discuss plan execute verify phase progress\n- gsd-pause-work: Create context handoff when pausing work mid-phase\n- gsd-phase: CRUD for phases in ROADMAP.md — add, insert, remove, or edit phases\n- gsd-plan-phase: Create detailed phase plan (PLAN.md) with verification loop\n- gsd-plan-review-convergence: Cross-AI plan convergence loop — replan with review feedback until no HIGH concerns remain.\n- gsd-pr-branch: Create a clean PR branch by filtering out .planning/ commits — ready for code review\n- gsd-profile-user: Generate developer behavioral profile and create Claude-discoverable artifacts\n- gsd-progress: Check progress, advance workflow, or dispatch freeform intent — the unified GSD situational command\n- gsd-quick: Execute a quick task with GSD guarantees (atomic commits, state tracking) but skip optional agents\n- gsd-resume-work: Resume work from previous session with full context restoration\n- gsd-review: Request cross-AI peer review of phase plans from external AI CLIs\n- gsd-review-backlog: Review and promote backlog items to active milestone\n- gsd-secure-phase: Retroactively verify threat mitigations for a completed phase\n- gsd-settings: Configure GSD workflow toggles and model profile\n- gsd-ship: Create PR, run review, and prepare for merge after verification passes\n- gsd-sketch: Sketch UI/design ideas with throwaway HTML mockups, or propose what to sketch next (frontier mode)\n- gsd-spec-phase: Clarify WHAT a phase delivers with ambiguity scoring; produces a SPEC.md before discuss-phase.\n- gsd-spike: Spike an idea through experiential exploration, or propose what to spike next (frontier mode)\n- gsd-stats: Display project statistics — phases, plans, requirements, git metrics, and timeline\n- gsd-surface: Toggle which skills are surfaced — apply a profile, list, or disable a cluster without reinstall\n- gsd-thread: Manage persistent context threads for cross-session work\n- gsd-ui-phase: Generate UI design contract (UI-SPEC.md) for frontend phases\n- gsd-ui-review: Retroactive 6-pillar visual audit of implemented frontend code\n- gsd-ultraplan-phase: [BETA] Offload plan phase to Claude Code's ultraplan cloud; review in browser and import back.\n- gsd-undo: Safe git revert. Roll back phase or plan commits using the phase manifest with dependency checks.\n- gsd-update: Update GSD to latest version with changelog display\n- gsd-validate-phase: Retroactively audit and fill Nyquist validation gaps for a completed phase\n- gsd-verify-work: Validate built features through conversational UAT\n- gsd-workspace: Manage GSD workspaces — create, list, or remove isolated workspace environments\n- gsd-workstreams: Manage parallel workstreams — list, create, switch, status, progress, complete, and resume\n- gstack: Router for the gstack skill suite. (gstack)\n- gstack-upgrade: Upgrade gstack to the latest version.\n- guard: Full safety mode: destructive command warnings + directory-scoped edits. (gstack)\n- health: Code quality dashboard. (gstack)\n- investigate: Systematic debugging with root cause investigation. (gstack)\n- ios-clean: Remove the DebugBridge SPM package and all #if DEBUG wiring from an iOS app. (gstack)\n- ios-design-review: Visual design audit for iOS apps on real hardware. (gstack)\n- ios-fix: Autonomous iOS bug fixer. (gstack)\n- ios-qa: Live-device iOS QA for SwiftUI apps. (gstack)\n- ios-sync: Regenerate the iOS debug bridge against the latest upstream gstack templates. (gstack)\n- land-and-deploy: Land and deploy workflow. (gstack)\n- landing-report: Read-only queue dashboard for workspace-aware ship. (gstack)\n- learn: Manage project learnings.\n- make-pdf: Turn any markdown file into a publication-quality PDF. (gstack)\n- migrate-to-shoehorn: Migrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in tests, or needs partial test data.\n- mux-send: Send keystrokes to a psmux terminal session. Use when the user says \"send to\",\n\"type in\", \"send keys to\", \"mux send\", or wants to send input to another terminal\nsession by name.\n- office-hours: YC Office Hours — two modes. (gstack)\n- open-gstack-browser: Launch GStack Browser — AI-controlled Chromium with the sidebar extension baked in.\n- pair-agent: Pair a remote AI agent with your browser. (gstack)\n- plan-ceo-review: CEO/founder-mode plan review. (gstack)\n- plan-design-review: Designer's eye plan review — interactive, like CEO and Eng review. (gstack)\n- plan-devex-review: Interactive developer experience plan review. (gstack)\n- plan-eng-review: Eng manager-mode plan review. (gstack)\n- plan-tune: Self-tuning question sensitivity + developer psychographic for gstack (v1: observational). (gstack)\n- propose-issue: Challenge an issue statement before fixing it. Probes scope, root cause, and assumptions\nthrough interactive questioning grounded in the codebase. Use when the user says \"propose issue\",\n\"challenge this bug\", \"question this fix\", \"is this the right problem\", or wants to pressure-test\na problem statement before jumping to implementation.\n- prototype: Build a throwaway prototype to answer a design question. Use when the user wants to sanity-check whether a state model or logic feels right, or explore what a UI should look like.\n- qa: Systematically QA test a web application and fix bugs found. (gstack)\n- qa-only: Report-only QA testing. (gstack)\n- research: Investigate a question against high-trust primary sources and capture the findings as a Markdown file in the repo. Use when the user wants a topic researched, docs or API facts gathered, or reading legwork delegated to a background agent.\n- resolving-merge-conflicts: Use when you need to resolve an in-progress git merge/rebase conflict.\n- retro: Weekly engineering retrospective. (gstack)\n- review: Pre-landing PR review. (gstack)\n- scaffold-exercises: Create exercise directory structures with sections, problems, solutions, and explainers that pass linting. Use when user wants to scaffold exercises, create exercise stubs, or set up a new course section.\n- scrape: Pull data from a web page. (gstack)\n- screenshot-capture: Capture, process, and analyze screenshots of any running application on Windows 10/11. Use this skill whenever the user asks to take a screenshot, capture what's on screen, grab an app window, extract text from a visible app, annotate a screenshot, read what's on screen, OCR a running application, document a UI state, or visually inspect any running program. Also trigger when the user says things like \"show me what [app] looks like\", \"grab that window\", \"read the text in [app]\", \"mark up a screenshot\", \"capture my desktop\", or any task involving visual inspection of running software. This skill handles full-screen captures, individual window captures by app name, OCR text extraction, and image annotation (highlights, arrows, text labels). Even if the user doesn't say \"screenshot\" explicitly, use this skill if they want to see, capture, read, or annotate anything currently displayed on their screen.\n- setup-browser-cookies: Import cookies from your real Chromium browser into the headless browse session. (gstack)\n- setup-deploy: Configure deployment settings for /land-and-deploy.\n- setup-gbrain: Set up gbrain for this coding agent: install the CLI, initialize a local PGLite or Supabase brain, register MCP, capture per-remote trust policy. (gstack)\n- setup-pre-commit: Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-commit hooks, set up Husky, configure lint-staged, or add commit-time formatting/typechecking/testing.\n- ship: Ship workflow: detect + merge base branch, run tests, review diff, bump VERSION, update CHANGELOG, commit, push, create PR. (gstack)\n- skillify: Codify the most recent successful /scrape flow into a permanent browser-skill on disk. (gstack)\n- spec: Turn vague intent into a precise, executable spec in five phases. (gstack)\n- sync-gbrain: Keep gbrain current with this repo's code and refresh agent search guidance in CLAUDE.md. Wraps the gstack-gbrain-sync orchestrator with state (gstack)\n- tdd: Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions \"red-green-refactor\", or wants integration tests.\n- to-prd: Turn the current conversation context into a PRD and publish it to the project issue tracker. Use when user wants to create a PRD from the current context.\n- trace: Find old conversations in Claude Code session history. Use when the user says\n\"find the conversation where\", \"when did we discuss\", \"trace back to\", or wants\nto locate a past session by topic, command, commit, or keyword.\n- traceable-reqs: Install or update the traceable-reqs CLI plus its bundled req-confusion-audit skill, and apply the CLI correctly in host repos: author manifests, place tags near evidence, audit scan roots, interpret findings, and answer coverage questions.\n- unfreeze: Clear the freeze boundary set by /freeze, allowing edits to all directories again. (gstack)\n- win-marketplace-add: Add a plugin marketplace on Windows, bypassing the EBUSY rename bug. Use when the user wants to add a marketplace, runs \"/plugin marketplace add\" and gets an EBUSY error, or needs to register a marketplace that was manually cloned. Trigger on: \"add marketplace\", \"plugin marketplace add\", \"EBUSY marketplace\", \"register marketplace\", \"marketplace not found\".\n- wizard: Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.\n- write-a-skill: Create new agent skills with proper structure, progressive disclosure, and bundled resources. Use when user wants to create, write, or build a new skill.\n- writing-for-agents: Writing documents for agents. Use when creating or editing skills, or modifying AGENTS.md or CLAUDE.md.\n- ccs: Delegate task with intelligent profile selection [AUTO ENHANCE]\n- ccs:continue: Continue last CCS delegation session [AUTO ENHANCE]\n- frontend-design:frontend-design: Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults.\n- caveman:caveman: Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says \"caveman mode\", \"talk like caveman\", \"use caveman\", \"less tokens\", \"be brief\", or invokes /caveman. Also auto-triggers when token efficiency is requested.\n- caveman:caveman-commit: Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when \"why\" isn't obvious. Use when user says \"write a commit\", \"commit message\", \"generate commit\", \"/commit\", or invokes /caveman-commit. Auto-triggers when staging changes.\n- caveman:caveman-help: Quick-reference card for all caveman modes, skills, and commands. One-shot display, not a persistent mode. Trigger: /caveman-help, \"caveman help\", \"what caveman commands\", \"how do I use caveman\".\n- caveman:caveman-review: Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says \"review this PR\", \"code review\", \"review the diff\", \"/review\", or invokes /caveman-review. Auto-triggers when reviewing pull requests.\n- caveman:compress: Compress natural language memory files (CLAUDE.md, todos, preferences) into caveman format to save input tokens. Preserves all technical substance, code, URLs, and structure. Compressed version overwrites the original file. Human-readable backup saved as FILE.original.md. Trigger: /caveman:compress <filepath> or \"compress memory file\"\n- everything:search: Instantly search files and folders on Windows via voidtools Everything 1.5a HTTP JSON API. Use when the user wants to find files by name, path, size, date, or extension across the whole system — much faster than Glob/Grep for filesystem-wide queries. Triggers on \"find file\", \"where is\", \"locate\", \"search my drive\", \"find all .ext files\", \"everything search\".\n- sptc:commune: Push a context update to your Psyche so it can brief your resume across a reset. Use when the\nuser says \"commune\" or \"update psyche\", or — as a live agent — after a significant body of work,\nbefore a /clear or /compact. Pass --across when the user asks you to commune across (or \"commune\nto next session\"): the commune ALSO auto-clears and wakes you from it, carrying you across to the\nnext session (an agent-driven context reset, no operator needed).\n- sptc:force-stop: Force-stop an SPT agent — a ready agent, or a live agent and its Psyche. Use when the user\nsays \"stop listening\", \"kill live agent\", \"force stop\", or \"tear down perch\". Session-aware: a\nlive target tears its Psyche down too.\n- sptc:knock: Ask another endpoint to let you reach it, and answer the asks you receive — spt's access control\n(per-endpoint grants over messaging and terminal surfaces). Use when the user wants permission to\nmessage or view an agent, wants to see or answer pending requests, or has an invite code to mint\nor redeem. Distinct from /sptc:subnet, which pairs machines.\n- sptc:list-agents: List SPT agents and endpoints reachable from this node. Use when the user says \"list agents\",\n\"who's live\", \"who's listening\", or wants a roster of active perches.\n- sptc:live: Run a live agent session. For past sessions, restores a summarized context.\n\nEXPLICIT START phrases (route to /sptc:live <id>):\n- \"live as\"\n- \"start live\"\n- \"go live\"\n- \"start a live agent\"\n\nAUTO-RESUME phrases (route to /sptc:live --auto, resumes most-recently-active live agent):\n- continue live work\n- resume live work\n- continue live agent\n- resume live agent\n- live agent continue\n- live agent resume\n- live work continue\n- live work resume\n\nDoes NOT route here (too ambiguous — require BOTH \"live\" AND (\"agent\" or \"work\")):\n- \"keep going\"\n- \"resume work\"\n- \"continue\" (bare)\n- sptc:ready: Make this Claude Code session reachable for inter-agent messages (register a perch and\nlisten). Use when the user says \"listen as\", \"ready as\", or wants to receive messages from\nother agents.\n- sptc:role: Show or edit this endpoint's durable role — its statement of purpose in the mind. Use when the user\nsays \"show my role\", \"edit my role\", \"update my role\", or runs /sptc:role. Pass a directive to change\nit in words (e.g. /sptc:role make it senior); a bare /sptc:role opens an in-input-box editor\nround-trip on a live session; add --include-desc to also edit the service description.\n- sptc:send: Send a message to another SPT agent. Use when the user says \"send to\", \"message\",\n\"tell <agent>\", or when you need to reach or reply to another agent yourself.\n- sptc:setup: Install or repair spt-core AND activate the claude-spt adapter for this Claude Code session\n(mid-session installer + post-install activation).\n- sptc:signoff: Gracefully shut down your live session, saving a final context summary. Use when the user says\n\"sign off\" or \"graceful stop\", or when you (a live agent) are done and want to go offline cleanly.\n- sptc:subnet: Manage subnet membership — create a subnet, show a pairing code to invite a machine, or join\nan existing one. Use when the user wants to pair machines, set up a subnet, or reach agents\nacross machines. Cross-machine /sptc:send and live agents depend on it.\n- sptc:version: Report the spt-core-tracked adapter version (the version-of-truth, not the marketplace plugin\nversion). Use when the user asks the spt or adapter version, or runs /sptc:version.\n- design: Create a design canvas - a multi-artboard visual design published as an Artifact that runs Claude Design's canvas editor (an early preview of Claude Design inside Claude Code). You DRAFT the design as .dc.html artboards laid out on one pan/zoom canvas; where saving is enabled for the user's account they refine every element visually (click-to-select, a properties panel, inline text editing, undo/redo) and Save publishes a new version for everyone, otherwise they get a view-and-export (PNG/PDF) preview of your draft. Good for UI mockups and screen flows, landing pages, marketing and social graphics, and print pieces - posters, flyers, brochures as single-page artboards; memos and reports as one flowing artboard. Use when someone wants a design, mockup, wireframe, UI or screen design, landing page, poster, flyer, brochure, banner, card, one-pager, or any visual layout they would rather tweak by hand than in code. Only for CREATING or re-seeding a canvas; an existing one is edited in its published Artifact.\n- dataviz: Use this skill whenever you are about to create ANY chart, graph, plot, dashboard, or data visualization, in ANY output medium — an HTML or React artifact, inline SVG, plotting code in any library (matplotlib, plotly, d3, Recharts, …), an image/PNG you will render and upload, or a chart shared into Slack. Read it BEFORE writing the first line of chart code, choosing chart colors, building a stat tile / meter / KPI row, or laying out a dashboard. When the destination is a first-party document connector (host-designated, never self-described) that renders live charts, hand it the rows (inline, or as an uploaded data file the chart cites) rather than a rendered PNG/SVG — a picture of a chart loses hover, data inspection and per-value comments. Produces visualizations that read as one system — elegant, accessible, consistent in light and dark — using a brand-neutral placeholder palette you swap for your own. Teaches a design-system-agnostic method: a form heuristic, a color formula with a runnable validator, mark specs, and interaction rules. A validated default palette is documented in `references/palette.md` — swap that file's values for your brand's. Triggers on: \"chart\", \"graph\", \"plot\", \"data viz\", \"visualization\", \"dashboard\", \"analytics\", \"visualize data\", \"categorical colors\", \"sequential / diverging palette\", \"stat tile\", \"sparkline\", \"heatmap\", \"legend\", \"axis\", \"tooltip\", \"chart colors\", \"color by series\".\n- artifact-design: Design guidance and fundamentals for Artifacts. - Load before writing any artifact, including a skill-instructed Markdown one - Markdown is never a shortcut past the design pass.\n- artifact-diagramming: Diagramming know-how for Artifacts - when a picture earns its place, how to draw one that shows the real mechanism, and the inline-SVG mechanics that keep it legible in both themes.\n- artifact-capabilities: Runtime capabilities a published Artifact page can be granted — behavior static HTML cannot provide on its own, such as the page reading live or connected data, remembering what people do on it (a poll, a sign-up sheet, a checklist, a document edited in place — it saves new versions of itself), keeping state shared across viewers, knowing who is viewing, asking Claude a question of its own, storing files people add, or handing the viewer a file to save. Serves this user's live capability roster and the typed call definitions. Load it whenever the user asks for an artifact needing any such runtime behavior.\n- update-config: Use this skill to configure the Claude Code harness via settings.json. Automated behaviors (\"from now on when X\", \"each time X\", \"whenever X\", \"before/after X\") require hooks configured in settings.json - the harness executes these, not Claude, so memory/preferences cannot fulfill them. Also use for: permissions (\"allow X\", \"add permission\", \"move permission to\"), env vars (\"set X=Y\"), hook troubleshooting, or any changes to settings.json/settings.local.json files. Examples: \"allow npm commands\", \"add bq permission to global settings\", \"move permission to user settings\", \"set DEBUG=true\", \"when claude stops show X\". For simple settings like theme/model, suggest the /config command.\n- keybindings-help: Use when the user wants to customize keyboard shortcuts, rebind keys, add chord bindings, or modify ~/.claude/keybindings.json. Examples: \"rebind ctrl+s\", \"add a chord shortcut\", \"change the submit key\", \"customize keybindings\".\n- simplify: Review the changed code for reuse, simplification, efficiency, and altitude cleanups, then apply the fixes. Quality only — it does not hunt for bugs; use /code-review for that.\n- fewer-permission-prompts: Scan your transcripts for common read-only Bash and MCP tool calls, then add a prioritized allowlist to project .claude/settings.json to reduce permission prompts.\n- loop: Run a prompt or slash command on a recurring interval (e.g. /loop 5m /foo). Omit the interval to let the model self-pace. - When the user wants to set up a recurring task, poll for status, or run something repeatedly on an interval (e.g. \"check the deploy every 5 minutes\", \"keep running /babysit-prs\"). Do NOT invoke for one-off tasks.\n- schedule: Create, update, list, or run scheduled cloud agents (routines) that execute on a cron schedule. - When the user wants to schedule a recurring cloud agent, set up automated tasks, create a cron job for Claude Code, or manage their scheduled agents/routines. Also use when the user wants a one-time scheduled run (\"run this once at 3pm\", \"remind me to check X tomorrow\").\n- claude-api: Reference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration.\nTRIGGER — read BEFORE opening the target file; don't skip because it \"looks like a one-liner\" — whenever: the prompt names Claude/Anthropic in any form (Claude, Anthropic, Fable, Opus, Sonnet, Haiku, `anthropic`, `@anthropic-ai`, `claude-*`, `us.anthropic.*`, `[1m]`); the user asks about an LLM (pricing/model choice/limits/caching) — never answer from memory; OR the task is LLM-shaped with provider unstated (agent/MCP/tool-definition/multi-agent/RAG/LLM-judge/computer-use; generate/summarize/extract/classify/rewrite/converse over NL; debugging refusals/cutoffs/streaming/tool-calls/tokens).\nSKIP only when another provider is being worked on (overrides all triggers): OpenAI/GPT/Gemini/Llama/Mistral/Cohere/Ollama named in the query; OR `grep -rE 'openai|langchain_openai|google.generativeai|genai|mistralai|cohere|ollama'` over the project hits (run this grep FIRST if no provider named — don't Read the file).\n- workflow-authoring: Reference for writing a Workflow tool script (script API and gotchas, resume, quality patterns, worked examples). Load before authoring a script for a workflow the user already opted into; it does not itself authorize running one.\n- run: Launch and drive this project's app to see a change working. Use when asked to run, start, or screenshot the app, or to confirm a change works in the real app (not just tests). First looks for a project skill that already covers launching the app; otherwise falls back to built-in patterns per project type (CLI, server, TUI, Electron, browser-driven, library).\n- init: Initialize a new CLAUDE.md file with codebase documentation\n- security-review: Complete a security review of the pending changes on the current branch","skillCount":188,"isInitial":true,"names":["_gstack-command","autoplan","benchmark","benchmark-models","browse","canary","careful","caveman","ccs-delegation","checkpoint","code-review","codebase-design","codex","connect-chrome","context-restore","context-save","cso","design-consultation","design-html","design-review","design-shotgun","devex-review","diagnose","diagnosing-bugs","diagram","document-generate","document-release","domain-modeling","find-skills","freeze","git-guardrails-claude-code","grilling","gsd-add-tests","gsd-ai-integration-phase","gsd-audit-fix","gsd-audit-milestone","gsd-audit-uat","gsd-autonomous","gsd-capture","gsd-cleanup","gsd-code-review","gsd-complete-milestone","gsd-config","gsd-debug","gsd-discuss-phase","gsd-docs-update","gsd-eval-review","gsd-execute-phase","gsd-explore","gsd-extract-learnings","gsd-fast","gsd-forensics","gsd-graphify","gsd-health","gsd-help","gsd-import","gsd-inbox","gsd-ingest-docs","gsd-manager","gsd-map-codebase","gsd-milestone-summary","gsd-mvp-phase","gsd-new-milestone","gsd-new-project","gsd-ns-context","gsd-ns-ideate","gsd-ns-manage","gsd-ns-project","gsd-ns-review","gsd-ns-workflow","gsd-pause-work","gsd-phase","gsd-plan-phase","gsd-plan-review-convergence","gsd-pr-branch","gsd-profile-user","gsd-progress","gsd-quick","gsd-resume-work","gsd-review","gsd-review-backlog","gsd-secure-phase","gsd-settings","gsd-ship","gsd-sketch","gsd-spec-phase","gsd-spike","gsd-stats","gsd-surface","gsd-thread","gsd-ui-phase","gsd-ui-review","gsd-ultraplan-phase","gsd-undo","gsd-update","gsd-validate-phase","gsd-verify-work","gsd-workspace","gsd-workstreams","gstack","gstack-upgrade","guard","health","investigate","ios-clean","ios-design-review","ios-fix","ios-qa","ios-sync","land-and-deploy","landing-report","learn","make-pdf","migrate-to-shoehorn","mux-send","office-hours","open-gstack-browser","pair-agent","plan-ceo-review","plan-design-review","plan-devex-review","plan-eng-review","plan-tune","propose-issue","prototype","qa","qa-only","research","resolving-merge-conflicts","retro","review","scaffold-exercises","scrape","screenshot-capture","setup-browser-cookies","setup-deploy","setup-gbrain","setup-pre-commit","ship","skillify","spec","sync-gbrain","tdd","to-prd","trace","traceable-reqs","unfreeze","win-marketplace-add","wizard","write-a-skill","writing-for-agents","ccs","ccs:continue","frontend-design:frontend-design","caveman:caveman","caveman:caveman-commit","caveman:caveman-help","caveman:caveman-review","caveman:compress","everything:search","sptc:commune","sptc:force-stop","sptc:knock","sptc:list-agents","sptc:live","sptc:ready","sptc:role","sptc:send","sptc:setup","sptc:signoff","sptc:subnet","sptc:version","design","dataviz","artifact-design","artifact-diagramming","artifact-capabilities","update-config","keybindings-help","simplify","fewer-permission-prompts","loop","schedule","claude-api","workflow-authoring","run","init","security-review"]},"type":"attachment","uuid":"2b5770c5-4a30-4111-b4da-70fd7a689e0a","timestamp":"2026-09-06T11:16:00.923Z","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"2b5770c5-4a30-4111-b4da-70fd7a689e0a","isSidechain":true,"agentId":"a854aff5dd30b27ec","attachment":{"type":"remote_session_change","url":"https://claude.ai/code/session_01PL7KPiGpCSvJMd5E65DKfq","commit":"Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PL7KPiGpCSvJMd5E65DKfq","pr":"🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nhttps://claude.ai/code/session_01PL7KPiGpCSvJMd5E65DKfq","sendUserFileHint":false},"type":"attachment","uuid":"2d9adda0-04e8-4f51-bc1a-891900db3633","timestamp":"2026-09-06T11:16:00.933Z","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"2d9adda0-04e8-4f51-bc1a-891900db3633","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6DB8wRsbxKTAnqZpy7","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"ErMCCqgBCBEYAipAK3Yqxj8Vbyiai/y9rpK1MgL4lCAioVCTTYRHYLrlGYHkhh8YtN3i7WOTadViqzWlzF7PpwZhRpRt/IjRGINbSTIPY2xhdWRlLXNvbm5ldC01OABCCHRoaW5raW5nWiQ4MGM5NDZkZC05YzNjLTQ5NzItOGYyZi03NDAxMTQxZGE2MzJyEJcpAiwR8BiFSxd+XzBU5MmIAQGoAfKW9dQGsAECEgx1t0rno4mbd80HprAaDKfwGV58xXQeOuSQVSIwJrw2rzFx5DCFXBwK1rcvigv7cE4khUUUvMYeDnUUmyEEprqheZEljox36w2qesZRKjicQEB+WzOcIUt1dvf9zPornci3IVljIAqLEL91nZep7zBPYEg/Z9LUMymlFmUZ8BCQYSQO4+fmtxgB"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":56401,"cache_read_input_tokens":0,"cache_creation":{"ephemeral_5m_input_tokens":56401,"ephemeral_1h_input_tokens":0},"output_tokens":6,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6DAPHkw7R7e6xK8i7Q","attributionAgent":"general-purpose","type":"assistant","uuid":"72c12974-68f8-4a34-9464-a4992eb58234","timestamp":"2026-09-06T11:16:02.635Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"72c12974-68f8-4a34-9464-a4992eb58234","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6DB8wRsbxKTAnqZpy7","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01Hu2m7N7MNpwXoUZ7jaWgjb","name":"Bash","input":{"command":"wc -l \"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md\""},"caller":{"type":"direct"}}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":56401,"cache_read_input_tokens":0,"cache_creation":{"ephemeral_5m_input_tokens":56401,"ephemeral_1h_input_tokens":0},"output_tokens":6,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6DAPHkw7R7e6xK8i7Q","attributionAgent":"general-purpose","type":"assistant","uuid":"93746bcd-1a10-42a4-9e72-5a81f5172ded","timestamp":"2026-09-06T11:16:03.001Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"93746bcd-1a10-42a4-9e72-5a81f5172ded","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01Hu2m7N7MNpwXoUZ7jaWgjb","type":"tool_result","content":"3790 C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","is_error":false}]},"uuid":"34abf9a9-0138-4f84-8e51-89f3b72a3999","timestamp":"2026-09-06T11:16:03.438Z","toolUseResult":{"stdout":"3790 C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","stderr":"","interrupted":false,"isImage":false,"noOutputExpected":false},"sourceToolAssistantUUID":"93746bcd-1a10-42a4-9e72-5a81f5172ded","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"34abf9a9-0138-4f84-8e51-89f3b72a3999","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6DMbk17a7rBiX4HMng","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"EsYCCqgBCBEYAipAD9cwKlckFmKpXoswdTtHdtcVJ0O15OKI+Pm5OfN1ew6+o65gVDdw3otxsKS33H7eZO0Bhw+AkIKK5sNrH3eNzzIPY2xhdWRlLXNvbm5ldC01OABCCHRoaW5raW5nWiQ4MGM5NDZkZC05YzNjLTQ5NzItOGYyZi03NDAxMTQxZGE2MzJyEJcpAiwR8BiFSxd+XzBU5MmIAQGoAfSW9dQGsAECEgwHkayiXlVNe79jkuMaDKhIGmip4wWmUy+HECIwUEPOZ+Xy03DQZ4Kb6TdMHFEizDDajRFEpb9K66JsALhhQeB3eegve9epni28q8BVKkvn/LMEbqsQcUvwKHYcPQ9cGh/ETO6yg4vVIdvwxaDBCItkkpOl7e9ZFImhaAZlY9Mzqj8WTAsOi6fwdD2+21wMJcDGxVEMQzEDuqMYAQ=="}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":5564,"cache_read_input_tokens":56401,"cache_creation":{"ephemeral_5m_input_tokens":5564,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6DM11ksLhA2gU8MUxf","attributionAgent":"general-purpose","type":"assistant","uuid":"cbe8f04e-c86e-49a3-9efb-618e4f69a4c2","timestamp":"2026-09-06T11:16:04.957Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"cbe8f04e-c86e-49a3-9efb-618e4f69a4c2","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6DMbk17a7rBiX4HMng","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01JLUpXCzuY5ZFidEnCegtm3","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":1,"limit":500},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":5564,"cache_read_input_tokens":56401,"output_tokens":157,"output_tokens_details":{"thinking_tokens":28},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":5564},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":157,"cache_read_input_tokens":56401,"cache_creation_input_tokens":5564,"cache_creation":{"ephemeral_5m_input_tokens":5564,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6DM11ksLhA2gU8MUxf","attributionAgent":"general-purpose","type":"assistant","uuid":"8e15c9d2-7d06-4797-b917-2e5cfe6b40a8","timestamp":"2026-09-06T11:16:05.647Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"8e15c9d2-7d06-4797-b917-2e5cfe6b40a8","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01JLUpXCzuY5ZFidEnCegtm3","type":"tool_result","content":"1\t# Infra register — CI / build-pipeline debt\n2\t\n3\tOperator-ruled 2026-08-02: infrastructure and CI-pipeline work items live HERE, not on the\n4\t`spt-bs-releases` board. The board carries product surface the operator triages; this register\n5\tcarries what the gater triages. **Mandate: doyle sweeps this file at every milestone intake and\n6\tevery release close, and composes ripe entries into waves/milestone riders.** An entry leaves\n7\tthis file only by being built (link the lane) or being retired with a stated reason.\n8\t\n9\tEntry format: status · origin · what/why · trigger condition (what makes it ripe) · size guess.\n10\t\n11\tLast sweep: 2026-08-30, NOW-SIGNAL (#23) / v0.67.0 RELEASE CLOSE — shipped counter 102, tag ==\n12\tmain-at-tag == tested `da71b785`, 9/9 golden att2 (att1 sole red = FLAKE-LEDGER :664\n13\tteardown-leak row, ruled ledgered-class at triage — signature predates the diff — rerun\n14\tnon-vacuity proven by cell re-execution; ledger row +1 with new data, stays OPEN; hertz\n15\tIR-34/35 cluster strengthened). Same-day second sweep, so most composition state is the\n16\tmorning's; deltas only: IR-59 gained the SEVENTH face (parallel-lane fill rate: 236.6 GB /\n17\t3.5 h across four wave pools drove the box to 0.01 GB mid-close; per-wave pool reaping rule).\n18\tIR-12 gained the stale-binary kin note (xtask reference-drift arm reads the ON-DISK spt binary;\n19\tstructural remedy = the now-mandatory workspace-bins prebuild leg, adopted this arc after it\n20\talso caught W2's spacerun red). IR-63's conhost litter REPRODUCED on cue: 14 fresh CWD pins on\n21\tthe four party trees at the same `crates/spt-daemon` relative path, killed by pid via the PEB\n22\tprobe, all four worktrees then removed FIRST TRY — the pin-check-first party rule held\n23\t(+58.2 GB; earlier emergency reap of the same wave's finished-lane targets +186.6 GB).\n24\tTest-craft banked to memory, not entries: `cargo test -- <bare> --exact` runs NOTHING and exits\n25\t0 (todlando's structural fix: names carry the filter token); Win32_Process CommandLine filters\n26\tCANNOT answer a CWD-pin question (todlando's false-positive self-catch). Board mints this arc:\n27\t#244/#246/#247/#254 (BACKLOG). #16/#17 discharged drops (detach + EVAL). IR-73's ci.yml/\n28\trelease.yml floor-site reorders did NOT ride this arc's workflow commits — still owed, next\n29\ttouch. No entries retired.\n30\t\n31\tPrior sweep: 2026-08-30, SEMAPHORE (#242) / v0.66.0 RELEASE CLOSE — shipped counter 101, tag ==\n32\tmain == tested `d931dd63`, 9/9 at one sha across two attempts; full-register pass executed from\n33\t`REGISTER-SWEEP-242-DRAFT.md` (72 entries enumerated pre-golden, load-bearing claims re-measured\n34\tin-tree). Rulings: IR-69 close-out re-census RAN and FOUND the entry's own predicted truncation\n35\tblind spot LIVE (338 cli.rs + 2 main.rs shipping sites never censused; addendum on the entry,\n36\tstays OPEN; residual conversion + generator fix + seam enforcement = releases#243, scoping\n37\treconciled on the issue; common-word matcher RULED a separate hertz test-side rider). IR-17\n38\tthree corrections by replacement (08-03 kitsubito \"empty stderr\" = METER ARTIFACT — panel\n39\tcapture postdates the specimen by 16 days; kitsubito family member CLOSED under the RCA-242\n40\texe-hash-on-ready-path mechanism, behaviour-change request minted as releases#244; Windows\n41\tspecimen + hfenduleam sub-observation stay the live population). Daemon-leak cluster\n42\tIR-7/17/20/34/35/63 LANE-LINKED to hertz's queued fixup lane (briefs in his spool cite the entry\n43\tids). IR-57 first-real-assembly use appended (ASM-241: 6 picks, 5 MATCH / 1 LOSS reconciled\n44\tbyte-for-byte to the deliberate resolution; its earlier \"figure correction rides next batch\"\n45\tnote was STALE — the correction landed inline 2026-08-29, retired here). IR-46 gained the #242\n46\tgolden additions (per-job floor instants; the `/runs/<id>/jobs` run_attempt trap with\n47\t`started_at` discriminator + `/attempts/N/jobs` authority; raw-bytes rerun preflight;\n48\tnon-vacuous rerun check). IR-59 gained the SIXTH face (r4 LNK1318 at the job's internal\n49\tlow-water; within-job floor re-read rides the next workflow commit; box ~51 GB non-recovering\n50\tconsumption → audit slot). FILED: IR-73 (ci.yml/release.yml literal-first floor sites off the\n51\tgolden path, 8 sites), IR-74 (kitsubito 21,643 /tmp endpoint homes, hertz's measurement), IR-75\n52\t(kitsubito treqs 127 vacuous leg — install-or-drop; IR-37 deliberately NOT reopened, different\n53\tsurface). Composed: IR-14/26/27/49 as ONE between-milestone pool/worktree audit slot (window\n54\topen now); IR-11 + IR-33(a) as next-intake small riders; IR-59's log-the-floor half + IR-57's\n55\tscripted audit stand as the next intake's tooling pair. IR-54 evidence noted: the #242 cut's\n56\tunshaped-head intake miss (self-caught by deployah, shape-on-top `e4f52047`, 8th consecutive\n57\tshape-inside-candidate) is another construction-not-discipline datum. No entries retired.\n58\t\n59\tPrior sweep: 2026-08-27, IO-PARSER (#22) INTAKE (wave map: `IO-PARSER-22-JIT.md` + #22 comment).\n60\tRulings: IR-66 COMPOSED as the parallel hertz rider (the two attach-cell later-needle treatments,\n61\tattach.rs:561/:672 — the \"rides next intake\" note comes due here). IR-52 conditional rider\n62\tCARRIED FORWARD on this milestone's docs lane, same terms as WAX-SEAL (depth fix lands iff the\n63\tlane touches the docs-site CLI reference generator, else stays open). IR-67 COMPOSED as JIT gate\n64\tdiscipline (no wave battery leans on a `-p spt --bins` leg as integration coverage); the entry\n65\tstays open until its named construction fix. IR-55 stays armed with hertz; IR-6 LOCKSMITH\n66\tcomposition still unreported, stays; IR-2 trigger unevaluated this sweep (teardown just cleared\n67\tthe unlanded-lane field — re-check next sweep). No entries retired; none filed.\n68\t\n69\tPrior sweep: 2026-08-23, WAX-SEAL (#21) INTAKE (wave map: `WAX-SEAL-21-JIT.md` + #21 comment\n70\t5390092115). Rulings: IR-52 COMPOSED as a CONDITIONAL W4 rider on the wax-seal docs lane —\n71\tthe milestone mints new nested `spt seal` CLI verbs, exactly the shallow-render class the entry\n72\tnames; the depth fix lands iff that lane touches the docs-site CLI reference generator, else the\n73\tentry stays open here. IR-2 trigger NOT met (todlando's PR set parked unlanded for the next\n74\tgolden chain). IR-55 stays ARMED-FOR-CAPTURE with hertz. IR-6 conditional composition from\n75\tLOCKSMITH still unreported — stays open. IR-56/57/58/59/60/61 are discipline/craft entries or\n76\tawait their named triggers; IR-62 is hertz-class test/rig work, unscheduled. No entries retired;\n77\tnone filed.\n78\t\n79\tPrior sweep: 2026-08-19, CONCIERGE (#183) INTAKE (wave map: `CONCIERGE-183-JIT.md` + #183\n80\tcomment 5347768797) — rows read from the LOCAL register stack (`4799031→ecd640c→8d4c224`;\n81\torigin/main lacks IR-49/50/51 until the chain lands — absence ≠ not-filed). Rulings: IR-50\n82\tCOMPOSED — dispatched to hertz same day (sink-path-helper-FIRST sequencing per the entry;\n83\t`engine_room_bringup_e2e.rs` excluded, its panel sites ride the gated #199 lane), with the\n84\tengineroom.rs:145 misnomer as a rider on the same lane. IR-47 = candidate co-rider IF this\n85\tchain touches golden.yml/ci-notify, else holds. IR-48 holds (next xtask parity-cell touch).\n86\tIR-49 holds (next poolguard touch or first landed-lane takeover request). IR-51 holds —\n87\tgated on #199 attribution; a net-off fix must NOT precede attribution. IR-2 trigger NOT met\n88\t(queued unlanded lanes exist). No entries retired; none filed — the intake window's product\n89\tfinding (rc terminal-Exit omission, hertz RCA: proven invariant violation, load excluded\n90\t92/92, H2 candidate unconfirmed) routed to the BOARD as releases#201, the correct venue for\n91\tproduct surface.\n92\t\n93\tPrior sweep: 2026-08-18, KEYSTONE (#182) INTAKE — the prior sweep's four composition rulings\n94\tEXECUTED (wave map: `KEYSTONE-182-JIT.md`, base main @`8248bc3`): (1) IR-9 pin lane DISPATCHED to\n95\thertz (W0 item 1; interim kitsubito-clippy-authoritative dies when it lands). (2) IR-21 remedy\n96\t(2) + IR-39 vs `f24e732` DISPOSED: the branch is a BEACHHEAD (golden.yml prebuild step = the\n97\tprebuild-made-a-rule arm, ONE fail-fast site, one ledger row) — hertz rebases it off its\n98\tabandoned parent `b483699` (the id-collision draft; content landed renumbered as IR-46 @`8248bc3`)\n99\tand lands it in W0; the class remainder (IR-39's SHARED precondition helper + 24-site sibling_bin\n100\tsweep, the 33 cross-package build-edge expressions) folds into the test-hygiene lane. (3)\n101\tTest-hygiene family DECIDED-ACTIVATED as a dedicated hertz lane inside the KEYSTONE window,\n102\tsequenced after W0 (members: IR-13/23/36/37/38 + IR-21 clarity half + IR-39 helper +\n103\ttwohost.rs:394 doc comment). (4) First-execution-cells discipline restated in the JIT's\n104\tgolden-head step. Board members #84/#85 ride hertz's W0; #166/#57/#185 are todlando's W1. IR-46\n105\tid-collision RULED this intake (renumber-and-land, parallel issuance not authored disagreement;\n106\tdeployah landed it @`8248bc3`). No new entries filed; no entries retired.\n107\t\n108\tPrior sweep: 2026-08-19, NAMEPLATE (#181) / v0.56.0 RELEASE CLOSE — shipped c91 @`60d74ea`\n109\t(tag == golden-tested sha, run 32209922535; one respin, both first-golden reds ruled rig defects).\n110\tFiled IR-42 (pool-claim writes / build enforces — BUILT in this same commit, AGENTS.md line),\n111\tIR-43 (knock NoReply past its 30s carrier bound), IR-44 (perch-sentinel comment overclaims\n112\tpreservation), IR-45 (twohost rig home premise; SETTLED + RETIRED\n113\t2026-08-19 — pump paths resolve under the per-run temp root, see the entry; #189 corrected on the\n114\tboard, comment 5337519936). Two cycle findings ruled RUNBOOK-homed and\n115\tlanded in this commit rather than as entries: the first-execution-cells intake question\n116\t(RELEASE-RUNBOOK golden-head intake — name the never-executed cells before the run) and\n117\tdeployah's sweep-vs-cascade mechanism (RELEASE-RUNBOOK board step — under golden CI the cascade\n118\tis DRIVEN via `state <mref> acceptance`, never swept). ⚠ LABELLED HOLE — CLOSED UNDERIVABLE\n119\t(2026-08-19): the close commune's batch list named \"alchemy create-races\"; its content did not\n120\tsurvive the author's context reset and was not recoverable from #181, the JIT records, or memory.\n121\tDeployah answered the query: he ran ZERO create ops at the cut (could not have witnessed a create\n122\trace), a fresh probe over the milestone window shows no duplicate mints (the 4-issues-in-2s batch\n123\tmint is batching, not duplication), and the only surviving trace is doyle's own pre-reset message\n124\tnaming the item as already-known — a pointer, not a sighting. Item DROPPED; the hole stands as\n125\tthe record. Deployah's sweep-vs-cascade ship-path trap (#181 comment 5337402639, runbook-homed\n126\tabove) is explicitly NOT this item's content — do not fold it in. Composition: IR-9's pin lane\n127\t(`rust-toolchain.toml` @ 1.96.0) goes to hertz AT KEYSTONE #182 INTAKE per the 2026-08-05\n128\truling; IR-21 remedy (2) + IR-39's precondition helper compose with hertz's standing\n129\tfixture-prebuild-hardening branch `f24e732` — disposition at the same intake; the test-hygiene\n130\tfamily (IR-13/23/36/37/38 + IR-21's clarity half) stays the dedicated post-batch lane candidate,\n131\tdecision at intake; IR-29's proving run + IR-30's instrument lanes ride the next golden batch.\n132\tIR-2's trigger explicitly NOT met (queued unlanded lanes exist: IR-29/IR-30 instruments,\n133\tfour-arm refusal eprintln, f24e732). IR-14 hygiene movement: `.worktrees/nameplate-asm-2bd36f1`\n134\treaped this sweep (+66.98 GB by FS delta 120.53→187.51; claim `gate-w7-courtesy` base `fd3dc5a`\n135\tin main = finished lane; zero inbound reparse points) — stale-lane audit itself still open.\n136\t\n137\tPrior sweep: 2026-08-05, LOCKSMITH tranche-2 (#141) CLOSE — golden run 30971976024 green on all 9\n138\tjobs, main ff'd to `0a25b77`, v0.55.0. IR-40 filed (stale-resume-brief + early-informant class).\n139\tIR-9's decision trigger FIRED 2026-08-05: doyle read the runner-account versions off this run's\n140\t`test` legs and RULED — pin in-repo via `rust-toolchain.toml` @ 1.96.0, kitsubito's clippy leg\n141\tauthoritative in the interim; pin lane to hertz at next intake (see the entry). IR-41 filed the\n142\tsame night (queued main run superseded without a record; runbook step 3 corrected in the same\n143\tcommit). IR-1/IR-4's golden-only steps (link probe both boxes, toolchain\n144\tprint both legs) had their FIRST EXERCISE here, discharging the \"unexercised until a golden run\"\n145\tcaveat at the CI-RIDER LANE STATE foot section. IR-35's re-measure rode the batch (`c65b838`).\n146\tOwlery-noun thin lane SCOPED and dispatched to hertz for the next batch (class A only, two sites;\n147\tclass B on-disk rename is an explicit non-goal — see IR-40's kin discipline for why the boundary is\n148\twritten into the brief rather than left to judgement).\n149\t\n150\t---\n151\t\n152\t## OPEN\n153\t\n154\t### IR-1 — Quiet predicate needs a network axis (tailscale RTT probe)\n155\t- **Status:** open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]] at the foot of this file;\n156\t  carried by `bf8c4a2` → `REQ-CI-LINK-HEALTH-PROBE`, mapping CONFIRMED by builder hertz 2026-08-03\n157\t  (by content: tailscale ping ×5, med/max RTT rows into the bench ledger, three arms\n158\t  success/NO-REPLY/UNAVAILABLE, always exit 0 — instrument, not gate). NOTE `bf8c4a2` is NOT\n159\t  single-purpose: it also corrects the free-space preflight floor read\n160\t  (`REQ-CI-FREE-SPACE-PREFLIGHT`, the ci-runner-has-no-warm-target shape) — no 1:1 commit→IR map\n161\t  for this commit · **Origin:** golden/bench-wiring red triage 2026-08-02 (ex releases#126)\n162\t- **What/why:** the shared-runner quiet predicate (zero non-terminal runs + no local\n163\t  cargo/rustc/nextest by parent chain) is process-shaped; both axes passed on a box whose only\n164\t  link was degrading (321s for a 1s checkout, bidirectional 10s QUIC dial timeouts). A tailscale\n165\t  RTT probe to the peer box before two-host rendezvous, carried in the bench ledger, would have\n166\t  called run 30771155390's red in seconds. Evidence: the arm-1 count table (PUMP_PEER_FAIL\n167\t  a 0→3→0, b 8→22→8 across green/red/rerun).\n168\t- **Permanent, not stopgap:** operator-confirmed 2026-08-02 that kitsubito cannot be provided\n169\t  ethernet — wifi-only indefinitely, so the link cannot be hardened and the predicate must see\n170\t  link health.\n171\t- **Ripe when:** next CI-touching wave, or the next network-shaped golden red — whichever first.\n172\t- **Size:** small (one probe step + ledger row + predicate doc).\n173\t- **Composed:** LOCKSMITH (#132) CI-rider cluster, hertz thin lane — 2026-08-03. GREENLIT with\n174\t  #132 and **DISPATCHED to hertz 2026-08-03** (direct brief; the register is the spec, there is no\n175\t  board issue). Leaves the register only when the lane lands or the entry is retired.\n176\t- **FIRST FIELD USE, and it DISCRIMINATED (2026-08-04, golden 30873007187 attempt 1):** the probe\n177\t  (landed via the rider lane, riding `4b37512`) read 4–7ms RTT healthy on both twohost legs\n178\t  minutes before both legs redded — REFUTING the degraded-link read for that red and steering\n179\t  triage to the real mechanism (the [[IR-29]] serve-window race) instead of a link chase. The\n180\t  instrument's first catch was a correct NEGATIVE — exactly the call run 30771155390 needed and\n181\t  could not make.\n182\t\n183\t### IR-2 — Settle the warm-runner CARGO_INCREMENTAL delta\n184\t- **Status:** RETIRED 2026-08-28, measurement run, verdict NO FLIP — incremental stays ON.\n185\t  hertz paired goldens at main fed965f8: ON run 33167693879 GREEN; OFF run 33172022108 RED\n186\t  (Windows input_ack_deadlock SetupFailed at a 3.0s IPC read deadline — the box-load family,\n187\t  discarded with the leg). Disk: OFF target 7.49 GB vs ON 11.40 GB = 3.91 GB / 34.3% saved\n188\t  (smaller than the entry's 5.65 GB cold figure). Timing NOT causal-quality: sequential runs in\n189\t  one persistent workspace let OFF inherit ON's cache (order contamination dominates the\n190\t  apparent OFF speedups); Windows build-spt-bin +3.8%, Linux -5.1%. Retire reasoning: the\n191\t  DECISION is answerable now — OFF produced no green golden, the timing question needs 4+\n192\t  counterbalanced fresh-cache windows to answer cleanly, and the disk motivation has weakened\n193\t  (box at ~148 GB free under the teardown discipline; the LNK1318 pressure era predates it).\n194\t  Runs/artifacts preserved on the record. Reopen only if runner disk pressure returns as a\n195\t  recurring floor-class red.\n196\t- **Was:** open · **Origin:** #103/#108 bench-wiring lane 2026-08-02 (ex releases#127)\n197\t- **What/why:** the #103 measurement (−29.8% wall, −5.65 GB/target, n=3) is COLD-build only.\n198\t  Golden's runner `_work` target persists warm, where incremental is exactly what keeps it cheap;\n199\t  CARGO_INCREMENTAL=0 was applied only to the genuine cold build (n1-gate pinned old-broker\n200\t  cache) + local rig recipes (docs/GOLDEN-CI.md). Open question: does incremental still pay on\n201\t  the warm runner, weighed against 5.65 GB/target on a box with LNK1318 free-space history?\n202\t- **Method (hertz):** one full golden each way on a quiet box, outside a milestone, compared\n203\t  per-step from the bench ledger.\n204\t- **Ripe when:** a quiet between-milestone window with no queued lanes (the measurement burns\n205\t  two golden windows).\n206\t- **Size:** medium (two proving runs + verdict + possible leg flips).\n207\t\n208\t### IR-3 — Daemon-level guard: broker-net wakeup rate bounded across endpoint churn\n209\t- **Status:** open · **Origin:** releases#125 remediation, todlando REQ call 1 (ex releases#128)\n210\t- **What/why:** the swarm-discovery GC-spin burned two cores for two weeks visible only in a\n211\t  process table — no suite assertion sees the class. Wanted: a daemon-level assertion that\n212\t  broker-net workers stay quiescent across repeated endpoint create/destroy churn.\n213\t- **Design constraint (pre-ruled):** assert on WAKEUP RATE / voluntary ctxt-switch delta over\n214\t  the churn window, NOT %CPU — CPU thresholds flake under CI load; the defect signature\n215\t  (~100 Hz per orphan loop) is load-independent. Mint the REQ at activation.\n216\t- **Near-product:** this is runtime-defect visibility, the most product-adjacent entry here —\n217\t  a candidate rider on any daemon-lifecycle milestone.\n218\t- **Ripe when:** the next milestone touching spt-net endpoint lifecycle or daemon supervision.\n219\t- **Size:** medium (churn harness + counter plumbing + flake-safe assertion).\n220\t\n221\t### IR-4 — Lock-pin guard + lock-procedure rule + toolchain print (three riders, one lane)\n222\t- **Status:** open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]] at the foot of this file;\n223\t  candidate commits `1275e47` + `49d4805` + `8ed006b`, mapping NOT yet confirmed by its builder ·\n224\t  **Origin:** releases#125 fix-lane intake hold (ex releases#129 + riders)\n225\t- **What/why, three parts that land together:**\n226\t  1. **xtask check leg:** assert Cargo.lock resolves swarm-discovery to git rev\n227\t     `89a2200d54a4e3cab2f46cc75ebff49a1fb07614` while the patch is load-bearing; the check's\n228\t     message states its own drop condition (upstream ships a post-PR#27 release AND iroh's pin\n229\t     reaches it). Without it, stanza removal or a routine iroh bump silently returns the lock to\n230\t     the spinning crate and nothing reds.\n231\t  2. **Procedure rule for lock-touching lanes** (docs): targeted `cargo update -p <crate>` only,\n232\t     never full re-resolve; count changed `[[package]]` blocks AND diff per-block edges (set-identical\n233\t     hid 8 windows-sys edge movers at acaaa4f); two resolutions disagreeing = toolchain drift —\n234\t     stop and compare against CI before shipping either lock; hand-edited lock acceptable iff\n235\t     `cargo check --workspace --locked` passes.\n236\t  3. **Toolchain-version print step in golden** (cargo/rustc versions, both OS legs): the acaaa4f\n237\t     comparison against CI was impossible because no run log prints a version. One-grep audit.\n238\t- **Ripe when:** next CI-touching wave; part 1 sooner if any iroh bump is proposed.\n239\t- **Size:** small-medium (one xtask leg, one docs section, one workflow step).\n240\t- **Composed:** LOCKSMITH (#132) CI-rider cluster, hertz thin lane — 2026-08-03. GREENLIT with\n241\t  #132 and **DISPATCHED to hertz 2026-08-03** (all three parts land together).\n242\t\n243\t### IR-5 — Shared nextest summary parser\n244\t- **Status:** open · **Origin:** BAROMETER triage (standing recommendation, pre-register)\n245\t- **What/why:** two agents in one day wrote `[0-9]+ tests run` parsers that read \"1 test run\"\n246\t  (singular) as zero — a guard fed by a broken parser condemns valid rounds. One shared,\n247\t  singular-aware parser (single-source discriminant) for every consumer of nextest summaries.\n248\t- **Ripe-when REWORDED 2026-08-04 (todlando audit): the old trigger was unfireable as worded.** At\n249\t  `b7b00c3` the in-tree population of nextest-SUMMARY parsers is ZERO — the two scripts that read\n250\t  nextest output (`g6-curve.ps1:83-90` per-test lines, `g6-postbounce.ps1:44` display-only grep)\n251\t  neither parse counts nor carry the defect, so \"next wave touching any gate script that reads\n252\t  nextest output\" could fire on a non-defective script while the real population (agent-authored\n253\t  throwaway parsers, which never enter the tree) stays out of reach. New trigger: **the next time\n254\t  anyone — agent or lane — needs a nextest summary COUNT**, the shared parser is built FIRST and the\n255\t  need consumes it; rig briefs should name it so throwaways stop being authored.\n256\t- **Size:** small.\n257\t- **Composed:** LOCKSMITH (#132) CI-rider cluster, CONDITIONAL — lands iff the hertz thin lane\n258\t  touches gate scripts; otherwise stays open here. 2026-08-03. Carried in hertz's 2026-08-03\n259\t  dispatch brief as a **conditional** rider; hertz reports whether the condition fired. **Not yet\n260\t  known to be building** — an unreported condition leaves this entry open, not landed.\n261\t\n262\t### IR-6 — Membership logging on subnet gates\n263\t- **Status:** open · **Origin:** BAROMETER triage (standing recommendation, pre-register)\n264\t- **What/why:** counts beside results, membership beside counts — gate logs that state a count\n265\t  without naming the population keep producing unreadable reds. Standardize membership\n266\t  enumeration in gate output.\n267\t- **Ripe when:** next wave touching gate scripts / CI legs that report counts.\n268\t- **Size:** small.\n269\t- **Composed:** LOCKSMITH (#132) CI-rider cluster, CONDITIONAL — lands iff the hertz thin lane\n270\t  touches gate scripts; otherwise stays open here. 2026-08-03. Carried in hertz's 2026-08-03\n271\t  dispatch brief as a **conditional** rider; hertz reports whether the condition fired. **Not yet\n272\t  known to be building** — an unreported condition leaves this entry open, not landed.\n273\t\n274\t### IR-7 — Phase A rigs leak a daemon+brain pair on Windows (exe-lock kills notify relink)\n275\t- **Status:** open · **Origin:** BAROMETER post-publish triage (ex releases#124 — full mechanism on the closed issue)\n276\t- **What/why:** two Phase A rigs launch daemons that escape the job object via WMI-rung autostart\n277\t  (double-space unquoted cmdline fingerprint; SPT_HOME in the wrapper cmdline is the attribution\n278\t  key); the leaked pair holds target/debug/spt.exe and kills every golden job reaching the notify\n279\t  relink. CI reaps as tourniquet (fa6e597); in-job test launch is the fix.\n280\t- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n281\t  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n282\t- **Ripe when:** next wave touching the Phase A rigs or daemon autostart path.\n283\t- **Size:** medium.\n284\t\n285\t### IR-8 — reap-census scoped_survivors=0 is blind to unreadable-path holders\n286\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** BAROMETER triage\n287\t  (ex releases#122)\n288\t- **What/why:** a zero that cannot see is not a zero — census scoping skips procs whose exe path is\n289\t  unreadable, so the survivors count can report clean while a holder lives. Needs a positive control\n290\t  / explicit unreadable bucket in the verdict line (unreadable_path count exists; the ZERO must\n291\t  refuse when it is nonzero).\n292\t- **Defining specimen (golden 30782259675, hfenduleam test job, 2026-08-03):**\n293\t  `CI-REAP summary: killed=5 kill_failed=1 scoped_survivors=0` — an admitted kill failure printed\n294\t  beside a zero-survivors claim on the same verdict line. The held image surfaced one step later:\n295\t  run-scoped tmp cleanup denied 5/5 attempts on `...\\relshell\\svcmock.exe` (2nd appearance of the\n296\t  svcmock hold; 1st @7a3c08c, pre-kill-auth). hertz's addendum: an image-held survivor also blocks\n297\t  WRITES to the exe path — the same class manufactures build/relink access-denied reds that mask as\n298\t  build problems, not just cleanup warnings. Not per-run: the same-sha green rerun's leg read\n299\t  `kill_failed=0 scoped_survivors=0` throughout (hertz, 30784469908) — intermittent sighting,\n300\t  second of its class, not a deterministic fixture property.\n301\t- **The Linux twin is strictly worse (todlando audit 2026-08-04, vs `b7b00c3`):** `reap-census.sh`\n302\t  has NO `kill_failed` anywhere (0 occurrences vs 2 in the `.ps1`) — its kill loop increments\n303\t  `killed` only in the success branch with no else, so a failed kill increments nothing and prints\n304\t  nothing. The specimen that made this class VISIBLE on Windows would be INVISIBLE on Linux.\n305\t  Population precision so this is not overclaimed: ESRCH is benign (already gone; the kill-time\n306\t  re-resolve makes it the common case); the vanishing case is EPERM against another account's\n307\t  process. The `.sh` `scoped_survivors` DOES come from a post-reap census re-measure, so survivors\n308\t  are measured — the hole is failed kills and the unreadable bucket, not the survivor count.\n309\t  Windows precision from the same audit: `unreadable_path` IS on the CI-CENSUS line (:157) but the\n310\t  CI-REAP verdict line (:243, :246) still carries only killed/kill_failed/scoped_survivors — the\n311\t  zero still does not refuse, exactly this entry's ask.\n312\t- **Built evidence:** both verdict lines now carry `unreadable_path`; any nonzero unreadable\n313\t  family population renders `scoped_survivors=UNPROVEN` rather than a false zero. Linux also\n314\t  counts and reports failed kills. The shared predicate is mutation-pinned by\n315\t  `reap-census-selftest.sh`; the PowerShell implementation parses cleanly.\n316\t- **Ripe when:** next census/reap script wave (natural pair with IR-7's lane) — now BOTH platforms.\n317\t- **Size:** small.\n318\t\n319\t### IR-9 — Golden boxes run different clippy versions\n320\t- **Status:** pin LANDED 2026-08-18 at `35968156` (`build: pin Rust 1.96.0`), then\n321\t  audited **BUILT** at the 2026-08-29 v0.65.0 close sweep; the pin is an ancestor of\n322\t  golden-green cut SHA `4d6007ac`. The earlier measurement half had already landed and run:\n323\t  the toolchain print (`8ed006b` → `REQ-CI-TOOLCHAIN-VERSION-PRINT`) exercised both legs of\n324\t  golden run 30971976024 (`test` jobs 92198170694/92198170700 — scoped to `test`, not n1-gate;\n325\t  grep token `TOOLCHAIN `). Runner-account facts, read by doyle 2026-08-05: hfenduleam\n326\t  `cargo/rustc 1.93.0` + `clippy 0.1.93`, kitsubito `cargo/rustc 1.96.0` +\n327\t  `clippy 0.1.96`; `stable (default)` on both proved the skew would otherwise decay silently.\n328\t- **RULING (doyle, 2026-08-05, on the runner-account facts as the 2026-08-03 hold required):**\n329\t  (1) align-by-event REJECTED — with both boxes on unpinned stable, alignment decays silently;\n330\t  the skew is a mechanism and the fix must be one too. (2) declare-one-leg REJECTED as the\n331\t  terminal state — it repairs lint authority but leaves the legs resolving with different cargo\n332\t  versions, and the acaaa4f lock-attribution question this family started from is a resolver\n333\t  question. (3) **PIN IN-REPO: `rust-toolchain.toml`, `channel = \"1.96.0\"`** — both runner\n334\t  accounts already resolve their toolchain through rustup (witnessed by the `active=` line), so\n335\t  the pin self-applies with zero per-box maintenance, and the judge's version becomes a property\n336\t  of the TESTED SHA — the same object golden CI already guarantees. Bumps become reviewed lane\n337\t  commits, tested by the golden run they ride; the hfenduleam leg proves 1.96.0 on the pin\n338\t  lane's own run. (4) INTERIM until the pin lands: kitsubito's clippy leg is AUTHORITATIVE for\n339\t  lint disputes — not because newer is stricter (skew direction stays unasserted) but because\n340\t  1.96 is the version the pin names, so interim and terminal rulings agree.\n341\t  · **Origin:** BAROMETER (ex releases#121); re-confirmed on the #125 fix lane\n342\t  (builder's Windows clippy vs kitsubito's rust-1.96.0 lints); see [[CI-RIDER LANE STATE]]\n343\t- **What/why:** a Windows-clean lane can land a lint that only reds on the Linux leg — toolchain\n344\t  skew makes local clippy evidence non-transferable. Align versions or declare the authoritative\n345\t  leg. Natural companion to IR-4's toolchain-version print step.\n346\t- **Built evidence / fulfilment check:** `rust-toolchain.toml` contains\n347\t  `channel = \"1.96.0\"` and rode the tested cut. A source sweep at close found no CI or pool\n348\t  machinery keyed to a box-default toolchain **path**: golden invokes `cargo`, `rustc`, `clippy`,\n349\t  and `rustup show active-toolchain` through PATH; pool ownership keys on source-tree/lane identity,\n350\t  not rustup installation paths. `release.yml`'s `$HOME/.cargo/bin/mdbook` is an installed tool\n351\t  location, not a Rust toolchain selector; its builds still invoke PATH-resolved `cargo`.\n352\t- **Size:** built.\n353\t- **Composed:** LOCKSMITH (#132) CI-rider cluster (rides IR-4's toolchain-version print step) —\n354\t  2026-08-03. GREENLIT with #132 and **DISPATCHED to hertz 2026-08-03**; that dispatch delivered\n355\t  the measurement half (landed via [[CI-RIDER LANE STATE]], first exercised on run 30971976024).\n356\t\n357\t### IR-10 — Wave gate runs the CONSUMERS of any predicate it changes\n358\t- **Status:** open · **Origin:** BAROMETER gate craft (ex releases#119)\n359\t- **What/why:** legs chosen from changed crates miss the predicate's callers; a composed red is\n360\t  triaged at the wave's own tip first. This is the gate-population rule made binding in the gate\n361\t  runbook + scripts rather than living in memory.\n362\t- **Ripe when:** next gate-runbook/docs wave.\n363\t- **Size:** small (docs + gate-script checklist).\n364\t\n365\t### IR-11 — find-cwd-holders.ps1: --headless discriminator as a column\n366\t- **Status:** open · **Origin:** worktree-pin triage tooling (ex releases#118)\n367\t- **What/why:** the holder-triage script buries the headless-vs-interactive discriminator in prose;\n368\t  as a column it makes the orphan-vs-own-shell call one glance.\n369\t- **Ripe when:** any rig-tooling wave; trivial rider.\n370\t- **Size:** tiny.\n371\t\n372\t### IR-12 — xtask contract-drift gate misses a stale manifest.schema.json\n373\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane (the narrowed blind arm only). · **Origin:** ex\n374\t  releases#116\n375\t- **KIN NOTE (2026-08-30 close sweep, todlando measured on #23 W2):** the cli/reference.md drift\n376\t  arm of `xtask check` has the SAME stale-artifact class one input over — it compares the\n377\t  committed reference against the **on-disk `spt` binary**, and `cargo build -p <other>` /\n378\t  `cargo check` leave that binary stale, so the drift gate can exit 0 over real drift (measured\n379\t  both directions: restored pre-change ref + fresh binary → exit 1 correctly; stale binary →\n380\t  confident 0 over the same drift). Battery remedy is structural, not disciplinary: the\n381\t  mandatory `cargo build --workspace --bins` prebuild leg runs BEFORE the xtask leg in every\n382\t  gate driver (adopted this arc; it caught W2's spacerun red with a fresh binary the same\n383\t  night). A construction fix (xtask builds/validates its own spt input) would retire the class.\n384\t- **What/why (corrected — the consequence sentence was false at `b7b00c3`):** the literal claim\n385\t  holds — `xtask check` does not regenerate-and-compare the schema — but staleness does NOT \"ship a\n386\t  wrong public contract silently\": `checked_in_schema_is_current`\n387\t  (crates/spt-runtime/src/manifest.rs:2363, `int->REQ-DOCS-5`, landed `be4e46c` 2026-06-05, BEFORE\n388\t  this entry's last sweep — docs lagging code) asserts full content equality of the checked-in\n389\t  `manifest.schema.json` against what the derives generate, CRLF-normalised, `SPT_BLESS=1` as the\n390\t  regenerate path. It is REACHED (lib unit test; ci.yml:114 runs `-E kind(lib)+kind(bin)` on push;\n391\t  golden Phase A re-runs the workspace). Exactly ONE schema file exists in the tree; `docs_bundle`\n392\t  (xtask main.rs:609-618) COPIES it at build time, so no second stored copy can drift. Chain closes:\n393\t  derives → checked-in (unit-gated) → bundle (copied, not stored).\n394\t- **What remains open, and the entry narrows to it:** `check_llms_links` (xtask main.rs:521)\n395\t  hardcodes `manifest.schema.json` and `llms-full.txt` as always-existing, so the link check can\n396\t  never see them MISSING — a blind arm, not a drift hole.\n397\t- **The discrimination is now PROVEN, not presumed (todlando 2026-08-04, burn-the-build arms in\n398\t  isolated worktree ir12-mutation @`11169c1`, env verified clear of `SPT_BLESS` FIRST — set, the\n399\t  test short-circuits into a WRITE and a mutation arm silently self-heals green; that env check is\n400\t  now part of the rig recipe):** arm 0 baseline PASS by NAME (1 test run); arm 1 semantic single\n401\t  byte (title `…manifest`→`…manifesX`, length unchanged, scripted edit with match-count refusal)\n402\t  REDS at manifest.rs:2374 exit 100 — \"manifest.schema.json drifted from the derives — regenerate\n403\t  with SPT_BLESS=1\", with the mutated token appearing exactly once in 96,248 B of assertion output\n404\t  so the byte is provably the only delta; arm 2 whitespace-only (CRLF→LF, 1014 endings) PASSES —\n405\t  and arm 0 is itself the stronger normalisation proof, since the on-disk file is CRLF while the\n406\t  generated string is LF, so an unmutated PASS is only possible because the test normalises; arm 3\n407\t  restore re-measured PASS at the pristine sha256. `checked_in_schema_is_current` is a REAL gate.\n408\t- **Built evidence:** `check_llms_links` resolves stored root assets to their\n409\t  real source paths and runs the `llms-full.txt` generator instead of returning\n410\t  hardcoded `true`. A unit cell proves a missing schema and install script are\n411\t  refused, then accepted only after the real source file exists.\n412\t- **Ripe when:** next xtask/docs-gate wave (now sized to the blind arm only).\n413\t- **Size:** tiny.\n414\t\n415\t### IR-13 — Test-soundness follow-ups from the uniform-table sweep\n416\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** ex releases#58\n417\t- **What/why:** the remaining candidates from the closed issue were mutation-proved before changing\n418\t  tests. `hold_outranks_everything` now walks all four `Opportunity` arms (including\n419\t  `HoldRelease`); changing held+release to start reds on that arm. Pure walk tests cover all four\n420\t  `QuiesceOutcome` arms and all five `EffectKind` arms; making `KillUnconfirmed` clear or\n421\t  `Registry` ephemeral reds independently. The join test now binds all six `JoinFail` variants to\n422\t  both hold retention and the emitted failure class/retry payload; misclassifying `WrongCode`\n423\t  reds. The access candidates had already landed in the W4 follow-up and its dead-seam removal,\n424\t  so the hygiene lane does not manufacture a second test vocabulary beside them.\n425\t\n426\t### IR-14 — .worktrees audit: \"how many worktrees are there\" has four defensible answers, and the difference is not junk\n427\t- **Status:** open · **Origin:** ex releases#56 (was flag: NEEDS-OPERATOR in eval — operator input\n428\t  now sought directly when the entry ripens, not via board flag)\n429\t- **What/why:** the project `.worktrees/` dir accumulates content beyond what git tracks; audit +\n430\t  reap recipe + a hygiene rule for lane close-out. Teardown discipline per docs and memory (classify\n431\t  before delete, outbound links first).\n432\t- ⚠ **The header of this entry previously read \"14 untracked orphan dirs vs 25 git-tracked\". Both\n433\t  numbers were stale AND UNDATED**, so nobody could tell drift from error. Every count below is dated\n434\t  and carries its command.\n435\t\n436\t#### THE COUNT DISAGREEMENT IS THE FINDING (measured 2026-08-03, todlando + doyle, main @`3efd7e6`)\n437\t\n438\tThree people measuring \"the worktrees\" got three answers. None was wrong; they answered three\n439\tdifferent questions, and nothing in the tree states which one is meant:\n440\t\n441\t| answer | question it actually answers | command |\n442\t|---|---|---|\n443\t| **73** | all ENTRIES under `.worktrees/` | `ls -A .worktrees \\| wc -l` |\n444\t| **52** | DIRECTORIES under `.worktrees/` | `ls -dA .worktrees/*/` |\n445\t| **38** | registered worktrees INCLUDING the root checkout | `git worktree list` |\n446\t| **37** | registered worktrees under `.worktrees/` | above, minus the root |\n447\t\n448\t**52 − 37 = 15 unregistered directories.** The 73 − 52 = **21 loose FILES** are covered below.\n449\t\n450\t**A count is only as good as its question.** Treat \"how many worktrees\" as under-specified until the\n451\tanswer names its population — the same defect that made a naive `grep -rn` from the project root\n452\tinflate a code count by **34.9×** (426 tracked `.rs` vs 14865 on disk excluding all `target/`), and\n453\tmade that grep run past 120s while `git ls-files | xargs grep` returned instantly. **Scan roots and\n454\tpopulation definitions are the same class of error.** Use `git grep` / `git ls-files` for tracked\n455\tcontent and `git worktree list --porcelain` for worktrees.\n456\t\n457\t#### THE 15 UNREGISTERED DIRECTORIES ARE FOUR DIFFERENT KINDS OF THING\n458\t\n459\t⛔ **CLASS A — LIVE BUILD POOLS, NOT ORPHANS. DO NOT DELETE.** 3 dirs, 13.2 GB. Each is the TARGET of\n460\ta junction that a REGISTERED worktree uses as its `target/`:\n461\t\n462\t| dir | inbound junction from | size | claim |\n463\t|---|---|---|---|\n464\t| `gate-target` | assembly-doorbell, doorbell-w1, doorbell-w2, doorbell-w3 | EMPTY | none |\n465\t| `gate-target-render` | golden-render | 5.84 GB | `POOL-OWNER.json` → golden-render |\n466\t| `gate-target-w4doc` | w4-cli-doc | 7.36 GB | none |\n467\t\n468\t**These are exactly the directories that read as obviously junk** — no `.git`, no source, leftover\n469\tnames — and deleting one destroys a registered worktree's build pool and leaves a dangling junction.\n470\t**Polarity was checked BEFORE classification, which is what caught it:** all 15 top-level dirs are\n471\tREAL directories, none is itself a reparse point; the six junctions are **INBOUND**, at\n472\t`<registered-worktree>/target`. See [[worktree-target-junction]], [[gate-worktree-target-disk]].\n473\t\n474\tTwo findings inside class A, neither of them a deletion question:\n475\t- **`gate-target` has FOUR registered trees junctioned into ONE pool, with no `POOL-OWNER.json` at\n476\t  all** — so nothing would refuse a second LIVE lane there. That is releases#103's exact hazard\n477\t  sitting armed. The pool is also empty: someone reclaimed it and left four junctions aimed at a hole.\n478\t- **`gate-target-render`'s `POOL-OWNER.json` carries only `owner_tree` and `written_by` — no pid and\n479\t  no birth stamp.** A claim that cannot distinguish a live lane from a finished one is missing the one\n480\t  property the claim mechanism exists to provide.\n481\t\n482\t**CLASS B — EMPTIED SKELETONS, ONE UNIFORM SHAPE.** 8 dirs, **0 files**: `acl-core`, `engine-room`,\n483\t`ff-fastfollow`, `gate-23d5ceb`, `gate-ff`, `golden-a`, `golden-b`, `w2b-sender-stamp`. Every one is\n484\texactly `crates/spt-daemon/` and nothing else. **Eight independent removals stopping at the SAME\n485\trelative path is a mechanism, not litter.**\n486\t\n487\t**MECHANISM CORROBORATED LIVE, 2026-08-03:** a read-only PEB sweep of process CWDs during a running\n488\t`spt-daemon` suite found ~20 processes — `spt_daemon-<hash>` test harnesses, `PING`, `cmd` — whose\n489\tCWD was **exactly `<worktree>/crates/spt-daemon/`**, the precise path all eight skeletons froze at. A\n490\t`git worktree remove` racing a straggler there deletes everything else and leaves that chain pinned.\n491\tThe processes churn fast (all 17 sampled pids were gone within 30s, one already showing **pid reuse**\n492\t— see [[pid-reuse-across-reboot]] for why a pid alone is never an identity), so the pin is a race, not\n493\ta steady state, and it recurs on every daemon-suite worktree.\n494\t\n495\t**CLASS C — FULLY EMPTY, no inbound junction.** 3 dirs, 0 bytes: `gate-41`, `gate-559632e`,\n496\t`release-runbook-main-advance`. Class B with even the chain gone.\n497\t\n498\t**CLASS D — DELIBERATE SCRATCH, NOT RESIDUE.** 1 dir, 12 files, 50 KB: `_patches` — three `.patch`\n499\tfiles with their `.untracked` manifests, plus `ir18-gate-logs/`. Modified the day before the audit,\n500\ti.e. someone's working state."}]},"uuid":"013984d2-1fea-41d4-924b-02ea7bee59f8","timestamp":"2026-09-06T11:16:06.241Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"# Infra register — CI / build-pipeline debt\n\nOperator-ruled 2026-08-02: infrastructure and CI-pipeline work items live HERE, not on the\n`spt-bs-releases` board. The board carries product surface the operator triages; this register\ncarries what the gater triages. **Mandate: doyle sweeps this file at every milestone intake and\nevery release close, and composes ripe entries into waves/milestone riders.** An entry leaves\nthis file only by being built (link the lane) or being retired with a stated reason.\n\nEntry format: status · origin · what/why · trigger condition (what makes it ripe) · size guess.\n\nLast sweep: 2026-08-30, NOW-SIGNAL (#23) / v0.67.0 RELEASE CLOSE — shipped counter 102, tag ==\nmain-at-tag == tested `da71b785`, 9/9 golden att2 (att1 sole red = FLAKE-LEDGER :664\nteardown-leak row, ruled ledgered-class at triage — signature predates the diff — rerun\nnon-vacuity proven by cell re-execution; ledger row +1 with new data, stays OPEN; hertz\nIR-34/35 cluster strengthened). Same-day second sweep, so most composition state is the\nmorning's; deltas only: IR-59 gained the SEVENTH face (parallel-lane fill rate: 236.6 GB /\n3.5 h across four wave pools drove the box to 0.01 GB mid-close; per-wave pool reaping rule).\nIR-12 gained the stale-binary kin note (xtask reference-drift arm reads the ON-DISK spt binary;\nstructural remedy = the now-mandatory workspace-bins prebuild leg, adopted this arc after it\nalso caught W2's spacerun red). IR-63's conhost litter REPRODUCED on cue: 14 fresh CWD pins on\nthe four party trees at the same `crates/spt-daemon` relative path, killed by pid via the PEB\nprobe, all four worktrees then removed FIRST TRY — the pin-check-first party rule held\n(+58.2 GB; earlier emergency reap of the same wave's finished-lane targets +186.6 GB).\nTest-craft banked to memory, not entries: `cargo test -- <bare> --exact` runs NOTHING and exits\n0 (todlando's structural fix: names carry the filter token); Win32_Process CommandLine filters\nCANNOT answer a CWD-pin question (todlando's false-positive self-catch). Board mints this arc:\n#244/#246/#247/#254 (BACKLOG). #16/#17 discharged drops (detach + EVAL). IR-73's ci.yml/\nrelease.yml floor-site reorders did NOT ride this arc's workflow commits — still owed, next\ntouch. No entries retired.\n\nPrior sweep: 2026-08-30, SEMAPHORE (#242) / v0.66.0 RELEASE CLOSE — shipped counter 101, tag ==\nmain == tested `d931dd63`, 9/9 at one sha across two attempts; full-register pass executed from\n`REGISTER-SWEEP-242-DRAFT.md` (72 entries enumerated pre-golden, load-bearing claims re-measured\nin-tree). Rulings: IR-69 close-out re-census RAN and FOUND the entry's own predicted truncation\nblind spot LIVE (338 cli.rs + 2 main.rs shipping sites never censused; addendum on the entry,\nstays OPEN; residual conversion + generator fix + seam enforcement = releases#243, scoping\nreconciled on the issue; common-word matcher RULED a separate hertz test-side rider). IR-17\nthree corrections by replacement (08-03 kitsubito \"empty stderr\" = METER ARTIFACT — panel\ncapture postdates the specimen by 16 days; kitsubito family member CLOSED under the RCA-242\nexe-hash-on-ready-path mechanism, behaviour-change request minted as releases#244; Windows\nspecimen + hfenduleam sub-observation stay the live population). Daemon-leak cluster\nIR-7/17/20/34/35/63 LANE-LINKED to hertz's queued fixup lane (briefs in his spool cite the entry\nids). IR-57 first-real-assembly use appended (ASM-241: 6 picks, 5 MATCH / 1 LOSS reconciled\nbyte-for-byte to the deliberate resolution; its earlier \"figure correction rides next batch\"\nnote was STALE — the correction landed inline 2026-08-29, retired here). IR-46 gained the #242\ngolden additions (per-job floor instants; the `/runs/<id>/jobs` run_attempt trap with\n`started_at` discriminator + `/attempts/N/jobs` authority; raw-bytes rerun preflight;\nnon-vacuous rerun check). IR-59 gained the SIXTH face (r4 LNK1318 at the job's internal\nlow-water; within-job floor re-read rides the next workflow commit; box ~51 GB non-recovering\nconsumption → audit slot). FILED: IR-73 (ci.yml/release.yml literal-first floor sites off the\ngolden path, 8 sites), IR-74 (kitsubito 21,643 /tmp endpoint homes, hertz's measurement), IR-75\n(kitsubito treqs 127 vacuous leg — install-or-drop; IR-37 deliberately NOT reopened, different\nsurface). Composed: IR-14/26/27/49 as ONE between-milestone pool/worktree audit slot (window\nopen now); IR-11 + IR-33(a) as next-intake small riders; IR-59's log-the-floor half + IR-57's\nscripted audit stand as the next intake's tooling pair. IR-54 evidence noted: the #242 cut's\nunshaped-head intake miss (self-caught by deployah, shape-on-top `e4f52047`, 8th consecutive\nshape-inside-candidate) is another construction-not-discipline datum. No entries retired.\n\nPrior sweep: 2026-08-27, IO-PARSER (#22) INTAKE (wave map: `IO-PARSER-22-JIT.md` + #22 comment).\nRulings: IR-66 COMPOSED as the parallel hertz rider (the two attach-cell later-needle treatments,\nattach.rs:561/:672 — the \"rides next intake\" note comes due here). IR-52 conditional rider\nCARRIED FORWARD on this milestone's docs lane, same terms as WAX-SEAL (depth fix lands iff the\nlane touches the docs-site CLI reference generator, else stays open). IR-67 COMPOSED as JIT gate\ndiscipline (no wave battery leans on a `-p spt --bins` leg as integration coverage); the entry\nstays open until its named construction fix. IR-55 stays armed with hertz; IR-6 LOCKSMITH\ncomposition still unreported, stays; IR-2 trigger unevaluated this sweep (teardown just cleared\nthe unlanded-lane field — re-check next sweep). No entries retired; none filed.\n\nPrior sweep: 2026-08-23, WAX-SEAL (#21) INTAKE (wave map: `WAX-SEAL-21-JIT.md` + #21 comment\n5390092115). Rulings: IR-52 COMPOSED as a CONDITIONAL W4 rider on the wax-seal docs lane —\nthe milestone mints new nested `spt seal` CLI verbs, exactly the shallow-render class the entry\nnames; the depth fix lands iff that lane touches the docs-site CLI reference generator, else the\nentry stays open here. IR-2 trigger NOT met (todlando's PR set parked unlanded for the next\ngolden chain). IR-55 stays ARMED-FOR-CAPTURE with hertz. IR-6 conditional composition from\nLOCKSMITH still unreported — stays open. IR-56/57/58/59/60/61 are discipline/craft entries or\nawait their named triggers; IR-62 is hertz-class test/rig work, unscheduled. No entries retired;\nnone filed.\n\nPrior sweep: 2026-08-19, CONCIERGE (#183) INTAKE (wave map: `CONCIERGE-183-JIT.md` + #183\ncomment 5347768797) — rows read from the LOCAL register stack (`4799031→ecd640c→8d4c224`;\norigin/main lacks IR-49/50/51 until the chain lands — absence ≠ not-filed). Rulings: IR-50\nCOMPOSED — dispatched to hertz same day (sink-path-helper-FIRST sequencing per the entry;\n`engine_room_bringup_e2e.rs` excluded, its panel sites ride the gated #199 lane), with the\nengineroom.rs:145 misnomer as a rider on the same lane. IR-47 = candidate co-rider IF this\nchain touches golden.yml/ci-notify, else holds. IR-48 holds (next xtask parity-cell touch).\nIR-49 holds (next poolguard touch or first landed-lane takeover request). IR-51 holds —\ngated on #199 attribution; a net-off fix must NOT precede attribution. IR-2 trigger NOT met\n(queued unlanded lanes exist). No entries retired; none filed — the intake window's product\nfinding (rc terminal-Exit omission, hertz RCA: proven invariant violation, load excluded\n92/92, H2 candidate unconfirmed) routed to the BOARD as releases#201, the correct venue for\nproduct surface.\n\nPrior sweep: 2026-08-18, KEYSTONE (#182) INTAKE — the prior sweep's four composition rulings\nEXECUTED (wave map: `KEYSTONE-182-JIT.md`, base main @`8248bc3`): (1) IR-9 pin lane DISPATCHED to\nhertz (W0 item 1; interim kitsubito-clippy-authoritative dies when it lands). (2) IR-21 remedy\n(2) + IR-39 vs `f24e732` DISPOSED: the branch is a BEACHHEAD (golden.yml prebuild step = the\nprebuild-made-a-rule arm, ONE fail-fast site, one ledger row) — hertz rebases it off its\nabandoned parent `b483699` (the id-collision draft; content landed renumbered as IR-46 @`8248bc3`)\nand lands it in W0; the class remainder (IR-39's SHARED precondition helper + 24-site sibling_bin\nsweep, the 33 cross-package build-edge expressions) folds into the test-hygiene lane. (3)\nTest-hygiene family DECIDED-ACTIVATED as a dedicated hertz lane inside the KEYSTONE window,\nsequenced after W0 (members: IR-13/23/36/37/38 + IR-21 clarity half + IR-39 helper +\ntwohost.rs:394 doc comment). (4) First-execution-cells discipline restated in the JIT's\ngolden-head step. Board members #84/#85 ride hertz's W0; #166/#57/#185 are todlando's W1. IR-46\nid-collision RULED this intake (renumber-and-land, parallel issuance not authored disagreement;\ndeployah landed it @`8248bc3`). No new entries filed; no entries retired.\n\nPrior sweep: 2026-08-19, NAMEPLATE (#181) / v0.56.0 RELEASE CLOSE — shipped c91 @`60d74ea`\n(tag == golden-tested sha, run 32209922535; one respin, both first-golden reds ruled rig defects).\nFiled IR-42 (pool-claim writes / build enforces — BUILT in this same commit, AGENTS.md line),\nIR-43 (knock NoReply past its 30s carrier bound), IR-44 (perch-sentinel comment overclaims\npreservation), IR-45 (twohost rig home premise; SETTLED + RETIRED\n2026-08-19 — pump paths resolve under the per-run temp root, see the entry; #189 corrected on the\nboard, comment 5337519936). Two cycle findings ruled RUNBOOK-homed and\nlanded in this commit rather than as entries: the first-execution-cells intake question\n(RELEASE-RUNBOOK golden-head intake — name the never-executed cells before the run) and\ndeployah's sweep-vs-cascade mechanism (RELEASE-RUNBOOK board step — under golden CI the cascade\nis DRIVEN via `state <mref> acceptance`, never swept). ⚠ LABELLED HOLE — CLOSED UNDERIVABLE\n(2026-08-19): the close commune's batch list named \"alchemy create-races\"; its content did not\nsurvive the author's context reset and was not recoverable from #181, the JIT records, or memory.\nDeployah answered the query: he ran ZERO create ops at the cut (could not have witnessed a create\nrace), a fresh probe over the milestone window shows no duplicate mints (the 4-issues-in-2s batch\nmint is batching, not duplication), and the only surviving trace is doyle's own pre-reset message\nnaming the item as already-known — a pointer, not a sighting. Item DROPPED; the hole stands as\nthe record. Deployah's sweep-vs-cascade ship-path trap (#181 comment 5337402639, runbook-homed\nabove) is explicitly NOT this item's content — do not fold it in. Composition: IR-9's pin lane\n(`rust-toolchain.toml` @ 1.96.0) goes to hertz AT KEYSTONE #182 INTAKE per the 2026-08-05\nruling; IR-21 remedy (2) + IR-39's precondition helper compose with hertz's standing\nfixture-prebuild-hardening branch `f24e732` — disposition at the same intake; the test-hygiene\nfamily (IR-13/23/36/37/38 + IR-21's clarity half) stays the dedicated post-batch lane candidate,\ndecision at intake; IR-29's proving run + IR-30's instrument lanes ride the next golden batch.\nIR-2's trigger explicitly NOT met (queued unlanded lanes exist: IR-29/IR-30 instruments,\nfour-arm refusal eprintln, f24e732). IR-14 hygiene movement: `.worktrees/nameplate-asm-2bd36f1`\nreaped this sweep (+66.98 GB by FS delta 120.53→187.51; claim `gate-w7-courtesy` base `fd3dc5a`\nin main = finished lane; zero inbound reparse points) — stale-lane audit itself still open.\n\nPrior sweep: 2026-08-05, LOCKSMITH tranche-2 (#141) CLOSE — golden run 30971976024 green on all 9\njobs, main ff'd to `0a25b77`, v0.55.0. IR-40 filed (stale-resume-brief + early-informant class).\nIR-9's decision trigger FIRED 2026-08-05: doyle read the runner-account versions off this run's\n`test` legs and RULED — pin in-repo via `rust-toolchain.toml` @ 1.96.0, kitsubito's clippy leg\nauthoritative in the interim; pin lane to hertz at next intake (see the entry). IR-41 filed the\nsame night (queued main run superseded without a record; runbook step 3 corrected in the same\ncommit). IR-1/IR-4's golden-only steps (link probe both boxes, toolchain\nprint both legs) had their FIRST EXERCISE here, discharging the \"unexercised until a golden run\"\ncaveat at the CI-RIDER LANE STATE foot section. IR-35's re-measure rode the batch (`c65b838`).\nOwlery-noun thin lane SCOPED and dispatched to hertz for the next batch (class A only, two sites;\nclass B on-disk rename is an explicit non-goal — see IR-40's kin discipline for why the boundary is\nwritten into the brief rather than left to judgement).\n\n---\n\n## OPEN\n\n### IR-1 — Quiet predicate needs a network axis (tailscale RTT probe)\n- **Status:** open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]] at the foot of this file;\n  carried by `bf8c4a2` → `REQ-CI-LINK-HEALTH-PROBE`, mapping CONFIRMED by builder hertz 2026-08-03\n  (by content: tailscale ping ×5, med/max RTT rows into the bench ledger, three arms\n  success/NO-REPLY/UNAVAILABLE, always exit 0 — instrument, not gate). NOTE `bf8c4a2` is NOT\n  single-purpose: it also corrects the free-space preflight floor read\n  (`REQ-CI-FREE-SPACE-PREFLIGHT`, the ci-runner-has-no-warm-target shape) — no 1:1 commit→IR map\n  for this commit · **Origin:** golden/bench-wiring red triage 2026-08-02 (ex releases#126)\n- **What/why:** the shared-runner quiet predicate (zero non-terminal runs + no local\n  cargo/rustc/nextest by parent chain) is process-shaped; both axes passed on a box whose only\n  link was degrading (321s for a 1s checkout, bidirectional 10s QUIC dial timeouts). A tailscale\n  RTT probe to the peer box before two-host rendezvous, carried in the bench ledger, would have\n  called run 30771155390's red in seconds. Evidence: the arm-1 count table (PUMP_PEER_FAIL\n  a 0→3→0, b 8→22→8 across green/red/rerun).\n- **Permanent, not stopgap:** operator-confirmed 2026-08-02 that kitsubito cannot be provided\n  ethernet — wifi-only indefinitely, so the link cannot be hardened and the predicate must see\n  link health.\n- **Ripe when:** next CI-touching wave, or the next network-shaped golden red — whichever first.\n- **Size:** small (one probe step + ledger row + predicate doc).\n- **Composed:** LOCKSMITH (#132) CI-rider cluster, hertz thin lane — 2026-08-03. GREENLIT with\n  #132 and **DISPATCHED to hertz 2026-08-03** (direct brief; the register is the spec, there is no\n  board issue). Leaves the register only when the lane lands or the entry is retired.\n- **FIRST FIELD USE, and it DISCRIMINATED (2026-08-04, golden 30873007187 attempt 1):** the probe\n  (landed via the rider lane, riding `4b37512`) read 4–7ms RTT healthy on both twohost legs\n  minutes before both legs redded — REFUTING the degraded-link read for that red and steering\n  triage to the real mechanism (the [[IR-29]] serve-window race) instead of a link chase. The\n  instrument's first catch was a correct NEGATIVE — exactly the call run 30771155390 needed and\n  could not make.\n\n### IR-2 — Settle the warm-runner CARGO_INCREMENTAL delta\n- **Status:** RETIRED 2026-08-28, measurement run, verdict NO FLIP — incremental stays ON.\n  hertz paired goldens at main fed965f8: ON run 33167693879 GREEN; OFF run 33172022108 RED\n  (Windows input_ack_deadlock SetupFailed at a 3.0s IPC read deadline — the box-load family,\n  discarded with the leg). Disk: OFF target 7.49 GB vs ON 11.40 GB = 3.91 GB / 34.3% saved\n  (smaller than the entry's 5.65 GB cold figure). Timing NOT causal-quality: sequential runs in\n  one persistent workspace let OFF inherit ON's cache (order contamination dominates the\n  apparent OFF speedups); Windows build-spt-bin +3.8%, Linux -5.1%. Retire reasoning: the\n  DECISION is answerable now — OFF produced no green golden, the timing question needs 4+\n  counterbalanced fresh-cache windows to answer cleanly, and the disk motivation has weakened\n  (box at ~148 GB free under the teardown discipline; the LNK1318 pressure era predates it).\n  Runs/artifacts preserved on the record. Reopen only if runner disk pressure returns as a\n  recurring floor-class red.\n- **Was:** open · **Origin:** #103/#108 bench-wiring lane 2026-08-02 (ex releases#127)\n- **What/why:** the #103 measurement (−29.8% wall, −5.65 GB/target, n=3) is COLD-build only.\n  Golden's runner `_work` target persists warm, where incremental is exactly what keeps it cheap;\n  CARGO_INCREMENTAL=0 was applied only to the genuine cold build (n1-gate pinned old-broker\n  cache) + local rig recipes (docs/GOLDEN-CI.md). Open question: does incremental still pay on\n  the warm runner, weighed against 5.65 GB/target on a box with LNK1318 free-space history?\n- **Method (hertz):** one full golden each way on a quiet box, outside a milestone, compared\n  per-step from the bench ledger.\n- **Ripe when:** a quiet between-milestone window with no queued lanes (the measurement burns\n  two golden windows).\n- **Size:** medium (two proving runs + verdict + possible leg flips).\n\n### IR-3 — Daemon-level guard: broker-net wakeup rate bounded across endpoint churn\n- **Status:** open · **Origin:** releases#125 remediation, todlando REQ call 1 (ex releases#128)\n- **What/why:** the swarm-discovery GC-spin burned two cores for two weeks visible only in a\n  process table — no suite assertion sees the class. Wanted: a daemon-level assertion that\n  broker-net workers stay quiescent across repeated endpoint create/destroy churn.\n- **Design constraint (pre-ruled):** assert on WAKEUP RATE / voluntary ctxt-switch delta over\n  the churn window, NOT %CPU — CPU thresholds flake under CI load; the defect signature\n  (~100 Hz per orphan loop) is load-independent. Mint the REQ at activation.\n- **Near-product:** this is runtime-defect visibility, the most product-adjacent entry here —\n  a candidate rider on any daemon-lifecycle milestone.\n- **Ripe when:** the next milestone touching spt-net endpoint lifecycle or daemon supervision.\n- **Size:** medium (churn harness + counter plumbing + flake-safe assertion).\n\n### IR-4 — Lock-pin guard + lock-procedure rule + toolchain print (three riders, one lane)\n- **Status:** open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]] at the foot of this file;\n  candidate commits `1275e47` + `49d4805` + `8ed006b`, mapping NOT yet confirmed by its builder ·\n  **Origin:** releases#125 fix-lane intake hold (ex releases#129 + riders)\n- **What/why, three parts that land together:**\n  1. **xtask check leg:** assert Cargo.lock resolves swarm-discovery to git rev\n     `89a2200d54a4e3cab2f46cc75ebff49a1fb07614` while the patch is load-bearing; the check's\n     message states its own drop condition (upstream ships a post-PR#27 release AND iroh's pin\n     reaches it). Without it, stanza removal or a routine iroh bump silently returns the lock to\n     the spinning crate and nothing reds.\n  2. **Procedure rule for lock-touching lanes** (docs): targeted `cargo update -p <crate>` only,\n     never full re-resolve; count changed `[[package]]` blocks AND diff per-block edges (set-identical\n     hid 8 windows-sys edge movers at acaaa4f); two resolutions disagreeing = toolchain drift —\n     stop and compare against CI before shipping either lock; hand-edited lock acceptable iff\n     `cargo check --workspace --locked` passes.\n  3. **Toolchain-version print step in golden** (cargo/rustc versions, both OS legs): the acaaa4f\n     comparison against CI was impossible because no run log prints a version. One-grep audit.\n- **Ripe when:** next CI-touching wave; part 1 sooner if any iroh bump is proposed.\n- **Size:** small-medium (one xtask leg, one docs section, one workflow step).\n- **Composed:** LOCKSMITH (#132) CI-rider cluster, hertz thin lane — 2026-08-03. GREENLIT with\n  #132 and **DISPATCHED to hertz 2026-08-03** (all three parts land together).\n\n### IR-5 — Shared nextest summary parser\n- **Status:** open · **Origin:** BAROMETER triage (standing recommendation, pre-register)\n- **What/why:** two agents in one day wrote `[0-9]+ tests run` parsers that read \"1 test run\"\n  (singular) as zero — a guard fed by a broken parser condemns valid rounds. One shared,\n  singular-aware parser (single-source discriminant) for every consumer of nextest summaries.\n- **Ripe-when REWORDED 2026-08-04 (todlando audit): the old trigger was unfireable as worded.** At\n  `b7b00c3` the in-tree population of nextest-SUMMARY parsers is ZERO — the two scripts that read\n  nextest output (`g6-curve.ps1:83-90` per-test lines, `g6-postbounce.ps1:44` display-only grep)\n  neither parse counts nor carry the defect, so \"next wave touching any gate script that reads\n  nextest output\" could fire on a non-defective script while the real population (agent-authored\n  throwaway parsers, which never enter the tree) stays out of reach. New trigger: **the next time\n  anyone — agent or lane — needs a nextest summary COUNT**, the shared parser is built FIRST and the\n  need consumes it; rig briefs should name it so throwaways stop being authored.\n- **Size:** small.\n- **Composed:** LOCKSMITH (#132) CI-rider cluster, CONDITIONAL — lands iff the hertz thin lane\n  touches gate scripts; otherwise stays open here. 2026-08-03. Carried in hertz's 2026-08-03\n  dispatch brief as a **conditional** rider; hertz reports whether the condition fired. **Not yet\n  known to be building** — an unreported condition leaves this entry open, not landed.\n\n### IR-6 — Membership logging on subnet gates\n- **Status:** open · **Origin:** BAROMETER triage (standing recommendation, pre-register)\n- **What/why:** counts beside results, membership beside counts — gate logs that state a count\n  without naming the population keep producing unreadable reds. Standardize membership\n  enumeration in gate output.\n- **Ripe when:** next wave touching gate scripts / CI legs that report counts.\n- **Size:** small.\n- **Composed:** LOCKSMITH (#132) CI-rider cluster, CONDITIONAL — lands iff the hertz thin lane\n  touches gate scripts; otherwise stays open here. 2026-08-03. Carried in hertz's 2026-08-03\n  dispatch brief as a **conditional** rider; hertz reports whether the condition fired. **Not yet\n  known to be building** — an unreported condition leaves this entry open, not landed.\n\n### IR-7 — Phase A rigs leak a daemon+brain pair on Windows (exe-lock kills notify relink)\n- **Status:** open · **Origin:** BAROMETER post-publish triage (ex releases#124 — full mechanism on the closed issue)\n- **What/why:** two Phase A rigs launch daemons that escape the job object via WMI-rung autostart\n  (double-space unquoted cmdline fingerprint; SPT_HOME in the wrapper cmdline is the attribution\n  key); the leaked pair holds target/debug/spt.exe and kills every golden job reaching the notify\n  relink. CI reaps as tourniquet (fa6e597); in-job test launch is the fix.\n- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n- **Ripe when:** next wave touching the Phase A rigs or daemon autostart path.\n- **Size:** medium.\n\n### IR-8 — reap-census scoped_survivors=0 is blind to unreadable-path holders\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** BAROMETER triage\n  (ex releases#122)\n- **What/why:** a zero that cannot see is not a zero — census scoping skips procs whose exe path is\n  unreadable, so the survivors count can report clean while a holder lives. Needs a positive control\n  / explicit unreadable bucket in the verdict line (unreadable_path count exists; the ZERO must\n  refuse when it is nonzero).\n- **Defining specimen (golden 30782259675, hfenduleam test job, 2026-08-03):**\n  `CI-REAP summary: killed=5 kill_failed=1 scoped_survivors=0` — an admitted kill failure printed\n  beside a zero-survivors claim on the same verdict line. The held image surfaced one step later:\n  run-scoped tmp cleanup denied 5/5 attempts on `...\\relshell\\svcmock.exe` (2nd appearance of the\n  svcmock hold; 1st @7a3c08c, pre-kill-auth). hertz's addendum: an image-held survivor also blocks\n  WRITES to the exe path — the same class manufactures build/relink access-denied reds that mask as\n  build problems, not just cleanup warnings. Not per-run: the same-sha green rerun's leg read\n  `kill_failed=0 scoped_survivors=0` throughout (hertz, 30784469908) — intermittent sighting,\n  second of its class, not a deterministic fixture property.\n- **The Linux twin is strictly worse (todlando audit 2026-08-04, vs `b7b00c3`):** `reap-census.sh`\n  has NO `kill_failed` anywhere (0 occurrences vs 2 in the `.ps1`) — its kill loop increments\n  `killed` only in the success branch with no else, so a failed kill increments nothing and prints\n  nothing. The specimen that made this class VISIBLE on Windows would be INVISIBLE on Linux.\n  Population precision so this is not overclaimed: ESRCH is benign (already gone; the kill-time\n  re-resolve makes it the common case); the vanishing case is EPERM against another account's\n  process. The `.sh` `scoped_survivors` DOES come from a post-reap census re-measure, so survivors\n  are measured — the hole is failed kills and the unreadable bucket, not the survivor count.\n  Windows precision from the same audit: `unreadable_path` IS on the CI-CENSUS line (:157) but the\n  CI-REAP verdict line (:243, :246) still carries only killed/kill_failed/scoped_survivors — the\n  zero still does not refuse, exactly this entry's ask.\n- **Built evidence:** both verdict lines now carry `unreadable_path`; any nonzero unreadable\n  family population renders `scoped_survivors=UNPROVEN` rather than a false zero. Linux also\n  counts and reports failed kills. The shared predicate is mutation-pinned by\n  `reap-census-selftest.sh`; the PowerShell implementation parses cleanly.\n- **Ripe when:** next census/reap script wave (natural pair with IR-7's lane) — now BOTH platforms.\n- **Size:** small.\n\n### IR-9 — Golden boxes run different clippy versions\n- **Status:** pin LANDED 2026-08-18 at `35968156` (`build: pin Rust 1.96.0`), then\n  audited **BUILT** at the 2026-08-29 v0.65.0 close sweep; the pin is an ancestor of\n  golden-green cut SHA `4d6007ac`. The earlier measurement half had already landed and run:\n  the toolchain print (`8ed006b` → `REQ-CI-TOOLCHAIN-VERSION-PRINT`) exercised both legs of\n  golden run 30971976024 (`test` jobs 92198170694/92198170700 — scoped to `test`, not n1-gate;\n  grep token `TOOLCHAIN `). Runner-account facts, read by doyle 2026-08-05: hfenduleam\n  `cargo/rustc 1.93.0` + `clippy 0.1.93`, kitsubito `cargo/rustc 1.96.0` +\n  `clippy 0.1.96`; `stable (default)` on both proved the skew would otherwise decay silently.\n- **RULING (doyle, 2026-08-05, on the runner-account facts as the 2026-08-03 hold required):**\n  (1) align-by-event REJECTED — with both boxes on unpinned stable, alignment decays silently;\n  the skew is a mechanism and the fix must be one too. (2) declare-one-leg REJECTED as the\n  terminal state — it repairs lint authority but leaves the legs resolving with different cargo\n  versions, and the acaaa4f lock-attribution question this family started from is a resolver\n  question. (3) **PIN IN-REPO: `rust-toolchain.toml`, `channel = \"1.96.0\"`** — both runner\n  accounts already resolve their toolchain through rustup (witnessed by the `active=` line), so\n  the pin self-applies with zero per-box maintenance, and the judge's version becomes a property\n  of the TESTED SHA — the same object golden CI already guarantees. Bumps become reviewed lane\n  commits, tested by the golden run they ride; the hfenduleam leg proves 1.96.0 on the pin\n  lane's own run. (4) INTERIM until the pin lands: kitsubito's clippy leg is AUTHORITATIVE for\n  lint disputes — not because newer is stricter (skew direction stays unasserted) but because\n  1.96 is the version the pin names, so interim and terminal rulings agree.\n  · **Origin:** BAROMETER (ex releases#121); re-confirmed on the #125 fix lane\n  (builder's Windows clippy vs kitsubito's rust-1.96.0 lints); see [[CI-RIDER LANE STATE]]\n- **What/why:** a Windows-clean lane can land a lint that only reds on the Linux leg — toolchain\n  skew makes local clippy evidence non-transferable. Align versions or declare the authoritative\n  leg. Natural companion to IR-4's toolchain-version print step.\n- **Built evidence / fulfilment check:** `rust-toolchain.toml` contains\n  `channel = \"1.96.0\"` and rode the tested cut. A source sweep at close found no CI or pool\n  machinery keyed to a box-default toolchain **path**: golden invokes `cargo`, `rustc`, `clippy`,\n  and `rustup show active-toolchain` through PATH; pool ownership keys on source-tree/lane identity,\n  not rustup installation paths. `release.yml`'s `$HOME/.cargo/bin/mdbook` is an installed tool\n  location, not a Rust toolchain selector; its builds still invoke PATH-resolved `cargo`.\n- **Size:** built.\n- **Composed:** LOCKSMITH (#132) CI-rider cluster (rides IR-4's toolchain-version print step) —\n  2026-08-03. GREENLIT with #132 and **DISPATCHED to hertz 2026-08-03**; that dispatch delivered\n  the measurement half (landed via [[CI-RIDER LANE STATE]], first exercised on run 30971976024).\n\n### IR-10 — Wave gate runs the CONSUMERS of any predicate it changes\n- **Status:** open · **Origin:** BAROMETER gate craft (ex releases#119)\n- **What/why:** legs chosen from changed crates miss the predicate's callers; a composed red is\n  triaged at the wave's own tip first. This is the gate-population rule made binding in the gate\n  runbook + scripts rather than living in memory.\n- **Ripe when:** next gate-runbook/docs wave.\n- **Size:** small (docs + gate-script checklist).\n\n### IR-11 — find-cwd-holders.ps1: --headless discriminator as a column\n- **Status:** open · **Origin:** worktree-pin triage tooling (ex releases#118)\n- **What/why:** the holder-triage script buries the headless-vs-interactive discriminator in prose;\n  as a column it makes the orphan-vs-own-shell call one glance.\n- **Ripe when:** any rig-tooling wave; trivial rider.\n- **Size:** tiny.\n\n### IR-12 — xtask contract-drift gate misses a stale manifest.schema.json\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane (the narrowed blind arm only). · **Origin:** ex\n  releases#116\n- **KIN NOTE (2026-08-30 close sweep, todlando measured on #23 W2):** the cli/reference.md drift\n  arm of `xtask check` has the SAME stale-artifact class one input over — it compares the\n  committed reference against the **on-disk `spt` binary**, and `cargo build -p <other>` /\n  `cargo check` leave that binary stale, so the drift gate can exit 0 over real drift (measured\n  both directions: restored pre-change ref + fresh binary → exit 1 correctly; stale binary →\n  confident 0 over the same drift). Battery remedy is structural, not disciplinary: the\n  mandatory `cargo build --workspace --bins` prebuild leg runs BEFORE the xtask leg in every\n  gate driver (adopted this arc; it caught W2's spacerun red with a fresh binary the same\n  night). A construction fix (xtask builds/validates its own spt input) would retire the class.\n- **What/why (corrected — the consequence sentence was false at `b7b00c3`):** the literal claim\n  holds — `xtask check` does not regenerate-and-compare the schema — but staleness does NOT \"ship a\n  wrong public contract silently\": `checked_in_schema_is_current`\n  (crates/spt-runtime/src/manifest.rs:2363, `int->REQ-DOCS-5`, landed `be4e46c` 2026-06-05, BEFORE\n  this entry's last sweep — docs lagging code) asserts full content equality of the checked-in\n  `manifest.schema.json` against what the derives generate, CRLF-normalised, `SPT_BLESS=1` as the\n  regenerate path. It is REACHED (lib unit test; ci.yml:114 runs `-E kind(lib)+kind(bin)` on push;\n  golden Phase A re-runs the workspace). Exactly ONE schema file exists in the tree; `docs_bundle`\n  (xtask main.rs:609-618) COPIES it at build time, so no second stored copy can drift. Chain closes:\n  derives → checked-in (unit-gated) → bundle (copied, not stored).\n- **What remains open, and the entry narrows to it:** `check_llms_links` (xtask main.rs:521)\n  hardcodes `manifest.schema.json` and `llms-full.txt` as always-existing, so the link check can\n  never see them MISSING — a blind arm, not a drift hole.\n- **The discrimination is now PROVEN, not presumed (todlando 2026-08-04, burn-the-build arms in\n  isolated worktree ir12-mutation @`11169c1`, env verified clear of `SPT_BLESS` FIRST — set, the\n  test short-circuits into a WRITE and a mutation arm silently self-heals green; that env check is\n  now part of the rig recipe):** arm 0 baseline PASS by NAME (1 test run); arm 1 semantic single\n  byte (title `…manifest`→`…manifesX`, length unchanged, scripted edit with match-count refusal)\n  REDS at manifest.rs:2374 exit 100 — \"manifest.schema.json drifted from the derives — regenerate\n  with SPT_BLESS=1\", with the mutated token appearing exactly once in 96,248 B of assertion output\n  so the byte is provably the only delta; arm 2 whitespace-only (CRLF→LF, 1014 endings) PASSES —\n  and arm 0 is itself the stronger normalisation proof, since the on-disk file is CRLF while the\n  generated string is LF, so an unmutated PASS is only possible because the test normalises; arm 3\n  restore re-measured PASS at the pristine sha256. `checked_in_schema_is_current` is a REAL gate.\n- **Built evidence:** `check_llms_links` resolves stored root assets to their\n  real source paths and runs the `llms-full.txt` generator instead of returning\n  hardcoded `true`. A unit cell proves a missing schema and install script are\n  refused, then accepted only after the real source file exists.\n- **Ripe when:** next xtask/docs-gate wave (now sized to the blind arm only).\n- **Size:** tiny.\n\n### IR-13 — Test-soundness follow-ups from the uniform-table sweep\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** ex releases#58\n- **What/why:** the remaining candidates from the closed issue were mutation-proved before changing\n  tests. `hold_outranks_everything` now walks all four `Opportunity` arms (including\n  `HoldRelease`); changing held+release to start reds on that arm. Pure walk tests cover all four\n  `QuiesceOutcome` arms and all five `EffectKind` arms; making `KillUnconfirmed` clear or\n  `Registry` ephemeral reds independently. The join test now binds all six `JoinFail` variants to\n  both hold retention and the emitted failure class/retry payload; misclassifying `WrongCode`\n  reds. The access candidates had already landed in the W4 follow-up and its dead-seam removal,\n  so the hygiene lane does not manufacture a second test vocabulary beside them.\n\n### IR-14 — .worktrees audit: \"how many worktrees are there\" has four defensible answers, and the difference is not junk\n- **Status:** open · **Origin:** ex releases#56 (was flag: NEEDS-OPERATOR in eval — operator input\n  now sought directly when the entry ripens, not via board flag)\n- **What/why:** the project `.worktrees/` dir accumulates content beyond what git tracks; audit +\n  reap recipe + a hygiene rule for lane close-out. Teardown discipline per docs and memory (classify\n  before delete, outbound links first).\n- ⚠ **The header of this entry previously read \"14 untracked orphan dirs vs 25 git-tracked\". Both\n  numbers were stale AND UNDATED**, so nobody could tell drift from error. Every count below is dated\n  and carries its command.\n\n#### THE COUNT DISAGREEMENT IS THE FINDING (measured 2026-08-03, todlando + doyle, main @`3efd7e6`)\n\nThree people measuring \"the worktrees\" got three answers. None was wrong; they answered three\ndifferent questions, and nothing in the tree states which one is meant:\n\n| answer | question it actually answers | command |\n|---|---|---|\n| **73** | all ENTRIES under `.worktrees/` | `ls -A .worktrees \\| wc -l` |\n| **52** | DIRECTORIES under `.worktrees/` | `ls -dA .worktrees/*/` |\n| **38** | registered worktrees INCLUDING the root checkout | `git worktree list` |\n| **37** | registered worktrees under `.worktrees/` | above, minus the root |\n\n**52 − 37 = 15 unregistered directories.** The 73 − 52 = **21 loose FILES** are covered below.\n\n**A count is only as good as its question.** Treat \"how many worktrees\" as under-specified until the\nanswer names its population — the same defect that made a naive `grep -rn` from the project root\ninflate a code count by **34.9×** (426 tracked `.rs` vs 14865 on disk excluding all `target/`), and\nmade that grep run past 120s while `git ls-files | xargs grep` returned instantly. **Scan roots and\npopulation definitions are the same class of error.** Use `git grep` / `git ls-files` for tracked\ncontent and `git worktree list --porcelain` for worktrees.\n\n#### THE 15 UNREGISTERED DIRECTORIES ARE FOUR DIFFERENT KINDS OF THING\n\n⛔ **CLASS A — LIVE BUILD POOLS, NOT ORPHANS. DO NOT DELETE.** 3 dirs, 13.2 GB. Each is the TARGET of\na junction that a REGISTERED worktree uses as its `target/`:\n\n| dir | inbound junction from | size | claim |\n|---|---|---|---|\n| `gate-target` | assembly-doorbell, doorbell-w1, doorbell-w2, doorbell-w3 | EMPTY | none |\n| `gate-target-render` | golden-render | 5.84 GB | `POOL-OWNER.json` → golden-render |\n| `gate-target-w4doc` | w4-cli-doc | 7.36 GB | none |\n\n**These are exactly the directories that read as obviously junk** — no `.git`, no source, leftover\nnames — and deleting one destroys a registered worktree's build pool and leaves a dangling junction.\n**Polarity was checked BEFORE classification, which is what caught it:** all 15 top-level dirs are\nREAL directories, none is itself a reparse point; the six junctions are **INBOUND**, at\n`<registered-worktree>/target`. See [[worktree-target-junction]], [[gate-worktree-target-disk]].\n\nTwo findings inside class A, neither of them a deletion question:\n- **`gate-target` has FOUR registered trees junctioned into ONE pool, with no `POOL-OWNER.json` at\n  all** — so nothing would refuse a second LIVE lane there. That is releases#103's exact hazard\n  sitting armed. The pool is also empty: someone reclaimed it and left four junctions aimed at a hole.\n- **`gate-target-render`'s `POOL-OWNER.json` carries only `owner_tree` and `written_by` — no pid and\n  no birth stamp.** A claim that cannot distinguish a live lane from a finished one is missing the one\n  property the claim mechanism exists to provide.\n\n**CLASS B — EMPTIED SKELETONS, ONE UNIFORM SHAPE.** 8 dirs, **0 files**: `acl-core`, `engine-room`,\n`ff-fastfollow`, `gate-23d5ceb`, `gate-ff`, `golden-a`, `golden-b`, `w2b-sender-stamp`. Every one is\nexactly `crates/spt-daemon/` and nothing else. **Eight independent removals stopping at the SAME\nrelative path is a mechanism, not litter.**\n\n**MECHANISM CORROBORATED LIVE, 2026-08-03:** a read-only PEB sweep of process CWDs during a running\n`spt-daemon` suite found ~20 processes — `spt_daemon-<hash>` test harnesses, `PING`, `cmd` — whose\nCWD was **exactly `<worktree>/crates/spt-daemon/`**, the precise path all eight skeletons froze at. A\n`git worktree remove` racing a straggler there deletes everything else and leaves that chain pinned.\nThe processes churn fast (all 17 sampled pids were gone within 30s, one already showing **pid reuse**\n— see [[pid-reuse-across-reboot]] for why a pid alone is never an identity), so the pin is a race, not\na steady state, and it recurs on every daemon-suite worktree.\n\n**CLASS C — FULLY EMPTY, no inbound junction.** 3 dirs, 0 bytes: `gate-41`, `gate-559632e`,\n`release-runbook-main-advance`. Class B with even the chain gone.\n\n**CLASS D — DELIBERATE SCRATCH, NOT RESIDUE.** 1 dir, 12 files, 50 KB: `_patches` — three `.patch`\nfiles with their `.untracked` manifests, plus `ir18-gate-logs/`. Modified the day before the audit,\ni.e. someone's working state.","numLines":500,"startLine":1,"totalLines":3791}},"sourceToolAssistantUUID":"8e15c9d2-7d06-4797-b917-2e5cfe6b40a8","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"013984d2-1fea-41d4-924b-02ea7bee59f8","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6DaQAetN9GbyXeqXw3","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"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"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":17828,"cache_read_input_tokens":61965,"cache_creation":{"ephemeral_5m_input_tokens":17828,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6DYyqr88S9YEwiXXQT","attributionAgent":"general-purpose","type":"assistant","uuid":"e6a013ea-993c-4193-8308-bd0fb821fe61","timestamp":"2026-09-06T11:16:10.073Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"e6a013ea-993c-4193-8308-bd0fb821fe61","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6DaQAetN9GbyXeqXw3","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01YPc9Wcu3BwuaofixPqNu8G","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":501,"limit":500},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":17828,"cache_read_input_tokens":61965,"output_tokens":347,"output_tokens_details":{"thinking_tokens":219},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":17828},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":347,"cache_read_input_tokens":61965,"cache_creation_input_tokens":17828,"cache_creation":{"ephemeral_5m_input_tokens":17828,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6DYyqr88S9YEwiXXQT","attributionAgent":"general-purpose","type":"assistant","uuid":"ed871cfa-c321-46af-a2de-90f923ba2b19","timestamp":"2026-09-06T11:16:10.984Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"ed871cfa-c321-46af-a2de-90f923ba2b19","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01YPc9Wcu3BwuaofixPqNu8G","type":"tool_result","content":"501\t\n502\t3 + 8 + 3 + 1 = 15.\n503\t\n504\t#### PIN STATE: NO SKELETON IS HELD TODAY (with a stated blind spot)\n505\t\n506\tRead-only PEB CWD sweep, 2026-08-03: **zero processes hold a CWD in any class-B or class-C\n507\tdirectory** — every live pin was in `gate-ec5f38a` and `gate-main`, both REGISTERED and both running\n508\trigs at the time. So removal of B and C would succeed today; nothing is retrying it.\n509\t\n510\t⚠ **The sweep read 412 of 593 processes; 181 were unreadable** (elevated/system, no\n511\t`PROCESS_VM_READ`). The no-pin result therefore holds over the READABLE population only. Cheap to\n512\tre-run elevated before acting — [[absence-needs-sibling-probe]].\n513\t\n514\t#### THE LOOSE FILES: A SHARED LOCATION WITH NO STATED CONTRACT\n515\t\n516\t**21 loose files sit in `.worktrees/`** — gate logs (`gate-*.log`, `gate-559632e-log.txt`), rig\n517\tscripts (`g6-curve.ps1`, `g6-postbounce.ps1`, `gate-w5-*.ps1`), and `gate-w5-notes.md`. **Nobody\n518\tdeclared `.worktrees/` a log drop; it became one.** Same class as the memory index: a shared location\n519\twith no stated contract accumulates whatever anyone puts there, and **the first person to tidy it\n520\tcannot tell residue from someone's working state** — class D is that risk already realised. The\n521\thygiene rule this entry owes should name where gate logs and rig scripts belong, not only how to reap\n522\tworktrees.\n523\t\n524\t#### RECLAIM ARITHMETIC — AND WHY THIS ENTRY IS NOT THE DISK FIX\n525\t\n526\tClasses B, C and D together are **under 51 KB**. All 13.2 GB of the unregistered population is class\n527\tA, behind live junctions. **An orphan sweep is not a disk-space remedy**, and reading it as one sends\n528\tyou at the wrong target: on the audit date, free space was **12.5 GB against the 32 GB golden floor**\n529\t([[free-space-floor-blocks-golden]]) while the two largest pools on the box were `gate-ec5f38a/target`\n530\t(14.33 GB) and `gate-main/target` (28.12 GB) — **both REGISTERED, so both outside the orphan\n531\tpopulation entirely.** The disk question and the orphan question have different populations; answering\n532\tone correctly says nothing about the other.\n533\t\n534\t- **AUDIT EXECUTED 2026-08-30 (doyle, the v0.66.0→NOW-SIGNAL between-milestone window; full\n535\t  output `wt-census-2026-08-30.txt` in the session scratchpad, method = this entry's own):**\n536\t  four answers BEFORE the sweep: 85 entries / 85 dirs / 76 registered incl root / 75 under\n537\t  `.worktrees` → 10 unregistered, 0 loose files (the 21 loose files of 08-03 are gone).\n538\t  **The 08-03 headline populations have INVERTED:** zero pools and zero junctions exist under\n539\t  `.worktrees` at all (every registered tree reads `target=none`; the reparse sweep found no\n540\t  inbound junction) — class A is EMPTY, so the armed pool hazards this entry named are\n541\t  currently unpopulated. Unregistered classified: 4 fully-empty (C), 3 `crates/spt-daemon`\n542\t  skeletons (B — the mechanism's fingerprint again), `_patches` (D, kept — working scratch),\n543\t  and TWO content-bearing checkout remnants (gate-signet-w1 10.8MB, gate-w1-a8f04aff 27MB) =\n544\t  registry-pruned dirs held by the conhost CWD pins IR-63's third face names. **Sweep\n545\t  executed on the gater's own rigs:** evidence preserved FIRST\n546\t  (`spt-preserve\\audit-2026-08-30\\`: gate-w1-a8f04aff's 229 non-HEAD files as a verified\n547\t  tarball; er-instrument's 115-line UNCOMMITTED instrument diff as a patch — that worktree\n548\t  belongs to hertz's lane and was NOT touched beyond the read-only copy), 16 pinning conhosts\n549\t  killed by pid after a fresh probe, 9 dead rigs removed. AFTER: **76 dirs = 75 registered +\n550\t  `_patches`, fully reconciled; zero unexplained entries, zero pins.** Reclaim was ~38MB —\n551\t  reconfirming this entry's arithmetic that the orphan sweep is hygiene, not a disk remedy.\n552\t  Landed-classification caveat: `git cherry` patch-id reads conflict-resolved picks\n553\t  as UNLANDED (emit-single-write, fix-206/208/209 all show UNLANDED with shipped content), so\n554\t  the census's landed column is a datum, never a reap authorization.\n555\t- **HYGIENE RULE (the text this entry owed, written 2026-08-30 while the loose-file population\n556\t  is zero — the rule exists BEFORE it refills):** `.worktrees/` holds exactly two kinds of\n557\t  entry: **registered worktrees** and **`_patches/`** (the one declared scratch location).\n558\t  Nothing else. Gate/rig artifacts follow their lifetime: (1) driver scripts, exit/raw files,\n559\t  and logs live INSIDE their rig's worktree for the rig's life — they leave WITH it, via the\n560\t  preservation step (copy what the verdict cites into `spt-preserve/<occasion>/`, verified by\n561\t  cmp or a listed tarball, restore cost stated) and never accumulate beside the rigs; (2)\n562\t  anything meant to outlive its rig goes to the repo ROOT beside the verdicts and RCAs it\n563\t  supports (the census/finding/JIT convention) or into `spt-preserve/` — never loose in\n564\t  `.worktrees/`; (3) a file found loose in `.worktrees/` is treated as UNCLASSIFIED WORKING\n565\t  STATE — moved to `_patches/` with a dated note, never deleted on sight (class D is the risk\n566\t  realised). Lane close-out = `git worktree remove` + prune + the conhost CWD-pin check\n567\t  ([[IR-63]] third face) when removal refuses; a registry-pruned dir left behind is a defect\n568\t  to sweep, not a norm.\n569\t- **Ripe when:** between-milestone idle window (it is a dev-box chore, zero product risk) — but the\n570\t  class-A pool findings are armed hazards and do not wait for it.\n571\t- **Size:** small for the sweep; the hygiene rule and the pool-claim gaps are separate small items.\n572\t- **Field instance (hertz sweep, 2026-08-04 — an unclaimed pool found rather than reasoned about):**\n573\t  `.worktrees\\gate-target-w4doc` held **7,907,558,098 B with NO POOL-OWNER.json at all**. Not a stale\n574\t  claim, not a foreign claim — no claim. Exactly this entry's shape, first measured instance. Reaped\n575\t  under doyle's ruling as part of [[IR-27]]'s two-step teardown; the measurement stands on its own.\n576\t\n577\t### IR-17 — Deadline-burn bring-up family: a test burns its full window while the daemon/brain never comes up\n578\t- **Status:** open · **Origin:** golden 30782259675 red triage 2026-08-03\n579\t- **What/why:** two different tests on two runner hosts now share one signature — bring-up misses\n580\t  its ONLINE window under leg load and the test burns its ENTIRE deadline before the PRECONDITION\n581\t  panic: `spt::resident_service_e2e::a_declared_service_rises_with_the_daemon_and_reaches_the_cli`\n582\t  (hfenduleam, FAIL 123.99s, \"PRECONDITION: the daemon never came up\", run 30782259675, green on\n583\t  same-sha rerun 30784469908) and `spt::activity_link_push_e2e` (kitsubito, full 30s, run\n584\t  30607903133 specimen, green on same-sha rerun; its \"brain stderr EMPTY\" leg and its family\n585\t  membership are both CORRECTED in the 2026-08-30 sweep update below — the kitsubito member is\n586\t  CLOSED under a named mechanism).\n587\t  Family reading, not one flake: same missed-window shape, host-independent, both mid-leg under\n588\t  load. Cross-ref KNOWN-HAZARDS 5.13 — bring-up has a hard ONLINE budget with known sensitivity to\n589\t  anything that stalls it (the blanket-fsync canary; `attach_wedge_e2e` guards that budget).\n590\t- **State line (the discriminating datum, resident_service red):** `daemon_up=false boot_alive=true\n591\t  boot_pid=Some(8920) rel_started=false broker_survived=false` — the boot process was ALIVE at\n592\t  panic time and the daemon never reached up. Any characterization run records this line per run,\n593\t  not the verdict (hertz protocol 2026-08-03).\n594\t- **Read of that line, CORRECTED 2026-08-03 (hertz):** it is NOT \"started-but-never-bound\" (the\n595\t  earlier reading here) and not \"never-started\" — it is **started, did work, then killed** —\n596\t  CANDIDATE via [[IR-18]]. The daemon spawned its boot service and that service reached the CLI\n597\t  (the spool holds its message), and `broker_survived=false`. The DISCRIMINATING field is\n598\t  `broker_survived`: false in every killed round of the positive control, true in every healthy\n599\t  round. **An earlier evidence leg here is RETRACTED (hertz, same night, off the negative arm he\n600\t  ran before reporting; deployah, who had carried the leg into four register sites, swept every\n601\t  placement): \"empty daemon.stderr.log = TerminateProcess signature\" was false — the stderr\n602\t  block is empty on PASSING runs too, so it carries zero information in either direction; it\n603\t  failed the discriminator question and does not support the kill read.** The kill read now rests\n604\t  on the control's field-for-field reproduction and the IR-18 mechanism, not on the log.\n605\t  Consequences: (a) the bring-up window is **exonerated for this specimen** — measuring it would\n606\t  have measured nothing; (b) the candidate mechanism and its evidence now live in [[IR-18]]\n607\t  (a sibling test's bare breadcrumb tree-kill), CANDIDATE — not reproduced, not proven;\n608\t  (c) **the characterization population changed, and the rate run is CANCELLED** (doyle ruling\n609\t  2026-08-03) — `resident_service_e2e` run ALONE has no sibling to collide with, so the mechanism\n610\t  predicts 0/N and that number answers no live question; the only sound population was the test\n611\t  INSIDE the Phase A parallel pool, which costs a full Phase A leg per sample, and the fix is\n612\t  warranted by the source-verified hazard class regardless of the specimen's rate. No rate figure\n613\t  will exist for this specimen — do not later read its absence as a low rate; (d) **positive\n614\t  control still runs, falling out of the\n615\t  hypothesis:** kill the spawned daemon by pid mid-bring-up — after boot-service spawn, before\n616\t  ready — and it must reproduce the observed line field for field (`daemon_up=false\n617\t  boot_alive=true broker_survived=false`). If the rig cannot make that shape on\n618\t  demand, a 0/N from the untouched arm is worth nothing and must be reported as worth nothing.\n619\t  The host-INDEPENDENT family claim (kitsubito's `activity_link_push_e2e`) is untouched by this:\n620\t  it has no such kill site named, so the family survives even if this specimen leaves it.\n621\t- **POSITIVE CONTROL RAN 2026-08-03 (hertz, prebuilt a5042ec binary, box confirmed clear —\n622\t  0 open runs, 145.95 GB free): shape reproduced 3/3, deterministic.** Negative arm n=2: 2/2 PASS\n623\t  (5.59s, 5.46s), `daemon_up=true boot_alive=true rel_started=true broker_survived=true\n624\t  survived_teardown=true`. Positive arm (daemon killed by parent-scoped descent after\n625\t  boot-service spawn, before ready) n=3: 3/3 FAIL (93.95/93.25/93.50s), state line identical to\n626\t  the CI red in EVERY field except boot_pid (a pid, must differ), same panic, same site\n627\t  (resident_service_e2e.rs:382). Structural fact the arm settled, and the refutation risk that\n628\t  made it worth running: the boot service rises BEFORE brain.ready becomes readable — had the\n629\t  order been reversed the arm would have produced daemon_up=true and refuted the mechanism.\n630\t  CEILING MET, NOT EXCEEDED: the control used Stop-Process -Force (TerminateProcess — the same\n631\t  primitive as taskkill /F), so it proves a forced daemon kill after breakaway-service spawn\n632\t  produces this exact line ON DEMAND; it says nothing about WHO issued one in golden 30782259675.\n633\t  Candidate mechanism, shape reproduced on demand — \"root caused\" written by nobody. Duration\n634\t  note, recorded not explained: 93.5s local (idle box) vs 123.99s CI (Phase A parallelism), both\n635\t  burning the same three 45s windows — consistent, not verified.\n636\t- **Same-host sub-observation (hertz, host-CONSTANT — narrower claim, kept separate):** both\n637\t  reds of 2026-08-03 sat on hfenduleam Windows Phase A and burned their full windows:\n638\t  `a_tree_teardown_reaches_a_grandchild_the_service_spawned` (run 30776330383, FAIL 10.176s = the\n639\t  full poll deadline, vs a 0.19–0.66s pass band — 15–50x out) + the resident_service row above.\n640\t  MEMBERSHIP PROVISIONAL for the teardown row: it carries a candidate mechanism the bring-up burn\n641\t  does not share — the pid-only oracle IR-15 just replaced. If the oracle caused it, that row\n642\t  leaves the family and host-constant collapses to one sighting. The host-INDEPENDENT pair above\n643\t  is the claim that survives someone fixing this box; the sub-observation is what is actionable\n644\t  about hfenduleam (a live-daemon host) meanwhile. **UPDATE 2026-08-04 (golden 30873007187\n645\t  attempt 1 — SECOND sighting, and the provisional question above is now ANSWERED): the\n646\t  pid-only-oracle candidate is REFUTED for this row** — IR-15's authenticated repin rode the\n647\t  failing tree (a5042ec ancestor of 4b37512) and the row failed anyway (10.225s, \"grandchild\n648\t  51848 outlived the tree teardown\"), with is_stamped() asserted before the kill so the verdict\n649\t  passed the authenticated gate. The row therefore STAYS a family member with its mechanism OPEN,\n650\t  narrowed by hertz's log forensics (competence-controlled: the capture channel demonstrably\n651\t  prints): no DETACH_BREAKAWAY_DENIED (breakaway rung taken), no SERVICE_JOB_UNAVAILABLE (job\n652\t  created + child enrolled), no SERVICE_TREE_KILL_INCOMPLETE (TerminateJobObject returned\n653\t  success) — everything enrolled died; THE SURVIVOR WAS NEVER ENROLLED. Two hypotheses,\n654\t  inseparable in existing evidence: H1 test defect — the grandchild SELECTION is a bare\n655\t  th32ParentProcessID match over a recycling pid space (IR-15's mechanism one level up: the\n656\t  verdict was authenticated, the selection was not); H2 real enrollment gap. hertz's selection\n657\t  probe (IsProcessInJob at selection time — decisive; birth stamp one-directional; image; same-\n658\t  snapshot match count) is authored+compiled and makes the NEXT occurrence self-deciding. Row\n659\t  state: INSTRUMENTED-AWAITING-FIRE; a green retires nothing (doyle-ruled). **UPDATE 2026-08-04\n660\t  (USHER att3):** row green at 17f95a7 (retires nothing, per the ruling). New shape evidence while\n661\t  waiting for the probe: BOTH archived reds sit AT the 10s poll bound (daemon.rs:2757) — 10.176s and\n662\t  10.225s — while todlando's 200 off-CI passes under live-fleet load ran 1-4s, never near it. The\n663\t  post-fix red is therefore BOUND-EXPIRY-shaped (kill fired; the pinned identity stayed\n664\t  not-provably-gone past 10s — TerminateJobObject is async), not kill-wrong-shaped. The bound\n665\t  question (is 10s right for a loaded runner) is parked with hertz's USHER package item 4 and must\n666\t  not touch the kill path or spawn flags before the probe fires. See also the FLAKE-LEDGER row for\n667\t  the false-repeat correction (the 10.176s red was the PRE-a5042ec bare-pid mechanism).\n668\t- **Declared read (2026-08-03, rules the next red):** a same-sha green rerun is protocol-conclusive\n669\t  for the GATE, not the class. No third silent sample — the next occurrence of this signature gets\n670\t  an instrumented resident-service bring-up investigation (hertz), not a rerun.\n671\t- **SWEEP UPDATE 2026-08-30 (#242/v0.66.0 close — three corrections, correct-by-replacement):**\n672\t  (1) **The 2026-08-03 \"brain stderr EMPTY\" reading on the kitsubito specimen is a METER\n673\t  ARTIFACT, not a silent brain** (deployah measured 2026-08-29): the brain-panel stderr capture\n674\t  only LANDED 2026-08-19 (`ab657626` + `e6e188e1`), 16 days after the specimen — at the specimen's\n675\t  sha there was nothing to capture, so \"empty\" carried zero information; current bits label\n676\t  absence explicitly, so empty-vs-present cannot recur as a distinction. This replaces the\n677\t  \"cheap to settle next time someone has kitsubito\" item — there is nothing left to settle.\n678\t  (2) **The kitsubito family member is CLOSED under a NAMED mechanism:** RCA-242-R2-LINUX.md\n679\t  (v0.66.0 golden r2) measured `current_exe_hash()` on the READY PATH at ~10.1s per boot on\n680\t  kitsubito under load (~1.5s Windows) via BRAIN_PHASE breadcrumbs + harvest-loop repro — a\n681\t  bring-up that misses its ONLINE window under leg load is exactly what a ~10s synchronous hash\n682\t  inside the ready path manufactures. The behaviour-change request (hash off the ready path,\n683\t  ADR-0018 Q7) is minted on the board at this sweep as **releases#244** (BACKLOG, operator\n684\t  triages). The family's host-INDEPENDENT claim\n685\t  therefore collapses: the Windows `resident_service_e2e` specimen (IR-18 kill-shape candidate)\n686\t  and the hfenduleam sub-observation STAY OPEN as this entry's remaining live population.\n687\t  (3) **Lane-linked:** hertz's queued fixup lane brief names this entry directly\n688\t  (activity_link_push_e2e 4-cell fixup: false precondition message + progress-bounded readiness\n689\t  wait, #235 shape). Overlap with correction (2) checked at link time: his cells are TEST-side\n690\t  (message truth + wait shape) and stand regardless of the product-side hash fix.\n691\t- **Ripe when:** next occurrence of the signature (immediate instrumented dispatch), or a hertz\n692\t  test-hardening wave (bring-up phase-timing instrumentation, per-phase deadline attribution).\n693\t- **Size:** medium (bring-up instrumentation + attribution; the fix depends on what it shows).\n694\t\n695\t### IR-16 — kill_tree discards TerminateJobObject/TerminateProcess returns (silent partial kill)\n696\t- **Status:** BUILT 2026-08-03 (landed @62c5623 on the LOCKSMITH t1 lane; rides golden sha\n697\t  b7b00c3, run 30860770146 green) · **Origin:** ex releases#130 (golden 30776330383 red triage;\n698\t  deployah's log read\n699\t  + todlando's flagged-not-asserted arm). Operator-classified infra 2026-08-02: daemon-kill\n700\t  internals are agent-facing, not operator-facing surface.\n701\t- **What/why:** `DetachedChild::kill_tree` (daemon.rs:1433 vicinity) calls\n702\t  `unsafe { TerminateJobObject(self.job, 1) }` and discards the return; TerminateProcess likewise\n703\t  unaudited. A job that was created and assigned at spawn but whose TERMINATION fails at kill time\n704\t  yields the grandchild-survives symptom with zero log signal — the spawn-side\n705\t  SERVICE_JOB_UNAVAILABLE announcement is correctly absent (that arm is instrumented and was\n706\t  refuted for the specimen by a positively-controlled zero). Wanted: (1) check + log both\n707\t  termination returns loudly on failure; (2) the degraded-arm decision — fallback process-table\n708\t  tree-walk kill or explicit refusal, never a silent partial kill wearing REQ-RESIDENT-SERVICE's\n709\t  unconditional promise. Do NOT add self.job==0 instrumentation (already loud; a second weaker\n710\t  rule beside a working one). Discrimination pairing with [[IR-15]]: a red whose captured pid is\n711\t  still ping.exe with no SERVICE_JOB_UNAVAILABLE in scope = this entry's arm.\n712\t- **Ripe when:** RIPE NOW — IR-15 landed BUILT 2026-08-03 (its rig-side half), so this kill-side\n713\t  half is the outstanding instrument; land with the next daemon-teardown wave or sooner.\n714\t- **Size:** small.\n715\t- **Composed:** LOCKSMITH (#132) — todlando product lane, with the `detached_no_inherit_env`\n716\t  rename as cosmetic rider (IR-20's load-bearing-pid caution applies to any rig touch) —\n717\t  2026-08-03. GREENLIT with #132 and **DISPATCHED to todlando 2026-08-03**, carrying IR-20's\n718\t  load-bearing-pid precondition as a stated check (todlando reports whether the rig is touched\n719\t  at all rather than silently skipping it).\n720\t- **BUILT — fulfilment checked against the wanted list, not merely mapped to a commit** (doyle,\n721\t  2026-08-04): `62c5623` satisfies (1) — both termination returns are now checked and the loss is\n722\t  NAMED on failure, as the kill-time twin of the spawn-time `SERVICE_JOB_UNAVAILABLE` — and (2) by\n723\t  the ruled LOUD REFUSAL arm rather than a tree-walk fallback, which [[IR-18]] measured blind in\n724\t  exactly this failure state. The `self.job == 0` prohibition was honored: the new check is\n725\t  `self.job != 0 && TerminateJobObject(...) == 0`, not a second weaker rule beside the working one.\n726\t  The unix `ESRCH` quiet arm — which no Windows gate can see — is covered by `ec5f38a`. The\n727\t  `detached_no_inherit_env` cosmetic rider did NOT land and was dropped at `de6a01d` on a MEASURED\n728\t  false premise, not deferred. A Windows-specific finding rides the fix as a comment and is worth\n729\t  keeping: `TerminateProcess` against a handle to an already-exited process returns 0 with\n730\t  `GetLastError` 5 (`ERROR_ACCESS_DENIED`), so a naive check there fires on the ORDINARY path.\n731\t\n732\t### IR-18 — resident_service_e2e kills breadcrumb pids BARE (stale-breadcrumb tree-kill; kill-side twin of IR-15)\n733\t- **Status:** BUILT 2026-08-04 — the named acceptance carrier RAN and the condition is DISCHARGED,\n734\t  stated as the measurement rather than as the green board it sat on: LOCKSMITH's golden run\n735\t  30860770146 (head `b7b00c3`, conclusion success) executed the changed test IN-POOL on BOTH\n736\t  platforms — `spt::resident_service_e2e a_declared_service_rises_with_the_daemon_and_reaches_the_cli`\n737\t  PASS 17.773s (100/2637) on hfenduleam/Windows and PASS 17.895s (1364/2616) on kitsubito/Linux.\n738\t  The pool was checked for the test rather than inferred from the job colour, because a green leg\n739\t  that never ran the test is a competence-controlled zero, not an acquittal; `resident_service_e2e`\n740\t  contains exactly ONE `#[test]`, so the test that ran IS the test the lane rewrote (229 lines of\n741\t  that file changed in `6e1a962`). No red returned to doyle. `.worktrees/ir18` is released for\n742\t  teardown by this verdict · **Origin:** hertz\n743\t  characterization of the [[IR-17]] resident_service red, 2026-08-03 — CANDIDATE mechanism, NOT a\n744\t  reproduction\n745\t- **Lane:** hertz `fix/ir18-authenticated-teardown` — MERGED to main @6e1a962 (PR #142; gated at\n746\t  b48e35b, rebased 6e1a962 on 1e520b4 with zero code delta — doyle re-derived `git diff -- crates/`\n747\t  empty across the rebase, so the gate verdict and local behavioral evidence transfer). Gated by\n748\t  doyle: full diff review (one blocking finding — the scope_lost assert condition contradicted its\n749\t  own guard ruling — fixed and delta-verified at one line), mutation-proven locally both\n750\t  directions (B: forced boot_pid=None → population sweep names the leak no per-pid check sees,\n751\t  FAIL 101; A: wrong expected_exe → REFUSED-foreign-image reds loudly on the derivation check).\n752\t  EVIDENCE SPLIT, stated so the check marks cannot carry it (hertz's absent-leg callout): lane CI\n753\t  30792210008 was 5/5 green per job but ci.yml's test leg is kind(lib)+kind(bin) — the changed\n754\t  integration test NEVER RAN there (verified by log grep, 0 hits / 3023 lines); CI proved\n755\t  compile-everywhere (clippy all-targets = the pool-population check for a common/ module),\n756\t  traceability, lib/bin clean. The BEHAVIORAL evidence is local: three clean runs (all verdicts\n757\t  Killed, population empty) + the two mutation reds. reap.rs diff additive-only (zero deleted\n758\t  lines, verified) — cross-test risk bounded to compilation, which CI covered. Evidence custody:\n759\t  gate + mutation logs at `.worktrees/_patches/ir18-gate-logs/` (5 files); `.worktrees/ir18` is\n760\t  KEPT deliberately until the golden verdict (NOT an orphan — do not reap; a Phase A red wants the\n761\t  tree and logs in place, not rebuilt); its pool claim is released.\n762\t- **What/why:** `crates/spt/tests/resident_service_e2e.rs:46` defines its own reaper —\n763\t  `taskkill /PID <pid> /F /T`: bare pid, force, whole TREE, no identity check — and feeds it three\n764\t  BREADCRUMB-derived pids in cleanup (`boot_pid`, `rel_service_pid` at :360, and the pid read out\n765\t  of `brain.ready` at :363). The suite already ships the authenticated tool other tests use and\n766\t  this one does not: `common::reap::authenticated_kill(label, pid, expected_exe, observed)` at\n767\t  `crates/spt/tests/common/reap.rs:116`. Inside the Phase A parallel pool on a pid-churning box\n768\t  this is the KNOWN-HAZARDS stale-breadcrumb tree-kill class, live and **symmetric**: this test can\n769\t  take a sibling's daemon and a sibling can take this test's. Same defect [[IR-15]] just fixed, on\n770\t  the other side — IR-15 authenticated the READ (is the thing I pinned gone?), the KILL is still\n771\t  bare pid. Kill what you pinned, not the number it happens to hold.\n772\t- **Verified at source by deployah 2026-08-03** (relayed claims re-derived, all held): the bare\n773\t  kill, its three breadcrumb feeds, the shipped-but-unused authenticated helper, and the\n774\t  `CREATE_BREAKAWAY_FROM_JOB` spawn (`daemon.rs:1300`).\n775\t- **Evidence rating — why it is a candidate and not a cause:** it predicts every field of the one\n776\t  observed state line. The daemon is killed after spawning its boot service and before binding:\n777\t  `broker_survived=false` (the discriminating field — false in every killed control round, true in\n778\t  every healthy one) + `boot_alive=true boot_pid=Some(8920)` with the service's message in the\n779\t  spool. (The \"empty stderr = silent death\" leg that originally sat here is RETRACTED — see\n780\t  [[IR-17]]'s control record; stderr is empty on healthy runs too and discriminates nothing.)\n781\t  The service outlives its daemon because `detached_no_inherit_env` spawns it\n782\t  `CREATE_BREAKAWAY_FROM_JOB`, so it is NOT in the daemon's job and a daemon kill ORPHANS it\n783\t  rather than reaping it — plausibly also the five denied `svcmock.exe` attempts in that job's\n784\t  reap summary. **The [[IR-17]] positive control (2026-08-03) reproduced the shape 3/3\n785\t  deterministically with a forced kill at that window — establishing the SHAPE on demand, not the\n786\t  AGENT: nothing identifies who issued a kill in golden 30782259675.** The bare-pid tree-kill from\n787\t  a concurrent test remains the candidate agent, on the source-verified hazard class and reap.rs's\n788\t  documented prior casualty. **Not reproduced in the wild. Not proven. \"Root caused\" is not\n789\t  written here by anyone.** The [[IR-17]] rate run is cancelled, so no rate will ever back this —\n790\t  the fix stands on the source-verified hazard class alone. THE DEFECT IN MINIATURE, observed as a\n791\t  side effect of the control (hertz 2026-08-03): the three killed rounds leaked 12 processes\n792\t  (6 svcmock + 6 spt.exe, two services per round) and the test's own teardown reaped NONE — when\n793\t  the daemon dies, `rel_pid` is `None` so that service is never even a kill target, and the\n794\t  breakaway child outlives everything. A teardown that leaks two processes per round currently\n795\t  PASSES: the concrete case for `target_gone` as the gate's positive half. (Leak cleaned scoped,\n796\t  each pid re-authenticated by image-path prefix + creation window at kill time, not from the\n797\t  minute-old enumeration.) ONE LAYER DEEPER (deployah, same night, at source): the reap loop\n798\t  (:359) is `[boot_pid, rel_service_pid].into_iter().flatten()` — `.flatten()` DROPS None, and\n799\t  `mock_pid` (:100-106) collapses absent/permission-denied/IO-error/garbage into that None via\n800\t  `.ok()?`/`.ok()` — the reap.rs:59-63 collapse in a THIRD location, inside this very test. So the\n801\t  leak is both \"service never started\" AND \"pid unreadable, therefore never a kill target\":\n802\t  absence of knowledge read as absence of target, in a teardown, again.\n803\t- **GATE SPEC AMENDED PRE-BUILD (deployah found the hole, doyle-ruled 2026-08-03 — read this\n804\t  BEFORE building the lane):** the two halves as first specified (trap-class-absent +\n805\t  `target_gone` per pid) both operate on pids we HAVE — a process whose pid is None is invisible\n806\t  to BOTH, so the specified gate PASSES hertz's own control-run leak (12 processes, 6+6, 2/round,\n807\t  teardown reaped none). A gate its own reproduction case passes is not yet an instrument. THIRD\n808\t  HALF, REQUIRED: a POPULATION assertion at teardown — zero surviving staged-service or\n809\t  test-owned spt processes, by selectors external to the pid bookkeeping. SELECTOR RESPELLED\n810\t  (hertz 2026-08-03, doyle-approved — the first spelling, \"parent-pid descent from the test\n811\t  process\", would have caught ZERO of the 12: teardown kills the daemon before any check runs, the\n812\t  BFS over the current (pid,ppid) table breaks at the dead middle hop, and descendants(test_pid)\n813\t  returns empty exactly in the leak case — an absence read as a clean, the shape the lane exists\n814\t  to kill; the control's own cleanup is the evidence, it had to use image+creation-window because\n815\t  descent was already broken). THE TWO SELECTORS AS BUILT: (1) svcmock half by IMAGE PATH —\n816\t  stage_adapter copies the service binary under this run's unique tempdir home, so \"any pid whose\n817\t  exe_path canonicalizes under home\" names every staged service this run started and nothing else\n818\t  on the box; no bookkeeping, immune to reuse and broken chains. (2) spt.exe half by SEEDED\n819\t  descent + image — image alone is forbidden (target/debug/spt.exe is shared with concurrent\n820\t  tests and live perches: the machine-wide selector class); seed with the ancestor set captured\n821\t  WHILE ALIVE ({test, broker from the Child handle, brain from brain.ready — none via mock_pid}),\n822\t  union descendants, keep only exe_path==spt_bin. Reuse exposure on seeds is assertion-only (a\n823\t  red, never a kill) and the image filter closes it. Both halves catch the 12-leak conformance\n824\t  case; the first spelling caught none of it. PLUS THE [[IR-8]] BUCKET, REQUIRED (deployah,\n825\t  same night — the third instance of that sentence tonight, this time inside our own instrument):\n826\t  both selectors match on IMAGE PATH, and an exe path that cannot be READ yields no match — a\n827\t  leaked svcmock holding an unreadable path is invisible to both halves and the count comes back a\n828\t  zero that cannot see. Not hypothetical: IR-8's defining specimen is 5/5-denied on this exact\n829\t  image, on this box. So the population assertion counts unreadable-path processes as their OWN\n830\t  bucket and the zero-survivors claim REFUSES when that bucket is nonzero — zero seen AND zero\n831\t  unseeable, or the assertion states it could not see. Built in from the start, not retrofitted\n832\t  (may land in the lane's second commit at hertz's discretion; the requirement is that it lands in\n833\t  the lane). This instantiates IR-8's remedy test-side; the CI reap-census script half of IR-8\n834\t  stays open.\n835\t- **Fix (thin lane, hertz — doyle-ruled 2026-08-03):** adopt `authenticated_kill` at all three\n836\t  sites. (Board #131's `CREATE_NO_WINDOW` rider is DROPPED from this lane — hertz falsified the\n837\t  filed remedy at source 2026-08-03: daemon.rs has exactly ONE CreateProcessW (:1187) and\n838\t  BASE_FLAGS (:1105) already carries 0x0800_0000 = CREATE_NO_WINDOW on both rungs including the\n839\t  ACCESS_DENIED fallback (which drops only BREAKAWAY), so the specified edit ORs an already-set\n840\t  bit — a bit-for-bit identical flag word that would close a board item while its symptom, if\n841\t  real, continues. #131 handed back to board triage with the finding and a candidate direction:\n842\t  DETACHED_PROCESS gives the service no console, so a console child the SERVICE spawns flagless\n843\t  allocates a NEW visible window — the grandchild, not the daemon's spawn, is the candidate\n844\t  surface; wants its own diagnosis from an observed window. ~~The `detached_no_inherit_env` rename\n845\t  (\"detached\" actually means breakaway-from-job) is a candidate cosmetic rider on [[IR-16]]'s\n846\t  product lane~~ — **RENAME DROPPED 2026-08-03, ITS PREMISE MEASURED FALSE** (todlando, on the\n847\t  IR-16 lane; doyle re-verified at source before ruling). \"detached\" is ACCURATE: `BASE_FLAGS`\n848\t  (daemon.rs:1103-1105) is `DETACHED_PROCESS | CREATE_NEW_PROCESS_GROUP | CREATE_NO_WINDOW`, and\n849\t  `0x0000_0008` IS DETACHED_PROCESS — the function sets BOTH postures and the name states one of\n850\t  them. The name is not wrong, it is INCOMPLETE (silent about `CREATE_BREAKAWAY_FROM_JOB`, which\n851\t  arrives as `extra_flags` at daemon.rs:1506), so renaming on the stated premise would have traded\n852\t  an accurate word for one that drops a flag the function really sets. Independently fatal: the\n853\t  premise, if true, covers the sibling `detached_no_inherit` equally — 17 references across\n854\t  daemon.rs/deelevate.rs/shellhost.rs — and renaming one of two siblings of ONE posture leaves the\n855\t  tree MORE inconsistent, not less. **What lands instead:** one doc-comment line on EACH function\n856\t  naming the full effective flag word, which fixes the real complaint (neither name says breakaway)\n857\t  without touching a call site. Kept here rather than deleted because this entry was the claim's\n858\t  only home, and a reader who found the rename gone with no reason would re-derive it.) PER-PID GROUND TRUTH for expected_exe (hertz — SELF-CORRECTED\n859\t  at source before it ever landed; his first derivation, \"Copy runs from adapters_dir(), Pointer\n860\t  runs from srcs/\", was WRONG and registration mode is NOT the discriminator): servicehost.rs:1328\n861\t  takes `install_dir` from `record.source_dir` on the Started arm for EVERY service, Copy and\n862\t  Pointer alike, and Copy copies only the manifest + strings/ (registry.rs:395-404), never a\n863\t  binary — `adapters_dir()` holds no executable in either mode. BOTH services run from their OWN\n864\t  staged src dir: `staged_bin(<adapter's staged src dir>, \"svcmock\")`. The trap survives with a\n865\t  different mechanism: two adapters staged into two DIFFERENT source dirs are two different files\n866\t  on disk, so one expected_exe still cannot serve both. A lane that trusted the mode split would\n867\t  derive a path with no binary at it. How it was caught, kept because it is the reusable part: not\n868\t  by rereading the mode table but by finding where install_dir is COMPUTED instead of trusting an\n869\t  already-published inference — the mode split was true of MANIFESTS and had been generalized to\n870\t  BINARIES without checking the consumer; and the derivation-asserted-at-observe() instrument\n871\t  would have caught it at runtime regardless — the instrument did its job before it ever ran,\n872\t  argued against its own author. SCOPE_LOST RULED A GUARD, NOT A FINDING (hertz design change,\n873\t  doyle-approved): a seed pid recycled before the sweep makes the sweep DECLINE that subtree\n874\t  loudly, not fail — failing would turn ordinary pid churn on a busy runner into a red against a\n875\t  clean teardown (the IR-15 false-red class re-minted inside its own fix); coverage holds without\n876\t  it because the staged services are caught by image-path-under-home and the daemon + brain by NEW\n877\t  direct per-pid target_gone checks (their pids this test never loses) — the ancestry half is\n878\t  reach, not load-bearing. `unreadable` stays FATAL as ruled.\n879\t  Sequencing: positive control\n880\t  first (it is the instrument that could still refute the mechanism), then the lane. Does NOT ride\n881\t  [[IR-16]] (doyle-ruled same day): that is the product-side kill_tree audit and stays a separate\n882\t  lane under the dispatch split; the two cross-ref, they do not merge.\n883\t- **Lane trap, flagged before build (hertz 2026-08-03 — the false-clean shape):** `expected_exe`\n884\t  differs PER PID. `boot_pid` and `rel_service_pid` run the staged svcmock image, NOT spt.exe —\n885\t  passing spt_bin for those refuses every kill as foreign-image and LEAKS both services while the\n886\t  reap reads hardened. Only `brain.ready`'s pid takes spt_bin. Also: `observe()` boot_pid at :210\n887\t  while it is provably ours, so the reuse check has creation-time teeth instead of degrading to\n888\t  image+ancestry.\n889\t- **Gate the lane on killing, not on refusing (deployah 2026-08-03; REFINED by hertz same night\n890\t  from reap.rs's own contract):** the hardened version fails safe in the WRONG direction —\n891\t  refuse-everything leaks both services while printing exactly the reap line a reviewer wants to\n892\t  see, strictly worse than the bare kill it replaces and invisible in the same log. But a BLANKET\n893\t  zero-REFUSED gate is wrong too: reap.rs's module doc (:18–20) states refusal is the CORRECT\n894\t  happy-path outcome when the test already stopped its daemon (`Refused(\"gone\")` — leak insurance,\n895\t  not primary teardown), so the blanket gate reds healthy runs, someone loosens it to go green, and\n896\t  the loosened version is exactly the one blind to foreign-image — the detector dies by\n897\t  maintenance, wearing a green. The refusal reasons split, and only one class is a defect:\n898\t  SOUND (expected): `gone`, `reused`, `breadcrumb-moved`, `self`, `ancestor` — target provably not\n899\t  there. TRAP (the false-clean state): `foreign-image`, `unreadable-image`, `unproven-identity` —\n900\t  something WAS there and authentication declined; `foreign-image` is precisely what a wrong\n901\t  per-pid expected_exe produces on every pid, every run. THE GATE: in the arm that must kill,\n902\t  assert no verdict in the trap class — structurally on the returned `Verdict` (Killed |\n903\t  Refused(&'static str), stable tokens by design, reap.rs:48), not by scraping output; the\n904\t  `REAP[label]: … verdict=` line stays as CI-log forensics. The gate's comment MUST say\n905\t  `Refused(\"gone\")` is expected, or the next reader \"fixes\" it. Positive counterpart that actually\n906\t  proves the reap: assert `target_gone(pid, expected_exe, observed)` (reap.rs:215 — no-knowledge\n907\t  never read as death) per service pid; bare-liveness \"no survivors\" is the false-clean named above.\n908\t  TOKEN SET VERIFIED COMPLETE-PLUS-ONE (deployah, refuse() sites enumerated at source): the eight\n909\t  tokens above sit at :128 self, :132 ancestor, :136 breadcrumb-moved, :146 gone, :149\n910\t  unproven-identity, :155 reused, :166 unreadable-image, :172 foreign-image — each in the right\n911\t  class — and there is a NINTH neither list held: `Refused(\"no-breadcrumb\")` at :243, returned\n912\t  before authenticated_kill is reached. Doyle-ruled 2026-08-03, both halves: (1) `no-breadcrumb`\n913\t  classifies SOUND — **SCOPED (deployah source-read, same night): it is two states wearing one\n914\t  name.** `breadcrumb_daemon_pid` (reap.rs:59–63) collapses file-absent, permission-denied, any IO\n915\t  error, AND a husked/unparseable partial write into one `None` via two `.ok()`s — so the token is\n916\t  ABSENCE OF KNOWLEDGE, not proof of absence, and it is SOUND only because the calling test has\n917\t  already asserted its daemon stopped. Every other SOUND token carries positive proof; a LIVE\n918\t  daemon whose pid file is unreadable or husked emits the identical token and leaks wearing\n919\t  \"nothing to reap\" — the helper's one fail-open path inside a fail-closed design (its own module\n920\t  doc: no-knowledge is never read as death), and the same sentence as [[IR-8]]: a zero that cannot\n921\t  see is not a zero. CORRECT REMEDY (doyle-ruled, deferred — not this lane, unreachable from this\n922\t  test's pids): split at source into `no-breadcrumb` (absent) vs `unreadable-breadcrumb` (TRAP,\n923\t  beside unreadable-image) — IR-8's unreadable-bucket fix in a second location; land the pair in\n924\t  the census/reap wave IR-8 already names, one remedy for two entries. Precondition on the split\n925\t  (hertz): common/reap.rs compiles into EVERY spt integration test binary, so enumerate the callers\n926\t  that actually REACH `reap_breadcrumb_daemon` before the token split lands — those are the tests\n927\t  whose teardown semantics change; own lane, not a rider. ENUMERATION DONE (deployah, same night,\n928\t  read-only): 21 caller tests, every one passing &spt_bin as expected_exe (the per-pid trap is\n929\t  specific to resident_service_e2e's svcmock pids — it does not generalize to this population);\n930\t  20 callers fire-and-forget the Verdict; the one value-assertion, reaper_guard.rs:192-196, pins\n931\t  `Refused(\"no-breadcrumb\")` for an ABSENT breadcrumb only — absent KEEPS the token under the\n932\t  split, so that assertion survives unchanged (:183's stale-pid check is the loose\n933\t  `matches!(Refused(_))`). The split is ADDITIVE: one source split, one new token, zero caller\n934\t  rewrites. THE GAP THAT LET THE COLLAPSE HIDE: reaper_guard covers eight refusal shapes but has\n935\t  NO test for an unreadable or malformed daemon.pid — the one state where absence-of-knowledge\n936\t  reads as absence-of-target is the one state without a conformance test; (b) ships with exactly\n937\t  that evidence (a garbage daemon.pid and an unreadable one, each asserting the new token).\n938\t  ASSIGNED: deployah owns the (b) lane (doyle-ruled 2026-08-03), SEQUENCED AFTER hertz's IR-18\n939\t  lane — the exhaustive panic-catch-all lands first, so the new token arrives forced-classified\n940\t  per this entry's own design, and the (b) lane classifies it TRAP in the same change. SCOPE\n941\t  RE-RULED (2026-08-03, on deployah's third-site find): the collapse now has THREE known sites\n942\t  (reap.rs:59-63, resident_service_e2e's mock_pid :100-106, and the shape wherever a test reads a\n943\t  self-written pid file) — so (b) lands ONE shared read-a-pid-breadcrumb helper that distinguishes\n944\t  absent from unreadable ONCE, adopted at the enumerated sites, not a per-site token split; the\n945\t  single-source-discriminant rule, applied before a fourth site mints itself.\n946\t  **THIRD SITE CONFIRMED AT SOURCE (deployah, read-only 2026-08-04) — it was a predicted SHAPE and\n947\t  is now an address:** `crates/spt/tests/resident_service_e2e.rs:136-137`, `brain_ready`, which\n948\t  `.ok()?`s BOTH the read and the JSON parse — two collapses in two lines, the self-written-pid-file\n949\t  shape this entry predicted. What makes it the worst of the three rather than the third of three:\n950\t  its output feeds `brain_seed`, a population-sweep SEED, so an unreadable `brain.ready` silently\n951\t  drops a whole subtree from the sweep. The other two sites lose one pid; this one degrades the very\n952\t  instrument that is supposed to cover them, and it does so while the sweep still reports clean —\n953\t  [[IR-8]]'s sentence again, now inside the instrument rather than beside it. The (b) lane's helper\n954\t  therefore has to be adopted at this site to be worth landing at all. Still deployah's,\n955\t  still after hertz's lane; hertz's lane does NOT wait for it (the population assertion covers the\n956\t  leak class independent of pid bookkeeping — that is its virtue). (b) INTAKE ITEM (doyle gate on\n957\t  the IR-18 lane, 2026-08-03, deferred there deliberately): the lane's verdict-gate SOUND-arm\n958\t  comment reads \"provably not there\", which overclaims for `no-breadcrumb` (absence-of-knowledge,\n959\t  not proof — the scoped reading belongs at that arm); comment-only, and (b) rewrites that arm\n960\t  when `unreadable-breadcrumb` splits out, so it lands there rather than costing a solo respin.\n961\t  SECOND (b) INTAKE ITEM (hertz self-noted at re-gate, doyle-ruled deferred): cleanliness is\n962\t  currently stated at THREE sites (two asserts + `is_clean`) — the drift that produced the\n963\t  scope_lost condition bug (a failed edit followed by a narrower successful one replaced the\n964\t  message but not the condition; the artifact of that failure mode IS message/code disagreement).\n965\t  (b) consolidates to conditions derived from one source, weighing the two-message diagnostic\n966\t  split it would cost. The\n967\t  exhaustive panic-catch-all match is what makes the split safe to do later: the new token lands\n968\t  loud on first fire in every consuming gate, forced to be classified, never silently passed. Until then the scoped reading above is the\n969\t  gate's contract — and the LANE BUILDER writes that scoped reading into the match's SOUND-arm\n970\t  comment (the sketch's \"nothing to read is nothing to kill\" is the exact inference the source\n971\t  forbids; the comment must not teach the false step); (2) the gate closes over the\n972\t  token set — SPELLED BUILDABLY (hertz correction 2026-08-03; the earlier \"no wildcard arm\" wording\n973\t  is an instruction rustc rejects, since the refusal reason is a `&'static str` (:55) and a string\n974\t  match always requires a catch-all): the match names the six SOUND tokens as a pass arm, the three\n975\t  TRAP tokens as a panic arm, and the REQUIRED catch-all arm is not a wildcard PASS — it panics\n976\t  naming the unknown token (\"unclassified reap refusal token — classify it in this match\"), so\n977\t  upstream drift announces itself the first run it fires instead of sliding into a silent pass.\n978\t  Runtime fail-closed, not compile-time: compile-time closure needs the reason to become an enum in\n979\t  common/reap.rs, an upstream change touching every consumer — ruled NOT smuggled into this lane\n980\t  (candidate for its own thin lane if ever wanted; doyle concurs runtime fail-closed is\n981\t  proportionate). Direction of the default, kept in the record: a missed trap state is an invisible\n982\t  leak wearing the reap line a reviewer wants to see; an unclassified harmless token is a loud red\n983\t  costing one edit. Cheap and loud beats silent and wrong. (Count hygiene, hertz self-flagged: a\n984\t  single-line grep for the refuse() sites returns five of nine — three wrap across lines; the nine\n985\t  stands on reading, not the grep. The sweep-count trap in miniature.)\n986\t- **Prior observed instance of the class, in-tree (hertz 2026-08-03 — stated to understate):**\n987\t  reap.rs:3–11 documents the measurement and a casualty: pid reuse on the Windows gate box at\n988\t  2.2s minimum / p50 11.7s under a Phase-A battery, and a concurrent test process killed by a bare\n989\t  kill on a stale breadcrumb pid, dying with bare exit 1 and no panic — the observed\n990\t  `worker_lifecycle_e2e` red in golden job 90742055246 (that test's intermittent class is board\n991\t  releases#32, still in-flight). Different test, different job — it does NOT reproduce this entry's\n992\t  specimen and promotes nothing; what it settles is that the class is real IN THIS SUITE with a\n993\t  named victim, and the authenticated reaper is the remedy someone already built for it —\n994\t  resident_service_e2e simply never adopted it. Two shape-predictions it supplies, made before this\n995\t  specimen existed: the p50 11.7s reuse window is short against this test's 45s waits and ~124s\n996\t  runtime (window wide open). (A second claimed match — \"bare-exit-1-no-panic matches the empty\n997\t  daemon.stderr.log\" — is RETRACTED as a category error, hertz+deployah 2026-08-03: reap.rs's\n998\t  phrase describes the VICTIM TEST PROCESS dying, not a daemon's log; two processes, two\n999\t  artifacts.) Predictions, not proof; the specimen stays CANDIDATE — shape since reproduced on\n1000\t  demand, agent unidentified (see the control record above)."}]},"uuid":"c35be39a-5280-4a71-9939-a75874e19d34","timestamp":"2026-09-06T11:16:11.623Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"\n3 + 8 + 3 + 1 = 15.\n\n#### PIN STATE: NO SKELETON IS HELD TODAY (with a stated blind spot)\n\nRead-only PEB CWD sweep, 2026-08-03: **zero processes hold a CWD in any class-B or class-C\ndirectory** — every live pin was in `gate-ec5f38a` and `gate-main`, both REGISTERED and both running\nrigs at the time. So removal of B and C would succeed today; nothing is retrying it.\n\n⚠ **The sweep read 412 of 593 processes; 181 were unreadable** (elevated/system, no\n`PROCESS_VM_READ`). The no-pin result therefore holds over the READABLE population only. Cheap to\nre-run elevated before acting — [[absence-needs-sibling-probe]].\n\n#### THE LOOSE FILES: A SHARED LOCATION WITH NO STATED CONTRACT\n\n**21 loose files sit in `.worktrees/`** — gate logs (`gate-*.log`, `gate-559632e-log.txt`), rig\nscripts (`g6-curve.ps1`, `g6-postbounce.ps1`, `gate-w5-*.ps1`), and `gate-w5-notes.md`. **Nobody\ndeclared `.worktrees/` a log drop; it became one.** Same class as the memory index: a shared location\nwith no stated contract accumulates whatever anyone puts there, and **the first person to tidy it\ncannot tell residue from someone's working state** — class D is that risk already realised. The\nhygiene rule this entry owes should name where gate logs and rig scripts belong, not only how to reap\nworktrees.\n\n#### RECLAIM ARITHMETIC — AND WHY THIS ENTRY IS NOT THE DISK FIX\n\nClasses B, C and D together are **under 51 KB**. All 13.2 GB of the unregistered population is class\nA, behind live junctions. **An orphan sweep is not a disk-space remedy**, and reading it as one sends\nyou at the wrong target: on the audit date, free space was **12.5 GB against the 32 GB golden floor**\n([[free-space-floor-blocks-golden]]) while the two largest pools on the box were `gate-ec5f38a/target`\n(14.33 GB) and `gate-main/target` (28.12 GB) — **both REGISTERED, so both outside the orphan\npopulation entirely.** The disk question and the orphan question have different populations; answering\none correctly says nothing about the other.\n\n- **AUDIT EXECUTED 2026-08-30 (doyle, the v0.66.0→NOW-SIGNAL between-milestone window; full\n  output `wt-census-2026-08-30.txt` in the session scratchpad, method = this entry's own):**\n  four answers BEFORE the sweep: 85 entries / 85 dirs / 76 registered incl root / 75 under\n  `.worktrees` → 10 unregistered, 0 loose files (the 21 loose files of 08-03 are gone).\n  **The 08-03 headline populations have INVERTED:** zero pools and zero junctions exist under\n  `.worktrees` at all (every registered tree reads `target=none`; the reparse sweep found no\n  inbound junction) — class A is EMPTY, so the armed pool hazards this entry named are\n  currently unpopulated. Unregistered classified: 4 fully-empty (C), 3 `crates/spt-daemon`\n  skeletons (B — the mechanism's fingerprint again), `_patches` (D, kept — working scratch),\n  and TWO content-bearing checkout remnants (gate-signet-w1 10.8MB, gate-w1-a8f04aff 27MB) =\n  registry-pruned dirs held by the conhost CWD pins IR-63's third face names. **Sweep\n  executed on the gater's own rigs:** evidence preserved FIRST\n  (`spt-preserve\\audit-2026-08-30\\`: gate-w1-a8f04aff's 229 non-HEAD files as a verified\n  tarball; er-instrument's 115-line UNCOMMITTED instrument diff as a patch — that worktree\n  belongs to hertz's lane and was NOT touched beyond the read-only copy), 16 pinning conhosts\n  killed by pid after a fresh probe, 9 dead rigs removed. AFTER: **76 dirs = 75 registered +\n  `_patches`, fully reconciled; zero unexplained entries, zero pins.** Reclaim was ~38MB —\n  reconfirming this entry's arithmetic that the orphan sweep is hygiene, not a disk remedy.\n  Landed-classification caveat: `git cherry` patch-id reads conflict-resolved picks\n  as UNLANDED (emit-single-write, fix-206/208/209 all show UNLANDED with shipped content), so\n  the census's landed column is a datum, never a reap authorization.\n- **HYGIENE RULE (the text this entry owed, written 2026-08-30 while the loose-file population\n  is zero — the rule exists BEFORE it refills):** `.worktrees/` holds exactly two kinds of\n  entry: **registered worktrees** and **`_patches/`** (the one declared scratch location).\n  Nothing else. Gate/rig artifacts follow their lifetime: (1) driver scripts, exit/raw files,\n  and logs live INSIDE their rig's worktree for the rig's life — they leave WITH it, via the\n  preservation step (copy what the verdict cites into `spt-preserve/<occasion>/`, verified by\n  cmp or a listed tarball, restore cost stated) and never accumulate beside the rigs; (2)\n  anything meant to outlive its rig goes to the repo ROOT beside the verdicts and RCAs it\n  supports (the census/finding/JIT convention) or into `spt-preserve/` — never loose in\n  `.worktrees/`; (3) a file found loose in `.worktrees/` is treated as UNCLASSIFIED WORKING\n  STATE — moved to `_patches/` with a dated note, never deleted on sight (class D is the risk\n  realised). Lane close-out = `git worktree remove` + prune + the conhost CWD-pin check\n  ([[IR-63]] third face) when removal refuses; a registry-pruned dir left behind is a defect\n  to sweep, not a norm.\n- **Ripe when:** between-milestone idle window (it is a dev-box chore, zero product risk) — but the\n  class-A pool findings are armed hazards and do not wait for it.\n- **Size:** small for the sweep; the hygiene rule and the pool-claim gaps are separate small items.\n- **Field instance (hertz sweep, 2026-08-04 — an unclaimed pool found rather than reasoned about):**\n  `.worktrees\\gate-target-w4doc` held **7,907,558,098 B with NO POOL-OWNER.json at all**. Not a stale\n  claim, not a foreign claim — no claim. Exactly this entry's shape, first measured instance. Reaped\n  under doyle's ruling as part of [[IR-27]]'s two-step teardown; the measurement stands on its own.\n\n### IR-17 — Deadline-burn bring-up family: a test burns its full window while the daemon/brain never comes up\n- **Status:** open · **Origin:** golden 30782259675 red triage 2026-08-03\n- **What/why:** two different tests on two runner hosts now share one signature — bring-up misses\n  its ONLINE window under leg load and the test burns its ENTIRE deadline before the PRECONDITION\n  panic: `spt::resident_service_e2e::a_declared_service_rises_with_the_daemon_and_reaches_the_cli`\n  (hfenduleam, FAIL 123.99s, \"PRECONDITION: the daemon never came up\", run 30782259675, green on\n  same-sha rerun 30784469908) and `spt::activity_link_push_e2e` (kitsubito, full 30s, run\n  30607903133 specimen, green on same-sha rerun; its \"brain stderr EMPTY\" leg and its family\n  membership are both CORRECTED in the 2026-08-30 sweep update below — the kitsubito member is\n  CLOSED under a named mechanism).\n  Family reading, not one flake: same missed-window shape, host-independent, both mid-leg under\n  load. Cross-ref KNOWN-HAZARDS 5.13 — bring-up has a hard ONLINE budget with known sensitivity to\n  anything that stalls it (the blanket-fsync canary; `attach_wedge_e2e` guards that budget).\n- **State line (the discriminating datum, resident_service red):** `daemon_up=false boot_alive=true\n  boot_pid=Some(8920) rel_started=false broker_survived=false` — the boot process was ALIVE at\n  panic time and the daemon never reached up. Any characterization run records this line per run,\n  not the verdict (hertz protocol 2026-08-03).\n- **Read of that line, CORRECTED 2026-08-03 (hertz):** it is NOT \"started-but-never-bound\" (the\n  earlier reading here) and not \"never-started\" — it is **started, did work, then killed** —\n  CANDIDATE via [[IR-18]]. The daemon spawned its boot service and that service reached the CLI\n  (the spool holds its message), and `broker_survived=false`. The DISCRIMINATING field is\n  `broker_survived`: false in every killed round of the positive control, true in every healthy\n  round. **An earlier evidence leg here is RETRACTED (hertz, same night, off the negative arm he\n  ran before reporting; deployah, who had carried the leg into four register sites, swept every\n  placement): \"empty daemon.stderr.log = TerminateProcess signature\" was false — the stderr\n  block is empty on PASSING runs too, so it carries zero information in either direction; it\n  failed the discriminator question and does not support the kill read.** The kill read now rests\n  on the control's field-for-field reproduction and the IR-18 mechanism, not on the log.\n  Consequences: (a) the bring-up window is **exonerated for this specimen** — measuring it would\n  have measured nothing; (b) the candidate mechanism and its evidence now live in [[IR-18]]\n  (a sibling test's bare breadcrumb tree-kill), CANDIDATE — not reproduced, not proven;\n  (c) **the characterization population changed, and the rate run is CANCELLED** (doyle ruling\n  2026-08-03) — `resident_service_e2e` run ALONE has no sibling to collide with, so the mechanism\n  predicts 0/N and that number answers no live question; the only sound population was the test\n  INSIDE the Phase A parallel pool, which costs a full Phase A leg per sample, and the fix is\n  warranted by the source-verified hazard class regardless of the specimen's rate. No rate figure\n  will exist for this specimen — do not later read its absence as a low rate; (d) **positive\n  control still runs, falling out of the\n  hypothesis:** kill the spawned daemon by pid mid-bring-up — after boot-service spawn, before\n  ready — and it must reproduce the observed line field for field (`daemon_up=false\n  boot_alive=true broker_survived=false`). If the rig cannot make that shape on\n  demand, a 0/N from the untouched arm is worth nothing and must be reported as worth nothing.\n  The host-INDEPENDENT family claim (kitsubito's `activity_link_push_e2e`) is untouched by this:\n  it has no such kill site named, so the family survives even if this specimen leaves it.\n- **POSITIVE CONTROL RAN 2026-08-03 (hertz, prebuilt a5042ec binary, box confirmed clear —\n  0 open runs, 145.95 GB free): shape reproduced 3/3, deterministic.** Negative arm n=2: 2/2 PASS\n  (5.59s, 5.46s), `daemon_up=true boot_alive=true rel_started=true broker_survived=true\n  survived_teardown=true`. Positive arm (daemon killed by parent-scoped descent after\n  boot-service spawn, before ready) n=3: 3/3 FAIL (93.95/93.25/93.50s), state line identical to\n  the CI red in EVERY field except boot_pid (a pid, must differ), same panic, same site\n  (resident_service_e2e.rs:382). Structural fact the arm settled, and the refutation risk that\n  made it worth running: the boot service rises BEFORE brain.ready becomes readable — had the\n  order been reversed the arm would have produced daemon_up=true and refuted the mechanism.\n  CEILING MET, NOT EXCEEDED: the control used Stop-Process -Force (TerminateProcess — the same\n  primitive as taskkill /F), so it proves a forced daemon kill after breakaway-service spawn\n  produces this exact line ON DEMAND; it says nothing about WHO issued one in golden 30782259675.\n  Candidate mechanism, shape reproduced on demand — \"root caused\" written by nobody. Duration\n  note, recorded not explained: 93.5s local (idle box) vs 123.99s CI (Phase A parallelism), both\n  burning the same three 45s windows — consistent, not verified.\n- **Same-host sub-observation (hertz, host-CONSTANT — narrower claim, kept separate):** both\n  reds of 2026-08-03 sat on hfenduleam Windows Phase A and burned their full windows:\n  `a_tree_teardown_reaches_a_grandchild_the_service_spawned` (run 30776330383, FAIL 10.176s = the\n  full poll deadline, vs a 0.19–0.66s pass band — 15–50x out) + the resident_service row above.\n  MEMBERSHIP PROVISIONAL for the teardown row: it carries a candidate mechanism the bring-up burn\n  does not share — the pid-only oracle IR-15 just replaced. If the oracle caused it, that row\n  leaves the family and host-constant collapses to one sighting. The host-INDEPENDENT pair above\n  is the claim that survives someone fixing this box; the sub-observation is what is actionable\n  about hfenduleam (a live-daemon host) meanwhile. **UPDATE 2026-08-04 (golden 30873007187\n  attempt 1 — SECOND sighting, and the provisional question above is now ANSWERED): the\n  pid-only-oracle candidate is REFUTED for this row** — IR-15's authenticated repin rode the\n  failing tree (a5042ec ancestor of 4b37512) and the row failed anyway (10.225s, \"grandchild\n  51848 outlived the tree teardown\"), with is_stamped() asserted before the kill so the verdict\n  passed the authenticated gate. The row therefore STAYS a family member with its mechanism OPEN,\n  narrowed by hertz's log forensics (competence-controlled: the capture channel demonstrably\n  prints): no DETACH_BREAKAWAY_DENIED (breakaway rung taken), no SERVICE_JOB_UNAVAILABLE (job\n  created + child enrolled), no SERVICE_TREE_KILL_INCOMPLETE (TerminateJobObject returned\n  success) — everything enrolled died; THE SURVIVOR WAS NEVER ENROLLED. Two hypotheses,\n  inseparable in existing evidence: H1 test defect — the grandchild SELECTION is a bare\n  th32ParentProcessID match over a recycling pid space (IR-15's mechanism one level up: the\n  verdict was authenticated, the selection was not); H2 real enrollment gap. hertz's selection\n  probe (IsProcessInJob at selection time — decisive; birth stamp one-directional; image; same-\n  snapshot match count) is authored+compiled and makes the NEXT occurrence self-deciding. Row\n  state: INSTRUMENTED-AWAITING-FIRE; a green retires nothing (doyle-ruled). **UPDATE 2026-08-04\n  (USHER att3):** row green at 17f95a7 (retires nothing, per the ruling). New shape evidence while\n  waiting for the probe: BOTH archived reds sit AT the 10s poll bound (daemon.rs:2757) — 10.176s and\n  10.225s — while todlando's 200 off-CI passes under live-fleet load ran 1-4s, never near it. The\n  post-fix red is therefore BOUND-EXPIRY-shaped (kill fired; the pinned identity stayed\n  not-provably-gone past 10s — TerminateJobObject is async), not kill-wrong-shaped. The bound\n  question (is 10s right for a loaded runner) is parked with hertz's USHER package item 4 and must\n  not touch the kill path or spawn flags before the probe fires. See also the FLAKE-LEDGER row for\n  the false-repeat correction (the 10.176s red was the PRE-a5042ec bare-pid mechanism).\n- **Declared read (2026-08-03, rules the next red):** a same-sha green rerun is protocol-conclusive\n  for the GATE, not the class. No third silent sample — the next occurrence of this signature gets\n  an instrumented resident-service bring-up investigation (hertz), not a rerun.\n- **SWEEP UPDATE 2026-08-30 (#242/v0.66.0 close — three corrections, correct-by-replacement):**\n  (1) **The 2026-08-03 \"brain stderr EMPTY\" reading on the kitsubito specimen is a METER\n  ARTIFACT, not a silent brain** (deployah measured 2026-08-29): the brain-panel stderr capture\n  only LANDED 2026-08-19 (`ab657626` + `e6e188e1`), 16 days after the specimen — at the specimen's\n  sha there was nothing to capture, so \"empty\" carried zero information; current bits label\n  absence explicitly, so empty-vs-present cannot recur as a distinction. This replaces the\n  \"cheap to settle next time someone has kitsubito\" item — there is nothing left to settle.\n  (2) **The kitsubito family member is CLOSED under a NAMED mechanism:** RCA-242-R2-LINUX.md\n  (v0.66.0 golden r2) measured `current_exe_hash()` on the READY PATH at ~10.1s per boot on\n  kitsubito under load (~1.5s Windows) via BRAIN_PHASE breadcrumbs + harvest-loop repro — a\n  bring-up that misses its ONLINE window under leg load is exactly what a ~10s synchronous hash\n  inside the ready path manufactures. The behaviour-change request (hash off the ready path,\n  ADR-0018 Q7) is minted on the board at this sweep as **releases#244** (BACKLOG, operator\n  triages). The family's host-INDEPENDENT claim\n  therefore collapses: the Windows `resident_service_e2e` specimen (IR-18 kill-shape candidate)\n  and the hfenduleam sub-observation STAY OPEN as this entry's remaining live population.\n  (3) **Lane-linked:** hertz's queued fixup lane brief names this entry directly\n  (activity_link_push_e2e 4-cell fixup: false precondition message + progress-bounded readiness\n  wait, #235 shape). Overlap with correction (2) checked at link time: his cells are TEST-side\n  (message truth + wait shape) and stand regardless of the product-side hash fix.\n- **Ripe when:** next occurrence of the signature (immediate instrumented dispatch), or a hertz\n  test-hardening wave (bring-up phase-timing instrumentation, per-phase deadline attribution).\n- **Size:** medium (bring-up instrumentation + attribution; the fix depends on what it shows).\n\n### IR-16 — kill_tree discards TerminateJobObject/TerminateProcess returns (silent partial kill)\n- **Status:** BUILT 2026-08-03 (landed @62c5623 on the LOCKSMITH t1 lane; rides golden sha\n  b7b00c3, run 30860770146 green) · **Origin:** ex releases#130 (golden 30776330383 red triage;\n  deployah's log read\n  + todlando's flagged-not-asserted arm). Operator-classified infra 2026-08-02: daemon-kill\n  internals are agent-facing, not operator-facing surface.\n- **What/why:** `DetachedChild::kill_tree` (daemon.rs:1433 vicinity) calls\n  `unsafe { TerminateJobObject(self.job, 1) }` and discards the return; TerminateProcess likewise\n  unaudited. A job that was created and assigned at spawn but whose TERMINATION fails at kill time\n  yields the grandchild-survives symptom with zero log signal — the spawn-side\n  SERVICE_JOB_UNAVAILABLE announcement is correctly absent (that arm is instrumented and was\n  refuted for the specimen by a positively-controlled zero). Wanted: (1) check + log both\n  termination returns loudly on failure; (2) the degraded-arm decision — fallback process-table\n  tree-walk kill or explicit refusal, never a silent partial kill wearing REQ-RESIDENT-SERVICE's\n  unconditional promise. Do NOT add self.job==0 instrumentation (already loud; a second weaker\n  rule beside a working one). Discrimination pairing with [[IR-15]]: a red whose captured pid is\n  still ping.exe with no SERVICE_JOB_UNAVAILABLE in scope = this entry's arm.\n- **Ripe when:** RIPE NOW — IR-15 landed BUILT 2026-08-03 (its rig-side half), so this kill-side\n  half is the outstanding instrument; land with the next daemon-teardown wave or sooner.\n- **Size:** small.\n- **Composed:** LOCKSMITH (#132) — todlando product lane, with the `detached_no_inherit_env`\n  rename as cosmetic rider (IR-20's load-bearing-pid caution applies to any rig touch) —\n  2026-08-03. GREENLIT with #132 and **DISPATCHED to todlando 2026-08-03**, carrying IR-20's\n  load-bearing-pid precondition as a stated check (todlando reports whether the rig is touched\n  at all rather than silently skipping it).\n- **BUILT — fulfilment checked against the wanted list, not merely mapped to a commit** (doyle,\n  2026-08-04): `62c5623` satisfies (1) — both termination returns are now checked and the loss is\n  NAMED on failure, as the kill-time twin of the spawn-time `SERVICE_JOB_UNAVAILABLE` — and (2) by\n  the ruled LOUD REFUSAL arm rather than a tree-walk fallback, which [[IR-18]] measured blind in\n  exactly this failure state. The `self.job == 0` prohibition was honored: the new check is\n  `self.job != 0 && TerminateJobObject(...) == 0`, not a second weaker rule beside the working one.\n  The unix `ESRCH` quiet arm — which no Windows gate can see — is covered by `ec5f38a`. The\n  `detached_no_inherit_env` cosmetic rider did NOT land and was dropped at `de6a01d` on a MEASURED\n  false premise, not deferred. A Windows-specific finding rides the fix as a comment and is worth\n  keeping: `TerminateProcess` against a handle to an already-exited process returns 0 with\n  `GetLastError` 5 (`ERROR_ACCESS_DENIED`), so a naive check there fires on the ORDINARY path.\n\n### IR-18 — resident_service_e2e kills breadcrumb pids BARE (stale-breadcrumb tree-kill; kill-side twin of IR-15)\n- **Status:** BUILT 2026-08-04 — the named acceptance carrier RAN and the condition is DISCHARGED,\n  stated as the measurement rather than as the green board it sat on: LOCKSMITH's golden run\n  30860770146 (head `b7b00c3`, conclusion success) executed the changed test IN-POOL on BOTH\n  platforms — `spt::resident_service_e2e a_declared_service_rises_with_the_daemon_and_reaches_the_cli`\n  PASS 17.773s (100/2637) on hfenduleam/Windows and PASS 17.895s (1364/2616) on kitsubito/Linux.\n  The pool was checked for the test rather than inferred from the job colour, because a green leg\n  that never ran the test is a competence-controlled zero, not an acquittal; `resident_service_e2e`\n  contains exactly ONE `#[test]`, so the test that ran IS the test the lane rewrote (229 lines of\n  that file changed in `6e1a962`). No red returned to doyle. `.worktrees/ir18` is released for\n  teardown by this verdict · **Origin:** hertz\n  characterization of the [[IR-17]] resident_service red, 2026-08-03 — CANDIDATE mechanism, NOT a\n  reproduction\n- **Lane:** hertz `fix/ir18-authenticated-teardown` — MERGED to main @6e1a962 (PR #142; gated at\n  b48e35b, rebased 6e1a962 on 1e520b4 with zero code delta — doyle re-derived `git diff -- crates/`\n  empty across the rebase, so the gate verdict and local behavioral evidence transfer). Gated by\n  doyle: full diff review (one blocking finding — the scope_lost assert condition contradicted its\n  own guard ruling — fixed and delta-verified at one line), mutation-proven locally both\n  directions (B: forced boot_pid=None → population sweep names the leak no per-pid check sees,\n  FAIL 101; A: wrong expected_exe → REFUSED-foreign-image reds loudly on the derivation check).\n  EVIDENCE SPLIT, stated so the check marks cannot carry it (hertz's absent-leg callout): lane CI\n  30792210008 was 5/5 green per job but ci.yml's test leg is kind(lib)+kind(bin) — the changed\n  integration test NEVER RAN there (verified by log grep, 0 hits / 3023 lines); CI proved\n  compile-everywhere (clippy all-targets = the pool-population check for a common/ module),\n  traceability, lib/bin clean. The BEHAVIORAL evidence is local: three clean runs (all verdicts\n  Killed, population empty) + the two mutation reds. reap.rs diff additive-only (zero deleted\n  lines, verified) — cross-test risk bounded to compilation, which CI covered. Evidence custody:\n  gate + mutation logs at `.worktrees/_patches/ir18-gate-logs/` (5 files); `.worktrees/ir18` is\n  KEPT deliberately until the golden verdict (NOT an orphan — do not reap; a Phase A red wants the\n  tree and logs in place, not rebuilt); its pool claim is released.\n- **What/why:** `crates/spt/tests/resident_service_e2e.rs:46` defines its own reaper —\n  `taskkill /PID <pid> /F /T`: bare pid, force, whole TREE, no identity check — and feeds it three\n  BREADCRUMB-derived pids in cleanup (`boot_pid`, `rel_service_pid` at :360, and the pid read out\n  of `brain.ready` at :363). The suite already ships the authenticated tool other tests use and\n  this one does not: `common::reap::authenticated_kill(label, pid, expected_exe, observed)` at\n  `crates/spt/tests/common/reap.rs:116`. Inside the Phase A parallel pool on a pid-churning box\n  this is the KNOWN-HAZARDS stale-breadcrumb tree-kill class, live and **symmetric**: this test can\n  take a sibling's daemon and a sibling can take this test's. Same defect [[IR-15]] just fixed, on\n  the other side — IR-15 authenticated the READ (is the thing I pinned gone?), the KILL is still\n  bare pid. Kill what you pinned, not the number it happens to hold.\n- **Verified at source by deployah 2026-08-03** (relayed claims re-derived, all held): the bare\n  kill, its three breadcrumb feeds, the shipped-but-unused authenticated helper, and the\n  `CREATE_BREAKAWAY_FROM_JOB` spawn (`daemon.rs:1300`).\n- **Evidence rating — why it is a candidate and not a cause:** it predicts every field of the one\n  observed state line. The daemon is killed after spawning its boot service and before binding:\n  `broker_survived=false` (the discriminating field — false in every killed control round, true in\n  every healthy one) + `boot_alive=true boot_pid=Some(8920)` with the service's message in the\n  spool. (The \"empty stderr = silent death\" leg that originally sat here is RETRACTED — see\n  [[IR-17]]'s control record; stderr is empty on healthy runs too and discriminates nothing.)\n  The service outlives its daemon because `detached_no_inherit_env` spawns it\n  `CREATE_BREAKAWAY_FROM_JOB`, so it is NOT in the daemon's job and a daemon kill ORPHANS it\n  rather than reaping it — plausibly also the five denied `svcmock.exe` attempts in that job's\n  reap summary. **The [[IR-17]] positive control (2026-08-03) reproduced the shape 3/3\n  deterministically with a forced kill at that window — establishing the SHAPE on demand, not the\n  AGENT: nothing identifies who issued a kill in golden 30782259675.** The bare-pid tree-kill from\n  a concurrent test remains the candidate agent, on the source-verified hazard class and reap.rs's\n  documented prior casualty. **Not reproduced in the wild. Not proven. \"Root caused\" is not\n  written here by anyone.** The [[IR-17]] rate run is cancelled, so no rate will ever back this —\n  the fix stands on the source-verified hazard class alone. THE DEFECT IN MINIATURE, observed as a\n  side effect of the control (hertz 2026-08-03): the three killed rounds leaked 12 processes\n  (6 svcmock + 6 spt.exe, two services per round) and the test's own teardown reaped NONE — when\n  the daemon dies, `rel_pid` is `None` so that service is never even a kill target, and the\n  breakaway child outlives everything. A teardown that leaks two processes per round currently\n  PASSES: the concrete case for `target_gone` as the gate's positive half. (Leak cleaned scoped,\n  each pid re-authenticated by image-path prefix + creation window at kill time, not from the\n  minute-old enumeration.) ONE LAYER DEEPER (deployah, same night, at source): the reap loop\n  (:359) is `[boot_pid, rel_service_pid].into_iter().flatten()` — `.flatten()` DROPS None, and\n  `mock_pid` (:100-106) collapses absent/permission-denied/IO-error/garbage into that None via\n  `.ok()?`/`.ok()` — the reap.rs:59-63 collapse in a THIRD location, inside this very test. So the\n  leak is both \"service never started\" AND \"pid unreadable, therefore never a kill target\":\n  absence of knowledge read as absence of target, in a teardown, again.\n- **GATE SPEC AMENDED PRE-BUILD (deployah found the hole, doyle-ruled 2026-08-03 — read this\n  BEFORE building the lane):** the two halves as first specified (trap-class-absent +\n  `target_gone` per pid) both operate on pids we HAVE — a process whose pid is None is invisible\n  to BOTH, so the specified gate PASSES hertz's own control-run leak (12 processes, 6+6, 2/round,\n  teardown reaped none). A gate its own reproduction case passes is not yet an instrument. THIRD\n  HALF, REQUIRED: a POPULATION assertion at teardown — zero surviving staged-service or\n  test-owned spt processes, by selectors external to the pid bookkeeping. SELECTOR RESPELLED\n  (hertz 2026-08-03, doyle-approved — the first spelling, \"parent-pid descent from the test\n  process\", would have caught ZERO of the 12: teardown kills the daemon before any check runs, the\n  BFS over the current (pid,ppid) table breaks at the dead middle hop, and descendants(test_pid)\n  returns empty exactly in the leak case — an absence read as a clean, the shape the lane exists\n  to kill; the control's own cleanup is the evidence, it had to use image+creation-window because\n  descent was already broken). THE TWO SELECTORS AS BUILT: (1) svcmock half by IMAGE PATH —\n  stage_adapter copies the service binary under this run's unique tempdir home, so \"any pid whose\n  exe_path canonicalizes under home\" names every staged service this run started and nothing else\n  on the box; no bookkeeping, immune to reuse and broken chains. (2) spt.exe half by SEEDED\n  descent + image — image alone is forbidden (target/debug/spt.exe is shared with concurrent\n  tests and live perches: the machine-wide selector class); seed with the ancestor set captured\n  WHILE ALIVE ({test, broker from the Child handle, brain from brain.ready — none via mock_pid}),\n  union descendants, keep only exe_path==spt_bin. Reuse exposure on seeds is assertion-only (a\n  red, never a kill) and the image filter closes it. Both halves catch the 12-leak conformance\n  case; the first spelling caught none of it. PLUS THE [[IR-8]] BUCKET, REQUIRED (deployah,\n  same night — the third instance of that sentence tonight, this time inside our own instrument):\n  both selectors match on IMAGE PATH, and an exe path that cannot be READ yields no match — a\n  leaked svcmock holding an unreadable path is invisible to both halves and the count comes back a\n  zero that cannot see. Not hypothetical: IR-8's defining specimen is 5/5-denied on this exact\n  image, on this box. So the population assertion counts unreadable-path processes as their OWN\n  bucket and the zero-survivors claim REFUSES when that bucket is nonzero — zero seen AND zero\n  unseeable, or the assertion states it could not see. Built in from the start, not retrofitted\n  (may land in the lane's second commit at hertz's discretion; the requirement is that it lands in\n  the lane). This instantiates IR-8's remedy test-side; the CI reap-census script half of IR-8\n  stays open.\n- **Fix (thin lane, hertz — doyle-ruled 2026-08-03):** adopt `authenticated_kill` at all three\n  sites. (Board #131's `CREATE_NO_WINDOW` rider is DROPPED from this lane — hertz falsified the\n  filed remedy at source 2026-08-03: daemon.rs has exactly ONE CreateProcessW (:1187) and\n  BASE_FLAGS (:1105) already carries 0x0800_0000 = CREATE_NO_WINDOW on both rungs including the\n  ACCESS_DENIED fallback (which drops only BREAKAWAY), so the specified edit ORs an already-set\n  bit — a bit-for-bit identical flag word that would close a board item while its symptom, if\n  real, continues. #131 handed back to board triage with the finding and a candidate direction:\n  DETACHED_PROCESS gives the service no console, so a console child the SERVICE spawns flagless\n  allocates a NEW visible window — the grandchild, not the daemon's spawn, is the candidate\n  surface; wants its own diagnosis from an observed window. ~~The `detached_no_inherit_env` rename\n  (\"detached\" actually means breakaway-from-job) is a candidate cosmetic rider on [[IR-16]]'s\n  product lane~~ — **RENAME DROPPED 2026-08-03, ITS PREMISE MEASURED FALSE** (todlando, on the\n  IR-16 lane; doyle re-verified at source before ruling). \"detached\" is ACCURATE: `BASE_FLAGS`\n  (daemon.rs:1103-1105) is `DETACHED_PROCESS | CREATE_NEW_PROCESS_GROUP | CREATE_NO_WINDOW`, and\n  `0x0000_0008` IS DETACHED_PROCESS — the function sets BOTH postures and the name states one of\n  them. The name is not wrong, it is INCOMPLETE (silent about `CREATE_BREAKAWAY_FROM_JOB`, which\n  arrives as `extra_flags` at daemon.rs:1506), so renaming on the stated premise would have traded\n  an accurate word for one that drops a flag the function really sets. Independently fatal: the\n  premise, if true, covers the sibling `detached_no_inherit` equally — 17 references across\n  daemon.rs/deelevate.rs/shellhost.rs — and renaming one of two siblings of ONE posture leaves the\n  tree MORE inconsistent, not less. **What lands instead:** one doc-comment line on EACH function\n  naming the full effective flag word, which fixes the real complaint (neither name says breakaway)\n  without touching a call site. Kept here rather than deleted because this entry was the claim's\n  only home, and a reader who found the rename gone with no reason would re-derive it.) PER-PID GROUND TRUTH for expected_exe (hertz — SELF-CORRECTED\n  at source before it ever landed; his first derivation, \"Copy runs from adapters_dir(), Pointer\n  runs from srcs/\", was WRONG and registration mode is NOT the discriminator): servicehost.rs:1328\n  takes `install_dir` from `record.source_dir` on the Started arm for EVERY service, Copy and\n  Pointer alike, and Copy copies only the manifest + strings/ (registry.rs:395-404), never a\n  binary — `adapters_dir()` holds no executable in either mode. BOTH services run from their OWN\n  staged src dir: `staged_bin(<adapter's staged src dir>, \"svcmock\")`. The trap survives with a\n  different mechanism: two adapters staged into two DIFFERENT source dirs are two different files\n  on disk, so one expected_exe still cannot serve both. A lane that trusted the mode split would\n  derive a path with no binary at it. How it was caught, kept because it is the reusable part: not\n  by rereading the mode table but by finding where install_dir is COMPUTED instead of trusting an\n  already-published inference — the mode split was true of MANIFESTS and had been generalized to\n  BINARIES without checking the consumer; and the derivation-asserted-at-observe() instrument\n  would have caught it at runtime regardless — the instrument did its job before it ever ran,\n  argued against its own author. SCOPE_LOST RULED A GUARD, NOT A FINDING (hertz design change,\n  doyle-approved): a seed pid recycled before the sweep makes the sweep DECLINE that subtree\n  loudly, not fail — failing would turn ordinary pid churn on a busy runner into a red against a\n  clean teardown (the IR-15 false-red class re-minted inside its own fix); coverage holds without\n  it because the staged services are caught by image-path-under-home and the daemon + brain by NEW\n  direct per-pid target_gone checks (their pids this test never loses) — the ancestry half is\n  reach, not load-bearing. `unreadable` stays FATAL as ruled.\n  Sequencing: positive control\n  first (it is the instrument that could still refute the mechanism), then the lane. Does NOT ride\n  [[IR-16]] (doyle-ruled same day): that is the product-side kill_tree audit and stays a separate\n  lane under the dispatch split; the two cross-ref, they do not merge.\n- **Lane trap, flagged before build (hertz 2026-08-03 — the false-clean shape):** `expected_exe`\n  differs PER PID. `boot_pid` and `rel_service_pid` run the staged svcmock image, NOT spt.exe —\n  passing spt_bin for those refuses every kill as foreign-image and LEAKS both services while the\n  reap reads hardened. Only `brain.ready`'s pid takes spt_bin. Also: `observe()` boot_pid at :210\n  while it is provably ours, so the reuse check has creation-time teeth instead of degrading to\n  image+ancestry.\n- **Gate the lane on killing, not on refusing (deployah 2026-08-03; REFINED by hertz same night\n  from reap.rs's own contract):** the hardened version fails safe in the WRONG direction —\n  refuse-everything leaks both services while printing exactly the reap line a reviewer wants to\n  see, strictly worse than the bare kill it replaces and invisible in the same log. But a BLANKET\n  zero-REFUSED gate is wrong too: reap.rs's module doc (:18–20) states refusal is the CORRECT\n  happy-path outcome when the test already stopped its daemon (`Refused(\"gone\")` — leak insurance,\n  not primary teardown), so the blanket gate reds healthy runs, someone loosens it to go green, and\n  the loosened version is exactly the one blind to foreign-image — the detector dies by\n  maintenance, wearing a green. The refusal reasons split, and only one class is a defect:\n  SOUND (expected): `gone`, `reused`, `breadcrumb-moved`, `self`, `ancestor` — target provably not\n  there. TRAP (the false-clean state): `foreign-image`, `unreadable-image`, `unproven-identity` —\n  something WAS there and authentication declined; `foreign-image` is precisely what a wrong\n  per-pid expected_exe produces on every pid, every run. THE GATE: in the arm that must kill,\n  assert no verdict in the trap class — structurally on the returned `Verdict` (Killed |\n  Refused(&'static str), stable tokens by design, reap.rs:48), not by scraping output; the\n  `REAP[label]: … verdict=` line stays as CI-log forensics. The gate's comment MUST say\n  `Refused(\"gone\")` is expected, or the next reader \"fixes\" it. Positive counterpart that actually\n  proves the reap: assert `target_gone(pid, expected_exe, observed)` (reap.rs:215 — no-knowledge\n  never read as death) per service pid; bare-liveness \"no survivors\" is the false-clean named above.\n  TOKEN SET VERIFIED COMPLETE-PLUS-ONE (deployah, refuse() sites enumerated at source): the eight\n  tokens above sit at :128 self, :132 ancestor, :136 breadcrumb-moved, :146 gone, :149\n  unproven-identity, :155 reused, :166 unreadable-image, :172 foreign-image — each in the right\n  class — and there is a NINTH neither list held: `Refused(\"no-breadcrumb\")` at :243, returned\n  before authenticated_kill is reached. Doyle-ruled 2026-08-03, both halves: (1) `no-breadcrumb`\n  classifies SOUND — **SCOPED (deployah source-read, same night): it is two states wearing one\n  name.** `breadcrumb_daemon_pid` (reap.rs:59–63) collapses file-absent, permission-denied, any IO\n  error, AND a husked/unparseable partial write into one `None` via two `.ok()`s — so the token is\n  ABSENCE OF KNOWLEDGE, not proof of absence, and it is SOUND only because the calling test has\n  already asserted its daemon stopped. Every other SOUND token carries positive proof; a LIVE\n  daemon whose pid file is unreadable or husked emits the identical token and leaks wearing\n  \"nothing to reap\" — the helper's one fail-open path inside a fail-closed design (its own module\n  doc: no-knowledge is never read as death), and the same sentence as [[IR-8]]: a zero that cannot\n  see is not a zero. CORRECT REMEDY (doyle-ruled, deferred — not this lane, unreachable from this\n  test's pids): split at source into `no-breadcrumb` (absent) vs `unreadable-breadcrumb` (TRAP,\n  beside unreadable-image) — IR-8's unreadable-bucket fix in a second location; land the pair in\n  the census/reap wave IR-8 already names, one remedy for two entries. Precondition on the split\n  (hertz): common/reap.rs compiles into EVERY spt integration test binary, so enumerate the callers\n  that actually REACH `reap_breadcrumb_daemon` before the token split lands — those are the tests\n  whose teardown semantics change; own lane, not a rider. ENUMERATION DONE (deployah, same night,\n  read-only): 21 caller tests, every one passing &spt_bin as expected_exe (the per-pid trap is\n  specific to resident_service_e2e's svcmock pids — it does not generalize to this population);\n  20 callers fire-and-forget the Verdict; the one value-assertion, reaper_guard.rs:192-196, pins\n  `Refused(\"no-breadcrumb\")` for an ABSENT breadcrumb only — absent KEEPS the token under the\n  split, so that assertion survives unchanged (:183's stale-pid check is the loose\n  `matches!(Refused(_))`). The split is ADDITIVE: one source split, one new token, zero caller\n  rewrites. THE GAP THAT LET THE COLLAPSE HIDE: reaper_guard covers eight refusal shapes but has\n  NO test for an unreadable or malformed daemon.pid — the one state where absence-of-knowledge\n  reads as absence-of-target is the one state without a conformance test; (b) ships with exactly\n  that evidence (a garbage daemon.pid and an unreadable one, each asserting the new token).\n  ASSIGNED: deployah owns the (b) lane (doyle-ruled 2026-08-03), SEQUENCED AFTER hertz's IR-18\n  lane — the exhaustive panic-catch-all lands first, so the new token arrives forced-classified\n  per this entry's own design, and the (b) lane classifies it TRAP in the same change. SCOPE\n  RE-RULED (2026-08-03, on deployah's third-site find): the collapse now has THREE known sites\n  (reap.rs:59-63, resident_service_e2e's mock_pid :100-106, and the shape wherever a test reads a\n  self-written pid file) — so (b) lands ONE shared read-a-pid-breadcrumb helper that distinguishes\n  absent from unreadable ONCE, adopted at the enumerated sites, not a per-site token split; the\n  single-source-discriminant rule, applied before a fourth site mints itself.\n  **THIRD SITE CONFIRMED AT SOURCE (deployah, read-only 2026-08-04) — it was a predicted SHAPE and\n  is now an address:** `crates/spt/tests/resident_service_e2e.rs:136-137`, `brain_ready`, which\n  `.ok()?`s BOTH the read and the JSON parse — two collapses in two lines, the self-written-pid-file\n  shape this entry predicted. What makes it the worst of the three rather than the third of three:\n  its output feeds `brain_seed`, a population-sweep SEED, so an unreadable `brain.ready` silently\n  drops a whole subtree from the sweep. The other two sites lose one pid; this one degrades the very\n  instrument that is supposed to cover them, and it does so while the sweep still reports clean —\n  [[IR-8]]'s sentence again, now inside the instrument rather than beside it. The (b) lane's helper\n  therefore has to be adopted at this site to be worth landing at all. Still deployah's,\n  still after hertz's lane; hertz's lane does NOT wait for it (the population assertion covers the\n  leak class independent of pid bookkeeping — that is its virtue). (b) INTAKE ITEM (doyle gate on\n  the IR-18 lane, 2026-08-03, deferred there deliberately): the lane's verdict-gate SOUND-arm\n  comment reads \"provably not there\", which overclaims for `no-breadcrumb` (absence-of-knowledge,\n  not proof — the scoped reading belongs at that arm); comment-only, and (b) rewrites that arm\n  when `unreadable-breadcrumb` splits out, so it lands there rather than costing a solo respin.\n  SECOND (b) INTAKE ITEM (hertz self-noted at re-gate, doyle-ruled deferred): cleanliness is\n  currently stated at THREE sites (two asserts + `is_clean`) — the drift that produced the\n  scope_lost condition bug (a failed edit followed by a narrower successful one replaced the\n  message but not the condition; the artifact of that failure mode IS message/code disagreement).\n  (b) consolidates to conditions derived from one source, weighing the two-message diagnostic\n  split it would cost. The\n  exhaustive panic-catch-all match is what makes the split safe to do later: the new token lands\n  loud on first fire in every consuming gate, forced to be classified, never silently passed. Until then the scoped reading above is the\n  gate's contract — and the LANE BUILDER writes that scoped reading into the match's SOUND-arm\n  comment (the sketch's \"nothing to read is nothing to kill\" is the exact inference the source\n  forbids; the comment must not teach the false step); (2) the gate closes over the\n  token set — SPELLED BUILDABLY (hertz correction 2026-08-03; the earlier \"no wildcard arm\" wording\n  is an instruction rustc rejects, since the refusal reason is a `&'static str` (:55) and a string\n  match always requires a catch-all): the match names the six SOUND tokens as a pass arm, the three\n  TRAP tokens as a panic arm, and the REQUIRED catch-all arm is not a wildcard PASS — it panics\n  naming the unknown token (\"unclassified reap refusal token — classify it in this match\"), so\n  upstream drift announces itself the first run it fires instead of sliding into a silent pass.\n  Runtime fail-closed, not compile-time: compile-time closure needs the reason to become an enum in\n  common/reap.rs, an upstream change touching every consumer — ruled NOT smuggled into this lane\n  (candidate for its own thin lane if ever wanted; doyle concurs runtime fail-closed is\n  proportionate). Direction of the default, kept in the record: a missed trap state is an invisible\n  leak wearing the reap line a reviewer wants to see; an unclassified harmless token is a loud red\n  costing one edit. Cheap and loud beats silent and wrong. (Count hygiene, hertz self-flagged: a\n  single-line grep for the refuse() sites returns five of nine — three wrap across lines; the nine\n  stands on reading, not the grep. The sweep-count trap in miniature.)\n- **Prior observed instance of the class, in-tree (hertz 2026-08-03 — stated to understate):**\n  reap.rs:3–11 documents the measurement and a casualty: pid reuse on the Windows gate box at\n  2.2s minimum / p50 11.7s under a Phase-A battery, and a concurrent test process killed by a bare\n  kill on a stale breadcrumb pid, dying with bare exit 1 and no panic — the observed\n  `worker_lifecycle_e2e` red in golden job 90742055246 (that test's intermittent class is board\n  releases#32, still in-flight). Different test, different job — it does NOT reproduce this entry's\n  specimen and promotes nothing; what it settles is that the class is real IN THIS SUITE with a\n  named victim, and the authenticated reaper is the remedy someone already built for it —\n  resident_service_e2e simply never adopted it. Two shape-predictions it supplies, made before this\n  specimen existed: the p50 11.7s reuse window is short against this test's 45s waits and ~124s\n  runtime (window wide open). (A second claimed match — \"bare-exit-1-no-panic matches the empty\n  daemon.stderr.log\" — is RETRACTED as a category error, hertz+deployah 2026-08-03: reap.rs's\n  phrase describes the VICTIM TEST PROCESS dying, not a daemon's log; two processes, two\n  artifacts.) Predictions, not proof; the specimen stays CANDIDATE — shape since reproduced on\n  demand, agent unidentified (see the control record above).","numLines":500,"startLine":501,"totalLines":3791}},"sourceToolAssistantUUID":"ed871cfa-c321-46af-a2de-90f923ba2b19","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"c35be39a-5280-4a71-9939-a75874e19d34","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6Dxfssrk1ZbC5feVCE","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"EpQFCqgBCBEYAipA9JwhYnO2Z8EtRlyBWwK6hjrw8YzQ9BqUPEQPRuX973TToJJnoIUuiaAussI8tKNsFf5cBzISbwuc4uwVXz5nzjIPY2xhdWRlLXNvbm5ldC01OABCCHRoaW5raW5nWiQ4MGM5NDZkZC05YzNjLTQ5NzItOGYyZi03NDAxMTQxZGE2MzJyEJcpAiwR8BiFSxd+XzBU5MmIAQGoAf6W9dQGsAECEgzwjXgpy+CSYrd7WnUaDDGZZ5C6n43wXvMzBSIwcvwljqZDduDVHtNAroKM7X7yVZHtAhKTz9mg97DZ3c4XEyqi5tl66GQ4mEOTzEPHKpgDUKIZXBgCT1PwfGFOrT4YfzCFIRMgzeuV9l7E82/hCvCaO08nbZD9JpnH6nVEZsEcBV3tnmn76wq1NcA1ehkxPMyrVqZtel3+Opj5bRpVI86HrJC3geqFteGeSdI7sM/onJJWrRq0Yt9aCruAoyHMGxjPXq2mx/OY746kkYxzbyj6X8jthIQlm64Wa6YQonMMaRQsfUr9sFJ1SLPEPGBQ7cmXVLmbZGLQSlndL9878V4YMdFQ2LAXohDTobPIhSMvx07HRXjpchSkmw1AQHvE/vVjRqgbL/8uwKqY90b1ZsL1LpR5YwaQwpTR9Ez6MViVHaz82XkqA87dDQOdJHAu/2aL+e2DF7l56GxmBvUPmtfkW6OUgUB58Qdx+xZHhH3p9a9Voyrgx8oAomIRnqxBzZR/0dFCEFvNj0J7RkEXvNVAIXgNpEONcRSfzbeRDAXv9UmeRP8XBJSaWjDFdbnC35NNuRMMv7glL0UyfC0Czj4HJd1zLbmHMhfUneN5GSbSUxN83x3dEqfnxoVD+ml5/FWDBOA7Ah+eGAE="}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":19340,"cache_read_input_tokens":79793,"cache_creation":{"ephemeral_5m_input_tokens":19340,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6Dx1SEkwN3TgH5hcAR","attributionAgent":"general-purpose","type":"assistant","uuid":"37daccc6-cf06-46ef-8589-67db94c008fa","timestamp":"2026-09-06T11:16:14.253Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"37daccc6-cf06-46ef-8589-67db94c008fa","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6Dxfssrk1ZbC5feVCE","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01FL2tQTb8enCysyAMfXUj35","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":1001,"limit":500},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":19340,"cache_read_input_tokens":79793,"output_tokens":257,"output_tokens_details":{"thinking_tokens":128},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":19340},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":257,"cache_read_input_tokens":79793,"cache_creation_input_tokens":19340,"cache_creation":{"ephemeral_5m_input_tokens":19340,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6Dx1SEkwN3TgH5hcAR","attributionAgent":"general-purpose","type":"assistant","uuid":"5a0e5b1e-bf28-4ecd-830b-d49496d06ee4","timestamp":"2026-09-06T11:16:15.471Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"5a0e5b1e-bf28-4ecd-830b-d49496d06ee4","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01FL2tQTb8enCysyAMfXUj35","type":"tool_result","content":"1001\t- **Rig near-miss, caught before first execution (hertz 2026-08-03) — kept as design justification,\n1002\t  not an anecdote:** the positive-control arm's first draft selected its victim machine-wide\n1003\t  (`Win32_Process Name='spt.exe'` + cmdline match `daemon run`, then force-kill). hfenduleam is the\n1004\t  Windows CI runner as well as a dev box, so that filter matches CI's own test daemons: run while a\n1005\t  leg was live, it would have force-killed a running job's daemon and reported the result as a\n1006\t  measurement — fabricating a red in someone else's job, the exact class this entry documents.\n1007\t  Corrected to a parent-scoped selector (daemon = child of the test pid; service = child of that\n1008\t  daemon); `CREATE_BREAKAWAY_FROM_JOB` does not weaken parent-id attribution, since breakaway leaves\n1009\t  the JOB, not the parent record — which is also why the orphaned svcmock stays attributable to the\n1010\t  daemon that spawned it. **The load bought the catch** (blocked on the box ⇒ re-read instead of\n1011\t  ran). Bearing on the fix: the INSTRUMENT built to study a bare-selector reaper was itself written\n1012\t  with a bare selector. The remedy therefore cannot be \"be careful\" — the authenticated path must be\n1013\t  the only one within reach in this suite.\n1014\t- **Ripe when:** RIPE NOW, and not gated on the rate run that was cancelled.\n1015\t- **Size:** small.\n1016\t\n1017\t### IR-19 — Docs-only pushes to main run full unit legs (classifier is PR-only) — intent unverified\n1018\t- **Status:** RETIRED 2026-08-18 — intentional for main pushes, not a classifier defect. · **Origin:** hertz observation 2026-08-03 (register-push\n1019\t  cadence gated his rig behind repeated hfenduleam unit legs); mechanism verified by doyle at\n1020\t  source same night.\n1021\t- **What/why:** `ci.yml`'s `changes` job classifies docs-only diffs ONLY for `pull_request` events\n1022\t  — push events hardcode `code=true` (ci.yml:45–48, an explicit branch, not a fallthrough), so\n1023\t  every docs-only push to main spins both full unit legs. Tonight: five register docs pushes each\n1024\t  queued a Windows unit leg on hfenduleam; concurrency kept one running + one pending (main is\n1025\t  never cancelled in-progress, pending runs supersede — the recorded behavior matches ci.yml:9–13).\n1026\t  FINDING SETTLED (deployah, same night, from the workflow): this is not intent — it is a scope\n1027\t  the classifier never had; the `*.md` / `traceable-reqs.toml` case arms are only ever REACHED on\n1028\t  pull_request (the early-return precedes them), and golden.yml's own hardcoded `code=true` is\n1029\t  unrelated (golden triggers only on golden/**). REMEDY STILL OPEN on a named tension: extending\n1030\t  the classifier to pushes leaves a docs-only main TIP with no run of its own — fine if\n1031\t  tested-sha==merged-sha means \"the code at this sha was tested\" (it was, at the last code sha),\n1032\t  not fine if any gate or reader takes \"main tip has a green run\" as the check. One person reads\n1033\t  the consuming gates before any remedy (doyle, at the next CI-touching wave) — three assuming is\n1034\t  how this class ships.\n1035\t- **Resolution:** the consuming contract already answers the held question:\n1036\t  `REQ-CI-DOCS-ONLY-THIN` is PR-only and explicitly says ADR-0050 supersedes\n1037\t  it for main pushes. Main-tip evidence remains full by design; no classifier\n1038\t  branch was widened.\n1039\t- **Interim rule (doyle, same night):** batch register edits into one push instead of landing them\n1040\t  as they occur — the cadence is a real gate on whoever is queued behind the runner.\n1041\t- **Ripe when:** next CI-touching wave, after the intent question is answered on the REQ record.\n1042\t- **Size:** small (one conditional, if the answer is \"extend\").\n1043\t- **Composed:** LOCKSMITH (#132) — doyle reads the consuming gates during the batch's CI-touching\n1044\t  wave (the intent question), BEFORE any classifier remedy. 2026-08-03.\n1045\t\n1046\t### IR-20 — resident_service_e2e's `spt daemon stop --force` does not stop the daemon; teardown is complete only because the kills are\n1047\t- **Status:** open · **Origin:** hertz 2026-08-03, measured on the IR-18 lane's own clean run\n1048\t  (hfenduleam, log kept); routed text, doyle-landed.\n1049\t- **MEASURED:** teardown runs `spt(&[\"daemon\",\"stop\",\"--force\"])` then reaps. At reaper fire, every\n1050\t  target was still ALIVE and every verdict was `Killed`, not `gone` — verdicts=[boot Killed,\n1051\t  rel Killed, brain Killed]; the brain's kill line names it `(child process of PID 46896)` — the\n1052\t  daemon — so the daemon was still resident too and was taken down by the `Child` handle, not the\n1053\t  stop. A stop that worked would have left the reaper `gone`. This rules OUT the innocent reading\n1054\t  (stop doesn't manage services): the stop did not reach the DAEMON either.\n1055\t- **NOT ESTABLISHED — two rungs, neither discriminated:** (1) the rig seeds a `doyle` perch with\n1056\t  `std::process::id()`, satisfying `ceremony_agent_ground`'s pid-ancestry rung for every child of\n1057\t  the harness; (2) the rig never scrubs `OWL_SESSION_ID`/`SPT_AGENT_ID`/`SPT_ENDPOINT_ID` from its\n1058\t  teardown commands, and the measuring run launched from a live agent session, so the env rung was\n1059\t  live too. `--force` overrides neither. The stop's output is discarded at the call site\n1060\t  (`let _ = spt(...)`) — no diagnostic names a denial, and no claim is made that one fired.\n1061\t  Settling it is one run with the stop's stderr captured — on the CI runner AS WELL AS the dev box,\n1062\t  since the rungs fire on different machines.\n1063\t- **Why it matters beyond this rig:** REQ-TEST-RIG-DAEMON-TEARDOWN-PROVEN's own failure shape\n1064\t  inside a rig that passes — teardown completeness rested entirely on breadcrumb kills that were,\n1065\t  until IR-18, bare `taskkill /F /T` on unauthenticated pids; the most trustworthy-LOOKING\n1066\t  component (an explicit `--force` stop) was doing nothing while the least trustworthy one did all\n1067\t  the work. Exactly why the population gate exists rather than per-pid checks alone.\n1068\t- **Remedy caution (the sentence that must not drop):** the prescribed fix (seed pid 0, scrub the\n1069\t  three markers — REQ-TEST-RIG-DAEMON-TEARDOWN-PROVEN's own gate) is NOT free here: this rig's\n1070\t  `doyle` perch pid is load-bearing for the shell bind-by-token legs, so the two remedies are not\n1071\t  interchangeable — a lane taking this must check which legs depend on the pid before changing it,\n1072\t  or it fixes the stop and breaks the REQ-INSTALL-11 legs the rig exists for. Kin:\n1073\t  REQ-BROKER-STOP-ENDPOINT-DENY (the refusal being worked around).\n1074\t- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n1075\t  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n1076\t- **Ripe when:** a hertz test-hardening wave, or alongside the (b) helper lane's touch of this rig.\n1077\t- **Size:** small (stderr-captured discrimination run × two machines, then the scoped remedy).\n1078\t\n1079\t### IR-54 — golden-head-intake runbook: three properties this cut proved should be construction, not discipline\n1080\t- **Status:** BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`).\n1081\t  · **Origin:** PORTER (#205) v0.59.0 cut, 2026-08-21 — doyle (gater) + deployah (driver),\n1082\t  both mechanisms measured at the cut, neither cost this run anything because the driver caught\n1083\t  them by hand. Filed at the release-close register sweep.\n1084\t- **What/why (three runbook amendments, one lane):**\n1085\t  1. **Release-shaping at ASSEMBLY intake, not post-golden.** The head arrived code-complete\n1086\t     but not release-shaped (no version bump, stale CHANGELOG top section) — 5 of the last 6\n1087\t     cuts. v0.59.0 fixed it by authoring version material BEFORE the golden run, which is what\n1088\t     produced the four-name shape (ruled sha == main tip == golden ref == tag == `c62904e7`,\n1089\t     first time in six cuts; the previous five each argued a post-golden delta inert). Amend\n1090\t     `docs/golden-head-intake` so the gater's assembly checklist asks the release-shaping\n1091\t     question at intake and the driver never authors on top.\n1092\t  2. **Never-executed-cells list is a hand-off artifact.** The runbook makes it a\n1093\t     gater-compiles / driver-re-checks item; PORTER's handoff omitted it and the driver had to\n1094\t     ask. Name it in the assembly checklist beside the greenlit-form delta: which new cells'\n1095\t     first CI execution is this golden, and where each HAS executed (lane gate / assembled\n1096\t     head) — it converts a golden red from an RCA into a lookup.\n1097\t  3. **Lockfile-refresh rule states the PROPERTY, not the command.** Step 1 prescribes\n1098\t     `cargo metadata --offline`; the driver used `cargo update --workspace --offline` and\n1099\t     proved the actual rule by diff (workspace members only, third-party pins untouched —\n1100\t     14 first-party line pairs, 90 third-party unchanged). The property is the rule and the\n1101\t     diff is its evidence (the standing by-diff rule exists because counting misread v0.39.4\n1102\t     and v0.41.0 in opposite directions — and the `windows-sys` 0.59.0 collision was LIVE at\n1103\t     this cut, the exact condition where counting fabricates a 15th \"first-party\" bump);\n1104\t     demote the command to an example vehicle.\n1105\t- **Built evidence:** `docs/RELEASE-RUNBOOK.md` now asks the release-shaping question at assembly\n1106\t  intake, makes the never-executed-cells list part of the hand-off itself, and states lock refresh\n1107\t  as a diff-proven property with commands demoted to example vehicles. PR #176 passed\n1108\t  `traceable-reqs check`; the v0.65.0 cut had already exercised the release-shaped-head rule.\n1109\t- **Size:** small (one runbook doc lane; no code).\n1110\t\n1111\t## IN-FLIGHT ON THE BOARD (not re-homed — live WIP lanes)\n1112\t\n1113\t- releases#93 (servicehost swap test pid-inequality), releases#47 (thin-lane unit(Windows)\n1114\t  isolation class), releases#32 (worker_lifecycle_e2e Phase A intermittent) — infra-shaped but WIP;\n1115\t  a live lane is never re-homed mid-flight. When each closes, any residue lands here as a new entry.\n1116\t\n1117\t## BUILT / RETIRED\n1118\t\n1119\t### IR-15 — provably_gone is pid-only on Windows: teardown tests can fabricate reds\n1120\t- **Status:** BUILT 2026-08-03 · **Origin:** golden 30776330383 red on the #125 fix lane (2026-08-02)\n1121\t- **Lane:** hertz `golden/ir15` @a5042ec — REQ-TEST-LIVENESS-ORACLE-AUTHENTICATED (impl+unit): one\n1122\t  shared authenticated death-oracle test helper backed by `spt_procident::process_identity`\n1123\t  (identity pinned at find time, re-verified at assert), both pid-only polling sites repinned\n1124\t  (daemon.rs teardown test; endpoint_lifecycle.rs relay_pid). Ruled polarity held: Absent⇒gone,\n1125\t  Present(same start)⇒not gone, Present(different)⇒gone, Unproven⇒NOT gone, missing-stamp\n1126\t  degrades to pid-only loudly — every unknown errs toward the recoverable red, zero new\n1127\t  false-green paths. Linux caveat documented in the helper (10ms jiffies: Present(different) is\n1128\t  narrowing, not decisive; same-tick reuse errs red, safe).\n1129\t- **Golden:** run 30782259675 red on `resident_service_e2e` bring-up — delta exonerated (unrelated\n1130\t  family, now [[IR-17]]; same job minted [[IR-8]]'s defining specimen). Same-sha rerun 30784469908\n1131\t  GREEN; main ff'd to a5042ec.\n1132\t- **A/B discriminator (hertz):** 80/80 green both arms, quiet + churn phases; churn arm\n1133\t  positive-controlled (pid-allocator wrap observed <400ms, so reuse pressure was REAL in the churn\n1134\t  arm); rule-of-three bounds the original flake at ~7.5%/run/sha. Specimen 30776330383 remains\n1135\t  not-reproduced, cause unidentified — the repin removes the false-red MECHANISM; it does not\n1136\t  adjudicate the specimen. [[IR-16]]'s kill-side arm (TerminateJobObject return discarded) stays\n1137\t  a live discriminating instrument for any recurrence — and since 2026-08-03 it is no longer the\n1138\t  only one: [[IR-18]] (the test's OWN bare breadcrumb tree-kill) is the second kill-side candidate,\n1139\t  test-side rather than product-side. A recurrence must discriminate between them, not assume\n1140\t  either: IR-16's arm is a job whose termination silently half-fails (survivor still holds the\n1141\t  captured image); IR-18's is a victim killed by a bare pid it no longer owns —\n1142\t  `broker_survived=false` with the boot service still ALIVE and its message spooled. (An earlier\n1143\t  spelling of IR-18's signature here said \"empty stderr\"; retracted — empty stderr is present on\n1144\t  healthy runs and discriminates nothing.)\n1145\t\n1146\t### IR-21 — CLASS: a helper binary's build is never requested, only its LOCATION is, so any narrow invocation manufactures a red that belongs to the rig\n1147\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** todlando 2026-08-03. Filed as one instance, rewritten as a CLASS the\n1148\t  same day when a second member appeared, rewritten AGAIN when the mechanism was measured — the\n1149\t  first two versions described symptoms and got the remedy wrong. **Corrected a fourth time the same\n1150\t  day**: remedy (1) claimed the 11 same-package sites were missing a build edge, and todlando\n1151\t  falsified that by measurement while executing it (replicated independently by doyle). The error was\n1152\t  doyle's to carry — it was ruled on, not just written. The general rule that refutes it was already\n1153\t  in this entry's own CI-member section; diagnosing a class does not inoculate you against drawing\n1154\t  its opposite consequence one section later.\n1155\t- **Numbers below re-derived on `main` @`3efd7e6` over `git ls-files` (tracked files only). Each\n1156\t  carries its command; re-run rather than cite.**\n1157\t- ⚠ **Scan-root hazard, measured 2026-08-03 and worse than first reported:** a naive recursive\n1158\t  `grep -r` from the project root inflates by **~35×**, not the ~5× an earlier draft of this entry\n1159\t  claimed — 426 tracked `.rs` against 14,865 on disk with `target/` excluded, because `.worktrees/`\n1160\t  holds full copies of the tree. **And the unscoped grep does not COMPLETE** (still running at a\n1161\t  120s timeout while `git ls-files` returns instantly), so the failure mode is not only a wrong\n1162\t  number but a command that reads as hung on a tree where dozens of worktrees are normal. Use\n1163\t  `git grep` or `git ls-files | xargs grep`; both are scoped to tracked files by construction.\n1164\t\n1165\t#### THE MECHANISM (measured, both ends)\n1166\t\n1167\t**Build end — `cargo test` with a narrow target selector compiles a `[[bin]]` AS A TEST HARNESS and\n1168\tnever emits the plain executable.** Measured: `cargo test -p spt --bins` on a clean pool produced\n1169\tfive executables, every one hash-suffixed under `target/<profile>/deps/`, and ZERO plain exes in\n1170\t`target/<profile>/`. The bin was built. The file the test looks for was not written.\n1171\t\n1172\t**Consumer end — the resolver borrows a guaranteed binary's path to locate an unguaranteed one.**\n1173\tAll 29 copies of `sibling_bin` in `crates/spt/tests/` reduce to two textual variants (22 + 7) of one\n1174\tbody:\n1175\t\n1176\t```rust\n1177\tfn sibling_bin(name: &str) -> PathBuf {\n1178\t    PathBuf::from(env!(\"CARGO_BIN_EXE_spt\"))\n1179\t        .with_file_name(format!(\"{name}{}\", std::env::consts::EXE_SUFFIX))\n1180\t}\n1181\t```\n1182\t\n1183\t`CARGO_BIN_EXE_spt` is used **only as a directory anchor**. Cargo therefore sees a dependency on\n1184\t`spt` and on nothing else; the `{name}` half is a string join it cannot observe. The dependency edge\n1185\tdoes not exist at any level a build system could act on — which is why \"use the wider command\" is\n1186\tnot the fix and why the failure is invisible on a warm pool where some earlier run happened to leave\n1187\tthe file behind.\n1188\t\n1189\tThe unit-test resolver at `crates/spt/src/cli.rs:25601` reaches the SAME directory from a different\n1190\tanchor (`current_exe()` → `deps/` → parent) for the same reason: its own doc comment records that\n1191\tunit tests get no `CARGO_BIN_EXE_*` at all.\n1192\t\n1193\t**That mechanism explains both original members at once, including the polarity inversion that made\n1194\tthem look like different bugs:** whether `cargo test -p spt` or `cargo test -p spt --bins` happens\n1195\tto leave a plain exe behind is incidental to a dependency neither command was told about.\n1196\t\n1197\t#### SCOPE — WHERE IT BITES, AND WHERE IT DOES NOT\n1198\t\n1199\t**It bites NARROW invocations — `-p <pkg>`, `--bins`, `--lib` — i.e. gate rigs and local runs.**\n1200\tBoth members were hit on the LOCKSMITH t1 lane against fresh throwaway pools; each was discharged\n1201\tin-lane as a rig artifact. That is the whole field population to date.\n1202\t\n1203\t**GOLDEN IS ACQUITTED, and the acquittal is measured rather than assumed.** `cargo test --workspace\n1204\t--no-run` emits all 13 plain binaries — mock-session, mock-shell, capture-player,\n1205\tconsole-mode-probe, service_fixture and the rest — so a workspace build produces the cross-package\n1206\thelpers by construction. Confirmed under nextest, the tool CI actually runs, with a real compile.\n1207\t\n1208\t⚠ **The measurement that establishes this is not the obvious one.** Deleting the plain exe and\n1209\twatching it reappear is NOT evidence of a rebuild: cargo's uplift restores a hardlink from an intact\n1210\t`deps/` artifact, with link count 3 and an UNCHANGED mtime, which looks exactly like a build and\n1211\tsays nothing about a pool that never had the file — and a pool that never had it is the only kind a\n1212\trig runs on. The sound probe removes the plain exe AND both `deps/` artifacts, confirms all three\n1213\tabsent, then watches the target actually recompile (mock-adapter, 5.77s, fresh mtime). The first two\n1214\tattempts were setup, not measurement.\n1215\t\n1216\t⚠ **The suspicion this acquits is structurally well-founded, so record the answer, not just the\n1217\tverdict.** `twohost-a`/`twohost-b` are `needs: test`, so the only mock-adapter prebuild runs AFTER\n1218\tthe phases that use it; `target/` is gitignored, so checkout never cleans it on a persistent\n1219\tself-hosted workdir. Every precondition for artifact leakage is present — the build simply does not\n1220\tneed it. The next person who reads that job graph will form the same hypothesis; this is the answer\n1221\twaiting for them.\n1222\t\n1223\t#### THE ONE CI-SIDE MEMBER THAT IS REAL\n1224\t\n1225\t`crates/spt/src/cli.rs::adapter_translate_proof_gates_on_commit` is a **unit** test (`kind(bin)`),\n1226\tand `CARGO_BIN_EXE_*` is set only for integration tests and benches of the declaring package. A unit\n1227\tconsumer therefore CANNOT express the dependency through the env var at all — it has no choice but\n1228\tto resolve by path. That is why `.github/workflows/ci.yml:105-106` carries a hand-written\n1229\t`cargo build -p spt --bin translate_proof_fixture` before the unit lane, with a comment\n1230\t(`ci.yml:102-104`) stating this exact mechanism.\n1231\t\n1232\t**Deleting that step would red the unit lane on a clean pool, and it would read as a code red.**\n1233\tSomebody already hit this class, fixed their own leg correctly, and never turned it into a rule —\n1234\tthe comment at `ci.yml:102` is IR-21 written a milestone early, in the one place only its author\n1235\twould find it.\n1236\t\n1237\t#### POPULATION\n1238\t\n1239\t**13 bin targets in the workspace** (`cargo metadata --no-deps`, not a grep — an auto-target under\n1240\t`src/bin/` and `xtask` are both invisible to a `[[bin]]` grep). Two are not helpers (`spt`, `xtask`);\n1241\tthe other **11 are test helpers**, across three packages:\n1242\t\n1243\t| package | helpers |\n1244\t|---|---|\n1245\t| `adapters/mock` | mock-session, mock-shell, capture-player, console-mode-probe |\n1246\t| `crates/spt-daemon` | dispatch_fixture, service_fixture, summarizer_fixture, xlate_choreo_fixture (⚠ this row was mis-\"corrected\" 2026-08-22 to claim `xlate_choreo_fixture` no longer existed — IT DOES, as an AUTODISCOVERED `src/bin/` target with no `[[bin]]` stanza; the original row was right and merely predated `summarizer_fixture`. See IR-58) |\n1247\t| `crates/spt` | translate_proof_fixture, post_step_fixture, gh_fixture, git_fixture |\n1248\t\n1249\t**44 literal `sibling_bin(\"…\")` call sites**, all in `crates/spt/tests/`, served by **29 copied\n1250\tresolvers**. Split by whether the BUILD IS ALREADY GUARANTEED — which is not the same question as\n1251\twhether the env var is available, and an earlier version of this entry conflated the two:\n1252\t\n1253\t| class | sites | detail | build guaranteed? |\n1254\t|---|---|---|---|\n1255\t| **cross-package** | **33** | mock-session 26, mock-shell 6, service_fixture 1 | **NO — the hazard members** |\n1256\t| **same-package** | **11** | translate_proof_fixture 7, git_fixture 2, post_step_fixture 1, gh_fixture 1 | **YES — already, by construction** |\n1257\t\n1258\t⚠ **MEASURED TWICE, and it falsifies what this entry said on 2026-08-03 before this revision:** cargo\n1259\tbuilds **every bin target of a package whenever it builds ANY integration test of that package** —\n1260\tthat same act is what sets `CARGO_BIN_EXE_*` in the first place. So the 11 same-package sites were\n1261\tnever unexpressed in a way that could bite, and the hazard population is **33 cross-package sites\n1262\tplus the one unit-test member = 34**, not 44.\n1263\t\n1264\t- **Probe 1 (todlando, root pool):** deleted all four `translate_proof_fixture` artifacts (both\n1265\t  hash-suffixed harness exes, the `deps/` plain exe, the uplifted plain exe), confirmed absent, then\n1266\t  built ONE UNRELATED and UNMODIFIED integration test of the same package —\n1267\t  `cargo test -p spt --test attach_wedge_e2e --no-run`, exit 0, 14.45s. Both plain exes returned with\n1268\t  fresh mtimes; the hash-suffixed harness exes stayed absent, which is what distinguishes a bin\n1269\t  DEPENDENCY build from a `--bins` harness build.\n1270\t- **Probe 2 (doyle, `.worktrees/gate-ec5f38a` pool, independent replication with a different fixture\n1271\t  and a different probe test):** deleted `gh_fixture`'s plain exe, its `deps/` plain exe AND its\n1272\t  hash-suffixed harness exe, confirmed all three absent, then built `--test json_emit --no-run`\n1273\t  (exit 0) — a test that never names `gh_fixture`. The plain pair returned at a FRESH mtime (09:13\n1274\t  against the 09:00 it carried before), so this is a real build and not the hardlink uplift this\n1275\t  entry warns about elsewhere; the harness exe stayed absent.\n1276\t- **Neither probe needs a baseline arm:** the probe test is unmodified and references nothing under\n1277\t  edit, so what it measures is cargo's behaviour, not anyone's change.\n1278\t- **Corroborated by this entry's own field data:** neither original member was a same-package\n1279\t  integration site — member 1 is a UNIT test, member 2 is CROSS-package. The class never had a\n1280\t  same-package integration member, and the CI-member section below already stated the governing rule\n1281\t  (`CARGO_BIN_EXE_*` is set only for integration tests and benches of the declaring package) one\n1282\t  section before the remedy drew the opposite consequence from it.\n1283\t\n1284\tCommand: `git ls-files '*.rs' | xargs grep -hon 'sibling_bin(\"[a-z_-]*\"' | sed 's/.*sibling_bin(\"//;\n1285\ts/\"//' | sort | uniq -c`.\n1286\t\n1287\t⚠ An earlier report gave 48 sites and a 6/11/37 split. Take the table above: it counts only literal\n1288\tcall sites in tracked files and it ships its command. The 11 is the same 11 in both counts.\n1289\t\n1290\t**The LOCATION half of this class is already closed** by `crates/spt-term/tests/support/fixture_bin.rs`\n1291\t— a shared resolver rather than 29 copies. It does not close the BUILD half, and should not be\n1292\tmistaken for having done so.\n1293\t\n1294\t#### REMEDY SHAPE (not ruled)\n1295\t\n1296\tThe distinction that matters is location vs. build:\n1297\t\n1298\t1. **The 11 same-package sites are NOT hazard members and need no build fix.** Their build edge\n1299\t   already exists (see the two probes in POPULATION above); `env!(\"CARGO_BIN_EXE_<name>\")` for the\n1300\t   fixture itself would add nothing to it. Converting them is a **CLARITY** change, worth doing on\n1301\t   its own smaller merits — the path becomes the one cargo actually emitted rather than a string-join\n1302\t   of a directory anchor and `EXE_SUFFIX`, five copies of `sibling_bin` stop existing (29 → 24), and\n1303\t   it completes a migration already paid for: `crates/spt/tests/fixtures/translate_proof_fixture.rs:7-12`\n1304\t   records that the fixture was re-homed into `spt` precisely to obtain\n1305\t   `CARGO_BIN_EXE_translate_proof_fixture`, and then all 7 call sites resolved by path anyway. **It is\n1306\t   not a build fix and must not be filed as one.**\n1307\t2. **The 33 cross-package sites cannot**, by cargo's design. Their options are an asserted build in\n1308\t   the test's own setup, a `dev-dependencies` artifact dependency, or an explicit documented\n1309\t   prebuild — the ci.yml:106 shape, made a rule instead of a local fix.\n1310\t3. **Standardising on one wider invocation is NOT a remedy.** It changes which pools happen to work;\n1311\t   it does not create the dependency edge, and the two original members had opposite polarity under\n1312\t   exactly that theory.\n1313\t4. Collapsing the 29 resolver copies is worth doing on the `fixture_bin.rs` model, but on its own it\n1314\t   makes the class HARDER to see — one shared resolver still anchored on `CARGO_BIN_EXE_spt` hides\n1315\t   the 33 genuinely unexpressed dependencies among its 44 call sites behind one function.\n1316\t\n1317\t#### SUPERSEDED FRAMING, KEPT SO IT IS NOT RE-DERIVED\n1318\t- **Status of the original filing:** open · **Origin:** todlando 2026-08-03, both members hit on the\n1319\t  LOCKSMITH t1 lane against fresh throwaway pools; each discharged in-lane as a rig artifact, filed\n1320\t  here so the next clean rig does not re-diagnose them as code reds.\n1321\t- The first two versions of this entry framed the class as \"the rig's command does not build what\n1322\t  the test needs\" and proposed standardising on a wider invocation. **Both are superseded by the\n1323\t  measured mechanism above** — the dependency is not under-expressed, it is INEXPRESSIBLE in the\n1324\t  form these call sites use, so no choice of invocation creates it. Kept only as the two FIELD\n1325\t  MEASUREMENTS that produced the class, which remain true:\n1326\t- **MEMBER 1 — MEASURED:** `cli::tests::adapter_translate_proof_gates_on_commit` failed on the\n1327\t  first `cargo test -p spt --bins` run. Its fixture binary `translate_proof_fixture` (a\n1328\t  `tests/`-homed `[[bin]]`) was ABSENT from the pool — `ls` on the path returned No such file.\n1329\t  Building it explicitly and re-running the IDENTICAL command PASSED, after which the full `--bins`\n1330\t  suite passed 584/585 with only the releases#117 probe red (that one RED by design). So the\n1331\t  discriminator is the fixture's presence, not the tree: same command, same sha, red then green\n1332\t  across one `cargo build` of the fixture.\n1333\t- **MEMBER 2 — MEASURED:** `cargo test -p spt` does not build `mock-adapter --bin mock-session`, so\n1334\t  `attach_wedge_e2e` panics `\"the dummy-harness program must be built\"`. Note the polarity is\n1335\t  INVERTED against member 1 — there the narrower `--bins` was the defective invocation and\n1336\t  `cargo test -p spt` the correct one; here `cargo test -p spt` is itself insufficient. So the\n1337\t  class is NOT \"use the wider command\"; it is that the dependency is not expressed to the build at\n1338\t  all, and which invocation happens to work is incidental.\n1339\t- **What/why (still true):** on a WARM pool the helper is already there from some earlier run and\n1340\t  the test passes, so the defect is invisible exactly where most people work and fires only on a\n1341\t  clean pool — i.e. on a GATE RIG, which is the one place a false red costs the most.\n1342\t- **The sweep this entry once called its first step HAS BEEN RUN** (todlando 2026-08-03) and its\n1343\t  result is the POPULATION section above. It is no longer outstanding.\n1344\t\n1345\t- **Why it is register debt and not a lane bug:** nothing in the product is wrong. The gap is\n1346\t  between what a test needs built and what the rig's command builds, and the fix belongs to the\n1347\t  tests' declarations, not to whoever is running a gate that day. Sibling rule:\n1348\t  [[gate-clean-target-not-incremental]].\n1349\t- **Built evidence:** golden now names every cross-package fixture prebuild\n1350\t  (`mock-session`, `mock-shell`, `capture-player`, `console-mode-probe`,\n1351\t  `service_fixture`) explicitly; `xtask binedge-check` reports zero missing\n1352\t  edges. All 29 local `sibling_bin` resolvers collapsed into\n1353\t  `tests/common/mod.rs`; the shared precondition names the missing fixture and\n1354\t  its package-correct build command before any product timeout.\n1355\t- **Ripe when:** the next gate-rig or CI-touching wave. Cheap, and it pays for itself the first time\n1356\t  it stops someone chasing a phantom red on a clean pool.\n1357\t- **Size:** remedy (1) is small AND optional — it buys clarity and subtraction, never a build edge;\n1358\t  medium for (2), which is a design call before it is an edit and is the only remedy that closes the\n1359\t  class.\n1360\t\n1361\t### IR-22 — An inherited identity env var fails a test, and the diagnostic names them ONE AT A TIME so a correct fix reads as no fix\n1362\t- **Status:** open · **Origin:** todlando 2026-08-03, chasing what looked like an `attach_wedge_e2e`\n1363\t  code red on the LOCKSMITH t1 lane; root-caused to the runner's own process environment.\n1364\t- **MEASURED:** `attach_wedge_e2e` failed for an INHERITED PROCESS-GLOBAL and nothing in the tree:\n1365\t  the daemon-stop refusal fired on the running session's own identity env. It named\n1366\t  `$OWL_SESSION_ID`; clearing that made it name `$SPT_ENDPOINT_ID`. With `OWL_SESSION_ID`,\n1367\t  `SPT_ENDPOINT_ID`, `SPT_AGENT_ID` and `SPT_SESSION_ID` all cleared: exit 0, 1 passed.\n1368\t- **The finding is the DIAGNOSTIC SHAPE, not the env hygiene.** Naming one variable at a time means\n1369\t  a correct partial fix produces an identical-looking failure, so the natural reading of \"I cleared\n1370\t  it and it still fails\" is that the clearing did not work — when in fact each step was right and\n1371\t  the message had simply moved on to the next name. A refusal that can only ever name one member of\n1372\t  a set it is checking teaches the person debugging it the wrong lesson. Compare the same class in\n1373\t  [[IR-15]]/[[IR-18]] terms: the instrument is competent and the report is not.\n1374\t- **Why it matters beyond one test:** any agent running suites from a live spt session carries these\n1375\t  vars, so this fires for every builder on a perched session and for nobody running from a bare\n1376\t  shell — which is precisely the split between how builders work and how CI runs.\n1377\t- **Candidate remedies (not ruled):** have the refusal name EVERY identity var it found set, in one\n1378\t  line, rather than the first; and/or have the affected tests clear the identity set in their own\n1379\t  setup so a perched session is not a special environment. The first is the one that pays off\n1380\t  outside this test.\n1381\t- **Ripe when:** next CI/test-hygiene wave. **Size:** small.\n1382\t\n1383\t### IR-23 — `endpoint_teardown_authority_e2e`'s two tests collide with EACH OTHER through the machine-global spt home\n1384\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** todlando 2026-08-03, LOCKSMITH t1 lane.\n1385\t- **MEASURED:** both tests copy a psyche binary fixture into `perch::spt_home()/srcs/dummyharness/`\n1386\t  (`crates/spt/tests/endpoint_teardown_authority_e2e.rs:399`), which is process-global, so run in\n1387\t  parallel inside one binary each holds the file the other wants: `os error 32`, \"used by another\n1388\t  process\". **Signature: WHICH of the two fails alternates between runs.** Under\n1389\t  `--test-threads=1`: 2 passed, exit 0 — and the wall clock drops from 182s to 14s.\n1390\t- **What/why:** two defects in one, and they should not be conflated. (1) The tests are not\n1391\t  isolated from each other. (2) The staging path is the MACHINE-GLOBAL spt home rather than the\n1392\t  test's own temp home — on a box that is also a CI runner, so the blast radius is not confined to\n1393\t  the suite. (2) is the one worth fixing; (1) is a symptom of it.\n1394\t- **Note on why this is not already caught:** the standing rule is that integration tests run\n1395\t  through nextest, which gives each test its own process and hides the collision entirely. So this\n1396\t  is latent on the sanctioned path and only bites the bare `cargo test` path — the rule is working\n1397\t  and masking a real defect at the same time, which is why the entry exists rather than a shrug.\n1398\t- **Candidate remedy (not ruled):** stage the fixture into the test's own temp home. Sweep for\n1399\t  siblings first — any other test writing under `perch::spt_home()` rather than a temp home shares\n1400\t  the shape, and nobody has counted them.\n1401\t- **Built evidence:** adapter source, manifest registration, and psyche fixture\n1402\t  staging now use the rig TempDir. The two process-global resolver users are\n1403\t  explicitly serialized, and the bare `cargo test` path passes both cells with\n1404\t  `--test-threads=2` in 13.82s after the declared fixture prebuild.\n1405\t- **Ripe when:** next test-hygiene wave; the 182s -> 14s figure makes it pay for itself on the\n1406\t  bare path. **Size:** small per test, unknown until the sweep.\n1407\t\n1408\t### IR-24 — `reap::terminate_job` discards `TerminateJobObject`'s return, alone among its own module's siblings\n1409\t- **Status:** BUILT — landed `3d12cf3` on main (2026-08-03), fulfilment verified against this\n1410\t  entry's own wanted list by doyle 2026-08-04, not merely mapped to the commit: the return is\n1411\t  audited and the loss NAMED (`REAP_JOB_TERMINATE_FAIL: brain subtree NOT reaped (<os error>); …\n1412\t  the daemon holds no other handle to reach them` — which also ANSWERS the cost-of-loss question\n1413\t  this entry said nobody had written down); the \"first thing to check\" was checked and the ruling\n1414\t  came out OPPOSITE to IR-16's site in one respect, documented as measured asymmetry in the doc\n1415\t  comment: `TerminateJobObject` has NO ordinary failing path (zero only for a broken handle) so a\n1416\t  zero is a real loss, while `TerminateProcess` fails `ERROR_ACCESS_DENIED` on the ordinary\n1417\t  already-exited path and is deliberately NOT checked — the premise is unit-PINNED both directions\n1418\t  (`terminate_job_return_discriminates_broken_handle_from_ordinary_states`, cfg(windows), with a\n1419\t  memberless-job false-positive arm). No `job != 0` re-check (second-weaker-rule prohibition\n1420\t  honored, same as IR-16). Golden evidence: rides `4b37512` (run 30873007187 attempt 5, 9/9\n1421\t  green; the premise unit observed PASS in-pool on the Windows leg, Linux leg green — the\n1422\t  cross-platform quiet-`ESRCH` concern stays with `ec5f38a`'s coverage as before). Path\n1423\t  correction to this entry's MEASURED line: the site is `crates/spt-daemon/src/reap.rs` (brain\n1424\t  subtree reaper), not `crates/spt/src/reap.rs` as first filed ·\n1425\t  **Origin:** todlando 2026-08-03, swept while building [[IR-16]]; deliberately\n1426\t  NOT folded into that lane (doyle ruling, same day) and filed instead.\n1427\t- **MEASURED:** `crates/spt/src/reap.rs:207-211` calls `TerminateJobObject` and discards the result,\n1428\t  the identical shape [[IR-16]] closed at `spt-daemon`'s `kill_tree`. Its own module's\n1429\t  create/assign siblings at `:178` and `:202` ARE instrumented, so this call is the odd one out\n1430\t  where it lives — the module already decided that these returns are worth reading.\n1431\t- **Why it was NOT folded into IR-16:** different subject. IR-16's site is a SUPERVISED SERVICE's\n1432\t  teardown, where the loss is \"a supervised service's descendants survive\" and the promise it\n1433\t  breaks is `REQ-RESIDENT-SERVICE`'s tree claim. This site is the BRAIN SUBTREE's kill-on-close\n1434\t  job, which has its own lifetime, its own caller and its own answer to \"what does a failed\n1435\t  termination cost here\" — and that answer has not been written down by anyone. Folding it in would\n1436\t  have meant settling that question in passing, inside a commit about the supervisor, which is how a\n1437\t  second ruling gets smuggled into a lane scoped to one.\n1438\t- **What it needs that IR-16's fix does not supply:** IR-16 ruled a LOUD REFUSAL (option B) on the\n1439\t  ground that the alternative — a process-table tree-walk fallback — is measured blind in exactly\n1440\t  that failure state ([[IR-18]]: descent breaks at the dead middle hop) and would trade a silent\n1441\t  loss for a false clean. Whether the same reasoning holds here depends on whether this site kills\n1442\t  its direct process in the same breath, which is what makes the middle hop dead by construction\n1443\t  there. **That is the first thing to check, and it is not assumed.**\n1444\t- **Ripe when:** any wave touching reap/teardown; it inherits IR-16's vocabulary and its\n1445\t  discrimination note, so the second one is cheaper than the first. **Size:** small, once the\n1446\t  cost-of-loss question is answered for this subject.\n1447\t\n1448\t### IR-25 — `spt-daemon --lib` reds 2-in-3 under concurrent load with bare `cargo test`, and holds green under nextest\n1449\t- **Status:** open · **Origin:** doyle 2026-08-03, found while gating LOCKSMITH tranche 1 in an\n1450\t  isolated worktree; chased to a mechanism and scoped OUT of the release path before the head was\n1451\t  assembled.\n1452\t- **MEASURED, four arms, same box, same hour, matched load** (a second `cargo test -p spt-store\n1453\t  --lib` loop running throughout; `spt-store` itself stayed green in every round, so the box was not\n1454\t  generically failing):\n1455\t\n1456\t  | tree | instrument | result |\n1457\t  |---|---|---|\n1458\t  | lane `ec5f38a` | `cargo test --lib`, at rest | 821/821 ×4 |\n1459\t  | lane `ec5f38a` | `cargo test --lib`, under load | **2 of 3 RED** (142s, 117s) |\n1460\t  | lane `ec5f38a` minus its 5 new tests | `cargo test --lib`, under load | 3 of 3 green (117s, 84s, 105s) |\n1461\t  | main `932e14b` | `cargo test --lib`, under load | 3 of 3 green (97s, 119s, 104s) |\n1462\t  | lane `ec5f38a` | **`cargo nextest run`, under load** | **3 of 3 green, 821/821** (88s, 85s, 72s) |\n1463\t\n1464\t- **Three DIFFERENT victims across two loaded runs**, all process/timing-shaped, all PRESENT AT MAIN\n1465\t  and green there: `servicehost::…a_service_that_ignores_the_stop_marker_is_force_killed_and_confirmed_dead`\n1466\t  (panics `ForceKilled must MEAN the owned child is gone` right after `SERVICE_KILL_UNCONFIRMED`),\n1467\t  `applyhost::…broker_reports_its_compiled_image_version_over_ipc`, and\n1468\t  `daemon::…a_tree_teardown_reaches_a_grandchild_the_service_spawned`.\n1469\t- **MECHANISM: in-process thread interference, not product code.** Bare `cargo test` runs a crate's\n1470\t  tests as threads in ONE process. The lane's five new tests are process-spawning kill-tree tests;\n1471\t  under load they starve confirm windows of NEIGHBOURING tests that were always marginal. Removing\n1472\t  exactly those five flips 2-of-3-red to 0-of-3-green at the same sha, in the same binary, at the\n1473\t  same durations — one of the green runs sits at 117s, precisely a duration that had produced two\n1474\t  failures with them present.\n1475\t- **IT DOES NOT REACH GOLDEN.** nextest gives every test its own process, and golden runs nextest.\n1476\t  The population is GATE RIGS AND LOCAL RUNS — the same population as [[IR-21]], reached by a\n1477\t  different mechanism, which is why these are two entries and not one.\n1478\t- ⚠ **The instrument switch is the whole finding.** Measured with bare `cargo test`, this reads as a\n1479\t  lane blocker; measured with the tool CI actually runs, it is a rig-scoped nuisance. Anyone\n1480\t  re-opening this must state WHICH instrument produced their observation before quoting a verdict.\n1481\t  The same tool gap acquitted [[IR-21]]'s golden question the same day.\n1482\t- ⚠ **The pre-existing fragility is NOT thereby closed.** Those three tests were marginal before this\n1483\t  lane and the lane only exposed them; \"make the new tests quieter\" would re-hide a real weakness.\n1484\t  Hardening them is test-side work (hertz's lane by the dispatch split), not the builder's.\n1485\t- **Two rig defects of the gater's, recorded because they nearly cost the verdict:** (1) a first\n1486\t  re-run at rest came back 4/4 green and proves NOTHING — a sequential idle probe cannot express a\n1487\t  load-sensitive failure, so that is a competence-controlled zero, not an acquittal; (2) the first\n1488\t  baseline attempt ran its two arms UNSYNCHRONISED (the load generator finished while the measured\n1489\t  arm was still on run 1), which would have compared a loaded lane against an idle main and read as\n1490\t  \"the lane broke it\". A discriminator whose arms ran under different conditions cannot discriminate.\n1491\t- **Ripe when:** alongside [[IR-21]] on the next gate-rig or CI-touching wave, or immediately if\n1492\t  anyone starts gating on bare `cargo test` on a loaded box. **Size:** small to document the rig\n1493\t  rule (gate with nextest); medium to harden the three marginal tests.\n1494\t\n1495\t### IR-26 — POOL-OWNER claims authorize takeover from a DEAD holder, so releases#103's hazard reaches through the guard\n1496\t- **Status:** open, LANE BUILT BUT UNCOMMITTED (see the warning below — this is not a figure of\n1497\t  speech) · **Origin:** hertz 2026-08-03/04, found by its own test rather than by reading, and\n1498\t  reported unfiled for composition. Composition ruling is doyle's, 2026-08-04.\n1499\t- **What/why:** a POOL-OWNER claim named a holder pid; lane liveness was read from whether that pid\n1500\t  was alive. hertz MEASURED the failure on this box: **3 of 3 claims had dead holders while one of"}]},"uuid":"c176ff87-3c88-4a9e-a118-1abd8b6a4ef8","timestamp":"2026-09-06T11:16:16.403Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"- **Rig near-miss, caught before first execution (hertz 2026-08-03) — kept as design justification,\n  not an anecdote:** the positive-control arm's first draft selected its victim machine-wide\n  (`Win32_Process Name='spt.exe'` + cmdline match `daemon run`, then force-kill). hfenduleam is the\n  Windows CI runner as well as a dev box, so that filter matches CI's own test daemons: run while a\n  leg was live, it would have force-killed a running job's daemon and reported the result as a\n  measurement — fabricating a red in someone else's job, the exact class this entry documents.\n  Corrected to a parent-scoped selector (daemon = child of the test pid; service = child of that\n  daemon); `CREATE_BREAKAWAY_FROM_JOB` does not weaken parent-id attribution, since breakaway leaves\n  the JOB, not the parent record — which is also why the orphaned svcmock stays attributable to the\n  daemon that spawned it. **The load bought the catch** (blocked on the box ⇒ re-read instead of\n  ran). Bearing on the fix: the INSTRUMENT built to study a bare-selector reaper was itself written\n  with a bare selector. The remedy therefore cannot be \"be careful\" — the authenticated path must be\n  the only one within reach in this suite.\n- **Ripe when:** RIPE NOW, and not gated on the rate run that was cancelled.\n- **Size:** small.\n\n### IR-19 — Docs-only pushes to main run full unit legs (classifier is PR-only) — intent unverified\n- **Status:** RETIRED 2026-08-18 — intentional for main pushes, not a classifier defect. · **Origin:** hertz observation 2026-08-03 (register-push\n  cadence gated his rig behind repeated hfenduleam unit legs); mechanism verified by doyle at\n  source same night.\n- **What/why:** `ci.yml`'s `changes` job classifies docs-only diffs ONLY for `pull_request` events\n  — push events hardcode `code=true` (ci.yml:45–48, an explicit branch, not a fallthrough), so\n  every docs-only push to main spins both full unit legs. Tonight: five register docs pushes each\n  queued a Windows unit leg on hfenduleam; concurrency kept one running + one pending (main is\n  never cancelled in-progress, pending runs supersede — the recorded behavior matches ci.yml:9–13).\n  FINDING SETTLED (deployah, same night, from the workflow): this is not intent — it is a scope\n  the classifier never had; the `*.md` / `traceable-reqs.toml` case arms are only ever REACHED on\n  pull_request (the early-return precedes them), and golden.yml's own hardcoded `code=true` is\n  unrelated (golden triggers only on golden/**). REMEDY STILL OPEN on a named tension: extending\n  the classifier to pushes leaves a docs-only main TIP with no run of its own — fine if\n  tested-sha==merged-sha means \"the code at this sha was tested\" (it was, at the last code sha),\n  not fine if any gate or reader takes \"main tip has a green run\" as the check. One person reads\n  the consuming gates before any remedy (doyle, at the next CI-touching wave) — three assuming is\n  how this class ships.\n- **Resolution:** the consuming contract already answers the held question:\n  `REQ-CI-DOCS-ONLY-THIN` is PR-only and explicitly says ADR-0050 supersedes\n  it for main pushes. Main-tip evidence remains full by design; no classifier\n  branch was widened.\n- **Interim rule (doyle, same night):** batch register edits into one push instead of landing them\n  as they occur — the cadence is a real gate on whoever is queued behind the runner.\n- **Ripe when:** next CI-touching wave, after the intent question is answered on the REQ record.\n- **Size:** small (one conditional, if the answer is \"extend\").\n- **Composed:** LOCKSMITH (#132) — doyle reads the consuming gates during the batch's CI-touching\n  wave (the intent question), BEFORE any classifier remedy. 2026-08-03.\n\n### IR-20 — resident_service_e2e's `spt daemon stop --force` does not stop the daemon; teardown is complete only because the kills are\n- **Status:** open · **Origin:** hertz 2026-08-03, measured on the IR-18 lane's own clean run\n  (hfenduleam, log kept); routed text, doyle-landed.\n- **MEASURED:** teardown runs `spt(&[\"daemon\",\"stop\",\"--force\"])` then reaps. At reaper fire, every\n  target was still ALIVE and every verdict was `Killed`, not `gone` — verdicts=[boot Killed,\n  rel Killed, brain Killed]; the brain's kill line names it `(child process of PID 46896)` — the\n  daemon — so the daemon was still resident too and was taken down by the `Child` handle, not the\n  stop. A stop that worked would have left the reaper `gone`. This rules OUT the innocent reading\n  (stop doesn't manage services): the stop did not reach the DAEMON either.\n- **NOT ESTABLISHED — two rungs, neither discriminated:** (1) the rig seeds a `doyle` perch with\n  `std::process::id()`, satisfying `ceremony_agent_ground`'s pid-ancestry rung for every child of\n  the harness; (2) the rig never scrubs `OWL_SESSION_ID`/`SPT_AGENT_ID`/`SPT_ENDPOINT_ID` from its\n  teardown commands, and the measuring run launched from a live agent session, so the env rung was\n  live too. `--force` overrides neither. The stop's output is discarded at the call site\n  (`let _ = spt(...)`) — no diagnostic names a denial, and no claim is made that one fired.\n  Settling it is one run with the stop's stderr captured — on the CI runner AS WELL AS the dev box,\n  since the rungs fire on different machines.\n- **Why it matters beyond this rig:** REQ-TEST-RIG-DAEMON-TEARDOWN-PROVEN's own failure shape\n  inside a rig that passes — teardown completeness rested entirely on breadcrumb kills that were,\n  until IR-18, bare `taskkill /F /T` on unauthenticated pids; the most trustworthy-LOOKING\n  component (an explicit `--force` stop) was doing nothing while the least trustworthy one did all\n  the work. Exactly why the population gate exists rather than per-pid checks alone.\n- **Remedy caution (the sentence that must not drop):** the prescribed fix (seed pid 0, scrub the\n  three markers — REQ-TEST-RIG-DAEMON-TEARDOWN-PROVEN's own gate) is NOT free here: this rig's\n  `doyle` perch pid is load-bearing for the shell bind-by-token legs, so the two remedies are not\n  interchangeable — a lane taking this must check which legs depend on the pid before changing it,\n  or it fixes the stop and breaks the REQ-INSTALL-11 legs the rig exists for. Kin:\n  REQ-BROKER-STOP-ENDPOINT-DENY (the refusal being worked around).\n- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n- **Ripe when:** a hertz test-hardening wave, or alongside the (b) helper lane's touch of this rig.\n- **Size:** small (stderr-captured discrimination run × two machines, then the scoped remedy).\n\n### IR-54 — golden-head-intake runbook: three properties this cut proved should be construction, not discipline\n- **Status:** BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`).\n  · **Origin:** PORTER (#205) v0.59.0 cut, 2026-08-21 — doyle (gater) + deployah (driver),\n  both mechanisms measured at the cut, neither cost this run anything because the driver caught\n  them by hand. Filed at the release-close register sweep.\n- **What/why (three runbook amendments, one lane):**\n  1. **Release-shaping at ASSEMBLY intake, not post-golden.** The head arrived code-complete\n     but not release-shaped (no version bump, stale CHANGELOG top section) — 5 of the last 6\n     cuts. v0.59.0 fixed it by authoring version material BEFORE the golden run, which is what\n     produced the four-name shape (ruled sha == main tip == golden ref == tag == `c62904e7`,\n     first time in six cuts; the previous five each argued a post-golden delta inert). Amend\n     `docs/golden-head-intake` so the gater's assembly checklist asks the release-shaping\n     question at intake and the driver never authors on top.\n  2. **Never-executed-cells list is a hand-off artifact.** The runbook makes it a\n     gater-compiles / driver-re-checks item; PORTER's handoff omitted it and the driver had to\n     ask. Name it in the assembly checklist beside the greenlit-form delta: which new cells'\n     first CI execution is this golden, and where each HAS executed (lane gate / assembled\n     head) — it converts a golden red from an RCA into a lookup.\n  3. **Lockfile-refresh rule states the PROPERTY, not the command.** Step 1 prescribes\n     `cargo metadata --offline`; the driver used `cargo update --workspace --offline` and\n     proved the actual rule by diff (workspace members only, third-party pins untouched —\n     14 first-party line pairs, 90 third-party unchanged). The property is the rule and the\n     diff is its evidence (the standing by-diff rule exists because counting misread v0.39.4\n     and v0.41.0 in opposite directions — and the `windows-sys` 0.59.0 collision was LIVE at\n     this cut, the exact condition where counting fabricates a 15th \"first-party\" bump);\n     demote the command to an example vehicle.\n- **Built evidence:** `docs/RELEASE-RUNBOOK.md` now asks the release-shaping question at assembly\n  intake, makes the never-executed-cells list part of the hand-off itself, and states lock refresh\n  as a diff-proven property with commands demoted to example vehicles. PR #176 passed\n  `traceable-reqs check`; the v0.65.0 cut had already exercised the release-shaped-head rule.\n- **Size:** small (one runbook doc lane; no code).\n\n## IN-FLIGHT ON THE BOARD (not re-homed — live WIP lanes)\n\n- releases#93 (servicehost swap test pid-inequality), releases#47 (thin-lane unit(Windows)\n  isolation class), releases#32 (worker_lifecycle_e2e Phase A intermittent) — infra-shaped but WIP;\n  a live lane is never re-homed mid-flight. When each closes, any residue lands here as a new entry.\n\n## BUILT / RETIRED\n\n### IR-15 — provably_gone is pid-only on Windows: teardown tests can fabricate reds\n- **Status:** BUILT 2026-08-03 · **Origin:** golden 30776330383 red on the #125 fix lane (2026-08-02)\n- **Lane:** hertz `golden/ir15` @a5042ec — REQ-TEST-LIVENESS-ORACLE-AUTHENTICATED (impl+unit): one\n  shared authenticated death-oracle test helper backed by `spt_procident::process_identity`\n  (identity pinned at find time, re-verified at assert), both pid-only polling sites repinned\n  (daemon.rs teardown test; endpoint_lifecycle.rs relay_pid). Ruled polarity held: Absent⇒gone,\n  Present(same start)⇒not gone, Present(different)⇒gone, Unproven⇒NOT gone, missing-stamp\n  degrades to pid-only loudly — every unknown errs toward the recoverable red, zero new\n  false-green paths. Linux caveat documented in the helper (10ms jiffies: Present(different) is\n  narrowing, not decisive; same-tick reuse errs red, safe).\n- **Golden:** run 30782259675 red on `resident_service_e2e` bring-up — delta exonerated (unrelated\n  family, now [[IR-17]]; same job minted [[IR-8]]'s defining specimen). Same-sha rerun 30784469908\n  GREEN; main ff'd to a5042ec.\n- **A/B discriminator (hertz):** 80/80 green both arms, quiet + churn phases; churn arm\n  positive-controlled (pid-allocator wrap observed <400ms, so reuse pressure was REAL in the churn\n  arm); rule-of-three bounds the original flake at ~7.5%/run/sha. Specimen 30776330383 remains\n  not-reproduced, cause unidentified — the repin removes the false-red MECHANISM; it does not\n  adjudicate the specimen. [[IR-16]]'s kill-side arm (TerminateJobObject return discarded) stays\n  a live discriminating instrument for any recurrence — and since 2026-08-03 it is no longer the\n  only one: [[IR-18]] (the test's OWN bare breadcrumb tree-kill) is the second kill-side candidate,\n  test-side rather than product-side. A recurrence must discriminate between them, not assume\n  either: IR-16's arm is a job whose termination silently half-fails (survivor still holds the\n  captured image); IR-18's is a victim killed by a bare pid it no longer owns —\n  `broker_survived=false` with the boot service still ALIVE and its message spooled. (An earlier\n  spelling of IR-18's signature here said \"empty stderr\"; retracted — empty stderr is present on\n  healthy runs and discriminates nothing.)\n\n### IR-21 — CLASS: a helper binary's build is never requested, only its LOCATION is, so any narrow invocation manufactures a red that belongs to the rig\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** todlando 2026-08-03. Filed as one instance, rewritten as a CLASS the\n  same day when a second member appeared, rewritten AGAIN when the mechanism was measured — the\n  first two versions described symptoms and got the remedy wrong. **Corrected a fourth time the same\n  day**: remedy (1) claimed the 11 same-package sites were missing a build edge, and todlando\n  falsified that by measurement while executing it (replicated independently by doyle). The error was\n  doyle's to carry — it was ruled on, not just written. The general rule that refutes it was already\n  in this entry's own CI-member section; diagnosing a class does not inoculate you against drawing\n  its opposite consequence one section later.\n- **Numbers below re-derived on `main` @`3efd7e6` over `git ls-files` (tracked files only). Each\n  carries its command; re-run rather than cite.**\n- ⚠ **Scan-root hazard, measured 2026-08-03 and worse than first reported:** a naive recursive\n  `grep -r` from the project root inflates by **~35×**, not the ~5× an earlier draft of this entry\n  claimed — 426 tracked `.rs` against 14,865 on disk with `target/` excluded, because `.worktrees/`\n  holds full copies of the tree. **And the unscoped grep does not COMPLETE** (still running at a\n  120s timeout while `git ls-files` returns instantly), so the failure mode is not only a wrong\n  number but a command that reads as hung on a tree where dozens of worktrees are normal. Use\n  `git grep` or `git ls-files | xargs grep`; both are scoped to tracked files by construction.\n\n#### THE MECHANISM (measured, both ends)\n\n**Build end — `cargo test` with a narrow target selector compiles a `[[bin]]` AS A TEST HARNESS and\nnever emits the plain executable.** Measured: `cargo test -p spt --bins` on a clean pool produced\nfive executables, every one hash-suffixed under `target/<profile>/deps/`, and ZERO plain exes in\n`target/<profile>/`. The bin was built. The file the test looks for was not written.\n\n**Consumer end — the resolver borrows a guaranteed binary's path to locate an unguaranteed one.**\nAll 29 copies of `sibling_bin` in `crates/spt/tests/` reduce to two textual variants (22 + 7) of one\nbody:\n\n```rust\nfn sibling_bin(name: &str) -> PathBuf {\n    PathBuf::from(env!(\"CARGO_BIN_EXE_spt\"))\n        .with_file_name(format!(\"{name}{}\", std::env::consts::EXE_SUFFIX))\n}\n```\n\n`CARGO_BIN_EXE_spt` is used **only as a directory anchor**. Cargo therefore sees a dependency on\n`spt` and on nothing else; the `{name}` half is a string join it cannot observe. The dependency edge\ndoes not exist at any level a build system could act on — which is why \"use the wider command\" is\nnot the fix and why the failure is invisible on a warm pool where some earlier run happened to leave\nthe file behind.\n\nThe unit-test resolver at `crates/spt/src/cli.rs:25601` reaches the SAME directory from a different\nanchor (`current_exe()` → `deps/` → parent) for the same reason: its own doc comment records that\nunit tests get no `CARGO_BIN_EXE_*` at all.\n\n**That mechanism explains both original members at once, including the polarity inversion that made\nthem look like different bugs:** whether `cargo test -p spt` or `cargo test -p spt --bins` happens\nto leave a plain exe behind is incidental to a dependency neither command was told about.\n\n#### SCOPE — WHERE IT BITES, AND WHERE IT DOES NOT\n\n**It bites NARROW invocations — `-p <pkg>`, `--bins`, `--lib` — i.e. gate rigs and local runs.**\nBoth members were hit on the LOCKSMITH t1 lane against fresh throwaway pools; each was discharged\nin-lane as a rig artifact. That is the whole field population to date.\n\n**GOLDEN IS ACQUITTED, and the acquittal is measured rather than assumed.** `cargo test --workspace\n--no-run` emits all 13 plain binaries — mock-session, mock-shell, capture-player,\nconsole-mode-probe, service_fixture and the rest — so a workspace build produces the cross-package\nhelpers by construction. Confirmed under nextest, the tool CI actually runs, with a real compile.\n\n⚠ **The measurement that establishes this is not the obvious one.** Deleting the plain exe and\nwatching it reappear is NOT evidence of a rebuild: cargo's uplift restores a hardlink from an intact\n`deps/` artifact, with link count 3 and an UNCHANGED mtime, which looks exactly like a build and\nsays nothing about a pool that never had the file — and a pool that never had it is the only kind a\nrig runs on. The sound probe removes the plain exe AND both `deps/` artifacts, confirms all three\nabsent, then watches the target actually recompile (mock-adapter, 5.77s, fresh mtime). The first two\nattempts were setup, not measurement.\n\n⚠ **The suspicion this acquits is structurally well-founded, so record the answer, not just the\nverdict.** `twohost-a`/`twohost-b` are `needs: test`, so the only mock-adapter prebuild runs AFTER\nthe phases that use it; `target/` is gitignored, so checkout never cleans it on a persistent\nself-hosted workdir. Every precondition for artifact leakage is present — the build simply does not\nneed it. The next person who reads that job graph will form the same hypothesis; this is the answer\nwaiting for them.\n\n#### THE ONE CI-SIDE MEMBER THAT IS REAL\n\n`crates/spt/src/cli.rs::adapter_translate_proof_gates_on_commit` is a **unit** test (`kind(bin)`),\nand `CARGO_BIN_EXE_*` is set only for integration tests and benches of the declaring package. A unit\nconsumer therefore CANNOT express the dependency through the env var at all — it has no choice but\nto resolve by path. That is why `.github/workflows/ci.yml:105-106` carries a hand-written\n`cargo build -p spt --bin translate_proof_fixture` before the unit lane, with a comment\n(`ci.yml:102-104`) stating this exact mechanism.\n\n**Deleting that step would red the unit lane on a clean pool, and it would read as a code red.**\nSomebody already hit this class, fixed their own leg correctly, and never turned it into a rule —\nthe comment at `ci.yml:102` is IR-21 written a milestone early, in the one place only its author\nwould find it.\n\n#### POPULATION\n\n**13 bin targets in the workspace** (`cargo metadata --no-deps`, not a grep — an auto-target under\n`src/bin/` and `xtask` are both invisible to a `[[bin]]` grep). Two are not helpers (`spt`, `xtask`);\nthe other **11 are test helpers**, across three packages:\n\n| package | helpers |\n|---|---|\n| `adapters/mock` | mock-session, mock-shell, capture-player, console-mode-probe |\n| `crates/spt-daemon` | dispatch_fixture, service_fixture, summarizer_fixture, xlate_choreo_fixture (⚠ this row was mis-\"corrected\" 2026-08-22 to claim `xlate_choreo_fixture` no longer existed — IT DOES, as an AUTODISCOVERED `src/bin/` target with no `[[bin]]` stanza; the original row was right and merely predated `summarizer_fixture`. See IR-58) |\n| `crates/spt` | translate_proof_fixture, post_step_fixture, gh_fixture, git_fixture |\n\n**44 literal `sibling_bin(\"…\")` call sites**, all in `crates/spt/tests/`, served by **29 copied\nresolvers**. Split by whether the BUILD IS ALREADY GUARANTEED — which is not the same question as\nwhether the env var is available, and an earlier version of this entry conflated the two:\n\n| class | sites | detail | build guaranteed? |\n|---|---|---|---|\n| **cross-package** | **33** | mock-session 26, mock-shell 6, service_fixture 1 | **NO — the hazard members** |\n| **same-package** | **11** | translate_proof_fixture 7, git_fixture 2, post_step_fixture 1, gh_fixture 1 | **YES — already, by construction** |\n\n⚠ **MEASURED TWICE, and it falsifies what this entry said on 2026-08-03 before this revision:** cargo\nbuilds **every bin target of a package whenever it builds ANY integration test of that package** —\nthat same act is what sets `CARGO_BIN_EXE_*` in the first place. So the 11 same-package sites were\nnever unexpressed in a way that could bite, and the hazard population is **33 cross-package sites\nplus the one unit-test member = 34**, not 44.\n\n- **Probe 1 (todlando, root pool):** deleted all four `translate_proof_fixture` artifacts (both\n  hash-suffixed harness exes, the `deps/` plain exe, the uplifted plain exe), confirmed absent, then\n  built ONE UNRELATED and UNMODIFIED integration test of the same package —\n  `cargo test -p spt --test attach_wedge_e2e --no-run`, exit 0, 14.45s. Both plain exes returned with\n  fresh mtimes; the hash-suffixed harness exes stayed absent, which is what distinguishes a bin\n  DEPENDENCY build from a `--bins` harness build.\n- **Probe 2 (doyle, `.worktrees/gate-ec5f38a` pool, independent replication with a different fixture\n  and a different probe test):** deleted `gh_fixture`'s plain exe, its `deps/` plain exe AND its\n  hash-suffixed harness exe, confirmed all three absent, then built `--test json_emit --no-run`\n  (exit 0) — a test that never names `gh_fixture`. The plain pair returned at a FRESH mtime (09:13\n  against the 09:00 it carried before), so this is a real build and not the hardlink uplift this\n  entry warns about elsewhere; the harness exe stayed absent.\n- **Neither probe needs a baseline arm:** the probe test is unmodified and references nothing under\n  edit, so what it measures is cargo's behaviour, not anyone's change.\n- **Corroborated by this entry's own field data:** neither original member was a same-package\n  integration site — member 1 is a UNIT test, member 2 is CROSS-package. The class never had a\n  same-package integration member, and the CI-member section below already stated the governing rule\n  (`CARGO_BIN_EXE_*` is set only for integration tests and benches of the declaring package) one\n  section before the remedy drew the opposite consequence from it.\n\nCommand: `git ls-files '*.rs' | xargs grep -hon 'sibling_bin(\"[a-z_-]*\"' | sed 's/.*sibling_bin(\"//;\ns/\"//' | sort | uniq -c`.\n\n⚠ An earlier report gave 48 sites and a 6/11/37 split. Take the table above: it counts only literal\ncall sites in tracked files and it ships its command. The 11 is the same 11 in both counts.\n\n**The LOCATION half of this class is already closed** by `crates/spt-term/tests/support/fixture_bin.rs`\n— a shared resolver rather than 29 copies. It does not close the BUILD half, and should not be\nmistaken for having done so.\n\n#### REMEDY SHAPE (not ruled)\n\nThe distinction that matters is location vs. build:\n\n1. **The 11 same-package sites are NOT hazard members and need no build fix.** Their build edge\n   already exists (see the two probes in POPULATION above); `env!(\"CARGO_BIN_EXE_<name>\")` for the\n   fixture itself would add nothing to it. Converting them is a **CLARITY** change, worth doing on\n   its own smaller merits — the path becomes the one cargo actually emitted rather than a string-join\n   of a directory anchor and `EXE_SUFFIX`, five copies of `sibling_bin` stop existing (29 → 24), and\n   it completes a migration already paid for: `crates/spt/tests/fixtures/translate_proof_fixture.rs:7-12`\n   records that the fixture was re-homed into `spt` precisely to obtain\n   `CARGO_BIN_EXE_translate_proof_fixture`, and then all 7 call sites resolved by path anyway. **It is\n   not a build fix and must not be filed as one.**\n2. **The 33 cross-package sites cannot**, by cargo's design. Their options are an asserted build in\n   the test's own setup, a `dev-dependencies` artifact dependency, or an explicit documented\n   prebuild — the ci.yml:106 shape, made a rule instead of a local fix.\n3. **Standardising on one wider invocation is NOT a remedy.** It changes which pools happen to work;\n   it does not create the dependency edge, and the two original members had opposite polarity under\n   exactly that theory.\n4. Collapsing the 29 resolver copies is worth doing on the `fixture_bin.rs` model, but on its own it\n   makes the class HARDER to see — one shared resolver still anchored on `CARGO_BIN_EXE_spt` hides\n   the 33 genuinely unexpressed dependencies among its 44 call sites behind one function.\n\n#### SUPERSEDED FRAMING, KEPT SO IT IS NOT RE-DERIVED\n- **Status of the original filing:** open · **Origin:** todlando 2026-08-03, both members hit on the\n  LOCKSMITH t1 lane against fresh throwaway pools; each discharged in-lane as a rig artifact, filed\n  here so the next clean rig does not re-diagnose them as code reds.\n- The first two versions of this entry framed the class as \"the rig's command does not build what\n  the test needs\" and proposed standardising on a wider invocation. **Both are superseded by the\n  measured mechanism above** — the dependency is not under-expressed, it is INEXPRESSIBLE in the\n  form these call sites use, so no choice of invocation creates it. Kept only as the two FIELD\n  MEASUREMENTS that produced the class, which remain true:\n- **MEMBER 1 — MEASURED:** `cli::tests::adapter_translate_proof_gates_on_commit` failed on the\n  first `cargo test -p spt --bins` run. Its fixture binary `translate_proof_fixture` (a\n  `tests/`-homed `[[bin]]`) was ABSENT from the pool — `ls` on the path returned No such file.\n  Building it explicitly and re-running the IDENTICAL command PASSED, after which the full `--bins`\n  suite passed 584/585 with only the releases#117 probe red (that one RED by design). So the\n  discriminator is the fixture's presence, not the tree: same command, same sha, red then green\n  across one `cargo build` of the fixture.\n- **MEMBER 2 — MEASURED:** `cargo test -p spt` does not build `mock-adapter --bin mock-session`, so\n  `attach_wedge_e2e` panics `\"the dummy-harness program must be built\"`. Note the polarity is\n  INVERTED against member 1 — there the narrower `--bins` was the defective invocation and\n  `cargo test -p spt` the correct one; here `cargo test -p spt` is itself insufficient. So the\n  class is NOT \"use the wider command\"; it is that the dependency is not expressed to the build at\n  all, and which invocation happens to work is incidental.\n- **What/why (still true):** on a WARM pool the helper is already there from some earlier run and\n  the test passes, so the defect is invisible exactly where most people work and fires only on a\n  clean pool — i.e. on a GATE RIG, which is the one place a false red costs the most.\n- **The sweep this entry once called its first step HAS BEEN RUN** (todlando 2026-08-03) and its\n  result is the POPULATION section above. It is no longer outstanding.\n\n- **Why it is register debt and not a lane bug:** nothing in the product is wrong. The gap is\n  between what a test needs built and what the rig's command builds, and the fix belongs to the\n  tests' declarations, not to whoever is running a gate that day. Sibling rule:\n  [[gate-clean-target-not-incremental]].\n- **Built evidence:** golden now names every cross-package fixture prebuild\n  (`mock-session`, `mock-shell`, `capture-player`, `console-mode-probe`,\n  `service_fixture`) explicitly; `xtask binedge-check` reports zero missing\n  edges. All 29 local `sibling_bin` resolvers collapsed into\n  `tests/common/mod.rs`; the shared precondition names the missing fixture and\n  its package-correct build command before any product timeout.\n- **Ripe when:** the next gate-rig or CI-touching wave. Cheap, and it pays for itself the first time\n  it stops someone chasing a phantom red on a clean pool.\n- **Size:** remedy (1) is small AND optional — it buys clarity and subtraction, never a build edge;\n  medium for (2), which is a design call before it is an edit and is the only remedy that closes the\n  class.\n\n### IR-22 — An inherited identity env var fails a test, and the diagnostic names them ONE AT A TIME so a correct fix reads as no fix\n- **Status:** open · **Origin:** todlando 2026-08-03, chasing what looked like an `attach_wedge_e2e`\n  code red on the LOCKSMITH t1 lane; root-caused to the runner's own process environment.\n- **MEASURED:** `attach_wedge_e2e` failed for an INHERITED PROCESS-GLOBAL and nothing in the tree:\n  the daemon-stop refusal fired on the running session's own identity env. It named\n  `$OWL_SESSION_ID`; clearing that made it name `$SPT_ENDPOINT_ID`. With `OWL_SESSION_ID`,\n  `SPT_ENDPOINT_ID`, `SPT_AGENT_ID` and `SPT_SESSION_ID` all cleared: exit 0, 1 passed.\n- **The finding is the DIAGNOSTIC SHAPE, not the env hygiene.** Naming one variable at a time means\n  a correct partial fix produces an identical-looking failure, so the natural reading of \"I cleared\n  it and it still fails\" is that the clearing did not work — when in fact each step was right and\n  the message had simply moved on to the next name. A refusal that can only ever name one member of\n  a set it is checking teaches the person debugging it the wrong lesson. Compare the same class in\n  [[IR-15]]/[[IR-18]] terms: the instrument is competent and the report is not.\n- **Why it matters beyond one test:** any agent running suites from a live spt session carries these\n  vars, so this fires for every builder on a perched session and for nobody running from a bare\n  shell — which is precisely the split between how builders work and how CI runs.\n- **Candidate remedies (not ruled):** have the refusal name EVERY identity var it found set, in one\n  line, rather than the first; and/or have the affected tests clear the identity set in their own\n  setup so a perched session is not a special environment. The first is the one that pays off\n  outside this test.\n- **Ripe when:** next CI/test-hygiene wave. **Size:** small.\n\n### IR-23 — `endpoint_teardown_authority_e2e`'s two tests collide with EACH OTHER through the machine-global spt home\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** todlando 2026-08-03, LOCKSMITH t1 lane.\n- **MEASURED:** both tests copy a psyche binary fixture into `perch::spt_home()/srcs/dummyharness/`\n  (`crates/spt/tests/endpoint_teardown_authority_e2e.rs:399`), which is process-global, so run in\n  parallel inside one binary each holds the file the other wants: `os error 32`, \"used by another\n  process\". **Signature: WHICH of the two fails alternates between runs.** Under\n  `--test-threads=1`: 2 passed, exit 0 — and the wall clock drops from 182s to 14s.\n- **What/why:** two defects in one, and they should not be conflated. (1) The tests are not\n  isolated from each other. (2) The staging path is the MACHINE-GLOBAL spt home rather than the\n  test's own temp home — on a box that is also a CI runner, so the blast radius is not confined to\n  the suite. (2) is the one worth fixing; (1) is a symptom of it.\n- **Note on why this is not already caught:** the standing rule is that integration tests run\n  through nextest, which gives each test its own process and hides the collision entirely. So this\n  is latent on the sanctioned path and only bites the bare `cargo test` path — the rule is working\n  and masking a real defect at the same time, which is why the entry exists rather than a shrug.\n- **Candidate remedy (not ruled):** stage the fixture into the test's own temp home. Sweep for\n  siblings first — any other test writing under `perch::spt_home()` rather than a temp home shares\n  the shape, and nobody has counted them.\n- **Built evidence:** adapter source, manifest registration, and psyche fixture\n  staging now use the rig TempDir. The two process-global resolver users are\n  explicitly serialized, and the bare `cargo test` path passes both cells with\n  `--test-threads=2` in 13.82s after the declared fixture prebuild.\n- **Ripe when:** next test-hygiene wave; the 182s -> 14s figure makes it pay for itself on the\n  bare path. **Size:** small per test, unknown until the sweep.\n\n### IR-24 — `reap::terminate_job` discards `TerminateJobObject`'s return, alone among its own module's siblings\n- **Status:** BUILT — landed `3d12cf3` on main (2026-08-03), fulfilment verified against this\n  entry's own wanted list by doyle 2026-08-04, not merely mapped to the commit: the return is\n  audited and the loss NAMED (`REAP_JOB_TERMINATE_FAIL: brain subtree NOT reaped (<os error>); …\n  the daemon holds no other handle to reach them` — which also ANSWERS the cost-of-loss question\n  this entry said nobody had written down); the \"first thing to check\" was checked and the ruling\n  came out OPPOSITE to IR-16's site in one respect, documented as measured asymmetry in the doc\n  comment: `TerminateJobObject` has NO ordinary failing path (zero only for a broken handle) so a\n  zero is a real loss, while `TerminateProcess` fails `ERROR_ACCESS_DENIED` on the ordinary\n  already-exited path and is deliberately NOT checked — the premise is unit-PINNED both directions\n  (`terminate_job_return_discriminates_broken_handle_from_ordinary_states`, cfg(windows), with a\n  memberless-job false-positive arm). No `job != 0` re-check (second-weaker-rule prohibition\n  honored, same as IR-16). Golden evidence: rides `4b37512` (run 30873007187 attempt 5, 9/9\n  green; the premise unit observed PASS in-pool on the Windows leg, Linux leg green — the\n  cross-platform quiet-`ESRCH` concern stays with `ec5f38a`'s coverage as before). Path\n  correction to this entry's MEASURED line: the site is `crates/spt-daemon/src/reap.rs` (brain\n  subtree reaper), not `crates/spt/src/reap.rs` as first filed ·\n  **Origin:** todlando 2026-08-03, swept while building [[IR-16]]; deliberately\n  NOT folded into that lane (doyle ruling, same day) and filed instead.\n- **MEASURED:** `crates/spt/src/reap.rs:207-211` calls `TerminateJobObject` and discards the result,\n  the identical shape [[IR-16]] closed at `spt-daemon`'s `kill_tree`. Its own module's\n  create/assign siblings at `:178` and `:202` ARE instrumented, so this call is the odd one out\n  where it lives — the module already decided that these returns are worth reading.\n- **Why it was NOT folded into IR-16:** different subject. IR-16's site is a SUPERVISED SERVICE's\n  teardown, where the loss is \"a supervised service's descendants survive\" and the promise it\n  breaks is `REQ-RESIDENT-SERVICE`'s tree claim. This site is the BRAIN SUBTREE's kill-on-close\n  job, which has its own lifetime, its own caller and its own answer to \"what does a failed\n  termination cost here\" — and that answer has not been written down by anyone. Folding it in would\n  have meant settling that question in passing, inside a commit about the supervisor, which is how a\n  second ruling gets smuggled into a lane scoped to one.\n- **What it needs that IR-16's fix does not supply:** IR-16 ruled a LOUD REFUSAL (option B) on the\n  ground that the alternative — a process-table tree-walk fallback — is measured blind in exactly\n  that failure state ([[IR-18]]: descent breaks at the dead middle hop) and would trade a silent\n  loss for a false clean. Whether the same reasoning holds here depends on whether this site kills\n  its direct process in the same breath, which is what makes the middle hop dead by construction\n  there. **That is the first thing to check, and it is not assumed.**\n- **Ripe when:** any wave touching reap/teardown; it inherits IR-16's vocabulary and its\n  discrimination note, so the second one is cheaper than the first. **Size:** small, once the\n  cost-of-loss question is answered for this subject.\n\n### IR-25 — `spt-daemon --lib` reds 2-in-3 under concurrent load with bare `cargo test`, and holds green under nextest\n- **Status:** open · **Origin:** doyle 2026-08-03, found while gating LOCKSMITH tranche 1 in an\n  isolated worktree; chased to a mechanism and scoped OUT of the release path before the head was\n  assembled.\n- **MEASURED, four arms, same box, same hour, matched load** (a second `cargo test -p spt-store\n  --lib` loop running throughout; `spt-store` itself stayed green in every round, so the box was not\n  generically failing):\n\n  | tree | instrument | result |\n  |---|---|---|\n  | lane `ec5f38a` | `cargo test --lib`, at rest | 821/821 ×4 |\n  | lane `ec5f38a` | `cargo test --lib`, under load | **2 of 3 RED** (142s, 117s) |\n  | lane `ec5f38a` minus its 5 new tests | `cargo test --lib`, under load | 3 of 3 green (117s, 84s, 105s) |\n  | main `932e14b` | `cargo test --lib`, under load | 3 of 3 green (97s, 119s, 104s) |\n  | lane `ec5f38a` | **`cargo nextest run`, under load** | **3 of 3 green, 821/821** (88s, 85s, 72s) |\n\n- **Three DIFFERENT victims across two loaded runs**, all process/timing-shaped, all PRESENT AT MAIN\n  and green there: `servicehost::…a_service_that_ignores_the_stop_marker_is_force_killed_and_confirmed_dead`\n  (panics `ForceKilled must MEAN the owned child is gone` right after `SERVICE_KILL_UNCONFIRMED`),\n  `applyhost::…broker_reports_its_compiled_image_version_over_ipc`, and\n  `daemon::…a_tree_teardown_reaches_a_grandchild_the_service_spawned`.\n- **MECHANISM: in-process thread interference, not product code.** Bare `cargo test` runs a crate's\n  tests as threads in ONE process. The lane's five new tests are process-spawning kill-tree tests;\n  under load they starve confirm windows of NEIGHBOURING tests that were always marginal. Removing\n  exactly those five flips 2-of-3-red to 0-of-3-green at the same sha, in the same binary, at the\n  same durations — one of the green runs sits at 117s, precisely a duration that had produced two\n  failures with them present.\n- **IT DOES NOT REACH GOLDEN.** nextest gives every test its own process, and golden runs nextest.\n  The population is GATE RIGS AND LOCAL RUNS — the same population as [[IR-21]], reached by a\n  different mechanism, which is why these are two entries and not one.\n- ⚠ **The instrument switch is the whole finding.** Measured with bare `cargo test`, this reads as a\n  lane blocker; measured with the tool CI actually runs, it is a rig-scoped nuisance. Anyone\n  re-opening this must state WHICH instrument produced their observation before quoting a verdict.\n  The same tool gap acquitted [[IR-21]]'s golden question the same day.\n- ⚠ **The pre-existing fragility is NOT thereby closed.** Those three tests were marginal before this\n  lane and the lane only exposed them; \"make the new tests quieter\" would re-hide a real weakness.\n  Hardening them is test-side work (hertz's lane by the dispatch split), not the builder's.\n- **Two rig defects of the gater's, recorded because they nearly cost the verdict:** (1) a first\n  re-run at rest came back 4/4 green and proves NOTHING — a sequential idle probe cannot express a\n  load-sensitive failure, so that is a competence-controlled zero, not an acquittal; (2) the first\n  baseline attempt ran its two arms UNSYNCHRONISED (the load generator finished while the measured\n  arm was still on run 1), which would have compared a loaded lane against an idle main and read as\n  \"the lane broke it\". A discriminator whose arms ran under different conditions cannot discriminate.\n- **Ripe when:** alongside [[IR-21]] on the next gate-rig or CI-touching wave, or immediately if\n  anyone starts gating on bare `cargo test` on a loaded box. **Size:** small to document the rig\n  rule (gate with nextest); medium to harden the three marginal tests.\n\n### IR-26 — POOL-OWNER claims authorize takeover from a DEAD holder, so releases#103's hazard reaches through the guard\n- **Status:** open, LANE BUILT BUT UNCOMMITTED (see the warning below — this is not a figure of\n  speech) · **Origin:** hertz 2026-08-03/04, found by its own test rather than by reading, and\n  reported unfiled for composition. Composition ruling is doyle's, 2026-08-04.\n- **What/why:** a POOL-OWNER claim named a holder pid; lane liveness was read from whether that pid\n  was alive. hertz MEASURED the failure on this box: **3 of 3 claims had dead holders while one of","numLines":500,"startLine":1001,"totalLines":3791}},"sourceToolAssistantUUID":"5a0e5b1e-bf28-4ecd-830b-d49496d06ee4","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"c176ff87-3c88-4a9e-a118-1abd8b6a4ef8","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6EKJbcMtQHWgyVptcA","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"EoAJCqgBCBEYAipAv4/PjJwabN5ENhqvjibiIphqPlWA/JwZ2o8HTisDUHIZTUSnMRa4fB38CjXJ8YCLhoNGoD0ZeaL2XoesnWmIBzIPY2xhdWRlLXNvbm5ldC01OABCCHRoaW5raW5nWiQ4MGM5NDZkZC05YzNjLTQ5NzItOGYyZi03NDAxMTQxZGE2MzJyEJcpAiwR8BiFSxd+XzBU5MmIAQGoAYWX9dQGsAECEgxk2YmPC1nmKXyGsMQaDJZaoCkh0eHZ0yU+qCIwwI74YW5h3BkaltotmtKO25fh/2SSUdi/OlsPqrUz+sgJ5feq9WL4j2+9APQmOHPTKoQH1oodufQf/Cshustc1NhaRKVjSo9by7v5KvQuRs5M6EZlfYlt+iQpqXZ5nBttWk0dmzQGJVrPsBxS3B2rdxBWt2RLmzDDPmGSP1EoCHNruA6NnrYucPu6x1XJTdrDxFmrPieq4J0VDKMcQI+iea8PQW5LPD/RXSdF7enaP+VJDsZ1Y7HgEDPauyZtFU0jEHM6zoV8KaPGZ6fuzn2tililDAoe0B7aKY6MLy/blROdD/alBK3kXTXvDgmVpbX67kqUcBPcOosq3DnEQt9jTC7cg9XFLneQYMGAAxuGEmYHSGY9GL9Yyl5V6gYpb/c8oFMl3HlscE7Bc806OZX3ppoPCvf6uvMoB5ISzwBB++m2pGmVOMmaUGZKrlr64FacnOOOwIyIJNyDYUO2ON1jB6MgGb0E+/oKWFz6l9SPR/zHxQ7/FwhMwC5JRDsgD4TY9TLzJ3p90mzYiU/l78tCPeTkHsmfFd+X5954nNPT6D/Olvyk7yWwOzCYBLA//v7/4+ICOKz+Aynj3FT/kh0XGCzNWy3r3AkxlCL8A8oc0x9tzSXuLfTdOj0eSPlcBWfeZFfNhaOW4WFBOmXycmxDXBSaW2h9xxIjcsBFZDHGqZcvtJSkMMKFJVHEvtjuTIVwXaLioLYOSza6q8MlwvCJ+XmevG+HIct/flIGhri3XWBlqhIXfFpj2v5AkomFDPX6txRK0CJewx8oViczvB+NY4VLAKhut4Buhnna6e6RZlqzrKQUu5ZHZJ3qx+dl7+nJHWcnUuz/kr5JynooaKR099ndrYU1pHNL/E5Yh5OKofuxhN5CJjox/ZlIixtVPvkc8S8f7R9pNsF914Rnz5fwRAI7Dnl0y21DMQIDB9eUd2ilFAgAFEsAQA7aYdjMQJeIrYW2DfPBFTR0IlgA2ER7l3MVeRJgpu/K1rpbRkU+QKX51MXDyJHXQa/rcmgKaLQv3I7PdZDucYpwgQEMGrLYhjYxXqwadW3Qxo02WfD0Y2rbzkzjF/maQp66qx33a78u6/zBfgJmT4kl7PtSwBq6FN0dxgnBZXLWg5qgoXMGDGnh2MPmzy1bvjnyacECQ2/59jwxbb/HZnY98ukJi7AzHCZhJSzrcNs8Q+s4mHmfna3n39hFenaw+uA4JrBiHSh6NiJ789EHPgx1GBC+YPzhNCV2+xpiG4Vl80cOSyBWc9OG99Tk9lDjGAE="}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":17311,"cache_read_input_tokens":99133,"cache_creation":{"ephemeral_5m_input_tokens":17311,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6EJXTs9o38VY3gkfqZ","attributionAgent":"general-purpose","type":"assistant","uuid":"6ad39ae3-c34a-4ca4-b999-4bc50cdf9109","timestamp":"2026-09-06T11:16:21.916Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"6ad39ae3-c34a-4ca4-b999-4bc50cdf9109","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6EKJbcMtQHWgyVptcA","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01375zdevbNiFzJtktGdKefC","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":1501,"limit":500},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":17311,"cache_read_input_tokens":99133,"output_tokens":419,"output_tokens_details":{"thinking_tokens":290},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":17311},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":419,"cache_read_input_tokens":99133,"cache_creation_input_tokens":17311,"cache_creation":{"ephemeral_5m_input_tokens":17311,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6EJXTs9o38VY3gkfqZ","attributionAgent":"general-purpose","type":"assistant","uuid":"06d08932-115b-4d50-91ce-b9198e1b8e3b","timestamp":"2026-09-06T11:16:22.566Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"06d08932-115b-4d50-91ce-b9198e1b8e3b","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01375zdevbNiFzJtktGdKefC","type":"tool_result","content":"1501\t  those lanes was live** — so the guard authorized exactly the interleaving takeover releases#103\n1502\t  exists to prevent. The remedy records the lane's GIT IDENTITY (branch + the base sha it carried at\n1503\t  claim time) and reads lane state from ancestry: in flight while the tip is not contained in\n1504\t  `origin/main`; settled once merged, once the branch is gone, or once the branch no longer carries\n1505\t  the claimed base (the branch-level twin of a recycled pid). Holder pid demotes to advisory — a\n1506\t  LIVE holder still refuses, a dead one no longer authorizes.\n1507\t- **The strongest finding in it, and it is a filter-competence one:** without the base anchor, a\n1508\t  missing branch read as \"settled, branch gone\" **out of a directory that was not a repository at\n1509\t  all**. An unanchored Settled verdict is a clean zero produced by a filter that cannot express the\n1510\t  question. A Settled verdict now requires the base object to be present in the reading repo;\n1511\t  unanchored is UNKNOWN. Sibling of [[zero-match-filter-reads-as-absent]] in the pool domain.\n1512\t- ⚠ **POLARITY, stated rather than buried:** the new arm (dead holder + unlanded lane => REFUSE)\n1513\t  converts a false-TAKEOVER into a false-REFUSAL. That is the better failure but not a free one, and\n1514\t  its triggering case is not exotic — it is an agent going down mid-lane, which happened to hertz\n1515\t  itself this same batch and cost [[IR-1]]/[[IR-4]]/[[IR-9]] their landing. **The open gating\n1516\t  question, put to hertz 2026-08-04 and NOT yet answered:** from the refusal state, does\n1517\t  `pool-release` still clear a claim whose holder is dead and whose lane is unlanded, or does the new\n1518\t  arm refuse that too? A guard whose only escape is the blanket `SPT_POOL_UNCHECKED=1` trains people\n1519\t  onto the blanket override. The refusal must NAME the remedy, not only the witness, and the remedy\n1520\t  must be exercised FROM the refusal state rather than reasoned about ([[remedy-must-run-from-refusal-state]]).\n1521\t  If the answer is \"it refuses\", that is a design change and returns to doyle before the lane lands.\n1522\t- **COMMITTED 2026-08-04 (was uncommitted when first measured):** `ci/poolowner-lane-claim` =\n1523\t  `8ce40d9` (the change) + `98cfafe` (the remedy fix below), both off `b7b00c3`. The original\n1524\t  measurement found ZERO commits and six modified files in `.worktrees/hertz-poolowner`, i.e. every\n1525\t  reported number had been measured against a tree no git object captured; the builder committed on\n1526\t  being told. Recorded because the near-loss is the lesson, not the correction.\n1527\t- **THE REMEDY DID NOT RUN — measured from the refusal state, which is the only place the question\n1528\t  can be asked.** The refusal named its witness AND a command, and executing that command verbatim\n1529\t  failed with the IDENTICAL `SPT_POOL_FOREIGN` block that printed it: **xtask depends on spt-store,\n1530\t  so every command that builds the tool goes through the pool being refused.** This is the same dead\n1531\t  end the unclaimed-foreign arm already hit in the field and fixed by leading its line with the\n1532\t  hatch — adding a second refusal arm re-broke it immediately. FIXED at `98cfafe`: the in-flight\n1533\t  remedy now leads with the hatch and names `pool-claim`, the command that actually resolves\n1534\t  ownership. Full chain re-measured on hfenduleam: refuse → verbatim remedy fails → hatch-prefixed\n1535\t  form succeeds → build proceeds.\n1536\t- **Answer to \"does `pool-release` clear a dead-holder + unlanded claim\", two-part:** it DOES — it\n1537\t  never consults the verdict, it rewrites `lane=None` — **but it is NOT the exit**, because after\n1538\t  release the same build is refused again on the pre-existing unclaimed-foreign arm (\"no lane has\n1539\t  claimed this pool\"). Release moves you from one refusal to another. `pool-claim` is the exit.\n1540\t- **The guard is a POPULATION, not a row** (builder's generalization, adopted by doyle as the\n1541\t  standard for this class): one test poses all three refusal arms and asserts that any remedy naming\n1542\t  a command leads with the hatch, PLUS membership — three posed, three refused — so no arm passes by\n1543\t  never being reached. The rule had been learned once already and the next arm added broke it, which\n1544\t  is the definition of something that needs a population test rather than a better comment. 26/26.\n1545\t- ⚠⚠ **FLEET PROPERTY — the rig refuted itself, and this is the entry's most important line.** The\n1546\t  first arm did NOT refuse, it TOOK OVER: the arriving worktree was at `b7b00c3`, so the build script\n1547\t  that ran was ITS OWN, pre-identity. **Enforcement code comes from the ARRIVING tree, never from\n1548\t  the claim.** So until this lands everywhere, an old tree still takes a live lane's pool, and the\n1549\t  guard is only ever as new as the tree that arrives. Found by measurement; reasoning would have\n1550\t  reported a refusal the rig never produced.\n1551\t- **RULING on the fleet property (doyle 2026-08-04) — a stamp VERSION LINE is REFUSED, and not on\n1552\t  taste: it cannot work.** The tree that must refuse is the OLD one, and an old build script does not\n1553\t  read a new stamp field because it does not know the field exists. You cannot make a stale enforcer\n1554\t  honor a new rule by writing something new into the record it enforces against — **the reader is\n1555\t  the problem, not the record.** A version line would help only a CURRENT tree explain itself while\n1556\t  doing nothing to the population it is aimed at, i.e. it would retire the worry without retiring the\n1557\t  risk. Ruled instead, in priority order: **(1)** land it and state the migration window honestly —\n1558\t  the arm protects a lane only when the ARRIVING tree carries the change, coverage grows as trees\n1559\t  turn over, never retroactive; **(2)** NAME THE LOSS YOU CANNOT PREVENT ([[IR-16]]'s pattern) — the\n1560\t  claiming side may be able to notice afterwards that its pool was taken and say so loudly, turning\n1561\t  silent artifact corruption into a named event; scope separately and MEASURE whether the claiming\n1562\t  side can observe it at all before committing; **(3)** SHRINK THE POPULATION — old enforcers are old\n1563\t  trees, this box carries ~45 worktrees and most are stale, so reaping them is real mitigation and\n1564\t  cheaper than code. (2) and (3) do NOT ride this lane.\n1565\t- **The unanchored row, as asked:** `a_claim_from_another_repository_reads_unknown_not_settled` was\n1566\t  RED before the base-object requirement existed. Verbatim: `left: Settled { reason: \"lane branch\n1567\t  build/lane-x no longer exists\" }  right: Unknown`, out of a tempdir that was not a repository at\n1568\t  all. It fails without the requirement and passes with it — a real negative control, not a row that\n1569\t  only ever passed.\n1570\t- **Builder's evidence (as reported, against that uncommitted tree):** spt-poolguard 25/25 with 7 new\n1571\t  rows, one per precedence cell, two carrying their own negative control; pool_guard_canary 3/3;\n1572\t  `cargo check -p xtask -p spt-store --all-targets` clean; clippy clean on the three touched crates;\n1573\t  `traceable-reqs check` exit 0 at 745/745 with new `REQ-POOL-LANE-IDENTITY` complete at doc+impl+unit.\n1574\t- **Composed:** its OWN thin lane, riding the same next golden batch as the CI-rider cluster but NOT\n1575\t  merged into it (doyle ruling 2026-08-04). A red must stay attributable: the riders change what the\n1576\t  pipeline measures, this changes a build-time REFUSAL, and a guard whose failure mode is refusing\n1577\t  builds is the worst thing to make inseparable from a pipeline change. IR-14's four-trees-into-one-\n1578\t  unclaimed-pool finding stays OUT of this lane and stays IR-14's, on the same ground [[IR-24]] was\n1579\t  kept out of [[IR-16]] — folding it in settles its question in passing.\n1580\t- **Ripe when:** next CI/infra batch, gated on the polarity question above being answered first.\n1581\t  **Size:** small once the remedy question is settled.\n1582\t- **FALSE-LIVE, first specimen of the blocking polarity (hertz sweep, measured 2026-08-04):**\n1583\t  `.worktrees\\hertz-ci-riders\\target\\POOL-OWNER.json` named `holder_pid 31380` with\n1584\t  `holder_started_at 134302739211259713` = 2026-08-03 16:38:41. Pid 31380 on that box at read time was\n1585\t  `claude.exe -n \"doyle @ HFENDULEAM (spt-core/)\"`, created 17:31:11, FILETIME 134302770715019370.\n1586\t  Same boot, ~52 minutes apart, stamps MISMATCH. The claiming process died and the OS reissued its pid\n1587\t  to the gater's own session. Every previously measured recycle produced a false-DEAD (reads free\n1588\t  while the lane is live — the corrupting direction); this one produces a **false-LIVE**: a bare-pid\n1589\t  guard reads the claim as held by a running holder and refuses, naming doyle as the holder of hertz's\n1590\t  pool — the blocking direction, first time caught. The `holder_started_at` arm shipped in `8ce40d9`\n1591\t  discriminates it correctly — that field caught defending, not asserted to defend\n1592\t  ([[stable-anchor-is-not-a-recycling-defense]]).\n1593\t- **The mirror image, same box, same hour:** `.worktrees\\ir24-reap\\target` named `holder_pid 33612`,\n1594\t  DEAD — while that lane was genuinely LIVE, with `cargo clippy -q -p spt-daemon --lib --tests`\n1595\t  (pid 22452) running under todlando's session as it was read. Two claims, opposite errors, inside one\n1596\t  hour: liveness misreads in BOTH directions on the same box in the same hour. Holder liveness has no\n1597\t  sound polarity as a lane-state oracle. Ancestry decides ([[pool-claim-holder-death-is-not-lane-state]]).\n1598\t- **THE BARE-CLAIM GAP — a claim the stamp arm cannot adjudicate at all.** The main checkout's own pool\n1599\t  (`<root>\\target`, 72,001,016,671 B = 67.06 GiB) carries\n1600\t  `{\"owner_tree\": \"...\\\\spt-core\", \"written_by\": \"spt-poolguard\"}` — no `lane_label`, no `holder_pid`,\n1601\t  no `holder_started_at`, no `lane_branch`, no `lane_base`. `read_owner` maps that to `lane: None`, so\n1602\t  every arm the lane-identity work added is unreachable for it: it cannot be read as in-flight,\n1603\t  settled, or recycled. **FIVE of the eight** claims found on this box are this shape — `<root>\\target`,\n1604\t  `<root>\\target-seam` (below), `gate-target-render`, `ir21-xtask\\target`, `locksmith-t1\\target` —\n1605\t  against three carrying a lane identity (`hertz-ci-riders`, `hertz-poolowner`, `ir24-reap`). A claim\n1606\t  written by a plain build rather than by `pool-claim` is structurally un-adjudicable, and it is the\n1607\t  MAJORITY shape in the field. Whatever IR-26 does next has to say what an identity-less claim means —\n1608\t  \"the stamp arm handles it\" is false for most claims that actually exist.\n1609\t- **The fifth bare claim was invisible to the first inventory, and the miss is its own lesson:**\n1610\t  `<root>\\target-seam`, **52.06 GiB**, real dir, gitignored on its own line (`/target-seam`, added\n1611\t  `5ae68f8`, v0.12.1 era), created 2026-06-18, last written 2026-08-02 — nothing in the tracked tree\n1612\t  references it (grep over rs/toml/md/yml/ps1/sh: zero hits outside this file). The inventory predicate\n1613\t  was \"a directory named `target` inside a worktree\"; a second root-level pool under a different name\n1614\t  is not expressible in that filter, so it returned a clean zero that was reported as a population\n1615\t  ([[verdict-from-probe-competence]] in the field). Corrects the earlier \"72 GB root pool is the\n1616\t  biggest object by 9x\": the two root pools are 67.06 + 52.06 = 119.1 GiB of a 133.43 GiB box pool\n1617\t  total, so the 44-tree sweep covered ~61% of pool bytes, not the population. **Ruling (doyle,\n1618\t  2026-08-04): target-seam stands for now** — free space is ~115 GB against the 32 GB golden floor, so\n1619\t  there is no pressure; it was written to yesterday, so \"cold\" is one day deep and its writer is\n1620\t  unidentified. It becomes a reap candidate at the next free-space squeeze, after a fresh last-write\n1621\t  check and identification of what wrote it on 08-02 — reaping a pool whose writer you cannot name is\n1622\t  how the v0.51.0 fabricated-red class starts.\n1623\t- **CLAIM-OBSERVABILITY, MEASURED (hertz, 2026-08-04, three-arm rig with competence control):** a\n1624\t  displaced claimant CANNOT distinguish takeover from never-claimed — the two states are byte-identical\n1625\t  on disk (arm 1 vs arm 2 identical; arm 3 proves the rig separates states that differ, so the null is\n1626\t  real). The takeover is silent on BOTH sides: the taker's `pool-claim` prints ordinary success naming\n1627\t  no prior owner. Mechanism at `b75258d`: `pool_claim` never calls `read_owner` — it constructs its own\n1628\t  `PoolOwner` and `fs::write`s unconditionally. The displaced lane's only channel is its next build's\n1629\t  refusal, which reports a STATE (\"this pool belongs to B\"), never a transition, and arrives pull-only\n1630\t  and arbitrarily late while interleaved-artifact harm is already underway. Labelled holes: measured\n1631\t  against the origin/main xtask binary (lane-tip carry is a source read, not a measurement);\n1632\t  pool-sweep-as-channel not exercised; single-process holder pid in all arms.\n1633\t- **Bootstrap property, not a defect (hertz, measured 2026-08-03 while claiming pools for the lanes\n1634\t  3-4 rebases):** a lane DELIVERING claim-identity cannot claim its own pool WITH that identity until\n1635\t  it lands — the prebuilt origin/main `xtask.exe` writes old-shaped stamps (owner_tree, lane_label,\n1636\t  holder pid+stamp; no lane_branch, no lane_base). Enforcer turnover surfacing at CLAIM time rather\n1637\t  than build time: coverage grows only as trees turn over. Recorded because it reads as a bug the\n1638\t  first time someone meets it in the field. Related lane-craft fact from the same queue: a rebase\n1639\t  changes SHAS necessarily but hunk OFFSETS only incidentally — todlando's main.rs hunks stayed at\n1640\t  @20/@53/@70 across the f2e4516→2f427b2 rebase; treat pre-rebase overlap measurements as stale by\n1641\t  construction and re-measure, but expect the geometry to usually hold.\n1642\t- **Bootstrap property FIELD INSTANCE, main checkout (todlando 2026-08-04, IR-12 rig):** the\n1643\t  prebuilt `target/debug/xtask.exe` in the MAIN checkout pool was stale against main's own source\n1644\t  at `11169c1` — it printed `(holder pid …, born …)` and wrote a FLAT identity-less claim\n1645\t  (owner_tree/lane_label/holder_pid/holder_started_at/written_by) where main's source\n1646\t  (main.rs:2282) prints `(branch …, base …; advisory holder pid …)` and writes the nested lane.\n1647\t  A lane claimed with a stale tool records NO git identity and demotes its own adjudication back\n1648\t  to the refused bare-pid predicate. DETECTION that worked and is the reusable part: read the\n1649\t  claim line the tool PRINTS against the source just read — a mismatch names the stale enforcer\n1650\t  before it writes. REMEDY at claim time: rebuild xtask FROM THE LANE'S WORKTREE before\n1651\t  `pool-claim` (which the protocol's claim-from-your-own-worktree rule already implies; this\n1652\t  instance is why it is load-bearing and not ceremony).\n1653\t- **RULING (doyle, 2026-08-04) — the claim path must run the same guard the build path runs, and a\n1654\t  takeover becomes an event.** The documented design already says a finished lane is \"taken over\n1655\t  loudly, not refused\"; a silent unconditional overwrite violates the spelling the protocol shipped\n1656\t  under. Remedy, both halves, one small lane: (ii) `pool-claim` reads the prior owner before writing —\n1657\t  prior lane LIVE (ancestry + stamp arm, never bare pid) ⇒ refuse exactly as build.rs would; prior\n1658\t  lane finished ⇒ proceed AND announce the displacement, naming the displaced lane in the success\n1659\t  line; plus (i) a `displaced` field (prior owner + takeover stamp) rides the new claim, so the fact\n1660\t  survives in the artifact the late-reading claimant already reads. The identity-less bare claim\n1661\t  (majority field shape, above) must be handled explicitly by the same change: a bare claim carries no\n1662\t  lane to adjudicate, so takeover of a bare claim always proceeds-and-announces, and the announcement\n1663\t  names the claim as identity-less — never silently, never refused. Ripe: next CI/infra batch, same\n1664\t  lane as or beside the IR-26 remedy. Size: small.\n1665\t\n1666\t### IR-27 — A junction-pooled rig is TWO objects and teardown only ever removes one\n1667\t- **Status:** open, found in the wild 2026-08-04 · **Origin:** hertz's 44-tree worktree sweep\n1668\t  (IR-26 follow-on 3) · **Cross-ref:** [[IR-14]] (unclaimed pools), [[worktree-target-junction]]\n1669\t- **What/why:** a rig built as `worktree\\target -> junction -> .worktrees\\<pool>` has its build cache\n1670\t  in a directory that is NOT the worktree and NOT in `git worktree list`. `git worktree remove` deletes\n1671\t  the junction and reports success; the pool survives with zero inbound links and nothing naming it.\n1672\t  Measured on this box: reaping `golden-render` and `w4-cli-doc` the obvious way would have reclaimed\n1673\t  ~26 MB of worktree and stranded **14.17 GB** of pool (`gate-target-render` 6,265,448,382 B +\n1674\t  `gate-target-w4doc` 7,907,558,098 B). Neither pool appears in any worktree listing.\n1675\t- **The second shape, same mechanism, already realised:** `.worktrees\\gate-target` was found at\n1676\t  **0 files / 0 bytes with FOUR live inbound junctions** (assembly-doorbell, doorbell-w1/w2/w3). Someone\n1677\t  had already reaped that pool and left four dangling-but-valid links behind. So the defect runs both\n1678\t  ways: remove the worktree and the pool is orphaned; remove the pool and the links are orphaned.\n1679\t  Either half alone leaves a lie on disk.\n1680\t- **Why it is not just \"be careful\":** the classification step people already know\n1681\t  (`Get-Item -Force` OUTBOUND, INBOUND reparse sweep) tells you HOW to delete an object you have\n1682\t  already decided to delete. It does not tell you that a second object exists. The missing thing is an\n1683\t  enumeration that reaches pools no worktree names.\n1684\t- **Remedy shape (CORRECTED by builder retraction, 2026-08-04 — the enumeration already exists and\n1685\t  shipped):** `xtask pool-sweep` (`c6515f1`, `REQ-POOL-GC-ORPHAN-RECLAIM`, ancestor of `b7b00c3` by\n1686\t  merge-base) walks the root for dirs AND links, counts inbound links over the whole sweep before\n1687\t  forming a verdict, classifies InUse/Owned/Orphaned, and reaps orphans on `--reap`. The gap is not\n1688\t  detection, it is TIMING: a junction-pooled tree's pool is `Owned` and not reclaimable right up to\n1689\t  the moment its worktree is removed, and `Orphaned` only after — so the reclaim always lands in a\n1690\t  LATER sweep, and nothing triggers one. `gate-target` (0 bytes, four dangling inbound links) is a\n1691\t  completed instance of that deferral. Remedy is a post-teardown pass or a teardown that runs the\n1692\t  sweep itself, not new enumeration. (An earlier draft of this entry proposed building the\n1693\t  enumeration; retracted by its author before ripening — the tool refuting it was one run away.)\n1694\t- **Ripe when:** next CI/infra batch. **Size:** small (one enumeration + report, no new policy).\n1695\t- **Discipline this cost, stated so it is not re-learned:** teardown must be TWO EXPLICIT STEPS per\n1696\t  junction-pooled tree — junction deleted AS A LINK (`Directory.Delete(path, recursive: false)`), then\n1697\t  the pool AS A TREE after an inbound sweep confirms it is linkless. Executed that way on 2026-08-04:\n1698\t  28 worktrees, 4 pools, 0 skipped, 0 pinned, 17.04 GiB measured on a box with concurrent writers.\n1699\t\n1700\t### IR-28 — A wave-gap rider is visible to the request board and invisible to a milestone-narrative notes pass\n1701\t- **Status:** BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`).\n1702\t  · **Origin:** deployah, v0.53.0 release close 2026-08-04.\n1703\t- **What/why:** the v0.53.0 changelog omitted `184f2ac` (the releases#125 two-core CPU-burn fix, a\n1704\t  wave-gap rider that rode the commit range but was never LOCKSMITH scope) while the alchemy release\n1705\t  verb promoted #125 to DONE and named it publicly as shipped — two published surfaces contradicting\n1706\t  each other until the post-publish docs-only repair (`9841592`). The rule was already right (the\n1707\t  runbook audits the changelog against the COMMIT RANGE); the EXECUTION missed it, because a notes\n1708\t  pass written from the milestone narrative never enumerates the range. The mechanism, not the\n1709\t  incident: any rider is board-visible and narrative-invisible.\n1710\t- **Built evidence:** `docs/RELEASE-RUNBOOK.md` now requires a mechanical `vPREV..HEAD`\n1711\t  user-facing commit list, a changelog match beside every row, and an explicit accounting of every\n1712\t  unmatched row before the golden run. The repair precedent remains docs-only amend +\n1713\t  `gh release edit`, never retag. PR #176 passed `traceable-reqs check`.\n1714\t\n1715\t### IR-29 — twohost ladder: role A fires the done-barrier BEFORE its last cross-node rung, so the re-pull's serve window is won by timing, not guaranteed\n1716\t- **Status:** open, FIX AUTHORED-AND-COMPILED unlanded — hertz `test/twohost-serve-window`\n1717\t  @`17bbbd8` off `11169c1` (+33/-18 twohost.rs, relocation proven byte-identical by\n1718\t  comment-stripped set-diff, cargo check + clippy -D warnings green; proving two-host run still\n1719\t  owed and rides the same window as #145's closed-subnet knock row) · **Origin:** golden\n1720\t  30873007187 attempt 1 red, doyle timeline triage + hertz source diagnosis 2026-08-04.\n1721\t- **SECOND FACE, measured 2026-08-24 (WAX-SEAL #21 W3 gate climb @ 035c3fe6, doyle):** the class\n1722\t  recurs on a NEW rung, and this face is UNWINNABLE rather than racy. The W3 seal rung S1 mints\n1723\t  on A ~0.3s before A's ladder completes (mint mono 80843ms, ladder end ~81150ms, walked from\n1724\t  the capture), while the seal pump worker's cadence is 500ms — the pusher exits before its\n1725\t  first eligible post-mint tick, so ZERO feed pushes ever fire (both logs hold zero seal-feed\n1726\t  lines) and role B burns its full 900s window on \"seal: A's record replicated into B's store\".\n1727\t  Full-re-presentation heals only while a pump is RESIDENT; the rig kills it. Product not\n1728\t  implicated (local legs + design review all green at the sha). Dispatched to hertz 2026-08-24\n1729\t  with two fix shapes (mint early with ~120 ticks of resident-pump margin, or a\n1730\t  reverse-confirmation barrier on A's done-push); the climb re-runs on his fix. Lesson for\n1731\t  future rungs, stated as construction: a rung whose delivery is CADENCED must not sit inside\n1732\t  the terminal margin of the process that pushes it.\n1733\t- **Mechanism (hertz falsified the gater's first spelling, kept because the correction is the\n1734\t  entry):** NOT \"B exits early\" and NOT a missing barrier. B's contract (twohost.rs:1116-1121,\n1735\t  \"hold until A finishes its side — done-file as the ladder's completion barrier\") is right and B\n1736\t  obeys it. A BREAKS it: A pushes done.txt (:1819-1832, payload literally \"ladder complete on A\")\n1737\t  then runs the ENTIRE leg-D digest rung including the re-pull assert (:1959) before its own\n1738\t  `stop.store` (:1966). B tears down exactly when A said it could; the re-pull then races B's\n1739\t  post-signal teardown. The panic's hint text (\"may be running a version without cross-node\n1740\t  digest\") is pre-authored and was NOT evidence of version skew.\n1741\t- **Margin series, six draws of one race (deployah, markers cited by TEXT and positive-controlled\n1742\t  against a known draw before producing an unknown one):** golden 30860770146 +60s · a1 −0.6s\n1743\t  (the RED) · a2 +59.4s · a3 +60s · a4 +59.59s · a5 +63.89s. BIMODAL, not drifting: greens\n1744\t  cluster within seconds, one collapse through zero. A green does not mean the window got safer;\n1745\t  sample count characterizes a bimodal race, not margin size — the slack is incidental, not\n1746\t  designed. Local load on hfenduleam during A's leg D eats the margin directly (role A runs\n1747\t  there; the done-file is already pushed), which is why builds hold through twohost legs.\n1748\t- **⚠ THE SERIES IS CLOSED AT SIX DRAWS — ITS DERIVATION IS UNRECOVERABLE, AND NO SEVENTH NUMBER\n1749\t  MAY BE ADDED (ruled by doyle 2026-08-05, at the tranche-2 golden).** Asked to extend it with a\n1750\t  draw from run 30971976024, deployah positive-controlled the markers FIRST and the control\n1751\t  REFUSED: grepping `margin|deadline|serve window|slack|headroom|budget` against a control run\n1752\t  known to carry good twohost evidence (30940180764) returned ZERO. Source confirms it —\n1753\t  **`margin` is not an emitted token anywhere**: absent from `.github/workflows/golden.yml`, and\n1754\t  every `crates/` hit is unrelated (terminal right-margins in broker/resize tests,\n1755\t  `ROUND_DRAIN_MARGIN` in `pump/mod.rs`). So the six figures were DERIVED from log timestamps\n1756\t  against a bound that was never written down, by a measurer whose context has since been cleared;\n1757\t  the gater who recorded them never held the formula either. **Consequence, stated so nobody\n1758\t  re-derives it:** any new figure computed from these logs would be a DIFFERENT quantity wearing\n1759\t  the same name, and would enter a series whose value is its bimodality — the one structure a\n1760\t  mismatched sample corrupts invisibly. This run therefore gets a LABELLED HOLE, not a number.\n1761\t  What IS reportable for it, with endpoints named rather than a name reused: **ladder span**, node\n1762\t  start → `TWOHOST role B: ladder complete` = **183.50s** on the batch vs **259.21s** on the\n1763\t  control. Marker parity established under an IDENTICAL expression on both sides (25 = 25, after a\n1764\t  first pass that compared two different greps and would have read as parity by coincidence).\n1765\t- **The fix this makes obvious:** the twohost margin must become an EMITTED token with its two\n1766\t  events named at the emit site, so the next draw is read rather than reconstructed. A derived\n1767\t  quantity whose formula lives only in a measurer's context is one context reset away from being\n1768\t  unfalsifiable — which is exactly what happened here.\n1769\t- **Fix shape (doyle-approved):** move the done-push block to AFTER leg D, immediately ahead of\n1770\t  A's stop — one honest barrier made true, no second completion signal (a redundant pair is how\n1771\t  the next ordering bug lands after the SECOND one). `[int->REQ-REACH-1]` travels with the block.\n1772\t- **Cascade note, so a future triage does not count it:** in a1, twohost-b's gated-CLI red\n1773\t  (twohost_cli.rs:189, 910s) was the CASCADE — role-A's gated driver step SKIPPED after the\n1774\t  ladder death, so B waited for a row never produced. A red that postdates its carrier leg's\n1775\t  failure carries zero information about its own subject.\n1776\t- **Ripe when:** proving run at the next two-host window. **Size:** landed-sized already.\n1777\t\n1778\t### IR-30 — GOLDEN 4b37512 (#145): five attempts, four distinct Windows victims, one sha — the random-victim family measured end to end, and the instruments it left behind\n1779\t- **Status:** open for the FAMILY SIGHTINGS ONLY — the instrument lanes LANDED as planned with\n1780\t  the next golden batches (measured 2026-08-25, doyle, `git merge-base --is-ancestor` + first\n1781\t  tag: serve-window `17bbbd8`, selection probe `695398ba`, resume taxonomy `58337879` all in\n1782\t  **v0.54.0** (USHER, merge `390204a3` et al.); attach-intent re-aim `37afa571` in **v0.55.0**).\n1783\t  Any later record citing these as \"authored-unlanded riders\" (the v0.63.0 FIELD-SEAL plan did,\n1784\t  carried forward from this ledger) is stale — this row is the correction. The #145 gate itself\n1785\t  CONCLUDED GREEN attempt 5, main ff'd, tested==merged · **Origin:** doyle, night of 2026-08-04,\n1786\t  run 30873007187 attempts 1-5.\n1787\t- **The record:** four reds, four DIFFERENT daemon-spawning tests, Windows leg only, Linux green\n1788\t  at the same sha every attempt: a1 `daemon::tests::a_tree_teardown_reaches_a_grandchild…`\n1789\t  (10.225s full deadline, 2nd golden sighting — see [[IR-17]]'s updated sub-observation); a2\n1790\t  `registry_lifecycle::multichunk_feed_applies_with_exactly_one_snapshot_write` (0-vs-1 at\n1791\t  mono_ms 77, THIRD sighting of the 2026-07-22 seed; hertz source-named the window: converge\n1792\t  polls rows landed at merge, assert reads `snapshot_writes` incremented in `write_snapshots`,\n1793\t  unjoined-thread gap between — predicts under-count only, matching all sightings; quiet-arm\n1794\t  control 40/40 PASS 0 leaky on a still box); a3 `brain_split::broker_survives_brain_kill…`\n1795\t  (\"supervisor did not respawn the brain\", 32.8s window burn; characterization queued); a4\n1796\t  `resume_no_control_steal_e2e::brain_respawn_keeps_every_session_controller…` — UNDER the\n1797\t  ruled quiesce-partial window with a measured-clean box, and its panic NAMED A MECHANISM ITS\n1798\t  OWN DATA CONTRADICTS (pre-authored Failure-A text; gained=[0,15,17] through ONE\n1799\t  resume_sessions while a steal displaces the SET; session 0 already 4x behind BEFORE the\n1800\t  window; the rig's child-liveness immunity was a COMMENT nothing measured). Every red\n1801\t  lane-independent by per-row delta test run fresh each time, never transferred.\n1802\t- **Instruments authored off it (all thin test/obs lanes off `11169c1`, compiled where stated;\n1803\t  ALL LANDED — v0.54.0/v0.55.0, see Status):** hertz `test/twohost-serve-window` @`17bbbd8`\n1804\t  ([[IR-29]]); hertz grandchild SELECTION probe (+166/-8 daemon.rs test-mod: IsProcessInJob at\n1805\t  selection time — decisive H1/H2 splitter, birth-stamp one-directional, image, same-snapshot\n1806\t  match COUNT; compiled + deliberate-break positive control); hertz `test/resume-steal-taxonomy`\n1807\t  (+109/-6: producer counter `Broker::session_output_seq` bracketing the consumer window,\n1808\t  authenticated child pin at t1 BEFORE teardown — read at assert time would convict the rig of\n1809\t  its own cleanup — three-way verdict PRECONDITION / measured-Failure-A-with-producer-story /\n1810\t  absent-producer-is-its-own-story); todlando `obs/resume-attach-intent` @`9c9e6c5`\n1811\t  — **a DEAD-PATH emit that never fired in production; removed 2026-08-04.** The\n1812\t  `RESUME_ATTACH_INTENT` breadcrumb sat in `resume_sessions`, which has had NO production\n1813\t  caller since `03c7109` (2026-07-09): the daemon's respawn path is `run_brain` ->\n1814\t  `resume_session_cursors`, cursor-only, no attach. Its absence from a field log therefore read\n1815\t  as \"no resume happened\" when it meant \"uncalled function\" — a clean-zero manufactory aimed at\n1816\t  the very #123 hunt it was built to serve. **Do not hunt for this token.** The instrument now\n1817\t  lives at the choosers the daemon actually executes, as `ATTACH_INTENT_CHOSEN` with a distinct\n1818\t  `site=` per chooser (`gap_resume` | `serve_request` | `shell_channel`), carrying the emit\n1819\t  discipline this one always had — intent bound once, logged and passed from that same binding,\n1820\t  wildcard-free label. No REQ, per the OBS-rider precedent.\n1821\t  - _Corrected 2026-08-04 (todlando, in the re-aim rider lane): this row previously described\n1822\t    the breadcrumb as a live instrument — \"intent bound once, logged and passed from the same\n1823\t    binding, per-call epoch makes set-vs-one readable off the log\". That sentence was true\n1824\t    about the emit's CONSTRUCTION and false about its REACH, and a reader consulting this\n1825\t    register during the #123 hunt would have been sent after a token that cannot fire.\n1826\t    Replaced rather than annotated, per the register's correction convention; the superseded\n1827\t    wording lives in git._\n1828\t- **Rulings that outlive the night:** a green retires NO intermittent row — grandchild and the\n1829\t  a4 row are INSTRUMENTED-AWAITING-FIRE, the next occurrence carries its own verdict; the\n1830\t  environmental family's leg 3 (runner off the fleet host) stays operator-ruled NON-OPTION\n1831\t  (\"stop proposing it\") — sightings accumulate in the family record, evidence files itself,\n1832\t  re-asking is direction; the quiesce-partial window is the sanctioned tool and it WORKED as a\n1833\t  discriminator (a4's red under quiesce is what forced the rig-soundness finding).\n1834\t- **Instrument notes minted on the way, cheap to lose:** (a) `gh run view --log` refuses for a\n1835\t  COMPLETED attempt while any later attempt is live (gates on the RUN) — recover per-job with\n1836\t  `gh api repos/<o>/<r>/actions/jobs/<id>/logs`; (b) a process-census RESIDENT COUNT is not\n1837\t  trendable (23→17→15 in 90s of inbox-poll CLI churn) — the CLASSIFICATION is the measurement,\n1838\t  the count is noise; (c) nextest's per-run LEAKY count is a free process-leakage series already\n1839\t  in every log (a1=12/a3=10/a4=13, and the multichunk row alone leaks 0/40 — the leaks are the\n1840\t  row's NEIGHBOURS); (d) diagnostic-token greps derive from the FAILING FRAME's own emit sites,\n1841\t  never from the register entry discussing the symptom — the gater's own\n1842\t  `REAP_JOB_TERMINATE_FAIL` zero over a path that emits `SERVICE_TREE_KILL_INCOMPLETE` was VOID,\n1843\t  and the emit sites document their own vocabulary (tree_kill_incomplete_line's doc names its\n1844\t  grep-partner); (e) **\"golden green ⇒ box free\" is FALSE — the ff-push that concludes a golden\n1845\t  STARTS the automatic post-merge ci run on the same box** (hertz, measured to the second:\n1846\t  Runner.Worker up 00:13:02 local = run 30886843672 job start 07:13:02Z, ~2min after the ff), so\n1847\t  the box empties after the POST-MERGE run, not after the golden; the box has a fourth actor no\n1848\t  agent steps off, woken by every main push (todlando's spelling), and post-golden sequencing\n1849\t  must gate on `gh run view --json jobs` of the post-merge run before any timing-sensitive work.\n1850\t- **Ripe when:** ~~instrument lanes land~~ (DONE, v0.54.0/v0.55.0); family sightings stay until\n1851\t  the family record closes them — the entry now waits on FIRES, not landings. **Size:** nothing\n1852\t  left to build; the next family sighting carries its own verdict via the landed instruments.\n1853\t- **LINUX-FACE SIGHTING + ITS RESOLUTION (doyle, v0.63.0 FIELD-SEAL goldens r1-r3 + proof runs,\n1854\t  2026-08-25 — the family's first measured MECHANISM, and it is environmental-amplifier ×\n1855\t  latent-test-defect, not a product fault):** three goldens, three DISTINCT kitsubito victims,\n1856\t  8/9 green each, victims migrating across same-sha reruns (r2/r3), every red a LONG death\n1857\t  (9.9s/59.4s/62.7s) of a fast cell — the family signature on the OTHER OS. Root-caused to ONE\n1858\t  window whose WIDTH varies with load: the brain's `spawn_session_pid` Spawned-wait\n1859\t  consumes-and-discards output racing ahead of the reply (KNOWN-HAZARDS 6.9, same-session face,\n1860\t  amended at `dbe3daad`); the broker execs the PTY child ~2ms BEFORE writing `Spawned`, so a\n1861\t  fast first chunk can be eaten. Under kitsubito's then-active kernel-audit backpressure\n1862\t  (see the kitsubito-audit entry below) the broker DISPATCH thread could stall arbitrarily in\n1863\t  that gap — the ~2ms window stretched to seconds, swallowing ANY marker prefix of ANY\n1864\t  spawn-wait test: random victims, long deaths, spawn-intensity × serialization scaling\n1865\t  (deployah's measured pair), migration across reruns. Box remediation narrowed the window back\n1866\t  to ~2ms, leaving exactly one knife-edge victim (a first-chunk needle, near-deterministic red,\n1867\t  62.7s natural-life death), fixed test-side in `dbe3daad` (v0.63.0's head). Full RCA + the\n1868\t  observer-effect instrument record: releases#225 comments 5417343026/5418844404.\n1869\t  **Standing lesson for the family:** an environmental slowdown is an accidental mitigation —\n1870\t  REMEDIATING a box can EXPOSE latent knife-edge races (the storm had hidden this one for\n1871\t  releases). And a \"random victim family\" should be tested against ONE window with\n1872\t  load-dependent width before positing per-victim mechanisms. The Windows face above remains\n1873\t  open on its own instruments; the two faces now have one shared candidate SHAPE (a race window\n1874\t  amplified by box load) with different windows.\n1875\t- **Status:** open · **Origin:** measured box event, HFENDULEAM 2026-08-04 ~05:00 local, during\n1876\t  USHER lane concurrency (hertz mechanism statement + both agents' reclaim arithmetic).\n1877\t- **What/why:** the box hit **0.00 bytes free** mid-build. Failure signatures it manufactured\n1878\t  look like toolchain or code defects, not disk: `rustc-LLVM ERROR: IO failure on output stream:\n1879\t  no space on device`, `LNK1318: Unexpected PDB error; LIMIT (12)`, `LNK1108: cannot write file`\n1880\t  — a red wearing a linker's face (doyle's U2 gate rig ate exactly this; verdict legs already\n1881\t  green survived, the suite leg had to be re-run). Contributions measured, not inferred: hertz\n1882\t  ~70 GB across four lane targets (er-seams **42.66 GB** cold `--workspace --tests`,\n1883\t  selection-probe 25.80, poolowner 1.03, ci-riders 0.91), doyle gate rig 15 GB cold full build.\n1884\t  Reclaim arithmetic reconciles both and neither alone: 0.00 → 25.47 GB (hertz reaps\n1885\t  selection-probe) → ~40 GB (doyle reaps rig). **The mechanism (hertz, ruled register-worthy):\n1886\t  every isolated lane worktree carries its OWN `target/`, so disk cost is multiplied by lane\n1887\t  count, while pool-claim — built to arbitrate a SHARED pool — sees none of it; a claim on\n1888\t  main's pool is ceremonial for a lane that never writes there. The tool we use to reason about\n1889\t  build-cache contention cannot see the resource that actually ran out.** Eight-plus worktrees\n1890\t  at 25–43 GB per cold full build is the shape of the next occurrence, and it will not announce\n1891\t  itself through pool-claim. Adjacent discipline failure the same night, named so the entry\n1892\t  carries it: a gater firing a cold full-workspace rig into a window with two live builder lanes\n1893\t  is the pre-flight question-1 failure (right-size the run) — targeted legs and warm pools\n1894\t  first.\n1895\t- **Remedy shape (sketch, not ruled):** (a) a box-level free-space floor as a RIG STEP at lane\n1896\t  start — the claim verb is the natural seat (print box free + du of known lane targets at\n1897\t  `pool-claim`, warn under a floor); kin to the CI-side `REQ-CI-FREE-SPACE-PREFLIGHT` (IR-1's\n1898\t  companion fix), which covers runners but not agent lane rigs; (b) teardown-on-gate-close is\n1899\t  already a rig step (the gate-target-disposal rule) — the gap is the AGGREGATE view across\n1900\t  lanes nobody owns; (c) possibly a `pool-census` xtask verb listing every `.worktrees/*/target`\n1901\t  with sizes, so the sweep is one command instead of a du walk each agent re-derives.\n1902\t- **Ripe when:** next CI/rig-touching wave, or the next ENOSPC-signature red — whichever first.\n1903\t- **Size:** small-medium (claim-verb print + floor; census verb optional).\n1904\t- **Field addendum (2026-08-04 second event, same day filed — ripeness condition met):** the box\n1905\t  fell under the CI runner's 32 GiB free-space floor twice more (12:31 main @9d65e65 docs-only,\n1906\t  12:50 PR core#144 @b110bc8) while todlando's F-lane built. Both Windows unit legs REFUSED with\n1907\t  `RESOURCE=disk drive=C:\\ free_bytes=…` — the `REQ-CI-FREE-SPACE-PREFLIGHT` floor did exactly its\n1908\t  job: a docs-only main red named the resource instead of wearing a linker's face, and triage was\n1909\t  one log read instead of an RCA. That is the instrument's first field catch; the CI side of this\n1910\t  entry is PROVEN. The agent-lane side stays open: local trough measured 8.8 GB free mid-F-lane.\n1911\t  Reclaim, measured before/after per the teardown rule: doyle reaped gated u1+u2 lane targets\n1912\t  (POOL-OWNER claims verified own+dead-holder, inbound reparse sweep clean, worktrees kept)\n1913\t  8.8 → 59.5 GB (+50.7); hertz reaped er-seams target (pool-release first, same discipline)\n1914\t  59.46 → 101.16 GB (+42.66). Refined mechanism statement (hertz, this event): the disk floor is a\n1915\t  per-BOX resource our per-POOL instrument is structurally blind to — pool-claim answers a\n1916\t  question about contention that is not the question the box ran out of.\n1917\t- **AXIS ADDENDUM (deployah, golden 30928816784 / USHER `fc7fad1`, 2026-08-04) — one floor reading\n1918\t  is a SNAPSHOT, and the swing is bigger than the margin you fire on.** Two facts this entry's\n1919\t  remedy (a) has to be built against, both measured rather than reasoned:\n1920\t  (1) **A pre-fire PROCESS census cannot see the floor at all.** Mine came back clean minutes before\n1921\t  the run — zero test-path `spt.exe` residents, zero `cargo`/`rustc`/`link`/`cl` — and both Windows\n1922\t  legs then died in the disk preflight (`drive=C:\\ free_bytes=26099576832 floor_bytes=34359738368`,\n1923\t  `RESOURCE=disk`, exit 1) with a 128-line log carrying ZERO `Compiling`/`PASS`/`FAIL`/`Summary`\n1924\t  lines: no test signal, and the merge chain never indicted. Both readings were TRUE at the same\n1925\t  instant — the gater's finished assembly gates were sitting on disk as a DIRECTORY, not running as\n1926\t  a process. A process-axis probe is blind to a finished build's cost by construction; \"re-check\n1927\t  closer to the fire\" would have changed nothing, because the axis was never read.\n1928\t  (2) **The floor number itself moves by tens of GB inside one run window.** Same box, same drive,\n1929\t  same run, pulled from its own logs: `16:22:55` test-Windows free=26099576832 REFUSED · `16:23:07`\n1930\t  n1-gate-Windows free=26096607232 REFUSED · `16:46:54` twohost-a free=71033049088 PASSED and then\n1931\t  ran 11 minutes to success. ~45 GB returned with NO deliberate teardown, and my own reading at\n1932\t  17:13:45Z was 61352714240 — ~10 GB BELOW what twohost-a saw 27 minutes earlier. The observed swing\n1933\t  amplitude EXCEEDED the margin I was about to fire on (25.14 GiB).\n1934\t  So the rule remedy (a) must encode: measure BOTH axes (process residents AND free space against\n1935\t  the workflow's own 32 GiB floor), and reclaim until the margin exceeds the observed SWING, not one\n1936\t  sample. Triage corollary, equally load-bearing: twohost-a runs the same preflight on the same C:\n1937\t  and PASSED, so a preflight refusal is a threshold event on a moving number — never evidence the\n1938\t  box cannot run the work, and never by itself a reason to indict a merge chain.\n1939\t- **THIRD ADDENDUM (deployah, v0.54.0 cut, 2026-08-04) — the sweep answers \"0 B reclaimable\"\n1940\t  TRUTHFULLY on a box that cannot run its own work, because the reclaimable population and the\n1941\t  owned-lane population are DISJOINT.** This hazard blocked a release twice before it was seen.\n1942\t  Both Windows legs at the shipped sha `86f0d84` refused at the guard before compiling anything —\n1943\t  `ci.yml` at `free_bytes=28167569408` (26.2 GiB) and `release.yml` at `27690885120` (25.8 GiB),\n1944\t  both against `floor_bytes=34359738368`. `assemble` skipped in consequence, so no draft release\n1945\t  existed: the release was hard-blocked on disk, not on code. Neither leg produced a test verdict,\n1946\t  so both are LABELLED HOLES, not reds (ruled recorded-and-proceed by doyle, the shipped-sha delta\n1947\t  being 5 files and zero `.rs`).\n1948\t  **The finding is not the disk.** `xtask pool-sweep --root .worktrees` reported, correctly,\n1949\t  `total 66.43 GB across 3 pool(s); 0 B reclaimable in this sweep's scope` while the box sat ~6 GB\n1950\t  under its own floor. The sweep is behaving as designed — it refuses to reap owned, live lanes.\n1951\t  But the floor reasons over an AGGREGATE the sweep is forbidden to touch, so the designed\n1952\t  instrument, run at the exact moment of refusal, tells an operator there is nothing to reclaim.\n1953\t  That is true and useless. The gap between \"the sweep is correct\" and \"the box can run work\" is\n1954\t  the defect; it is not fixed by making the sweep more aggressive.\n1955\t  **Aggregate measured under `.worktrees`** (real target bytes, junction-classified first): 87.79 GB\n1956\t  across 9 lanes — 2.7x the entire 32 GiB floor. Registered pools: `w1t2-relink-force` 54.67 GB,\n1957\t  `obs-resume-attach-intent` 10.18, `w1t2-subnet-status` 1.58. Carrying targets the sweep does not\n1958\t  count as claimed pools: `hertz-teardown-bound` 11.25, `hertz-liveresolve-diag` 4.83,\n1959\t  `hertz-psyche-bound` 4.19, `hertz-poolowner` 1.03, `hertz-ci-riders` 0.91.\n1960\t  **The 54.67 GB single lane is NOT waste** (doyle's classification, ratified at this filing): a\n1961\t  verb lane at that size is workspace-all-targets e2e cost. No lane is misbehaving. That is what\n1962\t  makes this structural rather than a cleanup task — every lane is individually justified and the\n1963\t  sum still exceeds the floor.\n1964\t  **Reclaim taken, and its boundary.** 82.12 GB, from `spt-core/target` — the release driver's OWN\n1965\t  main-checkout pool, NOT a lane; free 23.23 → 105.34 GB. Classified before removal per the\n1966\t  teardown rule: OUTBOUND `Get-Item -Force` reported a real directory rather than a reparse point,\n1967\t  the INBOUND sweep found zero reparse points aimed at it, `CARGO_TARGET_DIR` was unset (no env\n1968\t  aliasing), the target SUBTREE only was reaped, both sides measured.\n1969\t  **Snapshot behavior reproduced inside this measurement window**, corroborating the axis addendum\n1970\t  above at a smaller amplitude: free read 25.49 GB when first measured and 23.23 GB at the reap\n1971\t  minutes later — it drifted 2.26 GB DOWNWARD while the operator was deciding what to do about it.\n1972\t  **Priced side effect, for the next reader:** reaping the main pool took the prebuilt `xtask` with\n1973\t  it, so the next lane claim rebuilds it first — the lane-check shortcut is cold until then. It cost\n1974\t  a 2m11s cold rebuild inside this release's own publish step.\n1975\t  **What this does NOT license:** reaping another agent's owned lane to clear a floor. The sweep's\n1976\t  refusal is correct and stays. What is missing is an AGGREGATE-AWARE signal — the box knowing its\n1977\t  lanes sum past the floor *before* a run is dispatched into a guard that will decline it.\n1978\t- **FOURTH ADDENDUM (doyle, 2026-08-04 late evening — fourth event in one day, and the first\n1979\t  RULING on this entry).** C: hit **0.44 GB free** during doyle's lane-2 stack gate and todlando's\n1980\t  re-aim leg set. Signatures manufactured this time, all initially read as something else:\n1981\t  `os error 112` mid-rlib-archive surfacing as xtask \"building spt failed\" (exit 101); a\n1982\t  servicehost force-kill unit red at a sha gated GREEN on the same rig an hour earlier; todlando's\n1983\t  6-of-7 leg table red with `LNK1318` while only traceable-reqs survived. Both agents' verdicts\n1984\t  from the window were VOIDED and re-run, not re-read.\n1985\t  **Discriminator correction (hertz, ratified at this filing):** \"treqs alone survives\" is a\n1986\t  POSITIVE TELL, never a clearing test — a full disk reds BEFORE any link step (rustc writing\n1987\t  rlibs), and treqs can red for its own reasons; signature absence says NOTHING. The only\n1988\t  falsifier for \"this red was the disk\" is free space AT RUN TIME, and no log on the box recorded\n1989\t  it, which made every red from the window unanswerable after the fact.\n1990\t  **RULING (doyle):** every rig/gate script records `FREE-AT-START` / `FREE-AT-END` in its own\n1991\t  SUMMARY — one line each, the datum that makes a disk confound answerable post-hoc. Effective\n1992\t  immediately for hand-authored rigs; hertz builds it into the shared rig harness at next touch\n1993\t  (assigned, not unasked). This is remedy (a) narrowed to its cheapest load-bearing slice.\n1994\t  **Reclaim, all FS-delta-measured:** todlando +59.4 GB (obs-resume-attach-intent 8.56 +\n1995\t  w1t2-relink-force 50.83; 0.44 → 59.83), hertz +1.79 GB (ci-riders + poolowner; sum-of-lengths\n1996\t  said 1.94, the FS delta governs; 59.09 → 60.87), doyle +38.8 GB (w1t2-subnet-status +\n1997\t  w1t2-perch-gc + w1t3-node-verb targets; 60.75 → 99.54). Full discipline each: outbound\n1998\t  classification, inbound reparse sweep (zero), CARGO_TARGET_DIR confirmed unset, subtree-only.\n1999\t  **Mechanism sharpened by this event:** the standing swing IS the finished-lane population —\n2000\t  ~110 GB of pools belonging to lanes already GATED AND PUSHED, held for hours because disposal"}]},"uuid":"f2bcab9d-b557-4216-85a2-b2fdf98e5901","timestamp":"2026-09-06T11:16:23.099Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"  those lanes was live** — so the guard authorized exactly the interleaving takeover releases#103\n  exists to prevent. The remedy records the lane's GIT IDENTITY (branch + the base sha it carried at\n  claim time) and reads lane state from ancestry: in flight while the tip is not contained in\n  `origin/main`; settled once merged, once the branch is gone, or once the branch no longer carries\n  the claimed base (the branch-level twin of a recycled pid). Holder pid demotes to advisory — a\n  LIVE holder still refuses, a dead one no longer authorizes.\n- **The strongest finding in it, and it is a filter-competence one:** without the base anchor, a\n  missing branch read as \"settled, branch gone\" **out of a directory that was not a repository at\n  all**. An unanchored Settled verdict is a clean zero produced by a filter that cannot express the\n  question. A Settled verdict now requires the base object to be present in the reading repo;\n  unanchored is UNKNOWN. Sibling of [[zero-match-filter-reads-as-absent]] in the pool domain.\n- ⚠ **POLARITY, stated rather than buried:** the new arm (dead holder + unlanded lane => REFUSE)\n  converts a false-TAKEOVER into a false-REFUSAL. That is the better failure but not a free one, and\n  its triggering case is not exotic — it is an agent going down mid-lane, which happened to hertz\n  itself this same batch and cost [[IR-1]]/[[IR-4]]/[[IR-9]] their landing. **The open gating\n  question, put to hertz 2026-08-04 and NOT yet answered:** from the refusal state, does\n  `pool-release` still clear a claim whose holder is dead and whose lane is unlanded, or does the new\n  arm refuse that too? A guard whose only escape is the blanket `SPT_POOL_UNCHECKED=1` trains people\n  onto the blanket override. The refusal must NAME the remedy, not only the witness, and the remedy\n  must be exercised FROM the refusal state rather than reasoned about ([[remedy-must-run-from-refusal-state]]).\n  If the answer is \"it refuses\", that is a design change and returns to doyle before the lane lands.\n- **COMMITTED 2026-08-04 (was uncommitted when first measured):** `ci/poolowner-lane-claim` =\n  `8ce40d9` (the change) + `98cfafe` (the remedy fix below), both off `b7b00c3`. The original\n  measurement found ZERO commits and six modified files in `.worktrees/hertz-poolowner`, i.e. every\n  reported number had been measured against a tree no git object captured; the builder committed on\n  being told. Recorded because the near-loss is the lesson, not the correction.\n- **THE REMEDY DID NOT RUN — measured from the refusal state, which is the only place the question\n  can be asked.** The refusal named its witness AND a command, and executing that command verbatim\n  failed with the IDENTICAL `SPT_POOL_FOREIGN` block that printed it: **xtask depends on spt-store,\n  so every command that builds the tool goes through the pool being refused.** This is the same dead\n  end the unclaimed-foreign arm already hit in the field and fixed by leading its line with the\n  hatch — adding a second refusal arm re-broke it immediately. FIXED at `98cfafe`: the in-flight\n  remedy now leads with the hatch and names `pool-claim`, the command that actually resolves\n  ownership. Full chain re-measured on hfenduleam: refuse → verbatim remedy fails → hatch-prefixed\n  form succeeds → build proceeds.\n- **Answer to \"does `pool-release` clear a dead-holder + unlanded claim\", two-part:** it DOES — it\n  never consults the verdict, it rewrites `lane=None` — **but it is NOT the exit**, because after\n  release the same build is refused again on the pre-existing unclaimed-foreign arm (\"no lane has\n  claimed this pool\"). Release moves you from one refusal to another. `pool-claim` is the exit.\n- **The guard is a POPULATION, not a row** (builder's generalization, adopted by doyle as the\n  standard for this class): one test poses all three refusal arms and asserts that any remedy naming\n  a command leads with the hatch, PLUS membership — three posed, three refused — so no arm passes by\n  never being reached. The rule had been learned once already and the next arm added broke it, which\n  is the definition of something that needs a population test rather than a better comment. 26/26.\n- ⚠⚠ **FLEET PROPERTY — the rig refuted itself, and this is the entry's most important line.** The\n  first arm did NOT refuse, it TOOK OVER: the arriving worktree was at `b7b00c3`, so the build script\n  that ran was ITS OWN, pre-identity. **Enforcement code comes from the ARRIVING tree, never from\n  the claim.** So until this lands everywhere, an old tree still takes a live lane's pool, and the\n  guard is only ever as new as the tree that arrives. Found by measurement; reasoning would have\n  reported a refusal the rig never produced.\n- **RULING on the fleet property (doyle 2026-08-04) — a stamp VERSION LINE is REFUSED, and not on\n  taste: it cannot work.** The tree that must refuse is the OLD one, and an old build script does not\n  read a new stamp field because it does not know the field exists. You cannot make a stale enforcer\n  honor a new rule by writing something new into the record it enforces against — **the reader is\n  the problem, not the record.** A version line would help only a CURRENT tree explain itself while\n  doing nothing to the population it is aimed at, i.e. it would retire the worry without retiring the\n  risk. Ruled instead, in priority order: **(1)** land it and state the migration window honestly —\n  the arm protects a lane only when the ARRIVING tree carries the change, coverage grows as trees\n  turn over, never retroactive; **(2)** NAME THE LOSS YOU CANNOT PREVENT ([[IR-16]]'s pattern) — the\n  claiming side may be able to notice afterwards that its pool was taken and say so loudly, turning\n  silent artifact corruption into a named event; scope separately and MEASURE whether the claiming\n  side can observe it at all before committing; **(3)** SHRINK THE POPULATION — old enforcers are old\n  trees, this box carries ~45 worktrees and most are stale, so reaping them is real mitigation and\n  cheaper than code. (2) and (3) do NOT ride this lane.\n- **The unanchored row, as asked:** `a_claim_from_another_repository_reads_unknown_not_settled` was\n  RED before the base-object requirement existed. Verbatim: `left: Settled { reason: \"lane branch\n  build/lane-x no longer exists\" }  right: Unknown`, out of a tempdir that was not a repository at\n  all. It fails without the requirement and passes with it — a real negative control, not a row that\n  only ever passed.\n- **Builder's evidence (as reported, against that uncommitted tree):** spt-poolguard 25/25 with 7 new\n  rows, one per precedence cell, two carrying their own negative control; pool_guard_canary 3/3;\n  `cargo check -p xtask -p spt-store --all-targets` clean; clippy clean on the three touched crates;\n  `traceable-reqs check` exit 0 at 745/745 with new `REQ-POOL-LANE-IDENTITY` complete at doc+impl+unit.\n- **Composed:** its OWN thin lane, riding the same next golden batch as the CI-rider cluster but NOT\n  merged into it (doyle ruling 2026-08-04). A red must stay attributable: the riders change what the\n  pipeline measures, this changes a build-time REFUSAL, and a guard whose failure mode is refusing\n  builds is the worst thing to make inseparable from a pipeline change. IR-14's four-trees-into-one-\n  unclaimed-pool finding stays OUT of this lane and stays IR-14's, on the same ground [[IR-24]] was\n  kept out of [[IR-16]] — folding it in settles its question in passing.\n- **Ripe when:** next CI/infra batch, gated on the polarity question above being answered first.\n  **Size:** small once the remedy question is settled.\n- **FALSE-LIVE, first specimen of the blocking polarity (hertz sweep, measured 2026-08-04):**\n  `.worktrees\\hertz-ci-riders\\target\\POOL-OWNER.json` named `holder_pid 31380` with\n  `holder_started_at 134302739211259713` = 2026-08-03 16:38:41. Pid 31380 on that box at read time was\n  `claude.exe -n \"doyle @ HFENDULEAM (spt-core/)\"`, created 17:31:11, FILETIME 134302770715019370.\n  Same boot, ~52 minutes apart, stamps MISMATCH. The claiming process died and the OS reissued its pid\n  to the gater's own session. Every previously measured recycle produced a false-DEAD (reads free\n  while the lane is live — the corrupting direction); this one produces a **false-LIVE**: a bare-pid\n  guard reads the claim as held by a running holder and refuses, naming doyle as the holder of hertz's\n  pool — the blocking direction, first time caught. The `holder_started_at` arm shipped in `8ce40d9`\n  discriminates it correctly — that field caught defending, not asserted to defend\n  ([[stable-anchor-is-not-a-recycling-defense]]).\n- **The mirror image, same box, same hour:** `.worktrees\\ir24-reap\\target` named `holder_pid 33612`,\n  DEAD — while that lane was genuinely LIVE, with `cargo clippy -q -p spt-daemon --lib --tests`\n  (pid 22452) running under todlando's session as it was read. Two claims, opposite errors, inside one\n  hour: liveness misreads in BOTH directions on the same box in the same hour. Holder liveness has no\n  sound polarity as a lane-state oracle. Ancestry decides ([[pool-claim-holder-death-is-not-lane-state]]).\n- **THE BARE-CLAIM GAP — a claim the stamp arm cannot adjudicate at all.** The main checkout's own pool\n  (`<root>\\target`, 72,001,016,671 B = 67.06 GiB) carries\n  `{\"owner_tree\": \"...\\\\spt-core\", \"written_by\": \"spt-poolguard\"}` — no `lane_label`, no `holder_pid`,\n  no `holder_started_at`, no `lane_branch`, no `lane_base`. `read_owner` maps that to `lane: None`, so\n  every arm the lane-identity work added is unreachable for it: it cannot be read as in-flight,\n  settled, or recycled. **FIVE of the eight** claims found on this box are this shape — `<root>\\target`,\n  `<root>\\target-seam` (below), `gate-target-render`, `ir21-xtask\\target`, `locksmith-t1\\target` —\n  against three carrying a lane identity (`hertz-ci-riders`, `hertz-poolowner`, `ir24-reap`). A claim\n  written by a plain build rather than by `pool-claim` is structurally un-adjudicable, and it is the\n  MAJORITY shape in the field. Whatever IR-26 does next has to say what an identity-less claim means —\n  \"the stamp arm handles it\" is false for most claims that actually exist.\n- **The fifth bare claim was invisible to the first inventory, and the miss is its own lesson:**\n  `<root>\\target-seam`, **52.06 GiB**, real dir, gitignored on its own line (`/target-seam`, added\n  `5ae68f8`, v0.12.1 era), created 2026-06-18, last written 2026-08-02 — nothing in the tracked tree\n  references it (grep over rs/toml/md/yml/ps1/sh: zero hits outside this file). The inventory predicate\n  was \"a directory named `target` inside a worktree\"; a second root-level pool under a different name\n  is not expressible in that filter, so it returned a clean zero that was reported as a population\n  ([[verdict-from-probe-competence]] in the field). Corrects the earlier \"72 GB root pool is the\n  biggest object by 9x\": the two root pools are 67.06 + 52.06 = 119.1 GiB of a 133.43 GiB box pool\n  total, so the 44-tree sweep covered ~61% of pool bytes, not the population. **Ruling (doyle,\n  2026-08-04): target-seam stands for now** — free space is ~115 GB against the 32 GB golden floor, so\n  there is no pressure; it was written to yesterday, so \"cold\" is one day deep and its writer is\n  unidentified. It becomes a reap candidate at the next free-space squeeze, after a fresh last-write\n  check and identification of what wrote it on 08-02 — reaping a pool whose writer you cannot name is\n  how the v0.51.0 fabricated-red class starts.\n- **CLAIM-OBSERVABILITY, MEASURED (hertz, 2026-08-04, three-arm rig with competence control):** a\n  displaced claimant CANNOT distinguish takeover from never-claimed — the two states are byte-identical\n  on disk (arm 1 vs arm 2 identical; arm 3 proves the rig separates states that differ, so the null is\n  real). The takeover is silent on BOTH sides: the taker's `pool-claim` prints ordinary success naming\n  no prior owner. Mechanism at `b75258d`: `pool_claim` never calls `read_owner` — it constructs its own\n  `PoolOwner` and `fs::write`s unconditionally. The displaced lane's only channel is its next build's\n  refusal, which reports a STATE (\"this pool belongs to B\"), never a transition, and arrives pull-only\n  and arbitrarily late while interleaved-artifact harm is already underway. Labelled holes: measured\n  against the origin/main xtask binary (lane-tip carry is a source read, not a measurement);\n  pool-sweep-as-channel not exercised; single-process holder pid in all arms.\n- **Bootstrap property, not a defect (hertz, measured 2026-08-03 while claiming pools for the lanes\n  3-4 rebases):** a lane DELIVERING claim-identity cannot claim its own pool WITH that identity until\n  it lands — the prebuilt origin/main `xtask.exe` writes old-shaped stamps (owner_tree, lane_label,\n  holder pid+stamp; no lane_branch, no lane_base). Enforcer turnover surfacing at CLAIM time rather\n  than build time: coverage grows only as trees turn over. Recorded because it reads as a bug the\n  first time someone meets it in the field. Related lane-craft fact from the same queue: a rebase\n  changes SHAS necessarily but hunk OFFSETS only incidentally — todlando's main.rs hunks stayed at\n  @20/@53/@70 across the f2e4516→2f427b2 rebase; treat pre-rebase overlap measurements as stale by\n  construction and re-measure, but expect the geometry to usually hold.\n- **Bootstrap property FIELD INSTANCE, main checkout (todlando 2026-08-04, IR-12 rig):** the\n  prebuilt `target/debug/xtask.exe` in the MAIN checkout pool was stale against main's own source\n  at `11169c1` — it printed `(holder pid …, born …)` and wrote a FLAT identity-less claim\n  (owner_tree/lane_label/holder_pid/holder_started_at/written_by) where main's source\n  (main.rs:2282) prints `(branch …, base …; advisory holder pid …)` and writes the nested lane.\n  A lane claimed with a stale tool records NO git identity and demotes its own adjudication back\n  to the refused bare-pid predicate. DETECTION that worked and is the reusable part: read the\n  claim line the tool PRINTS against the source just read — a mismatch names the stale enforcer\n  before it writes. REMEDY at claim time: rebuild xtask FROM THE LANE'S WORKTREE before\n  `pool-claim` (which the protocol's claim-from-your-own-worktree rule already implies; this\n  instance is why it is load-bearing and not ceremony).\n- **RULING (doyle, 2026-08-04) — the claim path must run the same guard the build path runs, and a\n  takeover becomes an event.** The documented design already says a finished lane is \"taken over\n  loudly, not refused\"; a silent unconditional overwrite violates the spelling the protocol shipped\n  under. Remedy, both halves, one small lane: (ii) `pool-claim` reads the prior owner before writing —\n  prior lane LIVE (ancestry + stamp arm, never bare pid) ⇒ refuse exactly as build.rs would; prior\n  lane finished ⇒ proceed AND announce the displacement, naming the displaced lane in the success\n  line; plus (i) a `displaced` field (prior owner + takeover stamp) rides the new claim, so the fact\n  survives in the artifact the late-reading claimant already reads. The identity-less bare claim\n  (majority field shape, above) must be handled explicitly by the same change: a bare claim carries no\n  lane to adjudicate, so takeover of a bare claim always proceeds-and-announces, and the announcement\n  names the claim as identity-less — never silently, never refused. Ripe: next CI/infra batch, same\n  lane as or beside the IR-26 remedy. Size: small.\n\n### IR-27 — A junction-pooled rig is TWO objects and teardown only ever removes one\n- **Status:** open, found in the wild 2026-08-04 · **Origin:** hertz's 44-tree worktree sweep\n  (IR-26 follow-on 3) · **Cross-ref:** [[IR-14]] (unclaimed pools), [[worktree-target-junction]]\n- **What/why:** a rig built as `worktree\\target -> junction -> .worktrees\\<pool>` has its build cache\n  in a directory that is NOT the worktree and NOT in `git worktree list`. `git worktree remove` deletes\n  the junction and reports success; the pool survives with zero inbound links and nothing naming it.\n  Measured on this box: reaping `golden-render` and `w4-cli-doc` the obvious way would have reclaimed\n  ~26 MB of worktree and stranded **14.17 GB** of pool (`gate-target-render` 6,265,448,382 B +\n  `gate-target-w4doc` 7,907,558,098 B). Neither pool appears in any worktree listing.\n- **The second shape, same mechanism, already realised:** `.worktrees\\gate-target` was found at\n  **0 files / 0 bytes with FOUR live inbound junctions** (assembly-doorbell, doorbell-w1/w2/w3). Someone\n  had already reaped that pool and left four dangling-but-valid links behind. So the defect runs both\n  ways: remove the worktree and the pool is orphaned; remove the pool and the links are orphaned.\n  Either half alone leaves a lie on disk.\n- **Why it is not just \"be careful\":** the classification step people already know\n  (`Get-Item -Force` OUTBOUND, INBOUND reparse sweep) tells you HOW to delete an object you have\n  already decided to delete. It does not tell you that a second object exists. The missing thing is an\n  enumeration that reaches pools no worktree names.\n- **Remedy shape (CORRECTED by builder retraction, 2026-08-04 — the enumeration already exists and\n  shipped):** `xtask pool-sweep` (`c6515f1`, `REQ-POOL-GC-ORPHAN-RECLAIM`, ancestor of `b7b00c3` by\n  merge-base) walks the root for dirs AND links, counts inbound links over the whole sweep before\n  forming a verdict, classifies InUse/Owned/Orphaned, and reaps orphans on `--reap`. The gap is not\n  detection, it is TIMING: a junction-pooled tree's pool is `Owned` and not reclaimable right up to\n  the moment its worktree is removed, and `Orphaned` only after — so the reclaim always lands in a\n  LATER sweep, and nothing triggers one. `gate-target` (0 bytes, four dangling inbound links) is a\n  completed instance of that deferral. Remedy is a post-teardown pass or a teardown that runs the\n  sweep itself, not new enumeration. (An earlier draft of this entry proposed building the\n  enumeration; retracted by its author before ripening — the tool refuting it was one run away.)\n- **Ripe when:** next CI/infra batch. **Size:** small (one enumeration + report, no new policy).\n- **Discipline this cost, stated so it is not re-learned:** teardown must be TWO EXPLICIT STEPS per\n  junction-pooled tree — junction deleted AS A LINK (`Directory.Delete(path, recursive: false)`), then\n  the pool AS A TREE after an inbound sweep confirms it is linkless. Executed that way on 2026-08-04:\n  28 worktrees, 4 pools, 0 skipped, 0 pinned, 17.04 GiB measured on a box with concurrent writers.\n\n### IR-28 — A wave-gap rider is visible to the request board and invisible to a milestone-narrative notes pass\n- **Status:** BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`).\n  · **Origin:** deployah, v0.53.0 release close 2026-08-04.\n- **What/why:** the v0.53.0 changelog omitted `184f2ac` (the releases#125 two-core CPU-burn fix, a\n  wave-gap rider that rode the commit range but was never LOCKSMITH scope) while the alchemy release\n  verb promoted #125 to DONE and named it publicly as shipped — two published surfaces contradicting\n  each other until the post-publish docs-only repair (`9841592`). The rule was already right (the\n  runbook audits the changelog against the COMMIT RANGE); the EXECUTION missed it, because a notes\n  pass written from the milestone narrative never enumerates the range. The mechanism, not the\n  incident: any rider is board-visible and narrative-invisible.\n- **Built evidence:** `docs/RELEASE-RUNBOOK.md` now requires a mechanical `vPREV..HEAD`\n  user-facing commit list, a changelog match beside every row, and an explicit accounting of every\n  unmatched row before the golden run. The repair precedent remains docs-only amend +\n  `gh release edit`, never retag. PR #176 passed `traceable-reqs check`.\n\n### IR-29 — twohost ladder: role A fires the done-barrier BEFORE its last cross-node rung, so the re-pull's serve window is won by timing, not guaranteed\n- **Status:** open, FIX AUTHORED-AND-COMPILED unlanded — hertz `test/twohost-serve-window`\n  @`17bbbd8` off `11169c1` (+33/-18 twohost.rs, relocation proven byte-identical by\n  comment-stripped set-diff, cargo check + clippy -D warnings green; proving two-host run still\n  owed and rides the same window as #145's closed-subnet knock row) · **Origin:** golden\n  30873007187 attempt 1 red, doyle timeline triage + hertz source diagnosis 2026-08-04.\n- **SECOND FACE, measured 2026-08-24 (WAX-SEAL #21 W3 gate climb @ 035c3fe6, doyle):** the class\n  recurs on a NEW rung, and this face is UNWINNABLE rather than racy. The W3 seal rung S1 mints\n  on A ~0.3s before A's ladder completes (mint mono 80843ms, ladder end ~81150ms, walked from\n  the capture), while the seal pump worker's cadence is 500ms — the pusher exits before its\n  first eligible post-mint tick, so ZERO feed pushes ever fire (both logs hold zero seal-feed\n  lines) and role B burns its full 900s window on \"seal: A's record replicated into B's store\".\n  Full-re-presentation heals only while a pump is RESIDENT; the rig kills it. Product not\n  implicated (local legs + design review all green at the sha). Dispatched to hertz 2026-08-24\n  with two fix shapes (mint early with ~120 ticks of resident-pump margin, or a\n  reverse-confirmation barrier on A's done-push); the climb re-runs on his fix. Lesson for\n  future rungs, stated as construction: a rung whose delivery is CADENCED must not sit inside\n  the terminal margin of the process that pushes it.\n- **Mechanism (hertz falsified the gater's first spelling, kept because the correction is the\n  entry):** NOT \"B exits early\" and NOT a missing barrier. B's contract (twohost.rs:1116-1121,\n  \"hold until A finishes its side — done-file as the ladder's completion barrier\") is right and B\n  obeys it. A BREAKS it: A pushes done.txt (:1819-1832, payload literally \"ladder complete on A\")\n  then runs the ENTIRE leg-D digest rung including the re-pull assert (:1959) before its own\n  `stop.store` (:1966). B tears down exactly when A said it could; the re-pull then races B's\n  post-signal teardown. The panic's hint text (\"may be running a version without cross-node\n  digest\") is pre-authored and was NOT evidence of version skew.\n- **Margin series, six draws of one race (deployah, markers cited by TEXT and positive-controlled\n  against a known draw before producing an unknown one):** golden 30860770146 +60s · a1 −0.6s\n  (the RED) · a2 +59.4s · a3 +60s · a4 +59.59s · a5 +63.89s. BIMODAL, not drifting: greens\n  cluster within seconds, one collapse through zero. A green does not mean the window got safer;\n  sample count characterizes a bimodal race, not margin size — the slack is incidental, not\n  designed. Local load on hfenduleam during A's leg D eats the margin directly (role A runs\n  there; the done-file is already pushed), which is why builds hold through twohost legs.\n- **⚠ THE SERIES IS CLOSED AT SIX DRAWS — ITS DERIVATION IS UNRECOVERABLE, AND NO SEVENTH NUMBER\n  MAY BE ADDED (ruled by doyle 2026-08-05, at the tranche-2 golden).** Asked to extend it with a\n  draw from run 30971976024, deployah positive-controlled the markers FIRST and the control\n  REFUSED: grepping `margin|deadline|serve window|slack|headroom|budget` against a control run\n  known to carry good twohost evidence (30940180764) returned ZERO. Source confirms it —\n  **`margin` is not an emitted token anywhere**: absent from `.github/workflows/golden.yml`, and\n  every `crates/` hit is unrelated (terminal right-margins in broker/resize tests,\n  `ROUND_DRAIN_MARGIN` in `pump/mod.rs`). So the six figures were DERIVED from log timestamps\n  against a bound that was never written down, by a measurer whose context has since been cleared;\n  the gater who recorded them never held the formula either. **Consequence, stated so nobody\n  re-derives it:** any new figure computed from these logs would be a DIFFERENT quantity wearing\n  the same name, and would enter a series whose value is its bimodality — the one structure a\n  mismatched sample corrupts invisibly. This run therefore gets a LABELLED HOLE, not a number.\n  What IS reportable for it, with endpoints named rather than a name reused: **ladder span**, node\n  start → `TWOHOST role B: ladder complete` = **183.50s** on the batch vs **259.21s** on the\n  control. Marker parity established under an IDENTICAL expression on both sides (25 = 25, after a\n  first pass that compared two different greps and would have read as parity by coincidence).\n- **The fix this makes obvious:** the twohost margin must become an EMITTED token with its two\n  events named at the emit site, so the next draw is read rather than reconstructed. A derived\n  quantity whose formula lives only in a measurer's context is one context reset away from being\n  unfalsifiable — which is exactly what happened here.\n- **Fix shape (doyle-approved):** move the done-push block to AFTER leg D, immediately ahead of\n  A's stop — one honest barrier made true, no second completion signal (a redundant pair is how\n  the next ordering bug lands after the SECOND one). `[int->REQ-REACH-1]` travels with the block.\n- **Cascade note, so a future triage does not count it:** in a1, twohost-b's gated-CLI red\n  (twohost_cli.rs:189, 910s) was the CASCADE — role-A's gated driver step SKIPPED after the\n  ladder death, so B waited for a row never produced. A red that postdates its carrier leg's\n  failure carries zero information about its own subject.\n- **Ripe when:** proving run at the next two-host window. **Size:** landed-sized already.\n\n### IR-30 — GOLDEN 4b37512 (#145): five attempts, four distinct Windows victims, one sha — the random-victim family measured end to end, and the instruments it left behind\n- **Status:** open for the FAMILY SIGHTINGS ONLY — the instrument lanes LANDED as planned with\n  the next golden batches (measured 2026-08-25, doyle, `git merge-base --is-ancestor` + first\n  tag: serve-window `17bbbd8`, selection probe `695398ba`, resume taxonomy `58337879` all in\n  **v0.54.0** (USHER, merge `390204a3` et al.); attach-intent re-aim `37afa571` in **v0.55.0**).\n  Any later record citing these as \"authored-unlanded riders\" (the v0.63.0 FIELD-SEAL plan did,\n  carried forward from this ledger) is stale — this row is the correction. The #145 gate itself\n  CONCLUDED GREEN attempt 5, main ff'd, tested==merged · **Origin:** doyle, night of 2026-08-04,\n  run 30873007187 attempts 1-5.\n- **The record:** four reds, four DIFFERENT daemon-spawning tests, Windows leg only, Linux green\n  at the same sha every attempt: a1 `daemon::tests::a_tree_teardown_reaches_a_grandchild…`\n  (10.225s full deadline, 2nd golden sighting — see [[IR-17]]'s updated sub-observation); a2\n  `registry_lifecycle::multichunk_feed_applies_with_exactly_one_snapshot_write` (0-vs-1 at\n  mono_ms 77, THIRD sighting of the 2026-07-22 seed; hertz source-named the window: converge\n  polls rows landed at merge, assert reads `snapshot_writes` incremented in `write_snapshots`,\n  unjoined-thread gap between — predicts under-count only, matching all sightings; quiet-arm\n  control 40/40 PASS 0 leaky on a still box); a3 `brain_split::broker_survives_brain_kill…`\n  (\"supervisor did not respawn the brain\", 32.8s window burn; characterization queued); a4\n  `resume_no_control_steal_e2e::brain_respawn_keeps_every_session_controller…` — UNDER the\n  ruled quiesce-partial window with a measured-clean box, and its panic NAMED A MECHANISM ITS\n  OWN DATA CONTRADICTS (pre-authored Failure-A text; gained=[0,15,17] through ONE\n  resume_sessions while a steal displaces the SET; session 0 already 4x behind BEFORE the\n  window; the rig's child-liveness immunity was a COMMENT nothing measured). Every red\n  lane-independent by per-row delta test run fresh each time, never transferred.\n- **Instruments authored off it (all thin test/obs lanes off `11169c1`, compiled where stated;\n  ALL LANDED — v0.54.0/v0.55.0, see Status):** hertz `test/twohost-serve-window` @`17bbbd8`\n  ([[IR-29]]); hertz grandchild SELECTION probe (+166/-8 daemon.rs test-mod: IsProcessInJob at\n  selection time — decisive H1/H2 splitter, birth-stamp one-directional, image, same-snapshot\n  match COUNT; compiled + deliberate-break positive control); hertz `test/resume-steal-taxonomy`\n  (+109/-6: producer counter `Broker::session_output_seq` bracketing the consumer window,\n  authenticated child pin at t1 BEFORE teardown — read at assert time would convict the rig of\n  its own cleanup — three-way verdict PRECONDITION / measured-Failure-A-with-producer-story /\n  absent-producer-is-its-own-story); todlando `obs/resume-attach-intent` @`9c9e6c5`\n  — **a DEAD-PATH emit that never fired in production; removed 2026-08-04.** The\n  `RESUME_ATTACH_INTENT` breadcrumb sat in `resume_sessions`, which has had NO production\n  caller since `03c7109` (2026-07-09): the daemon's respawn path is `run_brain` ->\n  `resume_session_cursors`, cursor-only, no attach. Its absence from a field log therefore read\n  as \"no resume happened\" when it meant \"uncalled function\" — a clean-zero manufactory aimed at\n  the very #123 hunt it was built to serve. **Do not hunt for this token.** The instrument now\n  lives at the choosers the daemon actually executes, as `ATTACH_INTENT_CHOSEN` with a distinct\n  `site=` per chooser (`gap_resume` | `serve_request` | `shell_channel`), carrying the emit\n  discipline this one always had — intent bound once, logged and passed from that same binding,\n  wildcard-free label. No REQ, per the OBS-rider precedent.\n  - _Corrected 2026-08-04 (todlando, in the re-aim rider lane): this row previously described\n    the breadcrumb as a live instrument — \"intent bound once, logged and passed from the same\n    binding, per-call epoch makes set-vs-one readable off the log\". That sentence was true\n    about the emit's CONSTRUCTION and false about its REACH, and a reader consulting this\n    register during the #123 hunt would have been sent after a token that cannot fire.\n    Replaced rather than annotated, per the register's correction convention; the superseded\n    wording lives in git._\n- **Rulings that outlive the night:** a green retires NO intermittent row — grandchild and the\n  a4 row are INSTRUMENTED-AWAITING-FIRE, the next occurrence carries its own verdict; the\n  environmental family's leg 3 (runner off the fleet host) stays operator-ruled NON-OPTION\n  (\"stop proposing it\") — sightings accumulate in the family record, evidence files itself,\n  re-asking is direction; the quiesce-partial window is the sanctioned tool and it WORKED as a\n  discriminator (a4's red under quiesce is what forced the rig-soundness finding).\n- **Instrument notes minted on the way, cheap to lose:** (a) `gh run view --log` refuses for a\n  COMPLETED attempt while any later attempt is live (gates on the RUN) — recover per-job with\n  `gh api repos/<o>/<r>/actions/jobs/<id>/logs`; (b) a process-census RESIDENT COUNT is not\n  trendable (23→17→15 in 90s of inbox-poll CLI churn) — the CLASSIFICATION is the measurement,\n  the count is noise; (c) nextest's per-run LEAKY count is a free process-leakage series already\n  in every log (a1=12/a3=10/a4=13, and the multichunk row alone leaks 0/40 — the leaks are the\n  row's NEIGHBOURS); (d) diagnostic-token greps derive from the FAILING FRAME's own emit sites,\n  never from the register entry discussing the symptom — the gater's own\n  `REAP_JOB_TERMINATE_FAIL` zero over a path that emits `SERVICE_TREE_KILL_INCOMPLETE` was VOID,\n  and the emit sites document their own vocabulary (tree_kill_incomplete_line's doc names its\n  grep-partner); (e) **\"golden green ⇒ box free\" is FALSE — the ff-push that concludes a golden\n  STARTS the automatic post-merge ci run on the same box** (hertz, measured to the second:\n  Runner.Worker up 00:13:02 local = run 30886843672 job start 07:13:02Z, ~2min after the ff), so\n  the box empties after the POST-MERGE run, not after the golden; the box has a fourth actor no\n  agent steps off, woken by every main push (todlando's spelling), and post-golden sequencing\n  must gate on `gh run view --json jobs` of the post-merge run before any timing-sensitive work.\n- **Ripe when:** ~~instrument lanes land~~ (DONE, v0.54.0/v0.55.0); family sightings stay until\n  the family record closes them — the entry now waits on FIRES, not landings. **Size:** nothing\n  left to build; the next family sighting carries its own verdict via the landed instruments.\n- **LINUX-FACE SIGHTING + ITS RESOLUTION (doyle, v0.63.0 FIELD-SEAL goldens r1-r3 + proof runs,\n  2026-08-25 — the family's first measured MECHANISM, and it is environmental-amplifier ×\n  latent-test-defect, not a product fault):** three goldens, three DISTINCT kitsubito victims,\n  8/9 green each, victims migrating across same-sha reruns (r2/r3), every red a LONG death\n  (9.9s/59.4s/62.7s) of a fast cell — the family signature on the OTHER OS. Root-caused to ONE\n  window whose WIDTH varies with load: the brain's `spawn_session_pid` Spawned-wait\n  consumes-and-discards output racing ahead of the reply (KNOWN-HAZARDS 6.9, same-session face,\n  amended at `dbe3daad`); the broker execs the PTY child ~2ms BEFORE writing `Spawned`, so a\n  fast first chunk can be eaten. Under kitsubito's then-active kernel-audit backpressure\n  (see the kitsubito-audit entry below) the broker DISPATCH thread could stall arbitrarily in\n  that gap — the ~2ms window stretched to seconds, swallowing ANY marker prefix of ANY\n  spawn-wait test: random victims, long deaths, spawn-intensity × serialization scaling\n  (deployah's measured pair), migration across reruns. Box remediation narrowed the window back\n  to ~2ms, leaving exactly one knife-edge victim (a first-chunk needle, near-deterministic red,\n  62.7s natural-life death), fixed test-side in `dbe3daad` (v0.63.0's head). Full RCA + the\n  observer-effect instrument record: releases#225 comments 5417343026/5418844404.\n  **Standing lesson for the family:** an environmental slowdown is an accidental mitigation —\n  REMEDIATING a box can EXPOSE latent knife-edge races (the storm had hidden this one for\n  releases). And a \"random victim family\" should be tested against ONE window with\n  load-dependent width before positing per-victim mechanisms. The Windows face above remains\n  open on its own instruments; the two faces now have one shared candidate SHAPE (a race window\n  amplified by box load) with different windows.\n- **Status:** open · **Origin:** measured box event, HFENDULEAM 2026-08-04 ~05:00 local, during\n  USHER lane concurrency (hertz mechanism statement + both agents' reclaim arithmetic).\n- **What/why:** the box hit **0.00 bytes free** mid-build. Failure signatures it manufactured\n  look like toolchain or code defects, not disk: `rustc-LLVM ERROR: IO failure on output stream:\n  no space on device`, `LNK1318: Unexpected PDB error; LIMIT (12)`, `LNK1108: cannot write file`\n  — a red wearing a linker's face (doyle's U2 gate rig ate exactly this; verdict legs already\n  green survived, the suite leg had to be re-run). Contributions measured, not inferred: hertz\n  ~70 GB across four lane targets (er-seams **42.66 GB** cold `--workspace --tests`,\n  selection-probe 25.80, poolowner 1.03, ci-riders 0.91), doyle gate rig 15 GB cold full build.\n  Reclaim arithmetic reconciles both and neither alone: 0.00 → 25.47 GB (hertz reaps\n  selection-probe) → ~40 GB (doyle reaps rig). **The mechanism (hertz, ruled register-worthy):\n  every isolated lane worktree carries its OWN `target/`, so disk cost is multiplied by lane\n  count, while pool-claim — built to arbitrate a SHARED pool — sees none of it; a claim on\n  main's pool is ceremonial for a lane that never writes there. The tool we use to reason about\n  build-cache contention cannot see the resource that actually ran out.** Eight-plus worktrees\n  at 25–43 GB per cold full build is the shape of the next occurrence, and it will not announce\n  itself through pool-claim. Adjacent discipline failure the same night, named so the entry\n  carries it: a gater firing a cold full-workspace rig into a window with two live builder lanes\n  is the pre-flight question-1 failure (right-size the run) — targeted legs and warm pools\n  first.\n- **Remedy shape (sketch, not ruled):** (a) a box-level free-space floor as a RIG STEP at lane\n  start — the claim verb is the natural seat (print box free + du of known lane targets at\n  `pool-claim`, warn under a floor); kin to the CI-side `REQ-CI-FREE-SPACE-PREFLIGHT` (IR-1's\n  companion fix), which covers runners but not agent lane rigs; (b) teardown-on-gate-close is\n  already a rig step (the gate-target-disposal rule) — the gap is the AGGREGATE view across\n  lanes nobody owns; (c) possibly a `pool-census` xtask verb listing every `.worktrees/*/target`\n  with sizes, so the sweep is one command instead of a du walk each agent re-derives.\n- **Ripe when:** next CI/rig-touching wave, or the next ENOSPC-signature red — whichever first.\n- **Size:** small-medium (claim-verb print + floor; census verb optional).\n- **Field addendum (2026-08-04 second event, same day filed — ripeness condition met):** the box\n  fell under the CI runner's 32 GiB free-space floor twice more (12:31 main @9d65e65 docs-only,\n  12:50 PR core#144 @b110bc8) while todlando's F-lane built. Both Windows unit legs REFUSED with\n  `RESOURCE=disk drive=C:\\ free_bytes=…` — the `REQ-CI-FREE-SPACE-PREFLIGHT` floor did exactly its\n  job: a docs-only main red named the resource instead of wearing a linker's face, and triage was\n  one log read instead of an RCA. That is the instrument's first field catch; the CI side of this\n  entry is PROVEN. The agent-lane side stays open: local trough measured 8.8 GB free mid-F-lane.\n  Reclaim, measured before/after per the teardown rule: doyle reaped gated u1+u2 lane targets\n  (POOL-OWNER claims verified own+dead-holder, inbound reparse sweep clean, worktrees kept)\n  8.8 → 59.5 GB (+50.7); hertz reaped er-seams target (pool-release first, same discipline)\n  59.46 → 101.16 GB (+42.66). Refined mechanism statement (hertz, this event): the disk floor is a\n  per-BOX resource our per-POOL instrument is structurally blind to — pool-claim answers a\n  question about contention that is not the question the box ran out of.\n- **AXIS ADDENDUM (deployah, golden 30928816784 / USHER `fc7fad1`, 2026-08-04) — one floor reading\n  is a SNAPSHOT, and the swing is bigger than the margin you fire on.** Two facts this entry's\n  remedy (a) has to be built against, both measured rather than reasoned:\n  (1) **A pre-fire PROCESS census cannot see the floor at all.** Mine came back clean minutes before\n  the run — zero test-path `spt.exe` residents, zero `cargo`/`rustc`/`link`/`cl` — and both Windows\n  legs then died in the disk preflight (`drive=C:\\ free_bytes=26099576832 floor_bytes=34359738368`,\n  `RESOURCE=disk`, exit 1) with a 128-line log carrying ZERO `Compiling`/`PASS`/`FAIL`/`Summary`\n  lines: no test signal, and the merge chain never indicted. Both readings were TRUE at the same\n  instant — the gater's finished assembly gates were sitting on disk as a DIRECTORY, not running as\n  a process. A process-axis probe is blind to a finished build's cost by construction; \"re-check\n  closer to the fire\" would have changed nothing, because the axis was never read.\n  (2) **The floor number itself moves by tens of GB inside one run window.** Same box, same drive,\n  same run, pulled from its own logs: `16:22:55` test-Windows free=26099576832 REFUSED · `16:23:07`\n  n1-gate-Windows free=26096607232 REFUSED · `16:46:54` twohost-a free=71033049088 PASSED and then\n  ran 11 minutes to success. ~45 GB returned with NO deliberate teardown, and my own reading at\n  17:13:45Z was 61352714240 — ~10 GB BELOW what twohost-a saw 27 minutes earlier. The observed swing\n  amplitude EXCEEDED the margin I was about to fire on (25.14 GiB).\n  So the rule remedy (a) must encode: measure BOTH axes (process residents AND free space against\n  the workflow's own 32 GiB floor), and reclaim until the margin exceeds the observed SWING, not one\n  sample. Triage corollary, equally load-bearing: twohost-a runs the same preflight on the same C:\n  and PASSED, so a preflight refusal is a threshold event on a moving number — never evidence the\n  box cannot run the work, and never by itself a reason to indict a merge chain.\n- **THIRD ADDENDUM (deployah, v0.54.0 cut, 2026-08-04) — the sweep answers \"0 B reclaimable\"\n  TRUTHFULLY on a box that cannot run its own work, because the reclaimable population and the\n  owned-lane population are DISJOINT.** This hazard blocked a release twice before it was seen.\n  Both Windows legs at the shipped sha `86f0d84` refused at the guard before compiling anything —\n  `ci.yml` at `free_bytes=28167569408` (26.2 GiB) and `release.yml` at `27690885120` (25.8 GiB),\n  both against `floor_bytes=34359738368`. `assemble` skipped in consequence, so no draft release\n  existed: the release was hard-blocked on disk, not on code. Neither leg produced a test verdict,\n  so both are LABELLED HOLES, not reds (ruled recorded-and-proceed by doyle, the shipped-sha delta\n  being 5 files and zero `.rs`).\n  **The finding is not the disk.** `xtask pool-sweep --root .worktrees` reported, correctly,\n  `total 66.43 GB across 3 pool(s); 0 B reclaimable in this sweep's scope` while the box sat ~6 GB\n  under its own floor. The sweep is behaving as designed — it refuses to reap owned, live lanes.\n  But the floor reasons over an AGGREGATE the sweep is forbidden to touch, so the designed\n  instrument, run at the exact moment of refusal, tells an operator there is nothing to reclaim.\n  That is true and useless. The gap between \"the sweep is correct\" and \"the box can run work\" is\n  the defect; it is not fixed by making the sweep more aggressive.\n  **Aggregate measured under `.worktrees`** (real target bytes, junction-classified first): 87.79 GB\n  across 9 lanes — 2.7x the entire 32 GiB floor. Registered pools: `w1t2-relink-force` 54.67 GB,\n  `obs-resume-attach-intent` 10.18, `w1t2-subnet-status` 1.58. Carrying targets the sweep does not\n  count as claimed pools: `hertz-teardown-bound` 11.25, `hertz-liveresolve-diag` 4.83,\n  `hertz-psyche-bound` 4.19, `hertz-poolowner` 1.03, `hertz-ci-riders` 0.91.\n  **The 54.67 GB single lane is NOT waste** (doyle's classification, ratified at this filing): a\n  verb lane at that size is workspace-all-targets e2e cost. No lane is misbehaving. That is what\n  makes this structural rather than a cleanup task — every lane is individually justified and the\n  sum still exceeds the floor.\n  **Reclaim taken, and its boundary.** 82.12 GB, from `spt-core/target` — the release driver's OWN\n  main-checkout pool, NOT a lane; free 23.23 → 105.34 GB. Classified before removal per the\n  teardown rule: OUTBOUND `Get-Item -Force` reported a real directory rather than a reparse point,\n  the INBOUND sweep found zero reparse points aimed at it, `CARGO_TARGET_DIR` was unset (no env\n  aliasing), the target SUBTREE only was reaped, both sides measured.\n  **Snapshot behavior reproduced inside this measurement window**, corroborating the axis addendum\n  above at a smaller amplitude: free read 25.49 GB when first measured and 23.23 GB at the reap\n  minutes later — it drifted 2.26 GB DOWNWARD while the operator was deciding what to do about it.\n  **Priced side effect, for the next reader:** reaping the main pool took the prebuilt `xtask` with\n  it, so the next lane claim rebuilds it first — the lane-check shortcut is cold until then. It cost\n  a 2m11s cold rebuild inside this release's own publish step.\n  **What this does NOT license:** reaping another agent's owned lane to clear a floor. The sweep's\n  refusal is correct and stays. What is missing is an AGGREGATE-AWARE signal — the box knowing its\n  lanes sum past the floor *before* a run is dispatched into a guard that will decline it.\n- **FOURTH ADDENDUM (doyle, 2026-08-04 late evening — fourth event in one day, and the first\n  RULING on this entry).** C: hit **0.44 GB free** during doyle's lane-2 stack gate and todlando's\n  re-aim leg set. Signatures manufactured this time, all initially read as something else:\n  `os error 112` mid-rlib-archive surfacing as xtask \"building spt failed\" (exit 101); a\n  servicehost force-kill unit red at a sha gated GREEN on the same rig an hour earlier; todlando's\n  6-of-7 leg table red with `LNK1318` while only traceable-reqs survived. Both agents' verdicts\n  from the window were VOIDED and re-run, not re-read.\n  **Discriminator correction (hertz, ratified at this filing):** \"treqs alone survives\" is a\n  POSITIVE TELL, never a clearing test — a full disk reds BEFORE any link step (rustc writing\n  rlibs), and treqs can red for its own reasons; signature absence says NOTHING. The only\n  falsifier for \"this red was the disk\" is free space AT RUN TIME, and no log on the box recorded\n  it, which made every red from the window unanswerable after the fact.\n  **RULING (doyle):** every rig/gate script records `FREE-AT-START` / `FREE-AT-END` in its own\n  SUMMARY — one line each, the datum that makes a disk confound answerable post-hoc. Effective\n  immediately for hand-authored rigs; hertz builds it into the shared rig harness at next touch\n  (assigned, not unasked). This is remedy (a) narrowed to its cheapest load-bearing slice.\n  **Reclaim, all FS-delta-measured:** todlando +59.4 GB (obs-resume-attach-intent 8.56 +\n  w1t2-relink-force 50.83; 0.44 → 59.83), hertz +1.79 GB (ci-riders + poolowner; sum-of-lengths\n  said 1.94, the FS delta governs; 59.09 → 60.87), doyle +38.8 GB (w1t2-subnet-status +\n  w1t2-perch-gc + w1t3-node-verb targets; 60.75 → 99.54). Full discipline each: outbound\n  classification, inbound reparse sweep (zero), CARGO_TARGET_DIR confirmed unset, subtree-only.\n  **Mechanism sharpened by this event:** the standing swing IS the finished-lane population —\n  ~110 GB of pools belonging to lanes already GATED AND PUSHED, held for hours because disposal","numLines":500,"startLine":1501,"totalLines":3791}},"sourceToolAssistantUUID":"06d08932-115b-4d50-91ce-b9198e1b8e3b","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"f2bcab9d-b557-4216-85a2-b2fdf98e5901","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6EosZnaEHQefqyxnFm","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"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"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":20353,"cache_read_input_tokens":116444,"cache_creation":{"ephemeral_5m_input_tokens":20353,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6Eo9f53ooB4UKPBUVk","attributionAgent":"general-purpose","type":"assistant","uuid":"2fa3ce54-a3bf-4719-b3c8-414670d29331","timestamp":"2026-09-06T11:16:25.892Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"2fa3ce54-a3bf-4719-b3c8-414670d29331","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6EosZnaEHQefqyxnFm","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01MhvUVa8hBmGdtghGVQpb2F","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":2001,"limit":500},"caller":{"type":"direct"}}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":20353,"cache_read_input_tokens":116444,"cache_creation":{"ephemeral_5m_input_tokens":20353,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6Eo9f53ooB4UKPBUVk","attributionAgent":"general-purpose","type":"assistant","uuid":"a0b1527d-61cd-4f42-8b50-d46b88ba4d6c","timestamp":"2026-09-06T11:16:26.424Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"a0b1527d-61cd-4f42-8b50-d46b88ba4d6c","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01MhvUVa8hBmGdtghGVQpb2F","type":"tool_result","content":"2001\t  fires at GATE close (a rig step) while nothing fires at LANE finish; a pushed lane awaiting\n2002\t  assembly holds its pool invisibly. Corollary corrections carried: todlando withdrew his\n2003\t  name-based pool census (10x off; ancestry, not directory names, classifies a pool as closed),\n2004\t  and hertz-selection-probe's worktree removal REFUSED Permission denied — IR-38's second holder\n2005\t  class recurring, left for retry rather than forced.\n2006\t\n2007\t- **FIFTH ADDENDUM (deployah, v0.63.0 FIELD-SEAL golden, 2026-08-25) — SCOPED DELIBERATELY TO ONE\n2008\t  CONSEQUENCE: reaping a pool UNCLAIMS its tree, and the next builder meets a refusal that is the\n2009\t  rule working.** (The disk-floor mechanism from the same event is doyle's to file at his\n2010\t  release-close sweep — one voice each, by division agreed in-window. This addendum stops at the\n2011\t  pool-claim consequence and deliberately does not restate the floor finding.)\n2012\t  Five FIELD-SEAL lane pools were reaped to clear the golden floor — gate rig `gate-222-ca30a79e`\n2013\t  plus lanes `fix-222`, `w2-seal-ux`, `w3-ingest`, `w4-exit-subject`; **148.48 GB measured by FS\n2014\t  delta**, free 1.37 → 149.84 GB, worktree checkouts kept, `main/target` untouched by ruling.\n2015\t  **The consequence to record:** `POOL-OWNER.json` lives INSIDE `target/`, so reaping the subtree\n2016\t  takes the claim with it. Those five trees are now **UNCLAIMED — which is fresh-not-foreign**, a\n2017\t  different state from the `SPT_POOL_FOREIGN` refusal. Whoever resumes one of those lanes (a hertz\n2018\t  fixup, a golden-red rebuild) must run `cargo run -p xtask -- pool-claim --pool <dir> --label\n2019\t  <lane>` **from that worktree** before the first build, or `crates/spt-store/build.rs` refuses.\n2020\t  **A refusal there is the rule working, not a defect** — filed precisely so a later reader does\n2021\t  not open an issue against the build script for behaving correctly. Naming it costs one line;\n2022\t  the alternative is an RCA against our own guard.\n2023\t  **Prediction-vs-meter, corroborating hertz's fourth-addendum note at ~75x its scale:** pre-reap\n2024\t  sum-of-lengths sizing predicted 163.9 GB; the FS delta paid 148.48 GB, a 15.4 GB shortfall left\n2025\t  UNEXPLAINED here rather than rationalized (allocation granularity, sparse/compressed extents and\n2026\t  concurrent writes all sit between the two meters). **The FS delta governs** — hertz ruled this at\n2027\t  1.94-vs-actual and it holds at three digits. Report the meter, never the estimate that agreed\n2028\t  with your plan.\n2029\t  **Discipline executed, for the audit trail:** outbound classification re-read AT REAP TIME (all\n2030\t  five real dirs, zero LinkType); inbound sweep over **2854** reparse points under `projects\\`\n2031\t  found zero aimed at any victim; `CARGO_TARGET_DIR` confirmed empty in process, **Machine and\n2032\t  User** scope (the arm that leaves no directory entry to notice afterwards); process census\n2033\t  RE-RUN at reap time rather than carried from a peer's snapshot — zero builders, zero processes\n2034\t  imaged out of a victim pool, both live `spt` images resolving to the installed path. The peer's\n2035\t  snapshot proved correct; it was re-run because a snapshot is not a standing property, which is\n2036\t  the reason it was offered with that caveat.\n2037\t\n2038\t### IR-32 — Docs-drift gate blesses its own gen: an empty-emitting producer agrees with itself perfectly\n2039\t- **Status:** open · **Origin:** todlando mid-lane stop-and-report, U1 (#144) 2026-08-04. Filed by\n2040\t  the builder to the gater deliberately — register shape is doyle's to own.\n2041\t- **What/why:** with a defective binary in the tree (stack-overflowed before reaching its own\n2042\t  code, empty stdout, non-fatal to the generator), `cargo run -p xtask -- gen` wrote\n2043\t  `docs-site/src/cli/reference.md` reduced to EIGHT lines — title, do-not-edit banner, empty code\n2044\t  fence — deleting 3193 lines of published CLI reference. `xtask check` then exited 0, because\n2045\t  the drift gate compares what the binary emits NOW against what the file holds, and gen had just\n2046\t  overwritten the file with exactly that emit. **A producer that emits nothing agrees with itself\n2047\t  perfectly.** Caught only because the builder grepped the regenerated page for his new flag\n2048\t  names and treated the clean zero as suspicious ([[zero-match-filter-reads-as-absent]] shape);\n2049\t  the gate itself would never have said a word, and the gutted public reference ships green.\n2050\t  The mechanism generalizes past the stack overflow that exposed it: ANY failure mode that makes\n2051\t  `spt --help` produce empty stdout while exiting non-fatally to the generator gets the same\n2052\t  green. Kin to [[cli-command-docs-drift]] (the gate this defeats) — the gate detects DRIFT\n2053\t  between binary and page, and is structurally blind to a page just regenerated from a broken\n2054\t  binary.\n2055\t- **Remedy shape (builder's sketch, sound; not yet ruled on seat):** a floor in `xtask gen` —\n2056\t  refuse to write a page whose help block is empty, or whose output is implausibly shorter than\n2057\t  the file it replaces — so the generator fails loudly instead of producing a stub the gate\n2058\t  blesses. Gen is the right seat: check runs in CI on a fresh emit too, so a check-side floor\n2059\t  alone still lets a local gen gut the working tree.\n2060\t- **Ripe when:** next docs-tooling or xtask-touching lane; SOONER if any lane regenerates the CLI\n2061\t  reference before the floor exists (a gate on that lane must assert page LENGTH, not gen's exit\n2062\t  code, until this is built).\n2063\t- **Size:** small (one refusal + a length-plausibility floor in gen).\n2064\t\n2065\t### IR-33 — Debug-build clap Command tree runs near the main-thread stack ceiling; the margin is THREE net new args, bisected at `8f291e1` (the original ~6 was measured on U1's tree and is superseded)\n2066\t- **Status:** open · **Origin:** todlando U1 (#144) 2026-08-04, delta-tested mid-lane.\n2067\t- **What/why:** eight extra hidden bool args across the five knock seats grew the derive-built\n2068\t  Command tree past what the debug binary's main thread stack can construct: EVERY invocation\n2069\t  (`spt --version` included) died with `thread 'main' has overflowed its stack`, exit\n2070\t  -1073741571, before reaching any of its own code. Delta-tested, not assumed: the same command\n2071\t  on the main-pool binary from main printed normally. U1 repaired its own trigger (raw-argv\n2072\t  pre-scan for retired flags before clap parses; lane ends net +2 args) — but the CEILING\n2073\t  remains: the tree is now close enough that a handful of net new arguments in a debug build\n2074\t  reproduce a total binary outage — **and the handful is THREE, not six; see the correction\n2075\t  below before planning against this entry.** **#5's verb-surface rework is the next lane that adds\n2076\t  arguments and it is much bigger than U1** — this entry exists so #5 is planned knowing the\n2077\t  margin, not discovering it. Note the failure's face: it presents as a broken binary, and via\n2078\t  [[IR-32]] it presents as a silently gutted docs page — neither names the stack.\n2079\t- **CORRECTION — the margin is THREE, bisected at `8f291e1` (todlando's U3 lane\n2080\t  `build/usher-u3-verb-surface`, own pool, debug profile; filed by deployah 2026-08-04).** The\n2081\t  original ~6 was measured on U1's tree and was right when written; it is wrong now, and the\n2082\t  difference is the difference between \"plan carefully\" and \"one flag anywhere takes the binary\n2083\t  down\". N hidden bool args added to the ROOT `Cli` derive, tree restored from git between every\n2084\t  row, `--version` as the invocation (it carries no work of its own, so whatever it costs IS tree\n2085\t  construction):\n2086\t\n2087\t      N=0  exit 0                OK  (control — unmodified lane binary answers `spt 0.53.0`)\n2088\t      N=1  exit 0                OK\n2089\t      N=2  exit 0                OK\n2090\t      N=3  exit -1073741571      STACK-OVERFLOW\n2091\t      N=4 / N=6 / N=8            STACK-OVERFLOW\n2092\t\n2093\t  PLACEMENT DIFFERENTIAL, run because #5 adds args at `EndpointCmd` seats rather than at the root\n2094\t  and a root-only number could have measured the wrong thing: same N injected inside a NESTED\n2095\t  endpoint seat gives `SEAT N=2` OK, `SEAT N=3` STACK-OVERFLOW. **Identical ceiling — placement does\n2096\t  not move it**, so three is the number for the shape #5 actually builds. (Rig hazard worth keeping:\n2097\t  the first seat attempt produced a COMPILE error, E0027, because the dispatch destructures that\n2098\t  variant exhaustively — taken at face value it would have read as \"the seat is fine\". Both rows\n2099\t  above are from the fixed rig.) CONSEQUENCE FOR #5: the ratified MIN spelling ends net +2, i.e. it\n2100\t  would have shipped with ONE argument of headroom, and any later lane adding a single flag anywhere\n2101\t  in the tree would then take the whole binary down, `--version` included. Remedy (b) below stops\n2102\t  being \"buys headroom\" and becomes the precondition for #5 shipping safely.\n2103\t- **Remedy shape (sketch, not ruled):** (a) cheapest tooth — a debug-build smoke that runs\n2104\t  `spt --help` and asserts non-empty stdout + exit 0, which also backstops IR-32's trigger;\n2105\t  (b) raise the main thread stack for the binary (build config), buying headroom without\n2106\t  restructuring; (c) structural — box/flatten the derive tree so construction cost stops scaling\n2107\t  with arg count. (a) is a rider candidate for any lane; (b)/(c) want a real measurement of\n2108\t  where the ceiling sits before choosing.\n2109\t- **Ripe when:** #5 (U3 verb surface) PLANNING — this is a planning input, not just a build item;\n2110\t  the smoke tooth (a) is ripe for the next CI-touching lane regardless.\n2111\t- **Size:** small for (a); medium for (b)/(c) with the measurement.\n2112\t\n2113\t### IR-34 — nextest LEAK flag on the zombie-fixture row is dominant-but-intermittent (19/20 measured); any gate reading it as a signal flaps\n2114\t- **Status:** open · **Origin:** doyle #142 F-lane gate 2026-08-04 (first sighting in a gate run);\n2115\t  characterized same day by hertz from retained logs, ownership falsified by todlando.\n2116\t- **What/why:** `broker::tests::windows_session_is_zombie_sees_a_handle_held_corpse_as_dead` (the\n2117\t  ADR-0041 zombie-detection fixture, whose subject is a corpse process kept alive-looking by a HELD\n2118\t  HANDLE) flags nextest LEAK on most draws but not all — measured 19 LEAK of 20 on a tree carrying\n2119\t  no #142 content (`test/grandchild-selection-probe` @`695398b`, based on `4b37512`: lib arm 10/10\n2120\t  LEAK across 822-test runs; full-suite arm 9/10 across 1044-test runs). The single clean PASS\n2121\t  kills \"intrinsic therefore always\": leakiness is DOMINANT BUT INTERMITTENT. Consequences:\n2122\t  (1) a gate or reader that treats this row's LEAK as a defect signal flaps at roughly 1 in 20;\n2123\t  (2) one non-leaky run is NEVER evidence that something fixed it (kin:\n2124\t  [[intermittent-green-is-zero-information]]); (3) the verdict method that closed it is the\n2125\t  template — two independent legs, neither load-bearing alone: the suspect lane's diff grepped\n2126\t  zero hits on the row's subject (zombie / handle_held / OpenProcess / corpse), AND a 20-draw\n2127\t  baseline on a tree predating the suspect change. This entry exists so the next gater who sees\n2128\t  the flag reads one register line instead of running that RCA cold.\n2129\t- **Remedy shape (sketch, not ruled):** annotate the row as expected-leak in nextest config\n2130\t  (per-test `leak-timeout` override or documented allowlist) so the flag stops presenting as\n2131\t  signal; alternatively a fixture-side close of the held handle on the clean path if ADR-0041's\n2132\t  arrangement permits — hertz's call, test/CI lane.\n2133\t- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n2134\t  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n2135\t- **Ripe when:** hertz's next nextest-config-touching lane; blocks nothing today.\n2136\t- **Size:** small.\n2137\t\n2138\t### IR-35 — hfenduleam Windows test-leg victim rate: one teardown/liveness family, measured at ~half of all executions\n2139\t- **Status:** open · **Origin:** USHER #150 golden triage 2026-08-04 (doyle; all rates deployah-measured).\n2140\t- **The numbers (15 golden runs 2026-08-02..08-04 + the USHER cycle, deduped on `(run, box,\n2141\t  started_at)` — GitHub partial reruns COPY untouched jobs into the new attempt with their ORIGINAL\n2142\t  `started_at` and carried conclusion, so a carried failure is the SAME observation; dedupe before\n2143\t  any rate math):** Windows (hfenduleam) 13 red / 22 executions = 59% leg-red, splitting 10/22 = 45%\n2144\t  test-victim + 3/22 infra (IR-31 class). Linux (kitsubito) 2/20 = 10%, 1 victim. Every victim-red\n2145\t  leg had EXACTLY ONE victim (8/8 legs). Clean-cycle arithmetic ≈ 0.55 × 0.95 ≈ half — a golden\n2146\t  cycle at these rates is a coin flip. knock145 (the previous green golden) took FIVE Windows\n2147\t  executions to its green; USHER took four. **A both-green draw is a draw, not evidence the family\n2148\t  closed.**\n2149\t- **The family:** 11 victim legs, 8 distinct tests, ONE cluster — process teardown / kill-reach /\n2150\t  respawn-controller survival, concentrated on hfenduleam. Per-victim dispositions live in the USHER\n2151\t  #150 triage ledger (releases#150 record). The only surviving cross-sha EXACT repeat after source\n2152\t  verification is `resume_no_control_steal_e2e` (:488, byte-identical @2138b16 + @4b37512) — and\n2153\t  both its reds PREDATE the post-#145 producer-side instrumentation, so what repeats is an AMBIGUOUS\n2154\t  observation (stolen controller vs starved child) twice; only a post-#145 red discriminates. The\n2155\t  `a_tree_teardown` pair was a FALSE repeat — two mechanisms wearing one assert string (see\n2156\t  FLAKE-LEDGER row; the counting lesson: assert-body identity must include the polled predicate's\n2157\t  SUBJECT).\n2158\t- **Off-CI discriminator (todlando 2026-08-04):** 0/400 (A 0/200 + B 0/200, interleaved,\n2159\t  `--test-threads 1`, filters positive-controlled, by-path sweeps every iteration) on the warm\n2160\t  d449ce5 pool UNDER live-fleet load (CPU 46-59%, 13-18 spt processes). Points the family at the\n2161\t  RUNNER ENVIRONMENT rather than a product race any Windows box expresses — not exoneration (absence\n2162\t  of reproduction is not proof of absence), but where the next hour goes. A-alone N=500 on the\n2163\t  instrumented tree ran post-close (result on releases#150).\n2164\t- **Remedy lanes already moving:** hertz 4-item test-rework package dispatched 2026-08-04 (psyche\n2165\t  bound split, live_resolve rig instrumentation, green-capture probe profile, resident_service/\n2166\t  teardown hardening); prod `wait_bounded` tree-kill-on-timeout filed to board as EVAL. This entry\n2167\t  is the RATE's home — it leaves the register when the operator has ruled on the rate (accept vs\n2168\t  hold-for-hertz) AND the hertz package has landed with a re-measured victim rate.\n2169\t- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n2170\t  this entry (brief cites IR-7/17/20/34/35/63); the rate re-measure rides that lane's landing.\n2171\t- **Ripe when:** operator brief at USHER close (immediate); re-measure after the hertz package lands.\n2172\t- **Size:** visibility entry + the re-measure; fix cost carried by the hertz package.\n2173\t\n2174\t### IR-36 — `output_bounded` is a 51-copy clone estate with a named-but-empty shared home; hoist-and-delete wants its own lane\n2175\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** hertz measurement\n2176\t  2026-08-04 (at `7465ac1`, counted before listing, listed untruncated), during the USHER package\n2177\t  item-2 sweep ruling; doyle ruled file-don't-sweep.\n2178\t- **What/why:** 51 `fn output_bounded` definitions under `crates/spt/tests` — 50 per-file copies\n2179\t  plus `tests/common/mod.rs:53`, which is NOT pub, has ZERO callers outside its own module, and\n2180\t  whose doc comment states outright that the estate's copies predate the shared module. The lossy\n2181\t  timeout arm (panic loses everything captured, names nothing) is in 38 sites across 36 files.\n2182\t  The copies have already drifted: two variants of the deadline expect-string exist in the estate\n2183\t  (`\"captured spt call must complete within its deadline\"` in common/mod.rs:60 vs the\n2184\t  no-deadline-clause spelling in per-file copies), so a grep keyed to either string undercounts.\n2185\t  The right fix is a hoist-and-delete refactor (make the common copy pub, adopt it estate-wide,\n2186\t  carry the item-2 diagnostic arm once) — a 50-file test-estate touch that must NOT ride golden\n2187\t  cadence as a rider or hide inside a scoped diagnostics item (ADR-0050 thin-lane rationale;\n2188\t  hertz's USHER item 2 stays scoped to live_resolve, which keeps ONE improved copy as the model).\n2189\t- **Built evidence:** one public owning helper replaced all 50 file-local\n2190\t  clones. It owns and tree-kills a timed-out child, waits for reap, drains both\n2191\t  pipes, and includes the deadline plus partial stdout/stderr in the panic.\n2192\t  A dedicated regression observes both diagnostics and proves the timed-out PID\n2193\t  is gone.\n2194\t- **Ripe when:** a dedicated post-batch test-hygiene lane (natural companion to IR-13's\n2195\t  mutation-proof loop and IR-23's home-collision fix — same hertz wave shape).\n2196\t- **Size:** medium by file count, small by risk (mechanical hoist; no assertion changes).\n2197\t- **Hygiene-lane scope addition (todlando, at #6, 2026-08-04):** a CI prebuild of\n2198\t  `cargo build -p mock-adapter --bin mock-shell` (derived from tracked `.github/` content) turns\n2199\t  SIX binedge baseline rows green at once instead of growing the burn-down list one consumer at a\n2200\t  time — belongs to this lane, not to any thin verb lane. [[IR-38]] (live-binary e2e reap sweep)\n2201\t  rides the same lane.\n2202\t- **Built evidence:** all 51 file-local definitions are gone; 158 call sites use the one public\n2203\t  `common::output_bounded`. The shared helper owns the child, kills and reaps its process tree on\n2204\t  timeout, drains both pipes, and reports partial stdout/stderr. `bounded_output_e2e` mutation-pins\n2205\t  both timeout ownership and retained diagnostics.\n2206\t- **Declared validation extra:** the lane's docs-link gate exposed that `llms_target_exists` treated\n2207\t  generated targets as absent before generation. Its small refactor + unit keeps source and\n2208\t  generated link targets distinct; it is deliberate validation fallout, not part of IR-36.\n2209\t\n2210\t### IR-37 — `traceable-reqs check` is coverage-only: tag PLACEMENT is unenforced on any multi-tagged REQ, and the more tags a REQ accumulates the less any one is checked\n2211\t- **Status:** UPSTREAM CLOSED THROUGH RELEASE 2026-08-19 — traceable-reqs PR #19 squash-merged\n2212\t  @`82d8b14` after doyle's targeted re-review PASS (defect A item-tables + 9 red-first regression\n2213\t  cells + sighted control; defect B enclosing-item fallback DECLARED in SPEC with cost; 267/267,\n2214\t  blind repros exit 0); v0.4.0 cut (version bump @`c9a8eb5`, tag pushed, 3 platform assets,\n2215\t  release notes authored; refs sent to hertz). REMAINING and dispatched to hertz post-#182-landing:\n2216\t  spt-core consumes v0.4.0 — CI version bump + placement config (enforce-on, module_banner=accept);\n2217\t  banner cleanup rides a later lane. Entry closes when the consume lane lands. · **Origin:** hertz\n2218\t  measurement 2026-08-04 (filed by doyle; the measurement is\n2219\t  hertz's), found when his own pre/post `check` comparison around a tag-adjacency fix came back\n2220\t  EXIT=0 on BOTH sides — the green he had cited beside the fix validated nothing.\n2221\t- **What/why:** measured on `test/teardown-bound-shape`: a `[unit->REQ-RESIDENT-SERVICE]` tag\n2222\t  SEPARATED from its `#[test]` fn (a const landed between tag block and fn — an AGENTS.md rule-1\n2223\t  violation) scores EXIT=0 identically to the fixed adjacency. Positive control explains the\n2224\t  mechanism: that REQ carries 57 unit tags across five files, so 56 other sites decide the\n2225\t  coverage verdict and no single tag's placement can turn it red. Consequence: AGENTS.md rule 1\n2226\t  (\"tag on or immediately above the real evidence\") is agent discipline only — drifted tags decay\n2227\t  silently while coverage stays green, and heavily-tagged REQs decay fastest. This is the\n2228\t  [[IR-32]] family shape (a gate that cannot see its own blind spot) applied to the traceability\n2229\t  gate itself.\n2230\t- **LIMIT, with falsifier (hertz's, verbatim in kind):** behaviour on a SINGLE-tagged REQ was NOT\n2231\t  established. Separating the only tag of a single-tagged REQ at the stage under test would settle\n2232\t  whether placement is unenforced outright (still exit 0 ⇒ the checker never reads adjacency) or\n2233\t  merely un-enforceable at scale (exit 1 ⇒ the checker sees absence, and only multi-tag redundancy\n2234\t  masks drift). Run that discriminator BEFORE designing any remedy — the two outcomes want\n2235\t  different fixes (a placement rule in the checker vs a per-tag-nearest-item heuristic).\n2236\t- **Transfer:** doyle accepted this lane's independent EXIT-0 remeasurement and confirmed it\n2237\t  matches todlando's settled 2026-08-04 discriminator. Upstream remedy: enforce adjacency for\n2238\t  each individual `doc`/`impl`/`unit`/`int` tag, with separated-tag negatives covering\n2239\t  single-tag, interposed-const, file-top-banner, and one-of-many displacement. This repo consumes\n2240\t  the released checker only.\n2241\t- **Close condition:** doyle reviews and merges the upstream lane, cuts the `traceable-reqs`\n2242\t  release, and spt-core consumes that release. Issue/branch/PR/commit refs append here when the\n2243\t  upstream lane lands.\n2244\t- **Size:** measurement complete; remedy scope is upstream-owned and dispatched.\n2245\t- **DISCRIMINATOR RUN 2026-08-04 (todlando, authorized specimen on `build/w1t2-shell-relink-force`;\n2246\t  filed by doyle — the measurement is todlando's): the answer is the EXIT-0 ARM.** Single-tagged\n2247\t  int stage (`REQ-SHELL-RELINK-FORCE`), tag SEPARATED from its fn (parked at file top):\n2248\t  `traceable-reqs check` EXIT 0 and the REQ still reports `+int`. Tag reverted to adjacency:\n2249\t  EXIT 0, `+int`. Both exits redirect-read, no pipes. **Placement is UNENFORCED OUTRIGHT — the\n2250\t  checker never reads adjacency; multi-tag redundancy was never the mechanism, it only widened the\n2251\t  blind spot.** Remedy option (a) is the live one: a real placement rule in the checker (upstream\n2252\t  experimplate), not a per-tag-nearest-item heuristic. Measurement caveat, carried at the\n2253\t  measurer's own insistence: an intermediate probe printed `TAG_ADJACENT_AFTER_REVERT=0` and that\n2254\t  was the PROBE wrong (`grep -B 1` above the fn lands on `#[test]`, not the tag above it), not a\n2255\t  failed revert — the revert was verified directly (exactly one tag, above `#[test]`). The\n2256\t  discriminator result is the record; the intermediate zero is not.\n2257\t- **REMEDY DISPATCHED 2026-08-18 (doyle):** upstream lane opened in BigscreenVR/traceable-reqs\n2258\t  (the actual upstream remote; the checkout at `~/Documents/projects/traceable-reqs` tracks it —\n2259\t  \"experimplate\" above named the tool's origin project, not the repo) — checker-side placement\n2260\t  rule, default-on in `check`, positive controls all four stages + separated-tag negatives\n2261\t  including the single-tag displaced discriminator shape and the interposed-const shape.\n2262\t  Requested by hertz as the IR-37 prerequisite of his test-hygiene family lane (KEYSTONE #182).\n2263\t  spt-core consumes the upstream RELEASE only — no local shadow checker. Issue/branch/PR refs\n2264\t  land here when the lane reports.\n2265\t\n2266\t### IR-38 — CLASS: an e2e that ends with a live daemon-spawning binary wedges the NEXT build in its pool, and the diagnostic names the wrong lane\n2267\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** todlando 2026-08-04,\n2268\t  `shell_relink_force_e2e` on the #6 lane (filed by doyle; the finding and the fix are todlando's).\n2269\t- **What/why:** the e2e ends with a LIVE binary by design; on Windows a live process holds its\n2270\t  image open, so the NEXT cargo invocation in that target dir dies with\n2271\t  `failed to remove file target\\debug\\spt.exe: Access is denied (os error 5)` — surfacing as\n2272\t  exit 101 with NO test summary, because the failure names the BUILD and the FILE, never the test\n2273\t  that leaked the holder. Actual holders measured: two lane-local `spt daemon run --detached` +\n2274\t  `daemon brain` processes spawned under the test's temp SPT_HOME by a child CLI's\n2275\t  `ensure_running`, still alive from an earlier run. **Reap BY IMAGE PATH** — the fleet's other\n2276\t  eleven spt processes run from the installed binary; a name-based sweep takes your own daemon.\n2277\t  The live shell-spawn population is eleven e2e files. Nine already end through product teardown\n2278\t  or their authenticated home-scoped reap. The two intentionally live-at-success siblings now\n2279\t  kill and prove the final resident gone AFTER all identity/wake assertions:\n2280\t  `shell_relink_force_e2e` and `shell_stale_online_e2e`.\n2281\t- **Kin:** [[IR-7]] (phase-A daemon+brain pair leak), the exe-lock reap-by-path rule, and the\n2282\t  wrong-lane-diagnostic family ([[IR-21]]'s location-not-build class).\n2283\t- **SECOND HOLDER CLASS, measured 2026-08-04 (doyle, own gate rig):** an **ORPHANED CONHOST with an\n2284\t  inherited CWD** inside the test tree blocks `git worktree remove` with Permission-denied on a\n2285\t  DIRECTORY handle — invisible to any exe-path scan (conhost runs from System32; the parent that\n2286\t  spawned it was already dead). Found via `.github/ci/find-cwd-holders.ps1` (IR-11's instrument);\n2287\t  killed by pid after parent-dead classification; 34.78 GB reclaimed. Mechanism chain: the\n2288\t  windowless spawn path masks DETACHED_PROCESS off, the child owns a console, conhost inherits the\n2289\t  child's cwd and can OUTLIVE it. Boundary (hertz's, correct): this find and his field-4 companion\n2290\t  are the SAME MECHANISM FAMILY measured on DIFFERENT populations by different instruments — his\n2291\t  capture measured a ppid-match COUNT (floor 2, companion identity UNMEASURED, his stated limit),\n2292\t  and this conhost is the first FIELD identity evidence in the family, on THIS population. Do not\n2293\t  cite his row as identity data it never carried. (His box-wide accretion count 77→80 is a third\n2294\t  population again.) Teardown rule\n2295\t  addendum: a disposal leg must GATE on the removal's exit code (a rig that logs \"reclaimed 0.01\n2296\t  GB\" from a failed remove fabricates its own success) and sweep CWD HOLDERS, not only image\n2297\t  locks — two populations, either alone is a clean zero on the other.\n2298\t- **Ripe when:** the test-hygiene lane (IR-13/IR-23/IR-36 family) — sweep every e2e that ends\n2299\t  with a live spawning binary, apply the same reap-after-assertions shape.\n2300\t- **Size:** small per test; population unknown until swept.\n2301\t- **Built evidence:** focused runs of both live-at-success tests pass back-to-back in one target\n2302\t  pool, followed by a build invocation from that same pool; the second test's final kill is polled\n2303\t  to proven process death rather than treated as fire-and-forget.\n2304\t\n2305\t### IR-39 — CLASS: the missing-fixture-bin defect has TWO failure faces, and one of them impersonates a lifecycle defect of the subject under test\n2306\t- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** hertz + todlando\n2307\t  2026-08-04, same evening from opposite sides (filed by doyle; hertz relayed todlando's\n2308\t  suggestion without endorsing scope).\n2309\t- **What/why:** a rig whose narrowed build (`-p <pkg> --test <one>` / `-p spt --bin spt`) skips a\n2310\t  cross-package fixture bin fails in one of two ways depending on the consuming site.\n2311\t  Face 1 (cheap): `translate_proof_fixture` panics \"must be built: <path>\" — names the artifact\n2312\t  and the recipe, costs one build. Face 2 (expensive): `sibling_bin(\"mock-session\")` resolves to a\n2313\t  nonexistent exe, nothing spawns, and the test reds at a PRECONDITION assert whose message\n2314\t  (\"warm bring-up spawned=false\", left None / right Some(\"offline\")) reads as a lifecycle defect\n2315\t  of the subject — measured cost 186s + a triage inside a lent box window (hertz's F1 red arm,\n2316\t  attempt 1). The build gap itself is the known cross-package row of the fixture-bin population;\n2317\t  what this entry carries is the DIAGNOSTIC asymmetry.\n2318\t- **Ask:** a fixture-bin existence precondition that NAMES the missing exe and its build recipe\n2319\t  wherever a rig consumes one — `sibling_bin` (and the shared\n2320\t  `crates/spt-term/tests/support/fixture_bin.rs` resolver already carries the recipe string as an\n2321\t  argument, the shape to copy) refuses with the artifact + recipe instead of letting the consuming\n2322\t  test fail downstream in its own vocabulary.\n2323\t- **Kin:** [[IR-21]] (wrong-lane-diagnostic family: the failure names the wrong actor), the\n2324\t  cargo-builds-package-bins-for-integration-tests rule (cross-package row is the only unguaranteed\n2325\t  build), golden.yml's dedicated fixture prebuild step.\n2326\t- **Ripe when:** the test-hygiene lane (IR-13/IR-23/IR-36/IR-38 family) — same sweep population;\n2327\t  or standalone small if that lane keeps slipping.\n2328\t- **Size:** small — one shared helper + a sweep of local `sibling_bin` resolver copies (24 known).\n2329\t- **Addendum (doyle, 2026-08-04 late): third and fourth sightings inside 24 h.** Face 1 twice\n2330\t  more the same evening — todlando's teach-lane leg set (his own translate_proof_fixture, caught\n2331\t  by his prebuild), and doyle's cold gate rig for the same lane (first-pass spt-bins red at\n2332\t  136/611, correctly withheld from the lane verdict as rig evidence, fixed by `cargo build -p spt\n2333\t  --bins` + rerun 611/611). Four sightings in one day across three agents and both faces: the\n2334\t  ripeness condition (\"the test-hygiene lane keeps slipping\") is under measurable pressure — the\n2335\t  prebuild remedy is being re-derived per-rig per-agent, which is the recurring cost the shared\n2336\t  precondition helper exists to delete.\n2337\t- **Built evidence:** all 29 file-local `sibling_bin` resolvers now route through one shared\n2338\t  precondition. A missing fixture names its path and the package-correct `cargo build -p <owner>\n2339\t  --bin <name>` recovery command before product assertions or timeout paths run; a focused\n2340\t  negative test pins that diagnostic.\n2341\t\n2342\t### IR-40 — CLASS: NO envelope-side ordering signal on a resume brief tracks content recency, and a CI informant's per-job line is a claim about that STEP, not the run\n2343\t- **Status:** open · **Origin:** three sightings in one night, 2026-08-04/05 — hertz, doyle,\n2344\t  todlando (filed by doyle; the artifacts are hertz's and todlando's, the CI arm is doyle's with\n2345\t  deployah's framing). Two arms of ONE family: a stale record that carries a confident ordering\n2346\t  signal, and a status claim that arrives before the thing it describes.\n2347\t\n2348\t- **ARM A — resume briefs. What/why:** a session can receive TWO start-of-session briefs, and the\n2349\t  one routed LATER can carry the STALER project-context. Measured on hertz's pair (same node id):\n2350\t  routed_at_ms `1785897407373` > `1785896642480`, spill-filename epoch `1785897764588` >\n2351\t  `1785896658159`, and vector sequence `1242529/1242531` > `1241542/1241544` — **all three\n2352\t  monotonic orderings rank the staler-content brief as newer.** todlando's pair is the NEGATIVE\n2353\t  arm: his later brief (`…1785897765196`, routed `…577476`, vector `1242756/7`) genuinely WAS the\n2354\t  fresher one, so the same heuristic happened to pick right.\n2355\t- **The finding is UNCORRELATED, not inverted** — and that is the whole entry. An inverted signal\n2356\t  is usable once you know to flip it; an uncorrelated one reads as reliable until the pair where it\n2357\t  costs you. Neither agent could have known which pair he held without checking content against\n2358\t  measurement. **Do not name routed_at_ms specifically** — naming the stamp invites the repair that\n2359\t  fails (\"the timestamp is unreliable, use the sequence number\"). The vector is the most dangerous\n2360\t  of the three: a stamp looks like a clock and invites suspicion, a sequence number looks like an\n2361\t  ordering and does not.\n2362\t- **Visible failure mode if a brief is obeyed as instructed** (hertz's, measured): re-open\n2363\t  `releases#123` — work already ruled closed — and under-report his own claimed-pool count by one,\n2364\t  the row sitting under a live gate. doyle's own sighting the same night: a brief describing main\n2365\t  @`92b2482` with a teach lane \"mid-flight\" hours after every lane had gated.\n2366\t- **PRE-REFUSED DISCRIMINATOR, recorded so it is not rediscovered as a finding:** file SIZE ranks\n2367\t  the fresher brief correctly on BOTH pairs (hertz 16308 > 12649; todlando 14138 > 10418) — 2 of 2,\n2368\t  the only signal surviving both samples. **Do not use it.** Size measures RICHNESS, not recency;\n2369\t  the two correlated only because todlando's thin brief was a correction fragment, and hertz's\n2370\t  STALER brief was a full 12649-byte dump. Two full dumps hours apart go flat or inverted. Handed\n2371\t  over pre-refused by its own finder.\n2372\t- **ARM B — CI informants (doyle, 2026-08-05, run 30971976024).** `CI-KITSUBITO` sent\n2373\t  \"CI SUCCESS … sha 0a25b77\" while the run was measurably `status=in_progress` with\n2374\t  `conclusion=\"\"` — the EMPTY STRING, not `success`. The informant fires from a per-job `notify`\n2375\t  step, and at send time `notify` itself had no conclusion. All eight substantive jobs were green,\n2376\t  so the line was **right in the end but EARLY**. deployah's framing, kept verbatim in kind: *an\n2377\t  informant line that is right in the end but early is worse than one that is simply wrong, because\n2378\t  a wrong signal gets distrusted while an early-but-correct one gets promoted to the conclusion.*\n2379\t  todlando's sentence is the one to keep at the point of use: **a per-job notify step's message is\n2380\t  a claim about that STEP, not about the RUN.**\n2381\t- **ARM B MECHANISM — hertz, source read 2026-08-05, zero box cost. It is NOT a race; it fires\n2382\t  early on EVERY run, and the entry above understated it.** `notify` is a job INSIDE the run\n2383\t  (`golden.yml:1138`), and a job cannot observe its own run's conclusion — so `conclusion: \"\"` is\n2384\t  not a timing artifact, it is **the only value that can exist when the informant speaks. The\n2385\t  informant has never once made a statement about a run conclusion.** What `ci-notify.sh` actually\n2386\t  asserts is narrower and worth naming exactly: a verdict computed PURELY from six `needs` results\n2387\t  (changes, traceability, test, n1-gate, twohost-a, twohost-b — the two matrices collapse to one\n2388\t  result each) being neither failure nor cancelled. Nothing more.\n2389\t  **The blind spot is exactly ONE job: `notify` itself, the 9th — it cannot appear in its own\n2390\t  `needs` list. And that one job has a WITNESSED red path**, documented in the script's own header\n2391\t  (2026-07-27, twice on kitsubito): verdict computed, then `spt send` HUNG ~5 minutes until the\n2392\t  job's own 5-minute budget cancelled it, and that cancellation reddened the run. So *\"informant\n2393\t  says SUCCESS, run concludes FAILURE\"* is a real observed sequence, not a hypothetical. The 30s\n2394\t  `SEND_BOUND_SECS` added since bounds the hang but does not close the class — it makes the\n2395\t  informant's own failure FAST rather than impossible.\n2396\t  ⇒ The informant's SUCCESS covers 8 of 9 jobs and is blind to the 9th, and the 9th is the only one\n2397\t  with an observed failure mode that reds the run. This is why the ff predicate is the run's\n2398\t  conclusion field and never the informant line.\n2399\t- **RECOVERY, and it is the same for both arms: never rank the claims — re-derive from the source\n2400\t  object.** For briefs, hertz's four falsifiers are the method (main sha, claimed-pool count, lane\n2401\t  tip, issue state) and they work because each is a content claim checkable in ONE command against\n2402\t  a source NEITHER brief controls. For CI, read the RUN's own `conclusion` field, and prefer\n2403\t  independent reads of the run object (`gh run watch --exit-status` polls the run, so its exit is a\n2404\t  second measurement rather than an echo of `notify`). On the batch this was caught in, three\n2405\t  sources agreed with the informant excluded from all three before main was fast-forwarded.\n2406\t- **Standing rule this entry exists to enforce:** a resume brief's RULINGS are durable; its STATE\n2407\t  is a HYPOTHESIS to re-derive before acting.\n2408\t- **Kin:** [[IR-21]] and [[IR-39]] (the diagnostic names the wrong actor / the wrong subject),\n2409\t  [[IR-32]] (a gate that cannot see its own blind spot), [[IR-34]] (an intermittent marker read as\n2410\t  a signal).\n2411\t- **Ripe when:** the next commune/psyche-tier touch for arm A (the routing layer is spt-core's own\n2412\t  `spool`/psyche ingest, so a remedy is in-repo, not upstream); for arm B, the next `golden.yml`\n2413\t  informant touch — the cheap fix is that the notify step names its own scope in the message body\n2414\t  (STEP vs RUN) rather than emitting a bare \"CI SUCCESS\".\n2415\t- **Size:** arm B small (message text + scope word in one workflow step). Arm A unsized —\n2416\t  establishing whether ANY durable content-recency signal can ride the envelope is the measurement,\n2417\t  and until it runs the answer is \"re-derive, do not rank.\"\n2418\t\n2419\t### IR-41 — A QUEUED main run is superseded without a record; `cancel-in-progress: false` protects only STARTED runs\n2420\t- **Status:** open — mechanism CONFIRMED (doyle ruling 2026-08-05); the runbook sentence it\n2421\t  falsified is already corrected (`docs/RELEASE-RUNBOOK.md` step 3, same commit as this entry)\n2422\t  · **Origin:** deployah, v0.55.0 publish night, filed by him explicitly as UNPROVEN with the\n2423\t  manual-cancel alternative not ruled out; confirmed by doyle on the run objects.\n2424\t- **What/why:** `ci.yml` sets `cancel-in-progress: false` on main and the runbook read that as\n2425\t  \"main's concurrency policy never cancels this run; that preserves the record.\" FALSE for the\n2426\t  queued phase: a concurrency group holds at most one running + one pending run, and a newer push\n2427\t  REPLACES the pending run regardless of the flag — the flag governs only whether a STARTED run\n2428\t  is cancelled. A superseded queued run leaves NO record: zero jobs, conclusion `cancelled`,\n2429\t  nothing measured about its sha.\n2430\t- **Evidence (all read off the run objects, not the informant):** run 30973909279 at `327f1f8`\n2431\t  (push, main) — created 04:01:08Z, **zero jobs ever started**, cancelled 04:03:49Z, ONE SECOND\n2432\t  after `e8805f7`'s run 30974041521 entered the group (created 04:03:48Z), while `0a25b77`'s run\n2433\t  30973770039 was still in flight (done 04:07:59Z). One-running-one-pending, newer push landed,\n2434\t  pending run died. The 1s coupling to an unrelated push is the discriminator against deployah's\n2435\t  own manual-cancel alternative — a human cancel co-timed to the second with a push it had no\n2436\t  view of is not a credible mechanism; supersession fires on exactly that trigger by design.\n2437\t- **The hole this leaves:** under a rapid push sequence, an intermediate sha on MAIN can have no\n2438\t  thin-CI verdict AT ALL, and the absence reads as nothing rather than as supersession. Anyone\n2439\t  auditing \"did sha X pass main CI\" gets a hole where the runbook promised a record. Absence of\n2440\t  a run is now a labelled state, not evidence about the sha.\n2441\t- **Ripe when:** next ci.yml/runbook touch. Candidate remedies to weigh THEN, not now: accept and\n2442\t  document (done — the runbook now carries the mechanism), or give main's group per-sha keys\n2443\t  (`group: ci-${{ github.sha }}`) so runs never share a group — at the cost of concurrent main\n2444\t  runs competing for the boxes, which is exactly what the group exists to prevent. The trade is\n2445\t  real; do not fold it into a drive-by.\n2446\t- **Size:** docs half DONE in this commit; ci.yml half small but load-bearing — needs its own\n2447\t  lane if taken.\n2448\t- **Kin:** [[IR-40]] (a record that is right-in-the-end-but-early vs a record that never comes to\n2449\t  exist — both read as clean states unless labelled), [[cancelled-measurement-leaves-labelled-hole]].\n2450\t\n2451\t### IR-42 — `pool-claim` writes a record; only the BUILD enforces — and AGENTS.md invited the misread\n2452\t- **Status:** BUILT 2026-08-19 — the AGENTS.md corrective line lands in the SAME COMMIT as this\n2453\t  entry (the register batch commit), which is the entry's stated exit condition. The optional\n2454\t  code-side nicety (claim verb prints the incumbent record it overwrites, information only)\n2455\t  remains unclaimed — a candidate rider on the IR-26 remedy lane, which already touches\n2456\t  `pool_claim`'s read-before-write path, NOT a reason to keep this entry open ·\n2457\t  **Origin:** doyle + todlando independently at source, 2026-08-19, during the #193 gate.\n2458\t- **Mechanism (source-verified):** `xtask pool-claim` (crates/xtask/src/main.rs:2232-2294 at the\n2459\t  read sha) parses its args, reads the lane's own git identity, builds a `PoolOwner` and calls\n2460\t  `spt_poolguard::write_owner` UNCONDITIONALLY (:2280) — no `read_owner`, no verdict, no\n2461\t  comparison against the incumbent claim anywhere in the function. Claiming is last-writer-wins\n2462\t  by construction: two lanes can each \"hold\" a pool in sequence with only the last write\n2463\t  surviving, and the displaced lane learns nothing at displacement time. All four enforcement\n2464\t  arms — `Refuse` (SPT_POOL_FOREIGN), `Takeover` (loud), `Unproven`, `HatchOpen` — live in\n2465\t  crates/spt-store/build.rs:31-113 and speak only at the next BUILD. (Same object [[IR-26]]'s\n2466\t  CLAIM-OBSERVABILITY measurement saw from the displaced side; this entry is the CLAIMING side\n2467\t  plus the doc that invited the misread.)\n2468\t- **Measured consequence:** 2026-08-19, doyle's gate claim over todlando's unlanded\n2469\t  redeem-echo-diag claim — no refusal, no notice (three sequential overwrites that session, one\n2470\t  over a lane with an unlanded commit). todlando then predicted from AGENTS.md's refusal\n2471\t  sentence that the gate's claim \"will be REFUSED\" — a false warning to a gater mid-run. The\n2472\t  refusal sentence sat directly under the \"Claim a pool at lane start\" instruction, inviting the\n2473\t  build-time semantics to be read onto the claim verb.\n2474\t- **Corrective landed:** one AGENTS.md sentence — the claim WRITES a record and never refuses;\n2475\t  predict refusals from builds, never from `pool-claim`.\n2476\t\n2477\t### IR-43 — knock answer carrier: `NoReply` landed at 60.08s against a stated 30s carrier deadline\n2478\t- **Status:** open, OBSERVATION — mechanism unmeasured, filed exactly as wide as the datum ·\n2479\t  **Origin:** KNOCK-169 RCA layer 1 (todlando, read-only), golden 32191618042 @`93c1130`,\n2480\t  twohost-b, 2026-08-18.\n2481\t- **What/why:** B's `request_answer` yielded `NoReply` at 22:50:08.3605Z — 60.08s after A's\n2482\t  death — while the carrier deadline is stated at 30s. Recorded in the RCA as a side observation\n2483\t  with no claim; the cell's red itself was a CASCADE of A's earlier death (answerop.rs:73-81\n2484\t  produces the courtesy BEFORE returning, so the reply was never sent — that half is settled and\n2485\t  is NOT this entry). What this entry carries: a transport/liveness bound that reported at 2x its\n2486\t  stated value. Candidate shapes, neither asserted: two sequential 30s legs each honoring its own\n2487\t  bound (a composed wait wearing one bound's name), or a bound armed after a wait it does not\n2488\t  cover (the [[IR-30]] nethost.rs permit-wait shape: `sem.acquire_owned()` outside the timeout).\n2489\t- **Ask:** derive where the 30s is armed and what path yields a 60s `NoReply` — one code read\n2490\t  from the emit site, before any instrument.\n2491\t- **Ripe when:** next knock-carrier touch, or the next `NoReply`-shaped red — whichever first.\n2492\t- **Size:** small (code read; a token only if the read forks).\n2493\t\n2494\t### IR-44 — perch-sentinel comment overclaims: serialization is not preservation, and the comment teaches the false step\n2495\t- **Status:** open · **Origin:** #188 RCA lock read (todlando flagged, doyle confirmed the lock\n2496\t  read), 2026-08-18; the collapse-of-branches argument is on #188 and in the RCA record.\n2497\t- **What/why:** `lock_perch_sentinel` (info.rs:778 at `b20e770`, the diag sha — re-derive the\n2498\t  line on main before editing) takes a cross-process fs2 lock on a stable per-perch `.info.lock`\n2499\t  sentinel, and its comment claims it serializes \"ALL info.json writers so a whole-record write\n2500\t  and a locked RMW can never lose each other's update (`REQ-HAZARD-INFO-RMW-LOST-UPDATE`)\" —"}]},"uuid":"b7df91f7-89a7-4833-9ea9-c377505d2102","timestamp":"2026-09-06T11:16:27.413Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"  fires at GATE close (a rig step) while nothing fires at LANE finish; a pushed lane awaiting\n  assembly holds its pool invisibly. Corollary corrections carried: todlando withdrew his\n  name-based pool census (10x off; ancestry, not directory names, classifies a pool as closed),\n  and hertz-selection-probe's worktree removal REFUSED Permission denied — IR-38's second holder\n  class recurring, left for retry rather than forced.\n\n- **FIFTH ADDENDUM (deployah, v0.63.0 FIELD-SEAL golden, 2026-08-25) — SCOPED DELIBERATELY TO ONE\n  CONSEQUENCE: reaping a pool UNCLAIMS its tree, and the next builder meets a refusal that is the\n  rule working.** (The disk-floor mechanism from the same event is doyle's to file at his\n  release-close sweep — one voice each, by division agreed in-window. This addendum stops at the\n  pool-claim consequence and deliberately does not restate the floor finding.)\n  Five FIELD-SEAL lane pools were reaped to clear the golden floor — gate rig `gate-222-ca30a79e`\n  plus lanes `fix-222`, `w2-seal-ux`, `w3-ingest`, `w4-exit-subject`; **148.48 GB measured by FS\n  delta**, free 1.37 → 149.84 GB, worktree checkouts kept, `main/target` untouched by ruling.\n  **The consequence to record:** `POOL-OWNER.json` lives INSIDE `target/`, so reaping the subtree\n  takes the claim with it. Those five trees are now **UNCLAIMED — which is fresh-not-foreign**, a\n  different state from the `SPT_POOL_FOREIGN` refusal. Whoever resumes one of those lanes (a hertz\n  fixup, a golden-red rebuild) must run `cargo run -p xtask -- pool-claim --pool <dir> --label\n  <lane>` **from that worktree** before the first build, or `crates/spt-store/build.rs` refuses.\n  **A refusal there is the rule working, not a defect** — filed precisely so a later reader does\n  not open an issue against the build script for behaving correctly. Naming it costs one line;\n  the alternative is an RCA against our own guard.\n  **Prediction-vs-meter, corroborating hertz's fourth-addendum note at ~75x its scale:** pre-reap\n  sum-of-lengths sizing predicted 163.9 GB; the FS delta paid 148.48 GB, a 15.4 GB shortfall left\n  UNEXPLAINED here rather than rationalized (allocation granularity, sparse/compressed extents and\n  concurrent writes all sit between the two meters). **The FS delta governs** — hertz ruled this at\n  1.94-vs-actual and it holds at three digits. Report the meter, never the estimate that agreed\n  with your plan.\n  **Discipline executed, for the audit trail:** outbound classification re-read AT REAP TIME (all\n  five real dirs, zero LinkType); inbound sweep over **2854** reparse points under `projects\\`\n  found zero aimed at any victim; `CARGO_TARGET_DIR` confirmed empty in process, **Machine and\n  User** scope (the arm that leaves no directory entry to notice afterwards); process census\n  RE-RUN at reap time rather than carried from a peer's snapshot — zero builders, zero processes\n  imaged out of a victim pool, both live `spt` images resolving to the installed path. The peer's\n  snapshot proved correct; it was re-run because a snapshot is not a standing property, which is\n  the reason it was offered with that caveat.\n\n### IR-32 — Docs-drift gate blesses its own gen: an empty-emitting producer agrees with itself perfectly\n- **Status:** open · **Origin:** todlando mid-lane stop-and-report, U1 (#144) 2026-08-04. Filed by\n  the builder to the gater deliberately — register shape is doyle's to own.\n- **What/why:** with a defective binary in the tree (stack-overflowed before reaching its own\n  code, empty stdout, non-fatal to the generator), `cargo run -p xtask -- gen` wrote\n  `docs-site/src/cli/reference.md` reduced to EIGHT lines — title, do-not-edit banner, empty code\n  fence — deleting 3193 lines of published CLI reference. `xtask check` then exited 0, because\n  the drift gate compares what the binary emits NOW against what the file holds, and gen had just\n  overwritten the file with exactly that emit. **A producer that emits nothing agrees with itself\n  perfectly.** Caught only because the builder grepped the regenerated page for his new flag\n  names and treated the clean zero as suspicious ([[zero-match-filter-reads-as-absent]] shape);\n  the gate itself would never have said a word, and the gutted public reference ships green.\n  The mechanism generalizes past the stack overflow that exposed it: ANY failure mode that makes\n  `spt --help` produce empty stdout while exiting non-fatally to the generator gets the same\n  green. Kin to [[cli-command-docs-drift]] (the gate this defeats) — the gate detects DRIFT\n  between binary and page, and is structurally blind to a page just regenerated from a broken\n  binary.\n- **Remedy shape (builder's sketch, sound; not yet ruled on seat):** a floor in `xtask gen` —\n  refuse to write a page whose help block is empty, or whose output is implausibly shorter than\n  the file it replaces — so the generator fails loudly instead of producing a stub the gate\n  blesses. Gen is the right seat: check runs in CI on a fresh emit too, so a check-side floor\n  alone still lets a local gen gut the working tree.\n- **Ripe when:** next docs-tooling or xtask-touching lane; SOONER if any lane regenerates the CLI\n  reference before the floor exists (a gate on that lane must assert page LENGTH, not gen's exit\n  code, until this is built).\n- **Size:** small (one refusal + a length-plausibility floor in gen).\n\n### IR-33 — Debug-build clap Command tree runs near the main-thread stack ceiling; the margin is THREE net new args, bisected at `8f291e1` (the original ~6 was measured on U1's tree and is superseded)\n- **Status:** open · **Origin:** todlando U1 (#144) 2026-08-04, delta-tested mid-lane.\n- **What/why:** eight extra hidden bool args across the five knock seats grew the derive-built\n  Command tree past what the debug binary's main thread stack can construct: EVERY invocation\n  (`spt --version` included) died with `thread 'main' has overflowed its stack`, exit\n  -1073741571, before reaching any of its own code. Delta-tested, not assumed: the same command\n  on the main-pool binary from main printed normally. U1 repaired its own trigger (raw-argv\n  pre-scan for retired flags before clap parses; lane ends net +2 args) — but the CEILING\n  remains: the tree is now close enough that a handful of net new arguments in a debug build\n  reproduce a total binary outage — **and the handful is THREE, not six; see the correction\n  below before planning against this entry.** **#5's verb-surface rework is the next lane that adds\n  arguments and it is much bigger than U1** — this entry exists so #5 is planned knowing the\n  margin, not discovering it. Note the failure's face: it presents as a broken binary, and via\n  [[IR-32]] it presents as a silently gutted docs page — neither names the stack.\n- **CORRECTION — the margin is THREE, bisected at `8f291e1` (todlando's U3 lane\n  `build/usher-u3-verb-surface`, own pool, debug profile; filed by deployah 2026-08-04).** The\n  original ~6 was measured on U1's tree and was right when written; it is wrong now, and the\n  difference is the difference between \"plan carefully\" and \"one flag anywhere takes the binary\n  down\". N hidden bool args added to the ROOT `Cli` derive, tree restored from git between every\n  row, `--version` as the invocation (it carries no work of its own, so whatever it costs IS tree\n  construction):\n\n      N=0  exit 0                OK  (control — unmodified lane binary answers `spt 0.53.0`)\n      N=1  exit 0                OK\n      N=2  exit 0                OK\n      N=3  exit -1073741571      STACK-OVERFLOW\n      N=4 / N=6 / N=8            STACK-OVERFLOW\n\n  PLACEMENT DIFFERENTIAL, run because #5 adds args at `EndpointCmd` seats rather than at the root\n  and a root-only number could have measured the wrong thing: same N injected inside a NESTED\n  endpoint seat gives `SEAT N=2` OK, `SEAT N=3` STACK-OVERFLOW. **Identical ceiling — placement does\n  not move it**, so three is the number for the shape #5 actually builds. (Rig hazard worth keeping:\n  the first seat attempt produced a COMPILE error, E0027, because the dispatch destructures that\n  variant exhaustively — taken at face value it would have read as \"the seat is fine\". Both rows\n  above are from the fixed rig.) CONSEQUENCE FOR #5: the ratified MIN spelling ends net +2, i.e. it\n  would have shipped with ONE argument of headroom, and any later lane adding a single flag anywhere\n  in the tree would then take the whole binary down, `--version` included. Remedy (b) below stops\n  being \"buys headroom\" and becomes the precondition for #5 shipping safely.\n- **Remedy shape (sketch, not ruled):** (a) cheapest tooth — a debug-build smoke that runs\n  `spt --help` and asserts non-empty stdout + exit 0, which also backstops IR-32's trigger;\n  (b) raise the main thread stack for the binary (build config), buying headroom without\n  restructuring; (c) structural — box/flatten the derive tree so construction cost stops scaling\n  with arg count. (a) is a rider candidate for any lane; (b)/(c) want a real measurement of\n  where the ceiling sits before choosing.\n- **Ripe when:** #5 (U3 verb surface) PLANNING — this is a planning input, not just a build item;\n  the smoke tooth (a) is ripe for the next CI-touching lane regardless.\n- **Size:** small for (a); medium for (b)/(c) with the measurement.\n\n### IR-34 — nextest LEAK flag on the zombie-fixture row is dominant-but-intermittent (19/20 measured); any gate reading it as a signal flaps\n- **Status:** open · **Origin:** doyle #142 F-lane gate 2026-08-04 (first sighting in a gate run);\n  characterized same day by hertz from retained logs, ownership falsified by todlando.\n- **What/why:** `broker::tests::windows_session_is_zombie_sees_a_handle_held_corpse_as_dead` (the\n  ADR-0041 zombie-detection fixture, whose subject is a corpse process kept alive-looking by a HELD\n  HANDLE) flags nextest LEAK on most draws but not all — measured 19 LEAK of 20 on a tree carrying\n  no #142 content (`test/grandchild-selection-probe` @`695398b`, based on `4b37512`: lib arm 10/10\n  LEAK across 822-test runs; full-suite arm 9/10 across 1044-test runs). The single clean PASS\n  kills \"intrinsic therefore always\": leakiness is DOMINANT BUT INTERMITTENT. Consequences:\n  (1) a gate or reader that treats this row's LEAK as a defect signal flaps at roughly 1 in 20;\n  (2) one non-leaky run is NEVER evidence that something fixed it (kin:\n  [[intermittent-green-is-zero-information]]); (3) the verdict method that closed it is the\n  template — two independent legs, neither load-bearing alone: the suspect lane's diff grepped\n  zero hits on the row's subject (zombie / handle_held / OpenProcess / corpse), AND a 20-draw\n  baseline on a tree predating the suspect change. This entry exists so the next gater who sees\n  the flag reads one register line instead of running that RCA cold.\n- **Remedy shape (sketch, not ruled):** annotate the row as expected-leak in nextest config\n  (per-test `leak-timeout` override or documented allowlist) so the flag stops presenting as\n  signal; alternatively a fixture-side close of the held handle on the clean path if ADR-0041's\n  arrangement permits — hertz's call, test/CI lane.\n- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n- **Ripe when:** hertz's next nextest-config-touching lane; blocks nothing today.\n- **Size:** small.\n\n### IR-35 — hfenduleam Windows test-leg victim rate: one teardown/liveness family, measured at ~half of all executions\n- **Status:** open · **Origin:** USHER #150 golden triage 2026-08-04 (doyle; all rates deployah-measured).\n- **The numbers (15 golden runs 2026-08-02..08-04 + the USHER cycle, deduped on `(run, box,\n  started_at)` — GitHub partial reruns COPY untouched jobs into the new attempt with their ORIGINAL\n  `started_at` and carried conclusion, so a carried failure is the SAME observation; dedupe before\n  any rate math):** Windows (hfenduleam) 13 red / 22 executions = 59% leg-red, splitting 10/22 = 45%\n  test-victim + 3/22 infra (IR-31 class). Linux (kitsubito) 2/20 = 10%, 1 victim. Every victim-red\n  leg had EXACTLY ONE victim (8/8 legs). Clean-cycle arithmetic ≈ 0.55 × 0.95 ≈ half — a golden\n  cycle at these rates is a coin flip. knock145 (the previous green golden) took FIVE Windows\n  executions to its green; USHER took four. **A both-green draw is a draw, not evidence the family\n  closed.**\n- **The family:** 11 victim legs, 8 distinct tests, ONE cluster — process teardown / kill-reach /\n  respawn-controller survival, concentrated on hfenduleam. Per-victim dispositions live in the USHER\n  #150 triage ledger (releases#150 record). The only surviving cross-sha EXACT repeat after source\n  verification is `resume_no_control_steal_e2e` (:488, byte-identical @2138b16 + @4b37512) — and\n  both its reds PREDATE the post-#145 producer-side instrumentation, so what repeats is an AMBIGUOUS\n  observation (stolen controller vs starved child) twice; only a post-#145 red discriminates. The\n  `a_tree_teardown` pair was a FALSE repeat — two mechanisms wearing one assert string (see\n  FLAKE-LEDGER row; the counting lesson: assert-body identity must include the polled predicate's\n  SUBJECT).\n- **Off-CI discriminator (todlando 2026-08-04):** 0/400 (A 0/200 + B 0/200, interleaved,\n  `--test-threads 1`, filters positive-controlled, by-path sweeps every iteration) on the warm\n  d449ce5 pool UNDER live-fleet load (CPU 46-59%, 13-18 spt processes). Points the family at the\n  RUNNER ENVIRONMENT rather than a product race any Windows box expresses — not exoneration (absence\n  of reproduction is not proof of absence), but where the next hour goes. A-alone N=500 on the\n  instrumented tree ran post-close (result on releases#150).\n- **Remedy lanes already moving:** hertz 4-item test-rework package dispatched 2026-08-04 (psyche\n  bound split, live_resolve rig instrumentation, green-capture probe profile, resident_service/\n  teardown hardening); prod `wait_bounded` tree-kill-on-timeout filed to board as EVAL. This entry\n  is the RATE's home — it leaves the register when the operator has ruled on the rate (accept vs\n  hold-for-hertz) AND the hertz package has landed with a re-measured victim rate.\n- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n  this entry (brief cites IR-7/17/20/34/35/63); the rate re-measure rides that lane's landing.\n- **Ripe when:** operator brief at USHER close (immediate); re-measure after the hertz package lands.\n- **Size:** visibility entry + the re-measure; fix cost carried by the hertz package.\n\n### IR-36 — `output_bounded` is a 51-copy clone estate with a named-but-empty shared home; hoist-and-delete wants its own lane\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** hertz measurement\n  2026-08-04 (at `7465ac1`, counted before listing, listed untruncated), during the USHER package\n  item-2 sweep ruling; doyle ruled file-don't-sweep.\n- **What/why:** 51 `fn output_bounded` definitions under `crates/spt/tests` — 50 per-file copies\n  plus `tests/common/mod.rs:53`, which is NOT pub, has ZERO callers outside its own module, and\n  whose doc comment states outright that the estate's copies predate the shared module. The lossy\n  timeout arm (panic loses everything captured, names nothing) is in 38 sites across 36 files.\n  The copies have already drifted: two variants of the deadline expect-string exist in the estate\n  (`\"captured spt call must complete within its deadline\"` in common/mod.rs:60 vs the\n  no-deadline-clause spelling in per-file copies), so a grep keyed to either string undercounts.\n  The right fix is a hoist-and-delete refactor (make the common copy pub, adopt it estate-wide,\n  carry the item-2 diagnostic arm once) — a 50-file test-estate touch that must NOT ride golden\n  cadence as a rider or hide inside a scoped diagnostics item (ADR-0050 thin-lane rationale;\n  hertz's USHER item 2 stays scoped to live_resolve, which keeps ONE improved copy as the model).\n- **Built evidence:** one public owning helper replaced all 50 file-local\n  clones. It owns and tree-kills a timed-out child, waits for reap, drains both\n  pipes, and includes the deadline plus partial stdout/stderr in the panic.\n  A dedicated regression observes both diagnostics and proves the timed-out PID\n  is gone.\n- **Ripe when:** a dedicated post-batch test-hygiene lane (natural companion to IR-13's\n  mutation-proof loop and IR-23's home-collision fix — same hertz wave shape).\n- **Size:** medium by file count, small by risk (mechanical hoist; no assertion changes).\n- **Hygiene-lane scope addition (todlando, at #6, 2026-08-04):** a CI prebuild of\n  `cargo build -p mock-adapter --bin mock-shell` (derived from tracked `.github/` content) turns\n  SIX binedge baseline rows green at once instead of growing the burn-down list one consumer at a\n  time — belongs to this lane, not to any thin verb lane. [[IR-38]] (live-binary e2e reap sweep)\n  rides the same lane.\n- **Built evidence:** all 51 file-local definitions are gone; 158 call sites use the one public\n  `common::output_bounded`. The shared helper owns the child, kills and reaps its process tree on\n  timeout, drains both pipes, and reports partial stdout/stderr. `bounded_output_e2e` mutation-pins\n  both timeout ownership and retained diagnostics.\n- **Declared validation extra:** the lane's docs-link gate exposed that `llms_target_exists` treated\n  generated targets as absent before generation. Its small refactor + unit keeps source and\n  generated link targets distinct; it is deliberate validation fallout, not part of IR-36.\n\n### IR-37 — `traceable-reqs check` is coverage-only: tag PLACEMENT is unenforced on any multi-tagged REQ, and the more tags a REQ accumulates the less any one is checked\n- **Status:** UPSTREAM CLOSED THROUGH RELEASE 2026-08-19 — traceable-reqs PR #19 squash-merged\n  @`82d8b14` after doyle's targeted re-review PASS (defect A item-tables + 9 red-first regression\n  cells + sighted control; defect B enclosing-item fallback DECLARED in SPEC with cost; 267/267,\n  blind repros exit 0); v0.4.0 cut (version bump @`c9a8eb5`, tag pushed, 3 platform assets,\n  release notes authored; refs sent to hertz). REMAINING and dispatched to hertz post-#182-landing:\n  spt-core consumes v0.4.0 — CI version bump + placement config (enforce-on, module_banner=accept);\n  banner cleanup rides a later lane. Entry closes when the consume lane lands. · **Origin:** hertz\n  measurement 2026-08-04 (filed by doyle; the measurement is\n  hertz's), found when his own pre/post `check` comparison around a tag-adjacency fix came back\n  EXIT=0 on BOTH sides — the green he had cited beside the fix validated nothing.\n- **What/why:** measured on `test/teardown-bound-shape`: a `[unit->REQ-RESIDENT-SERVICE]` tag\n  SEPARATED from its `#[test]` fn (a const landed between tag block and fn — an AGENTS.md rule-1\n  violation) scores EXIT=0 identically to the fixed adjacency. Positive control explains the\n  mechanism: that REQ carries 57 unit tags across five files, so 56 other sites decide the\n  coverage verdict and no single tag's placement can turn it red. Consequence: AGENTS.md rule 1\n  (\"tag on or immediately above the real evidence\") is agent discipline only — drifted tags decay\n  silently while coverage stays green, and heavily-tagged REQs decay fastest. This is the\n  [[IR-32]] family shape (a gate that cannot see its own blind spot) applied to the traceability\n  gate itself.\n- **LIMIT, with falsifier (hertz's, verbatim in kind):** behaviour on a SINGLE-tagged REQ was NOT\n  established. Separating the only tag of a single-tagged REQ at the stage under test would settle\n  whether placement is unenforced outright (still exit 0 ⇒ the checker never reads adjacency) or\n  merely un-enforceable at scale (exit 1 ⇒ the checker sees absence, and only multi-tag redundancy\n  masks drift). Run that discriminator BEFORE designing any remedy — the two outcomes want\n  different fixes (a placement rule in the checker vs a per-tag-nearest-item heuristic).\n- **Transfer:** doyle accepted this lane's independent EXIT-0 remeasurement and confirmed it\n  matches todlando's settled 2026-08-04 discriminator. Upstream remedy: enforce adjacency for\n  each individual `doc`/`impl`/`unit`/`int` tag, with separated-tag negatives covering\n  single-tag, interposed-const, file-top-banner, and one-of-many displacement. This repo consumes\n  the released checker only.\n- **Close condition:** doyle reviews and merges the upstream lane, cuts the `traceable-reqs`\n  release, and spt-core consumes that release. Issue/branch/PR/commit refs append here when the\n  upstream lane lands.\n- **Size:** measurement complete; remedy scope is upstream-owned and dispatched.\n- **DISCRIMINATOR RUN 2026-08-04 (todlando, authorized specimen on `build/w1t2-shell-relink-force`;\n  filed by doyle — the measurement is todlando's): the answer is the EXIT-0 ARM.** Single-tagged\n  int stage (`REQ-SHELL-RELINK-FORCE`), tag SEPARATED from its fn (parked at file top):\n  `traceable-reqs check` EXIT 0 and the REQ still reports `+int`. Tag reverted to adjacency:\n  EXIT 0, `+int`. Both exits redirect-read, no pipes. **Placement is UNENFORCED OUTRIGHT — the\n  checker never reads adjacency; multi-tag redundancy was never the mechanism, it only widened the\n  blind spot.** Remedy option (a) is the live one: a real placement rule in the checker (upstream\n  experimplate), not a per-tag-nearest-item heuristic. Measurement caveat, carried at the\n  measurer's own insistence: an intermediate probe printed `TAG_ADJACENT_AFTER_REVERT=0` and that\n  was the PROBE wrong (`grep -B 1` above the fn lands on `#[test]`, not the tag above it), not a\n  failed revert — the revert was verified directly (exactly one tag, above `#[test]`). The\n  discriminator result is the record; the intermediate zero is not.\n- **REMEDY DISPATCHED 2026-08-18 (doyle):** upstream lane opened in BigscreenVR/traceable-reqs\n  (the actual upstream remote; the checkout at `~/Documents/projects/traceable-reqs` tracks it —\n  \"experimplate\" above named the tool's origin project, not the repo) — checker-side placement\n  rule, default-on in `check`, positive controls all four stages + separated-tag negatives\n  including the single-tag displaced discriminator shape and the interposed-const shape.\n  Requested by hertz as the IR-37 prerequisite of his test-hygiene family lane (KEYSTONE #182).\n  spt-core consumes the upstream RELEASE only — no local shadow checker. Issue/branch/PR refs\n  land here when the lane reports.\n\n### IR-38 — CLASS: an e2e that ends with a live daemon-spawning binary wedges the NEXT build in its pool, and the diagnostic names the wrong lane\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** todlando 2026-08-04,\n  `shell_relink_force_e2e` on the #6 lane (filed by doyle; the finding and the fix are todlando's).\n- **What/why:** the e2e ends with a LIVE binary by design; on Windows a live process holds its\n  image open, so the NEXT cargo invocation in that target dir dies with\n  `failed to remove file target\\debug\\spt.exe: Access is denied (os error 5)` — surfacing as\n  exit 101 with NO test summary, because the failure names the BUILD and the FILE, never the test\n  that leaked the holder. Actual holders measured: two lane-local `spt daemon run --detached` +\n  `daemon brain` processes spawned under the test's temp SPT_HOME by a child CLI's\n  `ensure_running`, still alive from an earlier run. **Reap BY IMAGE PATH** — the fleet's other\n  eleven spt processes run from the installed binary; a name-based sweep takes your own daemon.\n  The live shell-spawn population is eleven e2e files. Nine already end through product teardown\n  or their authenticated home-scoped reap. The two intentionally live-at-success siblings now\n  kill and prove the final resident gone AFTER all identity/wake assertions:\n  `shell_relink_force_e2e` and `shell_stale_online_e2e`.\n- **Kin:** [[IR-7]] (phase-A daemon+brain pair leak), the exe-lock reap-by-path rule, and the\n  wrong-lane-diagnostic family ([[IR-21]]'s location-not-build class).\n- **SECOND HOLDER CLASS, measured 2026-08-04 (doyle, own gate rig):** an **ORPHANED CONHOST with an\n  inherited CWD** inside the test tree blocks `git worktree remove` with Permission-denied on a\n  DIRECTORY handle — invisible to any exe-path scan (conhost runs from System32; the parent that\n  spawned it was already dead). Found via `.github/ci/find-cwd-holders.ps1` (IR-11's instrument);\n  killed by pid after parent-dead classification; 34.78 GB reclaimed. Mechanism chain: the\n  windowless spawn path masks DETACHED_PROCESS off, the child owns a console, conhost inherits the\n  child's cwd and can OUTLIVE it. Boundary (hertz's, correct): this find and his field-4 companion\n  are the SAME MECHANISM FAMILY measured on DIFFERENT populations by different instruments — his\n  capture measured a ppid-match COUNT (floor 2, companion identity UNMEASURED, his stated limit),\n  and this conhost is the first FIELD identity evidence in the family, on THIS population. Do not\n  cite his row as identity data it never carried. (His box-wide accretion count 77→80 is a third\n  population again.) Teardown rule\n  addendum: a disposal leg must GATE on the removal's exit code (a rig that logs \"reclaimed 0.01\n  GB\" from a failed remove fabricates its own success) and sweep CWD HOLDERS, not only image\n  locks — two populations, either alone is a clean zero on the other.\n- **Ripe when:** the test-hygiene lane (IR-13/IR-23/IR-36 family) — sweep every e2e that ends\n  with a live spawning binary, apply the same reap-after-assertions shape.\n- **Size:** small per test; population unknown until swept.\n- **Built evidence:** focused runs of both live-at-success tests pass back-to-back in one target\n  pool, followed by a build invocation from that same pool; the second test's final kill is polled\n  to proven process death rather than treated as fire-and-forget.\n\n### IR-39 — CLASS: the missing-fixture-bin defect has TWO failure faces, and one of them impersonates a lifecycle defect of the subject under test\n- **Status:** BUILT 2026-08-18 on KEYSTONE #182 hygiene lane. · **Origin:** hertz + todlando\n  2026-08-04, same evening from opposite sides (filed by doyle; hertz relayed todlando's\n  suggestion without endorsing scope).\n- **What/why:** a rig whose narrowed build (`-p <pkg> --test <one>` / `-p spt --bin spt`) skips a\n  cross-package fixture bin fails in one of two ways depending on the consuming site.\n  Face 1 (cheap): `translate_proof_fixture` panics \"must be built: <path>\" — names the artifact\n  and the recipe, costs one build. Face 2 (expensive): `sibling_bin(\"mock-session\")` resolves to a\n  nonexistent exe, nothing spawns, and the test reds at a PRECONDITION assert whose message\n  (\"warm bring-up spawned=false\", left None / right Some(\"offline\")) reads as a lifecycle defect\n  of the subject — measured cost 186s + a triage inside a lent box window (hertz's F1 red arm,\n  attempt 1). The build gap itself is the known cross-package row of the fixture-bin population;\n  what this entry carries is the DIAGNOSTIC asymmetry.\n- **Ask:** a fixture-bin existence precondition that NAMES the missing exe and its build recipe\n  wherever a rig consumes one — `sibling_bin` (and the shared\n  `crates/spt-term/tests/support/fixture_bin.rs` resolver already carries the recipe string as an\n  argument, the shape to copy) refuses with the artifact + recipe instead of letting the consuming\n  test fail downstream in its own vocabulary.\n- **Kin:** [[IR-21]] (wrong-lane-diagnostic family: the failure names the wrong actor), the\n  cargo-builds-package-bins-for-integration-tests rule (cross-package row is the only unguaranteed\n  build), golden.yml's dedicated fixture prebuild step.\n- **Ripe when:** the test-hygiene lane (IR-13/IR-23/IR-36/IR-38 family) — same sweep population;\n  or standalone small if that lane keeps slipping.\n- **Size:** small — one shared helper + a sweep of local `sibling_bin` resolver copies (24 known).\n- **Addendum (doyle, 2026-08-04 late): third and fourth sightings inside 24 h.** Face 1 twice\n  more the same evening — todlando's teach-lane leg set (his own translate_proof_fixture, caught\n  by his prebuild), and doyle's cold gate rig for the same lane (first-pass spt-bins red at\n  136/611, correctly withheld from the lane verdict as rig evidence, fixed by `cargo build -p spt\n  --bins` + rerun 611/611). Four sightings in one day across three agents and both faces: the\n  ripeness condition (\"the test-hygiene lane keeps slipping\") is under measurable pressure — the\n  prebuild remedy is being re-derived per-rig per-agent, which is the recurring cost the shared\n  precondition helper exists to delete.\n- **Built evidence:** all 29 file-local `sibling_bin` resolvers now route through one shared\n  precondition. A missing fixture names its path and the package-correct `cargo build -p <owner>\n  --bin <name>` recovery command before product assertions or timeout paths run; a focused\n  negative test pins that diagnostic.\n\n### IR-40 — CLASS: NO envelope-side ordering signal on a resume brief tracks content recency, and a CI informant's per-job line is a claim about that STEP, not the run\n- **Status:** open · **Origin:** three sightings in one night, 2026-08-04/05 — hertz, doyle,\n  todlando (filed by doyle; the artifacts are hertz's and todlando's, the CI arm is doyle's with\n  deployah's framing). Two arms of ONE family: a stale record that carries a confident ordering\n  signal, and a status claim that arrives before the thing it describes.\n\n- **ARM A — resume briefs. What/why:** a session can receive TWO start-of-session briefs, and the\n  one routed LATER can carry the STALER project-context. Measured on hertz's pair (same node id):\n  routed_at_ms `1785897407373` > `1785896642480`, spill-filename epoch `1785897764588` >\n  `1785896658159`, and vector sequence `1242529/1242531` > `1241542/1241544` — **all three\n  monotonic orderings rank the staler-content brief as newer.** todlando's pair is the NEGATIVE\n  arm: his later brief (`…1785897765196`, routed `…577476`, vector `1242756/7`) genuinely WAS the\n  fresher one, so the same heuristic happened to pick right.\n- **The finding is UNCORRELATED, not inverted** — and that is the whole entry. An inverted signal\n  is usable once you know to flip it; an uncorrelated one reads as reliable until the pair where it\n  costs you. Neither agent could have known which pair he held without checking content against\n  measurement. **Do not name routed_at_ms specifically** — naming the stamp invites the repair that\n  fails (\"the timestamp is unreliable, use the sequence number\"). The vector is the most dangerous\n  of the three: a stamp looks like a clock and invites suspicion, a sequence number looks like an\n  ordering and does not.\n- **Visible failure mode if a brief is obeyed as instructed** (hertz's, measured): re-open\n  `releases#123` — work already ruled closed — and under-report his own claimed-pool count by one,\n  the row sitting under a live gate. doyle's own sighting the same night: a brief describing main\n  @`92b2482` with a teach lane \"mid-flight\" hours after every lane had gated.\n- **PRE-REFUSED DISCRIMINATOR, recorded so it is not rediscovered as a finding:** file SIZE ranks\n  the fresher brief correctly on BOTH pairs (hertz 16308 > 12649; todlando 14138 > 10418) — 2 of 2,\n  the only signal surviving both samples. **Do not use it.** Size measures RICHNESS, not recency;\n  the two correlated only because todlando's thin brief was a correction fragment, and hertz's\n  STALER brief was a full 12649-byte dump. Two full dumps hours apart go flat or inverted. Handed\n  over pre-refused by its own finder.\n- **ARM B — CI informants (doyle, 2026-08-05, run 30971976024).** `CI-KITSUBITO` sent\n  \"CI SUCCESS … sha 0a25b77\" while the run was measurably `status=in_progress` with\n  `conclusion=\"\"` — the EMPTY STRING, not `success`. The informant fires from a per-job `notify`\n  step, and at send time `notify` itself had no conclusion. All eight substantive jobs were green,\n  so the line was **right in the end but EARLY**. deployah's framing, kept verbatim in kind: *an\n  informant line that is right in the end but early is worse than one that is simply wrong, because\n  a wrong signal gets distrusted while an early-but-correct one gets promoted to the conclusion.*\n  todlando's sentence is the one to keep at the point of use: **a per-job notify step's message is\n  a claim about that STEP, not about the RUN.**\n- **ARM B MECHANISM — hertz, source read 2026-08-05, zero box cost. It is NOT a race; it fires\n  early on EVERY run, and the entry above understated it.** `notify` is a job INSIDE the run\n  (`golden.yml:1138`), and a job cannot observe its own run's conclusion — so `conclusion: \"\"` is\n  not a timing artifact, it is **the only value that can exist when the informant speaks. The\n  informant has never once made a statement about a run conclusion.** What `ci-notify.sh` actually\n  asserts is narrower and worth naming exactly: a verdict computed PURELY from six `needs` results\n  (changes, traceability, test, n1-gate, twohost-a, twohost-b — the two matrices collapse to one\n  result each) being neither failure nor cancelled. Nothing more.\n  **The blind spot is exactly ONE job: `notify` itself, the 9th — it cannot appear in its own\n  `needs` list. And that one job has a WITNESSED red path**, documented in the script's own header\n  (2026-07-27, twice on kitsubito): verdict computed, then `spt send` HUNG ~5 minutes until the\n  job's own 5-minute budget cancelled it, and that cancellation reddened the run. So *\"informant\n  says SUCCESS, run concludes FAILURE\"* is a real observed sequence, not a hypothetical. The 30s\n  `SEND_BOUND_SECS` added since bounds the hang but does not close the class — it makes the\n  informant's own failure FAST rather than impossible.\n  ⇒ The informant's SUCCESS covers 8 of 9 jobs and is blind to the 9th, and the 9th is the only one\n  with an observed failure mode that reds the run. This is why the ff predicate is the run's\n  conclusion field and never the informant line.\n- **RECOVERY, and it is the same for both arms: never rank the claims — re-derive from the source\n  object.** For briefs, hertz's four falsifiers are the method (main sha, claimed-pool count, lane\n  tip, issue state) and they work because each is a content claim checkable in ONE command against\n  a source NEITHER brief controls. For CI, read the RUN's own `conclusion` field, and prefer\n  independent reads of the run object (`gh run watch --exit-status` polls the run, so its exit is a\n  second measurement rather than an echo of `notify`). On the batch this was caught in, three\n  sources agreed with the informant excluded from all three before main was fast-forwarded.\n- **Standing rule this entry exists to enforce:** a resume brief's RULINGS are durable; its STATE\n  is a HYPOTHESIS to re-derive before acting.\n- **Kin:** [[IR-21]] and [[IR-39]] (the diagnostic names the wrong actor / the wrong subject),\n  [[IR-32]] (a gate that cannot see its own blind spot), [[IR-34]] (an intermittent marker read as\n  a signal).\n- **Ripe when:** the next commune/psyche-tier touch for arm A (the routing layer is spt-core's own\n  `spool`/psyche ingest, so a remedy is in-repo, not upstream); for arm B, the next `golden.yml`\n  informant touch — the cheap fix is that the notify step names its own scope in the message body\n  (STEP vs RUN) rather than emitting a bare \"CI SUCCESS\".\n- **Size:** arm B small (message text + scope word in one workflow step). Arm A unsized —\n  establishing whether ANY durable content-recency signal can ride the envelope is the measurement,\n  and until it runs the answer is \"re-derive, do not rank.\"\n\n### IR-41 — A QUEUED main run is superseded without a record; `cancel-in-progress: false` protects only STARTED runs\n- **Status:** open — mechanism CONFIRMED (doyle ruling 2026-08-05); the runbook sentence it\n  falsified is already corrected (`docs/RELEASE-RUNBOOK.md` step 3, same commit as this entry)\n  · **Origin:** deployah, v0.55.0 publish night, filed by him explicitly as UNPROVEN with the\n  manual-cancel alternative not ruled out; confirmed by doyle on the run objects.\n- **What/why:** `ci.yml` sets `cancel-in-progress: false` on main and the runbook read that as\n  \"main's concurrency policy never cancels this run; that preserves the record.\" FALSE for the\n  queued phase: a concurrency group holds at most one running + one pending run, and a newer push\n  REPLACES the pending run regardless of the flag — the flag governs only whether a STARTED run\n  is cancelled. A superseded queued run leaves NO record: zero jobs, conclusion `cancelled`,\n  nothing measured about its sha.\n- **Evidence (all read off the run objects, not the informant):** run 30973909279 at `327f1f8`\n  (push, main) — created 04:01:08Z, **zero jobs ever started**, cancelled 04:03:49Z, ONE SECOND\n  after `e8805f7`'s run 30974041521 entered the group (created 04:03:48Z), while `0a25b77`'s run\n  30973770039 was still in flight (done 04:07:59Z). One-running-one-pending, newer push landed,\n  pending run died. The 1s coupling to an unrelated push is the discriminator against deployah's\n  own manual-cancel alternative — a human cancel co-timed to the second with a push it had no\n  view of is not a credible mechanism; supersession fires on exactly that trigger by design.\n- **The hole this leaves:** under a rapid push sequence, an intermediate sha on MAIN can have no\n  thin-CI verdict AT ALL, and the absence reads as nothing rather than as supersession. Anyone\n  auditing \"did sha X pass main CI\" gets a hole where the runbook promised a record. Absence of\n  a run is now a labelled state, not evidence about the sha.\n- **Ripe when:** next ci.yml/runbook touch. Candidate remedies to weigh THEN, not now: accept and\n  document (done — the runbook now carries the mechanism), or give main's group per-sha keys\n  (`group: ci-${{ github.sha }}`) so runs never share a group — at the cost of concurrent main\n  runs competing for the boxes, which is exactly what the group exists to prevent. The trade is\n  real; do not fold it into a drive-by.\n- **Size:** docs half DONE in this commit; ci.yml half small but load-bearing — needs its own\n  lane if taken.\n- **Kin:** [[IR-40]] (a record that is right-in-the-end-but-early vs a record that never comes to\n  exist — both read as clean states unless labelled), [[cancelled-measurement-leaves-labelled-hole]].\n\n### IR-42 — `pool-claim` writes a record; only the BUILD enforces — and AGENTS.md invited the misread\n- **Status:** BUILT 2026-08-19 — the AGENTS.md corrective line lands in the SAME COMMIT as this\n  entry (the register batch commit), which is the entry's stated exit condition. The optional\n  code-side nicety (claim verb prints the incumbent record it overwrites, information only)\n  remains unclaimed — a candidate rider on the IR-26 remedy lane, which already touches\n  `pool_claim`'s read-before-write path, NOT a reason to keep this entry open ·\n  **Origin:** doyle + todlando independently at source, 2026-08-19, during the #193 gate.\n- **Mechanism (source-verified):** `xtask pool-claim` (crates/xtask/src/main.rs:2232-2294 at the\n  read sha) parses its args, reads the lane's own git identity, builds a `PoolOwner` and calls\n  `spt_poolguard::write_owner` UNCONDITIONALLY (:2280) — no `read_owner`, no verdict, no\n  comparison against the incumbent claim anywhere in the function. Claiming is last-writer-wins\n  by construction: two lanes can each \"hold\" a pool in sequence with only the last write\n  surviving, and the displaced lane learns nothing at displacement time. All four enforcement\n  arms — `Refuse` (SPT_POOL_FOREIGN), `Takeover` (loud), `Unproven`, `HatchOpen` — live in\n  crates/spt-store/build.rs:31-113 and speak only at the next BUILD. (Same object [[IR-26]]'s\n  CLAIM-OBSERVABILITY measurement saw from the displaced side; this entry is the CLAIMING side\n  plus the doc that invited the misread.)\n- **Measured consequence:** 2026-08-19, doyle's gate claim over todlando's unlanded\n  redeem-echo-diag claim — no refusal, no notice (three sequential overwrites that session, one\n  over a lane with an unlanded commit). todlando then predicted from AGENTS.md's refusal\n  sentence that the gate's claim \"will be REFUSED\" — a false warning to a gater mid-run. The\n  refusal sentence sat directly under the \"Claim a pool at lane start\" instruction, inviting the\n  build-time semantics to be read onto the claim verb.\n- **Corrective landed:** one AGENTS.md sentence — the claim WRITES a record and never refuses;\n  predict refusals from builds, never from `pool-claim`.\n\n### IR-43 — knock answer carrier: `NoReply` landed at 60.08s against a stated 30s carrier deadline\n- **Status:** open, OBSERVATION — mechanism unmeasured, filed exactly as wide as the datum ·\n  **Origin:** KNOCK-169 RCA layer 1 (todlando, read-only), golden 32191618042 @`93c1130`,\n  twohost-b, 2026-08-18.\n- **What/why:** B's `request_answer` yielded `NoReply` at 22:50:08.3605Z — 60.08s after A's\n  death — while the carrier deadline is stated at 30s. Recorded in the RCA as a side observation\n  with no claim; the cell's red itself was a CASCADE of A's earlier death (answerop.rs:73-81\n  produces the courtesy BEFORE returning, so the reply was never sent — that half is settled and\n  is NOT this entry). What this entry carries: a transport/liveness bound that reported at 2x its\n  stated value. Candidate shapes, neither asserted: two sequential 30s legs each honoring its own\n  bound (a composed wait wearing one bound's name), or a bound armed after a wait it does not\n  cover (the [[IR-30]] nethost.rs permit-wait shape: `sem.acquire_owned()` outside the timeout).\n- **Ask:** derive where the 30s is armed and what path yields a 60s `NoReply` — one code read\n  from the emit site, before any instrument.\n- **Ripe when:** next knock-carrier touch, or the next `NoReply`-shaped red — whichever first.\n- **Size:** small (code read; a token only if the read forks).\n\n### IR-44 — perch-sentinel comment overclaims: serialization is not preservation, and the comment teaches the false step\n- **Status:** open · **Origin:** #188 RCA lock read (todlando flagged, doyle confirmed the lock\n  read), 2026-08-18; the collapse-of-branches argument is on #188 and in the RCA record.\n- **What/why:** `lock_perch_sentinel` (info.rs:778 at `b20e770`, the diag sha — re-derive the\n  line on main before editing) takes a cross-process fs2 lock on a stable per-perch `.info.lock`\n  sentinel, and its comment claims it serializes \"ALL info.json writers so a whole-record write\n  and a locked RMW can never lose each other's update (`REQ-HAZARD-INFO-RMW-LOST-UPDATE`)\" —","numLines":500,"startLine":2001,"totalLines":3791}},"sourceToolAssistantUUID":"a0b1527d-61cd-4f42-8b50-d46b88ba4d6c","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"b7df91f7-89a7-4833-9ea9-c377505d2102","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6F8MKDEyAJnrpRgg1E","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"EtoCCqgBCBEYAipANascKVVTnE/yGnrEffsigSN7nCCQlUwTt8IlW1/0f1U/DKG9m+OJ+LoP0KZWAZ9Dmo6OzLtsJr2FgfZtajv/ojIPY2xhdWRlLXNvbm5ldC01OABCCHRoaW5raW5nWiQ4MGM5NDZkZC05YzNjLTQ5NzItOGYyZi03NDAxMTQxZGE2MzJyEJcpAiwR8BiFSxd+XzBU5MmIAQGoAY2X9dQGsAECEgxUcv+RCGL5iklTctcaDC7XawxG02UYiMskxCIwBiz9Dsu9bTSCE7QwIx0isdZEN+TUPy4Ko+ONcC0iOdpTeM698uFs5vbihCigXCQ9Kl+cNFy1QSAtvjd7wn/XtWGML0Ll0vQD2dvlUf6f12wJo3qXahZn1RUccRTxSDcwIjt5AA+VusIDFQOOnnGMjwFB+tE6V0ztRB7s4EVVTrL6/xgEQmre8niNUIjR9qe3wxgB"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":18716,"cache_read_input_tokens":136797,"cache_creation":{"ephemeral_5m_input_tokens":18716,"ephemeral_1h_input_tokens":0},"output_tokens":6,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6F7Xx1TC98iXFFirgV","attributionAgent":"general-purpose","type":"assistant","uuid":"53f55448-5691-4a5c-b0d8-748fd1e0cfb3","timestamp":"2026-09-06T11:16:29.088Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"53f55448-5691-4a5c-b0d8-748fd1e0cfb3","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6F8MKDEyAJnrpRgg1E","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01WbuBNp8VLXM2ikYLrnCqnf","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":2501,"limit":500},"caller":{"type":"direct"}}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":18716,"cache_read_input_tokens":136797,"cache_creation":{"ephemeral_5m_input_tokens":18716,"ephemeral_1h_input_tokens":0},"output_tokens":6,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6F7Xx1TC98iXFFirgV","attributionAgent":"general-purpose","type":"assistant","uuid":"9ee618c9-41d4-4f8d-a419-038956684030","timestamp":"2026-09-06T11:16:29.907Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"9ee618c9-41d4-4f8d-a419-038956684030","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01WbuBNp8VLXM2ikYLrnCqnf","type":"tool_result","content":"2501\t  TRUE for interleaving, FALSE for preservation. `write_info_unlocked` is module-private with\n2502\t  exactly three callers, all taking the sentinel first (bypass refuted by visibility), but every\n2503\t  caller of the public `write_info` composes its record BEFORE the lock is taken (:842) — **the\n2504\t  lock makes that write atomic; it cannot make it preserving.** Only `mutate_info` /\n2505\t  `establish_locked` read under the hold and can preserve. Measured field case: census write #1\n2506\t  (`twohost.rs:736`) clobbered `controlled` while correctly locked. A reader trusting the\n2507\t  comment infers lost-update immunity the funnel does not provide — the #188 hunt burned a\n2508\t  branch on exactly that inference before the collapse argument killed it.\n2509\t- **Ask:** respell the comment — serializes writers; a composed `write_info` is atomic, never\n2510\t  preserving; preservation requires `mutate_info`/`establish_locked` — and weigh whether\n2511\t  `REQ-HAZARD-INFO-RMW-LOST-UPDATE`'s doc wording carries the same overclaim.\n2512\t- **Ripe when:** next spt-store/info.rs touch. **Size:** tiny (comment + possibly one REQ doc\n2513\t  line).\n2514\t\n2515\t### IR-45 — twohost rig home premise, SETTLED: pump paths resolve under the per-run TEMP root (rig is disk-hermetic; the \"live fleet roster\" reading is retired)\n2516\t- **Status:** RETIRED 2026-08-19 — ask answered by the one code read at main @`78a9a16`; residue\n2517\t  re-homed (see Answer). · **Origin:** #188/#189 RCA readouts (todlando, doyle's 2a-2d), runs\n2518\t  32097943571 + 32108557362 + 32111921251, 2026-08-18.\n2519\t- **What/why, two measured halves in tension:** (1) B's pump dialed a THIRD node 155-159 times\n2520\t  per run at kitsubito's OWN tailscale IP (`100.98.197.12`), different hex + different ephemeral\n2521\t  port each run — a short-lived local endpoint re-minting identity between runs, present in both\n2522\t  the golden and the diag run. Read at the time as: the rig uses the CANONICAL home\n2523\t  (`canonical_pump_paths` → `perch::spt_home()`), so B's roster is kitsubito's live fleet\n2524\t  roster — environmental coupling of a CI rig to host fleet state. (2) The ER perch measured in\n2525\t  the chain runs resolves under a per-run TEMP root\n2526\t  (`…/_temp/spt-test-tmp-<run>…/owlery/engine-room`), NOT the canonical home. Both measurements\n2527\t  stand; they answer different artifacts (pump roster vs perches), and nothing on record settles\n2528\t  which home the PUMP paths actually resolve. #189's third-node evidence and its\n2529\t  cache-leg-never-heals reading rest on that premise (the tension is filed on the #188 record as\n2530\t  an open question against #189).\n2531\t- **Answer (2026-08-19, code read at `78a9a16`, unambiguous — no run token needed):** both role\n2532\t  tests set `SPT_HOME` to a fresh per-run `TempDir` as their FIRST act (`twohost.rs:813-814` role\n2533\t  B, `:1501-1502` role A), before any store touch. `canonical_pump_paths` resolves every path via\n2534\t  `perch::spt_home()` (`twohost.rs:396-414`), which honors the `SPT_HOME` override first\n2535\t  (`perch.rs:34-41`); the pump's roster source `presence::registry_snapshot_dir()` →\n2536\t  `perch::identity_dir()` sits under the same root (`presence.rs:83-85`). The rig is\n2537\t  DISK-HERMETIC per run; both prior measurements reconcile (ER perch observed under the temp\n2538\t  root, pump paths resolve there too). The misleader was the helper's name + doc comment (\"real\n2539\t  homes, not test roots\"), which describe production path LAYOUT, not the resolved ROOT.\n2540\t- **Residue disposition:** (1) #189's third-node evidence was corrected on the board (comment\n2541\t  5337519936) — the roster row arrived at RUNTIME into a temp-rooted store, ingress mechanism\n2542\t  OPEN on #189, no longer explained-environmental. (2) KEYSTONE #182's hygiene lane repaired the\n2543\t  `twohost.rs:394` comment to say exactly what the helper does: production path layout rooted in\n2544\t  the process's fresh per-run `SPT_HOME`.\n2545\t\n2546\t### IR-46 — the Windows disk-floor preflight asserts an INSTANT; workspace free space moves tens of GB inside the hour, so a green floor is not a claim about run headroom\n2547\t- **Status:** open — mechanism CONFIRMED by a measurement series on hfenduleam; doyle ruled it\n2548\t  register-shaped 2026-08-18 · **Origin:** deployah, NAMEPLATE #181 golden-head intake, on the\n2549\t  run that the floor red-floored · **Filed as IR-46 after an id collision:** this row was authored\n2550\t  as IR-42 and held unpushed under the v0.56.0 tag freeze, during which the release-close sweep\n2551\t  (`78a9a16`) issued IR-42..45 to other findings. Parallel issuance, not authored disagreement —\n2552\t  and noted here so a later reader chasing \"IR-42\" in this row's history does not hunt for a lost\n2553\t  version of it.\n2554\t- **What/why:** `golden.yml`'s Windows preflight computes `$freeBytes` once at job start and\n2555\t  hard-fails under a `32GB` floor. As a fast-fail that is correct and it did its job — it refused\n2556\t  before compiling rather than dying deep in a link step. The defect is what a PASS is then read\n2557\t  to mean. The reading is a point sample of a quantity that moves by tens of GB unattended, so a\n2558\t  green preflight licenses a run whose headroom was never measured. Nothing downstream re-checks.\n2559\t- **Evidence — five readings of `C:` free on one box inside roughly one hour, 2026-08-18:**\n2560\t  - `03:01:54Z` — `free_bytes=2666205184` (2.48 GiB) against `floor_bytes=34359738368`, the\n2561\t    preflight's OWN reading; run `32093894524`, both `n1-gate` and `test` on Windows/hfenduleam\n2562\t    failed at this same step, before any compilation.\n2563\t  - `~03:2xZ` — ~2.50 GB, independent `Get-PSDrive` read, corroborating the preflight.\n2564\t  - pre-reap — **33.70 GB**, immediately before deployah deleted anything.\n2565\t  - post-reap-1 — 76.42 GB (42.72 GB reclaimed: `claude_skill_owl/target`, `golden-w1/target`).\n2566\t  - pre-reap-2 — **73.81 GB**, i.e. 2.61 GB consumed unattended between the two reaps; then\n2567\t    post-reap-2 129.70 GB (55.89 GB reclaimed: `.worktrees/nameplate-w1/target`).\n2568\t- **LABELLED HOLE — do not let this harden:** roughly **31 GB was released between the preflight\n2569\t  failure and the pre-reap reading by something OTHER than the reclaim**. Released-by-unknown.\n2570\t  The runner cleaning its workspace after the job died is *plausible* and is NOT the recorded\n2571\t  cause — it was never measured, and no one looked while it was happening. Recorded as a hole on\n2572\t  purpose (doyle's explicit ask at filing): a plausible cause written down as the cause would make\n2573\t  this row read as explained when the actual mechanism of the 31 GB is unknown.\n2574\t- **The hazard this leaves:** a run can clear the floor at preflight and starve mid-build, and\n2575\t  mid-build disk starvation does not present as disk — it surfaces as a link failure, a truncated\n2576\t  artifact, or a rustc ICE, i.e. as a defect in the tree under test. The failure mode inverts the\n2577\t  gate's purpose: the preflight's whole point is to keep box conditions from being read as lane\n2578\t  reds, and a passing preflight actively argues the opposite. Note the polarity — this row is\n2579\t  about the PASS, not the FAIL. The observed red was honest.\n2580\t- **#242/v0.66.0 GOLDEN ADDITIONS (deployah measured 2026-08-29, banked at the 08-30 close\n2581\t  sweep):** (i) per-job floor figures are SEPARATE INSTANTS — quote per job, never one figure for\n2582\t  both (attempt 1: `test` 26521477120 vs `n1-gate` 26535051264 free bytes, 8s apart, one run);\n2583\t  (ii) **CORRECTED TRAP** (retracting deployah's earlier \"attempt-2 hides jobs\" version): the\n2584\t  default `/runs/<id>/jobs` endpoint stamps `run_attempt=<current>` on EVERY job including ones\n2585\t  that never re-ran (4 of 8 mis-assigned on this run) — it is the RUN's attempt, not the JOB's,\n2586\t  so a stale green can read as re-earned; `started_at` is the discriminator and\n2587\t  `/runs/<id>/attempts/N/jobs` the authority. Also `rerun --failed` re-runs DEPENDENT jobs\n2588\t  (twohost re-ran despite a green attempt 1); (iii) a rerun preflight reads RAW free BYTES with\n2589\t  the CI step's own predicate, not display GB; (iv) a rerun green counts as floor-RCA-closing\n2590\t  evidence only after a step-level NON-VACUOUS check (checkout SUCCESS + workload steps ran) —\n2591\t  the v0.64.0 checkout-SKIPPED shape means a green job can carry zero code signal.\n2592\t- **Ripe when:** next `golden.yml` touch. Remedies to weigh THEN, not as a drive-by: re-assert the\n2593\t  floor at job END (turns a starvation into a labelled disk verdict instead of a fake lane red);\n2594\t  or raise the floor to cover a full build's peak rather than its entry condition; or sample free\n2595\t  space across the run and emit the minimum as a token. All three cost run time; none is obvious.\n2596\t- **Size:** small in `golden.yml`, load-bearing in what a green run is taken to prove.\n2597\t- **Kin:** [[IR-41]] and [[IR-40]] (a state that reads as a clean verdict unless it is labelled —\n2598\t  here a PASS that is read as headroom it never measured), [[measure-the-box-before-the-instrument]],\n2599\t  [[cancelled-measurement-leaves-labelled-hole]].\n2600\t\n2601\t### IR-47 — ci-notify treats a missing co-author trailer as a quiet info line; silent attribution loss reads as \"there was none\"\n2602\t- **Status:** open — patch AUTHORED and stashed unlanded since 2026-07-29\n2603\t  (`.worktrees/_patches/ci-notify-missing-trailer.patch` + its `test-ci-notify.sh` harness in the\n2604\t  sibling `.untracked` dir); surfaced by doyle's 2026-08-19 idle-queue verification of that stash ·\n2605\t  **Origin:** the AGENTS.md trailer mandate's own hazard family (the space-spelling trailer is\n2606\t  structurally invisible to git's tokenizer, so confident zeros already read as attribution loss\n2607\t  once); this row is the NOTIFY-side twin.\n2608\t- **What/why:** `.github/ci/ci-notify.sh` parses the head commit for the line-anchored\n2609\t  `Co-authored by: <agent>` trailer to add a second notification recipient. When the trailer is\n2610\t  absent or unparseable, the current script emits one stdout info line (\"doyle only\") and moves\n2611\t  on — correct as a non-fatal outcome, wrong as a SILENT one: a lane that lost its attribution\n2612\t  (typo'd trailer, squash that dropped the body, hyphenated spelling) notifies doyle alone on\n2613\t  every run and nothing anywhere says an agent stopped being told about their own lane's verdicts.\n2614\t  The stashed patch keeps absence non-fatal but promotes it to a `::warning` workflow annotation\n2615\t  (visible on the run summary), and splits the legitimate quiet case (co-author IS doyle) from the\n2616\t  loss case so the two stop sharing one message.\n2617\t- **Evidence:** patch verified 2026-08-19 to still NOT be on main — the warning string is absent\n2618\t  from `.github/ci/ci-notify.sh` at the current tree. Patch content re-read at verification; it\n2619\t  applies against the script's post-`SEND_BOUND_SECS` shape.\n2620\t- **Ripe when:** next `golden.yml`/ci-notify touch — natural co-rider with [[IR-46]]'s remedy\n2621\t  window (same file family, same \"weigh then, not drive-by\" rule). The stashed test harness rides\n2622\t  with it.\n2623\t- **Size:** ~10 lines in one shell script plus its test.\n2624\t- **Kin:** [[IR-40]] (an unlabelled state read as a clean verdict — here a quiet info line read as\n2625\t  \"no co-author existed\"), the AGENTS.md `%(trailers:)` tokenizer mandate (the sibling silent-zero\n2626\t  on the AUDIT side).\n2627\t\n2628\t### IR-48 — the nextest.toml parity cell tolerates CRLF only by parser accident; a newline-sensitive arm added later reds fresh Windows checkouts alone\n2629\t- **Status:** open — filed 2026-08-19 (doyle route, hertz verdict: REGISTER as preventive\n2630\t  hardening, not current defect) · **Origin:** sibling sweep after the W3 gate CRLF finding —\n2631\t  parent mechanism: `include_str!` embeds working-tree bytes verbatim, `core.autocrlf=true`\n2632\t  smudges fresh checkouts CRLF, and the author's never-re-smudged tree stays LF — builder green,\n2633\t  every fresh rig/golden checkout red.\n2634\t- **What/why:** `crates/xtask/src/main.rs` `the_checked_in_config_is_in_parity` include_str!s\n2635\t  `.config/nextest.toml` and feeds `phase_a_overrides_missing_from_ci_windows`. TODAY this is\n2636\t  causally CRLF-tolerant — the parser is `str::lines()`+trim (`override_filters`, main.rs:434-440),\n2637\t  and the 52/52 fresh-rig green at the hygiene gate (2026-08-19, this box) is therefore causal, not\n2638\t  luck. The hazard is the MISSING CONTROL: nothing pins the tolerance, so a future\n2639\t  newline-sensitive arm in the parity predicate reds only on fresh Windows checkouts — the\n2640\t  builder-green/rig-red inversion, deterministic but reading as flake.\n2641\t- **Remedy (hertz's, platform-independent):** feed the parity predicate an LF fixture AND the same\n2642\t  fixture converted to CRLF, assert identical missing-sets (including one unmirrored negative), so\n2643\t  a newline-sensitive arm reds on EVERY host rather than only fresh Windows checkouts.\n2644\t- **Ripe when:** next xtask parity-cell touch; explicitly OUTSIDE the family-B lane (hertz\n2645\t  scoping). **Size:** one fixture-pair cell.\n2646\t- **Kin:** the W3 gate finding this swept out of (skeleton cells, fixed at the fixture edge in\n2647\t  lane commit e99633f); [[IR-40]] (an untested tolerance read as a guarantee).\n2648\t\n2649\t### IR-49 — poolguard's landed-lane predicate is ancestry-only, so a cherry-picked member lane can never read Settled and its pool can never be taken over\n2650\t- **Status:** open — filed 2026-08-19 (todlando measurement at the keystone-w1/fix-197 reap,\n2651\t  doyle ruling; doyle re-verified the predicate at source before filing) · **Origin:** todlando's\n2652\t  post-landing landed-check used the guard's own predicate and it contradicted the (correct)\n2653\t  landed fact — the checker was wrong with the guard, which is exactly how the guard will be\n2654\t  wrong alone.\n2655\t- **What/why:** `git_lane_state`'s final arm answers Settled/InFlight purely by\n2656\t  `merge-base --is-ancestor <lane tip> <integration head>`\n2657\t  (`crates/spt-poolguard/src/lib.rs:424-436`, probe at `:474-479`). Under ADR-0050 golden CI\n2658\t  (thin member lanes cherry-picked onto a stage branch, ff-only main) a MEMBER lane's own branch\n2659\t  tip never becomes an ancestor of main. Measured at origin/main `9ea595c`:\n2660\t  `build/keystone-182-w2-sealed-multi` @`ba2d998` and `fix/197-absent-code-uncounted` @`5eb6a3b`\n2661\t  both read NOT-ancestor while `git cherry -v` reports every lane commit `-` (already upstream).\n2662\t  So `LaneState::Settled` is unreachable for any cherry-pick-assembled member lane whose branch\n2663\t  still exists, the takeover arm can never fire, and the pool refuses forever — including with a\n2664\t  dead holder. That contradicts the AGENTS.md mandate (\"a merged branch is taken over\") because\n2665\t  the guard's notion of merged is ancestry-only and the golden model structurally never produces\n2666\t  ancestry for member branches. The branch-vanished (`:391`) and re-pointed (`:399`) arms still\n2667\t  fire, and the STAGE lane works (its tip IS an ancestor) — the hole is landed-member-branch-\n2668\t  still-exists only. It did not bite at the 2026-08-19 reaps solely because deleting a pool\n2669\t  deletes its claim; it bites the first time someone wants to TAKE OVER a landed lane's pool\n2670\t  rather than reap it.\n2671\t- **Remedy (todlando's candidate, doyle-endorsed direction):** when ancestry answers false, fall\n2672\t  back to patch-id containment (`git cherry` / `rev-list --cherry-mark` against the claimed\n2673\t  base) before concluding InFlight. **Known residual to state in the fix's docs/tests:** a\n2674\t  conflict-adjusted pick changes the patch-id, so such a lane still reads InFlight; its release\n2675\t  path is branch deletion (the vanished arm), which is at least reachable. Tests want a\n2676\t  cherry-picked-landed fixture plus a conflict-adjusted negative.\n2677\t- **Ripe when:** next poolguard touch, or the first landed-lane pool takeover request.\n2678\t- **Size:** one fallback arm in `git_lane_state` + two fixtures.\n2679\t- **Kin:** [[IR-26]] (dead-holder takeover AUTHORIZED when it shouldn't be — this is the mirror:\n2680\t  takeover UNREACHABLE when it should fire), [[IR-42]] (claim writes, build enforces), the\n2681\t  AGENTS.md pool mandate this contradicts.\n2682\t\n2683\t### IR-50 — e2e failure panels read the PRE-REDIRECT stderr capture; every daemon-side diagnostic lands in a sink the rig deletes unread\n2684\t- **Status:** CLOSED — BUILT 2026-08-19; adoption-completion lane\n2685\t  `docs/ir50-register-close` @`e02f565f` (hertz, doyle-gated 2026-08-20) LANDED in\n2686\t  v0.59.0 as a PORTER rider (pick `e702d4b7` tip, main @`c62904e7`; register sweep\n2687\t  2026-08-21) — lane `fix/ir50-stderr-sink-census` @`1a2f6a2`+`2ac9543`\n2688\t  (hertz; base `0c86b2d`; rides the CONCIERGE #183 chain; these shas are the 2026-08-19\n2689\t  message-only reword of `cb4cd9d`+`7336e03` — trees proved identical by tree-id, so every\n2690\t  measurement below carries): exported\n2691\t  `spt_daemon::stderrlog::sink_path(home)` with `stderr_log_path` routed through it +\n2692\t  equality unit; `daemon_stderr_panel` in tests/common renders BOTH channels and labels a\n2693\t  read failure with channel + exact looked-at path + OS error (absent-sink regression pins\n2694\t  it — the IR-40 unlabelled-absence class was caught at gate and fixed in `2ac9543`);\n2695\t  censused every daemon-run captured-stderr panel outside `engine_room_bringup_e2e` (rides\n2696\t  #199 lane) and `er_briefing_*` (rides #164 lane); engineroom.rs:145 misnomer rider landed\n2697\t  in the same lane. Gate figure 781/781 at `2ac9543` (measured at the pre-reword tree,\n2698\t  which is byte-identical; first-report 765 was transcription,\n2699\t  corrected with raw line + JSON provenance). CLASS FOLD (doyle ruling, no fresh row):\n2700\t  `er_briefing_presented_e2e` hit this exact class during its own authoring (blank panels\n2701\t  on a real loud line) and was fixed locally in `72efb6a` reading both channels.\n2702\t  **REGISTER CLOSED 2026-08-19:** branch `docs/ir50-register-close` links the\n2703\t  golden-tested implementation at `4661bc9d` and completes helper adoption in the five measured\n2704\t  residual files: `er_brief_once_per_session_e2e.rs`, `er_briefing_presented_e2e.rs`,\n2705\t  `er_sequestered_cwd_e2e.rs`, `endpoint_autostart_e2e.rs`, and `n1_pairing.rs`.\n2706\t  `engine_room_bringup_e2e` remains the explicit exclusion, recorded as todlando's direct\n2707\t  sink-path read from the #199 lane. ·\n2708\t  **Originally filed:** 2026-08-19 (todlando RCA inside the #199 investigation; the immediate\n2709\t  four-panel fix in `engine_room_bringup_e2e.rs` is his and rides the #199 lane — THIS entry is\n2710\t  the class census, hertz-class) · **Origin:** the #199 evidence void — 40 rca-v2 runs held zero\n2711\t  daemon-side evidence for either erhost face; `ENGINE_ROOM_SPAWN_FAIL` (broker.rs:5658) was\n2712\t  written to a log the rig destroyed at teardown. Absence discipline honoured: the SUCCESS-path\n2713\t  line (`ENGINE_ROOM_BROUGHT_UP`) was also absent from all 40, proving the channel dead rather\n2714\t  than the event absent.\n2715\t- **What/why:** product `stderrlog::install` (broker at cli.rs:7633, brain at brainproc.rs:200)\n2716\t  repoints the process STD_ERROR_HANDLE within its first statements (`redirect_stderr_to`,\n2717\t  stderrlog.rs:101 — Windows `SetStdHandle` + `mem::forget`), so a rig's `.stderr(File)` capture\n2718\t  holds only the pre-redirect window; from that line on every diagnostic lands in\n2719\t  `SPT_HOME/logs/daemon.stderr.log` (stderrlog.rs:34/42) inside the rig's temp home, destroyed\n2720\t  unread at teardown. Panels are also mislabelled (\"brain stderr\" holding the broker's first\n2721\t  lines). REQ-DAEMON-STDERR-PERSIST fixed this blindness PRODUCT-side (\"the incident-night\n2722\t  RCA-blind gap\", cli.rs:7626-7631); no rig was ever taught to read the sink, so the fix does\n2723\t  not reach any harness. Class: every e2e rig that spawns `spt daemon run` and prints a\n2724\t  captured-stderr panel has the same void.\n2725\t- **Remedy:** census all such rigs; failure panels additionally dump\n2726\t  `SPT_HOME/logs/daemon.stderr.log` with the path read FROM `spt_daemon::stderrlog` (never\n2727\t  re-spelled), and the labels corrected (\"broker stderr (pre-redirect)\" / \"daemon stderr sink\").\n2728\t  `engine_room_bringup_e2e.rs`'s panel sites land in the #199 lane (todlando, scoped there —\n2729\t  measured shape: FIVE producers incl. the :167 precondition panic, SEVEN print sites, seven\n2730\t  relabels; the early \"four\" was an estimate the file refuted). ⚠ Rigs can only import\n2731\t  `STDERR_LOG_BASENAME`; the `\"logs\"` dir segment has no exported const, so every rig\n2732\t  re-spells it — the census lane should add an exported path helper (e.g.\n2733\t  `stderrlog::sink_path(home)`) to spt-daemon FIRST, then consume it everywhere. The census\n2734\t  and remainder are hertz-class.\n2735\t- **Ripe when:** hertz's queue after current items, or the next e2e red printing an empty\n2736\t  stderr panel.\n2737\t- **Size:** census + mechanical panel edits per rig.\n2738\t- **Kin:** [[IR-40]] (an absent signal read as a clean verdict), REQ-DAEMON-STDERR-PERSIST (the\n2739\t  product half of the same incident), [[IR-8]] (a censused zero that cannot see its blind spot).\n2740\t\n2741\t### IR-51 — engine-room e2e daemon runs NET-ENABLED on real interfaces; rig hermeticity is disk-deep only\n2742\t- **Status:** open — filed 2026-08-19 (todlando's x40 run-4 sink read, the first live read any\n2743\t  rig has had of the daemon sink; doyle ruled own-id rather than riding #199, at the finder's\n2744\t  own request) · **Origin:** unasked-for find inside the #199 instrument's first catch.\n2745\t- **What/why:** the rig's temp `SPT_HOME` buys DISK hermeticity ([[IR-45]]'s settlement — which\n2746\t  explicitly covered paths, not network) but nothing turns the net off: the run-4 sink shows\n2747\t  the rig's own daemon with `BRAIN_NET_CONSUMERS_UP` (dispatcher + peer pump started), three\n2748\t  `NET_FAMILY_GATE: binding IPv4-only`, and three `PAIR_MEET_UP:erhome` carrying the box's REAL\n2749\t  Tailscale (100.68.35.65) and LAN (192.168.1.81) addresses — live peer work during an e2e —\n2750\t  plus an `INBOUND_REACHABILITY` warning whose firewall rule admits the CI-runner's binary path\n2751\t  (`C:\\actions-runner\\_work\\spt-bs-core\\spt-bs-core\\target\\debug\\spt.exe`) while this daemon\n2752\t  ran from a dev tree. Consequences: test behavior conditioned on shared-box network state;\n2753\t  rate-shaped flakes; e2e runs radiating real traffic. SAME SINK, RECORDED NOT DIAGNOSED: conn\n2754\t  churn at ~150 ms cadence (327 write-start / 324 transport-close, conn ids past 300 in 58 s) —\n2755\t  unattributed. ⚠ CANDIDATE INTERACTION, explicitly NOT established (finder's own framing\n2756\t  honoured): the run-4 face (30 s bound blown, zero session events in the window, launch Ok, no\n2757\t  error anywhere) matches the SHAPE of the filed offline-but-resolvable-peer pump-stall\n2758\t  mechanism (dial does not fast-fail). Discrimination open; nothing here is a #199 attribution.\n2759\t- **Remedy:** a rig-honoured net-off switch (peer pump + discovery disabled under test unless\n2760\t  the test is ABOUT them) or loopback-only binding; census which e2e rigs start net consumers.\n2761\t  Sequencing rule: do NOT fix hermeticity into #199's face before the face is attributed — a\n2762\t  green bought by turning the net off would bury the mechanism unread.\n2763\t- **Ripe when:** #199 attribution answers whether net state is causal; else the next\n2764\t  hermeticity pass.\n2765\t- **Size:** product switch + rig adoption + census.\n2766\t- **Kin:** [[IR-45]] (the disk half), the subnet-pump dial-does-not-fast-fail mechanism (filed,\n2767\t  pump-stall RCA), [[IR-38]] (a live daemon's side effects outliving the test's intent),\n2768\t  releases#125 gc-spin (a conn-churn shape candidate).\n2769\t\n2770\t### IR-53 — failed-address expiry unit panics during the first 10m01s after Windows boot\n2771\t- **Status:** BUILT 2026-08-21 on `fix/ir53-cold-boot-instant` — LANDED in v0.59.0\n2772\t  (PORTER rider, pick `7b26f28d` on `assembly/porter-205`, main @`c62904e7`; register\n2773\t  sweep 2026-08-21 at release close) · **Origin:** todlando,\n2774\t  found and falsifiably measured mid-releases#204; this rider fixes the latent CI-pipeline\n2775\t  flake before PORTER golden.\n2776\t- **Measured:** `failedaddr::tests::an_expired_record_stops_matching_and_is_swept` ages an\n2777\t  `Instant` with `Instant::now().checked_sub(FAILED_ADDR_TTL + 1s).expect(...)`, where\n2778\t  `FAILED_ADDR_TTL = 600s`. Windows `Instant` counts from boot, so a host younger than 601s\n2779\t  cannot represent the requested stamp and panics `monotonic clock older than the TTL`.\n2780\t  Todlando predicted and observed the red before the threshold, then observed the identical\n2781\t  tree green after it; two subsequent daemon sweeps held 860/860.\n2782\t- **Remedy:** when the monotonic clock cannot represent the age, return through the loud\n2783\t  `SKIP_FAILED_ADDR_EXPIRED_SWEEP` arm naming the exact unproved property. On every warm host\n2784\t  the original direct aging and both expiry assertions still run unchanged; there is no\n2785\t  ten-minute sleep and no silent pass on the cold arm.\n2786\t- **Class census (untruncated):** four test-side\n2787\t  `Instant::now().checked_sub(...TTL/deadline...).expect(...)` patterns total. This cell is\n2788\t  the sole 601s member. Three siblings remain recorded, not changed in this rider:\n2789\t  `broker.rs:8432-8434` and `broker.rs:9198-9200` age\n2790\t  `CONTROLLER_WRITE_DEADLINE + 1s` (6s), while `broker.rs:10385-10388` ages\n2791\t  `BRAIN_WRITE_DEADLINE + 1s` (16s). Their much narrower cold-boot windows are the same\n2792\t  mechanism class and should use a controlled clock seam when next touched.\n2793\t- **Kin:** releases#204 (finder lane), [[IR-25]] (daemon-lib flake population), and\n2794\t  [[IR-40]] (a confident verdict without the evidence needed to make it).\n2795\t\n2796\t### IR-52 — docs-site CLI reference renders SHALLOW; help text below the rendered depth is outside the drift gate, unit-held per-REQ or held by nothing\n2797\t- **THIRD INSTANCE, observed 2026-08-24 (todlando, WAX-SEAL #21 W4; not acted on):** the new\n2798\t  `spt api seal verify|describe` FLAGS sit below the generator's rendered depth — the entry's\n2799\t  exact class. The W4 user page hand-documents them, which is per-page self-defense, not a\n2800\t  gate. Conditional-rider condition did NOT fire at W4 (no generator touch); the entry's own\n2801\t  trigger stands for whichever lane next touches the generator.\n2802\t- **Status:** BUILT 2026-08-24 on SIGNET #218 W1 T6 (todlando; doyle's intake made it the wave's\n2803\t  rider when the new `seal enroll-authenticator` verb forced the generator touch that armed the\n2804\t  trigger): `xtask` reference-gen now DESCENDS THE FULL COMMAND TREE recursively (the durable\n2805\t  remedy), regen published the 22 previously-unrendered leaves + the new section, and a depth\n2806\t  regression is a drift RED by construction. Self-holding units censused per the remedy: the\n2807\t  SURFACE-SECTION-SITED walk and both MONIC-TRIGGER-SECTION sited-help units are now DOUBLE-held\n2808\t  (published surface under the drift gate + content pins kept) — kept, not retired. · **Origin:**\n2809\t  todlando's #160 build report, fact flagged for the gate rather than folded silently.\n2810\t  (Pre-build status: open, filed 2026-08-19 — doyle, W3 #160 gate prep; second measured instance\n2811\t  of a class REQ-CLI-SURFACE-SECTION-SITED's own title already named for its sites.)\n2812\t- **What/why:** the generated `docs-site/src/cli/reference.md` renders `spt endpoint monic`\n2813\t  but does not descend to `monic add` / `monic update`, so the #160 strike of the maintained\n2814\t  kind enumeration at those two flag docs never appeared in the published reference and the\n2815\t  docs-drift gate CANNOT see the strike — the REQ-CLI-MONIC-TRIGGER-SECTION rendered-help\n2816\t  unit is the only hold. General mechanism: any help text below the generator's descent\n2817\t  depth is invisible to the drift gate; a deep help edit (or regression) ships unpublished\n2818\t  and ungated unless some REQ's unit happens to pin it. First measured instance:\n2819\t  REQ-CLI-SURFACE-SECTION-SITED names \"the three-deep sites the docs-site drift gate cannot\n2820\t  reach\" and closes them with its own pinned walk — per-REQ self-defense, not a gate.\n2821\t  Consequence beyond drift: adapter builders build BLIND from the public docs (DRI\n2822\t  protocol), so a deep-help divergence hands every adapter a thinner contract than the\n2823\t  operator's terminal shows.\n2824\t- **Remedy:** either xtask reference-gen descends the full command tree (deep help becomes\n2825\t  published surface the drift gate already covers), or a generic rendered-help walk over all\n2826\t  sites at all depths joins the drift gate; census which REQ units currently self-hold deep\n2827\t  sites (known: SURFACE-SECTION-SITED walk, MONIC-TRIGGER-SECTION sited-help unit).\n2828\t- **Ripe when:** next xtask docs-gen touch, or the first adapter filing traceable to a\n2829\t  deep-help divergence.\n2830\t- **Size:** xtask render change + regen + census of self-holding units.\n2831\t- **Kin:** the REQ-CLI-SURFACE-SECTION-SITED pinned walk (the per-REQ closure shape this\n2832\t  entry generalizes), [[IR-47]] only if its golden.yml/ci-notify surface rides the same\n2833\t  docs-gate window.\n2834\t\n2835\t### CI-RIDER LANE STATE — LANDED 2026-08-04 (post-v0.53.0 merge queue); history below kept for its mechanisms\n2836\t- **RESOLVED:** the lane rebased clean onto the post-tag queue and landed ff-only as\n2837\t  `2b33a47`/`2a7b016`/`d63f4ce`/`19d7f79` (content byte-identical to `1275e47..bf8c4a2` by lane-diff\n2838\t  blob hash). IR-1 and IR-4 are BUILT AND LANDED; IR-9's measurement half is landed with its trigger\n2839\t  now armed — the toolchain print reports runner-account versions on the NEXT GOLDEN RUN, which is\n2840\t  when doyle's 2026-08-03 ruling (decide from runner-account versions, never the interactive prior)\n2841\t  becomes executable. The two golden-only steps (link probe both boxes, toolchain print both legs)\n2842\t  remain unexercised until that run — the landing does not change that caveat.\n2843\t- **As recorded pre-landing (2026-08-04, doyle):** `ci/locksmith-riders` was at `bf8c4a2` with FOUR\n2844\t  commits not contained in `origin/main` and not present in LOCKSMITH's golden head `b7b00c3`. The\n2845\t  worktree `.worktrees/hertz-ci-riders` was clean, so the work existed and was simply unlanded:\n2846\t  `1275e47` (xtask: assert a load-bearing patch pin is still in force, both ways it lapses) ·\n2847\t  `49d4805` (docs/ci: a lock-touching lane reads edges, not just the package set) ·\n2848\t  `8ed006b` (ci/golden: print the toolchain that judged the run, both legs) ·\n2849\t  `bf8c4a2` (ci/golden: measure the link before rendezvous, read the floor after the checkout that\n2850\t  clears it — the floor read AFTER its own reclaim is [[ci-runner-has-no-warm-target]]'s shape).\n2851\t- **Why it is recorded rather than quietly re-dispatched:** [[IR-1]]/[[IR-4]]/[[IR-9]] were carried\n2852\t  as DISPATCHED, which is now false in BOTH directions — the work is further along than dispatched,\n2853\t  and it also did not ship. The cause was the same agent outage that cost `#123` its build, and the\n2854\t  operator's standing rule from that drop applies here too: an outage must not be able to remove\n2855\t  work from a batch silently. Board requests got a drop comment; register entries get this.\n2856\t- **MAPPING CONFIRMED BY ITS BUILDER 2026-08-04, by REQ id rather than by recollection** — hertz\n2857\t  noted first that its own context had been cleared between building the lane and answering, and\n2858\t  declined to testify from memory about the original instrument. Everything here is either measured\n2859\t  that day or read off the commits:\n2860\t  `1275e47` → `REQ-CI-LOAD-BEARING-PATCH-PIN` ([[IR-4]] part 1, the mechanical pin guard in xtask) ·\n2861\t  `49d4805` → `REQ-LOCK-TOUCHING-LANE-PROCEDURE` ([[IR-4]] part 2, procedure in docs/GOLDEN-CI.md) ·\n2862\t  `8ed006b` → `REQ-CI-TOOLCHAIN-VERSION-PRINT` ([[IR-4]] part 3, carrying [[IR-9]]) ·\n2863\t  `bf8c4a2` → `REQ-CI-LINK-HEALTH-PROBE` ([[IR-1]], the network axis).\n2864\t- **CORRECTION TO THE GATER'S EARLIER WORDING, from the builder:** `8ed006b` does NOT discharge\n2865\t  [[IR-9]] — it discharges IR-9's MEASUREMENT half only. IR-9's other half (align the two boxes, or\n2866\t  declare one authoritative clippy leg) is held by doyle's own 2026-08-03 ruling: decide once the\n2867\t  step reports RUNNER-ACCOUNT versions, never on the interactive-account prior. IR-9 therefore stays\n2868\t  OPEN with its trigger now REACHABLE, which is a different state from \"waiting\".\n2869\t- **Gate evidence, instrument NAMED:** `cargo nextest run -p xtask` in `.worktrees/hertz-ci-riders`\n2870\t  on hfenduleam, box quiet with no runs in flight — 34 run, 34 passed, 0 skipped. Nextest rather\n2871\t  than bare `cargo test`, per [[IR-25]]. ⚠ **What that does NOT cover, stated by the builder rather\n2872\t  than discovered later:** the two golden steps the lane ADDS (link probe on both boxes, toolchain\n2873\t  print on both legs) cannot be exercised outside a golden run. The probe's three arms\n2874\t  (five-sample success, no-reply, absent-CLI) were exercised on the real boxes at commit time, and\n2875\t  that is reported as a CLAIM RECORDED AT COMMIT TIME, not as a re-verification — the kitsubito arm\n2876\t  could not be re-checked from here. This is why the lane wants a golden rather than a quiet ff.\n2877\t- **[[IR-5]]/[[IR-6]] CONDITIONAL RIDERS: CONDITION NOT MET — the answer is NO and it closes the\n2878\t  question for this lane.** Measured file set `6d291e0..bf8c4a2`: `.gitattributes`,\n2879\t  `.github/bench/link-probe.ps1`, `.github/bench/link-probe.sh`, `.github/workflows/golden.yml`,\n2880\t  `crates/xtask/src/main.rs`, `crates/xtask/tests/bench_row_parity.rs`, `docs/GOLDEN-CI.md`,\n2881\t  `traceable-reqs.toml`. Nothing under `.github/ci/`, where the nextest-summary readers and\n2882\t  count-reporting scripts live. IR-5: no consumer of nextest output touched. IR-6: no EXISTING gate\n2883\t  output changed — though the NEW output was voluntarily written to IR-6's rule (the LINK line\n2884\t  prints `samples=N/M` and the individual rtts, membership beside the count, in both shells). That\n2885\t  SHRINKS IR-6's future scope by two lines; it does not discharge it.\n2886\t- **Three mechanisms lifted from this lane's REQ titles, worth more than the lane:**\n2887\t  (a) **An instrument must not be able to RED the run, and each shell breaks that differently** —\n2888\t  bash: `| head` under `pipefail` SIGPIPEs the producer to 141, so a print step reds (trim with\n2889\t  parameter expansion instead); pwsh under GitHub's wrapper: a MISSING COMMAND is a terminating\n2890\t  error, so rustup's absence must be TESTED with `Get-Command`, never caught. One requirement, two\n2891\t  constructions, and neither is portable reasoning about the other.\n2892\t  (b) **A negative-control mutation must be COUNTED before it is trusted** — the absent-CLI arm was\n2893\t  first \"measured\" against a tree where the mutation had not taken, silently re-measuring the\n2894\t  unmutated arm and reading as a pass.\n2895\t  (c) **Jitter, not the median, is the signal on a link that mostly works** — the motivating red's\n2896\t  link ran 10..83ms and 3..75ms while IDLE, so a median-only probe reads healthy straight through\n2897\t  the failure. Both med and max rows ride the ledger.\n2898\t- **Disposition:** composes onto the next golden batch as a thin lane, NOT slipped onto main. It\n2899\t  changes the golden pipeline itself, so it wants a golden rather than a quiet ff — and while\n2900\t  v0.53.0 is untagged, any push to `main` moves the runbook's bare `git tag` off the tested sha.\n2901\t\n2902\t### IR-55 — the `spt --bins` suite wedges partway through on leaked `findstr .` PTY children; the tests at the frontier are casualties, not culprits\n2903\t\n2904\t- **Status:** OPEN, **ARMED-FOR-CAPTURE**, owned by **hertz**. Test/rig defect by the dispatch\n2905\t  split (test/CI rework is never the product builder's). Filed by doyle 2026-08-22 from the\n2906\t  TURNKEY #212 W3 gate on releases#213.\n2907\t- **CORRECTED BY REPLACEMENT the same day.** This entry first named\n2908\t  `cli::tests::adapter_profile_verbs_local_only` as the wedging test, because that is where the\n2909\t  streamed frontier stopped. **That was wrong, and the correction is the useful part of the\n2910\t  entry:** run in isolation, on the same pool and binary and with the same env, that test passes\n2911\t  in **0.02s**. So do the other two the suite later stalled on —\n2912\t  `cli::tests::shell_channels_relay_sensory_and_text_file` (0.20s) and\n2913\t  `cli::tests::resolve_proof_target_override_reads_on_disk` (0.00s), each 1 passed / 652 filtered.\n2914\t  **A frontier names where progress STOPPED, not what CAUSED it.** Naming the last test printed\n2915\t  is the same error shape as reading a stack frame as a root cause, and it would have sent hertz\n2916\t  to rewrite three innocent tests.\n2917\t- **What is actually measured:**\n2918\t  - `cargo test -p spt --bins` unfiltered sat **24 minutes** at 13.5s CPU — blocked, not spinning.\n2919\t  - Re-run with `--test-threads=1` and streaming output: stalled after **183** completed.\n2920\t  - Re-run again with that frontier test skipped: progressed to **335** completed, then stalled\n2921\t    with **two** tests simultaneously past libtest's 60-second notice. Skipping one casualty\n2922\t    simply moves the frontier, which is itself evidence the fault is not in any one test.\n2923\t  - Every wedged harness carried `findstr.exe .` children under `conhost.exe --headless`.\n2924\t    **`findstr` with no file argument reads STDIN and blocks forever.**\n2925\t  - The frontier tests are **byte-identical at `c62904e7` and at the #213 tip `3d69f77c`**\n2926\t    (function bodies hashed at both blobs), so nothing in that lane introduced this.\n2927\t- **Reading, stated as a reading rather than a conclusion:** an EARLIER test spawns the `findstr`\n2928\t  stand-in as a PTY child and does not reap it; the children accumulate across the run and a later\n2929\t  test blocks behind them. Which test leaks is NOT yet identified and this entry does not guess —\n2930\t  the next step is to bisect for the leaker rather than to touch any test at the frontier. Five\n2931\t  orphaned `findstr` processes with creation times spread across the day were observed on this box\n2932\t  independently of any single run, which is consistent with accumulation across many suite runs.\n2933\t- **Hypothesis RAISED AND NOT SUPPORTED, recorded so nobody re-runs it:** the gate scrubs\n2934\t  `OWL_SESSION_ID` / `SPT_AGENT_ID` / `SPT_ENDPOINT_ID`, and a scrubbed identity was suspected of\n2935\t  routing a normally-REFUSED test down a live PTY path. The isolation runs above were performed\n2936\t  **with the scrub applied** and passed, so the scrub alone does not produce the hang. It remains\n2937\t  unexplained why the same unfiltered command completed at 652 passed / 1 failed for another agent\n2938\t  on the same tree; do not treat the scrub as the differentiator without a fresh one-variable run.\n2939\t- **Why it is register-grade:** golden CI runs the `spt` package. A test that never returns cannot\n2940\t  red — it consumes the single self-hosted runner slot until the job timeout, which `golden.yml`'s\n2941\t  50-minute cap bounds rather than fixes. A wedge that fires only sometimes is worse than a red,\n2942\t  because the suite's green record stays intact and nobody audits it — the same self-concealing\n2943\t  shape as `exit-code-after-a-pipe-is-the-tails`.\n2944\t- **Trigger condition (ripe):** any milestone whose gate wants an unfiltered `spt --bins` sweep,\n2945\t  which is every one of them. Ripe now.\n2946\t- **REMEDY, MEASURED 2026-08-22 and it changes this entry's urgency:** the same 653 tests under\n2947\t  `cargo nextest run -p spt --bins --no-fail-fast` complete in **22.2 seconds, 653 passed, 0\n2948\t  skipped, exit 0** — no slow markers, no timeouts — on the very tree and pool where\n2949\t  `cargo test -p spt --bins` wedged indefinitely twice. **nextest runs each test in its OWN\n2950\t  process**, so a leaked `findstr` child can block only itself. This is the discriminating\n2951\t  measurement rather than a workaround reached for to get a green: **the suite is not broken; the\n2952\t  SINGLE-PROCESS harness is what lets one test's leaked child wedge every test after it.** Golden\n2953\t  CI already runs nextest, which is the likely reason this has never surfaced there — the exposure\n2954\t  is to anyone running bare `cargo test` on the `spt` package, which is every local gate.\n2955\t- **Count reconciliation, recorded so the figures are not read as a discrepancy:** runs of this\n2956\t  suite report 652 passed / 1 failed where the one failure is\n2957\t  `cli::tests::adapter_translate_proof_gates_on_commit` — the `--bins`-only artifact, which\n2958\t  refuses because `translate_proof_fixture.exe` is not built under a bins-only invocation and says\n2959\t  so in its own message. Prebuilding it (`cargo build -p spt --bin translate_proof_fixture`) makes\n2960\t  it pass: 652 + 1 = 653. Prebuild the fixture rather than carrying a known-red through every gate.\n2961\t- **⚠ AMENDED 2026-08-22 — DO NOT PREBUILD FROM THIS BULLET'S EXAMPLE.** The line above names ONE\n2962\t  fixture because one fixture is what *this* wedge needed; read as the prebuild recipe it covers a\n2963\t  fraction of the population, and it was read that way twice on one day. **The census already exists\n2964\t  in IR-21 above** (`adapters/mock`: mock-session, mock-shell, capture-player, console-mode-probe ·\n2965\t  `crates/spt-daemon`: dispatch_fixture, service_fixture, summarizer_fixture · `crates/spt`:\n2966\t  translate_proof_fixture, post_step_fixture, gh_fixture, git_fixture), together with the split that\n2967\t  matters: **cross-package sites are the hazard members; same-package builds are guaranteed by\n2968\t  construction.** Field instances, both 2026-08-22 TURNKEY #212 W4: todlando's lane red on three\n2969\t  `spt-daemon::attach_resize_capture` cells wanting `adapters/mock`'s **capture-player** (a\n2970\t  cross-package member), and doyle's head gate prebuilding the remembered pair while never running a\n2971\t  `spt-daemon` or `spt-term` suite at all. **Prebuild `--workspace --bins`, or read the\n2972\t  `build_hint` the helper already composes** (`crates/spt-term/tests/support/fixture_bin.rs:42`) —\n2973\t  five test files gate on that panic. Neither of us lacked the census; we prebuilt from memory while\n2974\t  our own register held the list.\n2975\t- **FIXTURE PREBUILD, RECURRENCE 2026-08-29 (todlando, emission lane):** the rule was\n2976\t  already banked AND I am one of its authors, and I still ate three fixture reds in a row —\n2977\t  mock-session, then capture-player, then mock-shell — each tripping in about 0.01s with a panic\n2978\t  that reads exactly like a test failure. Having the rule is not the same as applying it completely:\n2979\t  I prebuilt from RECALL (`-p spt --bins`) rather than from the rule's stronger banked form, and the\n2980\t  tell is that my fix arrived in three instalments instead of once. **TWO FACES, both structural\n2981\t  rather than careless.** (1) THE FIXTURE MAY LIVE IN ANOTHER PACKAGE — mock-session,\n2982\t  capture-player, mock-shell and console-mode-probe are all `adapters/mock` (`-p mock-adapter`), so\n2983\t  no amount of `-p spt --bins` ever produces them. (2) ENUMERATING FIXTURES BY GREPPING THEIR\n2984\t  PRE-BUILD STRINGS IS STRUCTURALLY INCOMPLETE — it finds the call sites that embed a literal\n2985\t  `pre-build: cargo build ...` string and CANNOT find mock-shell, whose helper composes the command\n2986\t  at runtime (`sibling_bin(name)` → `fixture_package(name)`), so there is no literal to match. A\n2987\t  predicate over source text cannot see a string the program builds at runtime; same blindness\n2988\t  class as the emission census's TOKEN-colon-vs-TOKEN-space predicate, met twice in one session.\n2989\t  **CLASS FIX:** never hand-list fixtures — build the whole fixture package\n2990\t  (`cargo build -p mock-adapter --bins`) or `--workspace --bins` before any\n2991\t  `--test`/`--bins`/filtered leg. Chasing named fixtures one red at a time only ever finds them one\n2992\t  at a time, and each one costs a full battery run.\n2993\t- **Named negative + settle-class result (hertz, 2026-08-23):** current main at\n2994\t  `4dd699cb7867979ca0497e7c74d8d0aaf881e9e9` did not reproduce the wedge on HFENDULEAM from\n2995\t  isolated checkout `.worktrees/ir55-findstr-bisect`. Test binaries were freshly built before the\n2996\t  diagnostic population and reused for the settle sweep; the gate environment scrub was **not**\n2997\t  applied; the installed daemon was live. The fleet snapshot taken immediately **after**, not\n2998\t  during, the sweep showed BIGNET 7 nodes / 20 endpoints, SPT_MANTLE 3 / 19, SPT_DEV 2 / 19,\n2999\t  3-of-7 peers connected, `degraded-partial`. Four startup cells that spawn `findstr` passed alone\n3000\t  and reaped their observed ConPTY children; a full single-threaded run passed 663/663 with a"}]},"uuid":"ab439e80-e594-42f5-ab06-5375042e450d","timestamp":"2026-09-06T11:16:30.471Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"  TRUE for interleaving, FALSE for preservation. `write_info_unlocked` is module-private with\n  exactly three callers, all taking the sentinel first (bypass refuted by visibility), but every\n  caller of the public `write_info` composes its record BEFORE the lock is taken (:842) — **the\n  lock makes that write atomic; it cannot make it preserving.** Only `mutate_info` /\n  `establish_locked` read under the hold and can preserve. Measured field case: census write #1\n  (`twohost.rs:736`) clobbered `controlled` while correctly locked. A reader trusting the\n  comment infers lost-update immunity the funnel does not provide — the #188 hunt burned a\n  branch on exactly that inference before the collapse argument killed it.\n- **Ask:** respell the comment — serializes writers; a composed `write_info` is atomic, never\n  preserving; preservation requires `mutate_info`/`establish_locked` — and weigh whether\n  `REQ-HAZARD-INFO-RMW-LOST-UPDATE`'s doc wording carries the same overclaim.\n- **Ripe when:** next spt-store/info.rs touch. **Size:** tiny (comment + possibly one REQ doc\n  line).\n\n### IR-45 — twohost rig home premise, SETTLED: pump paths resolve under the per-run TEMP root (rig is disk-hermetic; the \"live fleet roster\" reading is retired)\n- **Status:** RETIRED 2026-08-19 — ask answered by the one code read at main @`78a9a16`; residue\n  re-homed (see Answer). · **Origin:** #188/#189 RCA readouts (todlando, doyle's 2a-2d), runs\n  32097943571 + 32108557362 + 32111921251, 2026-08-18.\n- **What/why, two measured halves in tension:** (1) B's pump dialed a THIRD node 155-159 times\n  per run at kitsubito's OWN tailscale IP (`100.98.197.12`), different hex + different ephemeral\n  port each run — a short-lived local endpoint re-minting identity between runs, present in both\n  the golden and the diag run. Read at the time as: the rig uses the CANONICAL home\n  (`canonical_pump_paths` → `perch::spt_home()`), so B's roster is kitsubito's live fleet\n  roster — environmental coupling of a CI rig to host fleet state. (2) The ER perch measured in\n  the chain runs resolves under a per-run TEMP root\n  (`…/_temp/spt-test-tmp-<run>…/owlery/engine-room`), NOT the canonical home. Both measurements\n  stand; they answer different artifacts (pump roster vs perches), and nothing on record settles\n  which home the PUMP paths actually resolve. #189's third-node evidence and its\n  cache-leg-never-heals reading rest on that premise (the tension is filed on the #188 record as\n  an open question against #189).\n- **Answer (2026-08-19, code read at `78a9a16`, unambiguous — no run token needed):** both role\n  tests set `SPT_HOME` to a fresh per-run `TempDir` as their FIRST act (`twohost.rs:813-814` role\n  B, `:1501-1502` role A), before any store touch. `canonical_pump_paths` resolves every path via\n  `perch::spt_home()` (`twohost.rs:396-414`), which honors the `SPT_HOME` override first\n  (`perch.rs:34-41`); the pump's roster source `presence::registry_snapshot_dir()` →\n  `perch::identity_dir()` sits under the same root (`presence.rs:83-85`). The rig is\n  DISK-HERMETIC per run; both prior measurements reconcile (ER perch observed under the temp\n  root, pump paths resolve there too). The misleader was the helper's name + doc comment (\"real\n  homes, not test roots\"), which describe production path LAYOUT, not the resolved ROOT.\n- **Residue disposition:** (1) #189's third-node evidence was corrected on the board (comment\n  5337519936) — the roster row arrived at RUNTIME into a temp-rooted store, ingress mechanism\n  OPEN on #189, no longer explained-environmental. (2) KEYSTONE #182's hygiene lane repaired the\n  `twohost.rs:394` comment to say exactly what the helper does: production path layout rooted in\n  the process's fresh per-run `SPT_HOME`.\n\n### IR-46 — the Windows disk-floor preflight asserts an INSTANT; workspace free space moves tens of GB inside the hour, so a green floor is not a claim about run headroom\n- **Status:** open — mechanism CONFIRMED by a measurement series on hfenduleam; doyle ruled it\n  register-shaped 2026-08-18 · **Origin:** deployah, NAMEPLATE #181 golden-head intake, on the\n  run that the floor red-floored · **Filed as IR-46 after an id collision:** this row was authored\n  as IR-42 and held unpushed under the v0.56.0 tag freeze, during which the release-close sweep\n  (`78a9a16`) issued IR-42..45 to other findings. Parallel issuance, not authored disagreement —\n  and noted here so a later reader chasing \"IR-42\" in this row's history does not hunt for a lost\n  version of it.\n- **What/why:** `golden.yml`'s Windows preflight computes `$freeBytes` once at job start and\n  hard-fails under a `32GB` floor. As a fast-fail that is correct and it did its job — it refused\n  before compiling rather than dying deep in a link step. The defect is what a PASS is then read\n  to mean. The reading is a point sample of a quantity that moves by tens of GB unattended, so a\n  green preflight licenses a run whose headroom was never measured. Nothing downstream re-checks.\n- **Evidence — five readings of `C:` free on one box inside roughly one hour, 2026-08-18:**\n  - `03:01:54Z` — `free_bytes=2666205184` (2.48 GiB) against `floor_bytes=34359738368`, the\n    preflight's OWN reading; run `32093894524`, both `n1-gate` and `test` on Windows/hfenduleam\n    failed at this same step, before any compilation.\n  - `~03:2xZ` — ~2.50 GB, independent `Get-PSDrive` read, corroborating the preflight.\n  - pre-reap — **33.70 GB**, immediately before deployah deleted anything.\n  - post-reap-1 — 76.42 GB (42.72 GB reclaimed: `claude_skill_owl/target`, `golden-w1/target`).\n  - pre-reap-2 — **73.81 GB**, i.e. 2.61 GB consumed unattended between the two reaps; then\n    post-reap-2 129.70 GB (55.89 GB reclaimed: `.worktrees/nameplate-w1/target`).\n- **LABELLED HOLE — do not let this harden:** roughly **31 GB was released between the preflight\n  failure and the pre-reap reading by something OTHER than the reclaim**. Released-by-unknown.\n  The runner cleaning its workspace after the job died is *plausible* and is NOT the recorded\n  cause — it was never measured, and no one looked while it was happening. Recorded as a hole on\n  purpose (doyle's explicit ask at filing): a plausible cause written down as the cause would make\n  this row read as explained when the actual mechanism of the 31 GB is unknown.\n- **The hazard this leaves:** a run can clear the floor at preflight and starve mid-build, and\n  mid-build disk starvation does not present as disk — it surfaces as a link failure, a truncated\n  artifact, or a rustc ICE, i.e. as a defect in the tree under test. The failure mode inverts the\n  gate's purpose: the preflight's whole point is to keep box conditions from being read as lane\n  reds, and a passing preflight actively argues the opposite. Note the polarity — this row is\n  about the PASS, not the FAIL. The observed red was honest.\n- **#242/v0.66.0 GOLDEN ADDITIONS (deployah measured 2026-08-29, banked at the 08-30 close\n  sweep):** (i) per-job floor figures are SEPARATE INSTANTS — quote per job, never one figure for\n  both (attempt 1: `test` 26521477120 vs `n1-gate` 26535051264 free bytes, 8s apart, one run);\n  (ii) **CORRECTED TRAP** (retracting deployah's earlier \"attempt-2 hides jobs\" version): the\n  default `/runs/<id>/jobs` endpoint stamps `run_attempt=<current>` on EVERY job including ones\n  that never re-ran (4 of 8 mis-assigned on this run) — it is the RUN's attempt, not the JOB's,\n  so a stale green can read as re-earned; `started_at` is the discriminator and\n  `/runs/<id>/attempts/N/jobs` the authority. Also `rerun --failed` re-runs DEPENDENT jobs\n  (twohost re-ran despite a green attempt 1); (iii) a rerun preflight reads RAW free BYTES with\n  the CI step's own predicate, not display GB; (iv) a rerun green counts as floor-RCA-closing\n  evidence only after a step-level NON-VACUOUS check (checkout SUCCESS + workload steps ran) —\n  the v0.64.0 checkout-SKIPPED shape means a green job can carry zero code signal.\n- **Ripe when:** next `golden.yml` touch. Remedies to weigh THEN, not as a drive-by: re-assert the\n  floor at job END (turns a starvation into a labelled disk verdict instead of a fake lane red);\n  or raise the floor to cover a full build's peak rather than its entry condition; or sample free\n  space across the run and emit the minimum as a token. All three cost run time; none is obvious.\n- **Size:** small in `golden.yml`, load-bearing in what a green run is taken to prove.\n- **Kin:** [[IR-41]] and [[IR-40]] (a state that reads as a clean verdict unless it is labelled —\n  here a PASS that is read as headroom it never measured), [[measure-the-box-before-the-instrument]],\n  [[cancelled-measurement-leaves-labelled-hole]].\n\n### IR-47 — ci-notify treats a missing co-author trailer as a quiet info line; silent attribution loss reads as \"there was none\"\n- **Status:** open — patch AUTHORED and stashed unlanded since 2026-07-29\n  (`.worktrees/_patches/ci-notify-missing-trailer.patch` + its `test-ci-notify.sh` harness in the\n  sibling `.untracked` dir); surfaced by doyle's 2026-08-19 idle-queue verification of that stash ·\n  **Origin:** the AGENTS.md trailer mandate's own hazard family (the space-spelling trailer is\n  structurally invisible to git's tokenizer, so confident zeros already read as attribution loss\n  once); this row is the NOTIFY-side twin.\n- **What/why:** `.github/ci/ci-notify.sh` parses the head commit for the line-anchored\n  `Co-authored by: <agent>` trailer to add a second notification recipient. When the trailer is\n  absent or unparseable, the current script emits one stdout info line (\"doyle only\") and moves\n  on — correct as a non-fatal outcome, wrong as a SILENT one: a lane that lost its attribution\n  (typo'd trailer, squash that dropped the body, hyphenated spelling) notifies doyle alone on\n  every run and nothing anywhere says an agent stopped being told about their own lane's verdicts.\n  The stashed patch keeps absence non-fatal but promotes it to a `::warning` workflow annotation\n  (visible on the run summary), and splits the legitimate quiet case (co-author IS doyle) from the\n  loss case so the two stop sharing one message.\n- **Evidence:** patch verified 2026-08-19 to still NOT be on main — the warning string is absent\n  from `.github/ci/ci-notify.sh` at the current tree. Patch content re-read at verification; it\n  applies against the script's post-`SEND_BOUND_SECS` shape.\n- **Ripe when:** next `golden.yml`/ci-notify touch — natural co-rider with [[IR-46]]'s remedy\n  window (same file family, same \"weigh then, not drive-by\" rule). The stashed test harness rides\n  with it.\n- **Size:** ~10 lines in one shell script plus its test.\n- **Kin:** [[IR-40]] (an unlabelled state read as a clean verdict — here a quiet info line read as\n  \"no co-author existed\"), the AGENTS.md `%(trailers:)` tokenizer mandate (the sibling silent-zero\n  on the AUDIT side).\n\n### IR-48 — the nextest.toml parity cell tolerates CRLF only by parser accident; a newline-sensitive arm added later reds fresh Windows checkouts alone\n- **Status:** open — filed 2026-08-19 (doyle route, hertz verdict: REGISTER as preventive\n  hardening, not current defect) · **Origin:** sibling sweep after the W3 gate CRLF finding —\n  parent mechanism: `include_str!` embeds working-tree bytes verbatim, `core.autocrlf=true`\n  smudges fresh checkouts CRLF, and the author's never-re-smudged tree stays LF — builder green,\n  every fresh rig/golden checkout red.\n- **What/why:** `crates/xtask/src/main.rs` `the_checked_in_config_is_in_parity` include_str!s\n  `.config/nextest.toml` and feeds `phase_a_overrides_missing_from_ci_windows`. TODAY this is\n  causally CRLF-tolerant — the parser is `str::lines()`+trim (`override_filters`, main.rs:434-440),\n  and the 52/52 fresh-rig green at the hygiene gate (2026-08-19, this box) is therefore causal, not\n  luck. The hazard is the MISSING CONTROL: nothing pins the tolerance, so a future\n  newline-sensitive arm in the parity predicate reds only on fresh Windows checkouts — the\n  builder-green/rig-red inversion, deterministic but reading as flake.\n- **Remedy (hertz's, platform-independent):** feed the parity predicate an LF fixture AND the same\n  fixture converted to CRLF, assert identical missing-sets (including one unmirrored negative), so\n  a newline-sensitive arm reds on EVERY host rather than only fresh Windows checkouts.\n- **Ripe when:** next xtask parity-cell touch; explicitly OUTSIDE the family-B lane (hertz\n  scoping). **Size:** one fixture-pair cell.\n- **Kin:** the W3 gate finding this swept out of (skeleton cells, fixed at the fixture edge in\n  lane commit e99633f); [[IR-40]] (an untested tolerance read as a guarantee).\n\n### IR-49 — poolguard's landed-lane predicate is ancestry-only, so a cherry-picked member lane can never read Settled and its pool can never be taken over\n- **Status:** open — filed 2026-08-19 (todlando measurement at the keystone-w1/fix-197 reap,\n  doyle ruling; doyle re-verified the predicate at source before filing) · **Origin:** todlando's\n  post-landing landed-check used the guard's own predicate and it contradicted the (correct)\n  landed fact — the checker was wrong with the guard, which is exactly how the guard will be\n  wrong alone.\n- **What/why:** `git_lane_state`'s final arm answers Settled/InFlight purely by\n  `merge-base --is-ancestor <lane tip> <integration head>`\n  (`crates/spt-poolguard/src/lib.rs:424-436`, probe at `:474-479`). Under ADR-0050 golden CI\n  (thin member lanes cherry-picked onto a stage branch, ff-only main) a MEMBER lane's own branch\n  tip never becomes an ancestor of main. Measured at origin/main `9ea595c`:\n  `build/keystone-182-w2-sealed-multi` @`ba2d998` and `fix/197-absent-code-uncounted` @`5eb6a3b`\n  both read NOT-ancestor while `git cherry -v` reports every lane commit `-` (already upstream).\n  So `LaneState::Settled` is unreachable for any cherry-pick-assembled member lane whose branch\n  still exists, the takeover arm can never fire, and the pool refuses forever — including with a\n  dead holder. That contradicts the AGENTS.md mandate (\"a merged branch is taken over\") because\n  the guard's notion of merged is ancestry-only and the golden model structurally never produces\n  ancestry for member branches. The branch-vanished (`:391`) and re-pointed (`:399`) arms still\n  fire, and the STAGE lane works (its tip IS an ancestor) — the hole is landed-member-branch-\n  still-exists only. It did not bite at the 2026-08-19 reaps solely because deleting a pool\n  deletes its claim; it bites the first time someone wants to TAKE OVER a landed lane's pool\n  rather than reap it.\n- **Remedy (todlando's candidate, doyle-endorsed direction):** when ancestry answers false, fall\n  back to patch-id containment (`git cherry` / `rev-list --cherry-mark` against the claimed\n  base) before concluding InFlight. **Known residual to state in the fix's docs/tests:** a\n  conflict-adjusted pick changes the patch-id, so such a lane still reads InFlight; its release\n  path is branch deletion (the vanished arm), which is at least reachable. Tests want a\n  cherry-picked-landed fixture plus a conflict-adjusted negative.\n- **Ripe when:** next poolguard touch, or the first landed-lane pool takeover request.\n- **Size:** one fallback arm in `git_lane_state` + two fixtures.\n- **Kin:** [[IR-26]] (dead-holder takeover AUTHORIZED when it shouldn't be — this is the mirror:\n  takeover UNREACHABLE when it should fire), [[IR-42]] (claim writes, build enforces), the\n  AGENTS.md pool mandate this contradicts.\n\n### IR-50 — e2e failure panels read the PRE-REDIRECT stderr capture; every daemon-side diagnostic lands in a sink the rig deletes unread\n- **Status:** CLOSED — BUILT 2026-08-19; adoption-completion lane\n  `docs/ir50-register-close` @`e02f565f` (hertz, doyle-gated 2026-08-20) LANDED in\n  v0.59.0 as a PORTER rider (pick `e702d4b7` tip, main @`c62904e7`; register sweep\n  2026-08-21) — lane `fix/ir50-stderr-sink-census` @`1a2f6a2`+`2ac9543`\n  (hertz; base `0c86b2d`; rides the CONCIERGE #183 chain; these shas are the 2026-08-19\n  message-only reword of `cb4cd9d`+`7336e03` — trees proved identical by tree-id, so every\n  measurement below carries): exported\n  `spt_daemon::stderrlog::sink_path(home)` with `stderr_log_path` routed through it +\n  equality unit; `daemon_stderr_panel` in tests/common renders BOTH channels and labels a\n  read failure with channel + exact looked-at path + OS error (absent-sink regression pins\n  it — the IR-40 unlabelled-absence class was caught at gate and fixed in `2ac9543`);\n  censused every daemon-run captured-stderr panel outside `engine_room_bringup_e2e` (rides\n  #199 lane) and `er_briefing_*` (rides #164 lane); engineroom.rs:145 misnomer rider landed\n  in the same lane. Gate figure 781/781 at `2ac9543` (measured at the pre-reword tree,\n  which is byte-identical; first-report 765 was transcription,\n  corrected with raw line + JSON provenance). CLASS FOLD (doyle ruling, no fresh row):\n  `er_briefing_presented_e2e` hit this exact class during its own authoring (blank panels\n  on a real loud line) and was fixed locally in `72efb6a` reading both channels.\n  **REGISTER CLOSED 2026-08-19:** branch `docs/ir50-register-close` links the\n  golden-tested implementation at `4661bc9d` and completes helper adoption in the five measured\n  residual files: `er_brief_once_per_session_e2e.rs`, `er_briefing_presented_e2e.rs`,\n  `er_sequestered_cwd_e2e.rs`, `endpoint_autostart_e2e.rs`, and `n1_pairing.rs`.\n  `engine_room_bringup_e2e` remains the explicit exclusion, recorded as todlando's direct\n  sink-path read from the #199 lane. ·\n  **Originally filed:** 2026-08-19 (todlando RCA inside the #199 investigation; the immediate\n  four-panel fix in `engine_room_bringup_e2e.rs` is his and rides the #199 lane — THIS entry is\n  the class census, hertz-class) · **Origin:** the #199 evidence void — 40 rca-v2 runs held zero\n  daemon-side evidence for either erhost face; `ENGINE_ROOM_SPAWN_FAIL` (broker.rs:5658) was\n  written to a log the rig destroyed at teardown. Absence discipline honoured: the SUCCESS-path\n  line (`ENGINE_ROOM_BROUGHT_UP`) was also absent from all 40, proving the channel dead rather\n  than the event absent.\n- **What/why:** product `stderrlog::install` (broker at cli.rs:7633, brain at brainproc.rs:200)\n  repoints the process STD_ERROR_HANDLE within its first statements (`redirect_stderr_to`,\n  stderrlog.rs:101 — Windows `SetStdHandle` + `mem::forget`), so a rig's `.stderr(File)` capture\n  holds only the pre-redirect window; from that line on every diagnostic lands in\n  `SPT_HOME/logs/daemon.stderr.log` (stderrlog.rs:34/42) inside the rig's temp home, destroyed\n  unread at teardown. Panels are also mislabelled (\"brain stderr\" holding the broker's first\n  lines). REQ-DAEMON-STDERR-PERSIST fixed this blindness PRODUCT-side (\"the incident-night\n  RCA-blind gap\", cli.rs:7626-7631); no rig was ever taught to read the sink, so the fix does\n  not reach any harness. Class: every e2e rig that spawns `spt daemon run` and prints a\n  captured-stderr panel has the same void.\n- **Remedy:** census all such rigs; failure panels additionally dump\n  `SPT_HOME/logs/daemon.stderr.log` with the path read FROM `spt_daemon::stderrlog` (never\n  re-spelled), and the labels corrected (\"broker stderr (pre-redirect)\" / \"daemon stderr sink\").\n  `engine_room_bringup_e2e.rs`'s panel sites land in the #199 lane (todlando, scoped there —\n  measured shape: FIVE producers incl. the :167 precondition panic, SEVEN print sites, seven\n  relabels; the early \"four\" was an estimate the file refuted). ⚠ Rigs can only import\n  `STDERR_LOG_BASENAME`; the `\"logs\"` dir segment has no exported const, so every rig\n  re-spells it — the census lane should add an exported path helper (e.g.\n  `stderrlog::sink_path(home)`) to spt-daemon FIRST, then consume it everywhere. The census\n  and remainder are hertz-class.\n- **Ripe when:** hertz's queue after current items, or the next e2e red printing an empty\n  stderr panel.\n- **Size:** census + mechanical panel edits per rig.\n- **Kin:** [[IR-40]] (an absent signal read as a clean verdict), REQ-DAEMON-STDERR-PERSIST (the\n  product half of the same incident), [[IR-8]] (a censused zero that cannot see its blind spot).\n\n### IR-51 — engine-room e2e daemon runs NET-ENABLED on real interfaces; rig hermeticity is disk-deep only\n- **Status:** open — filed 2026-08-19 (todlando's x40 run-4 sink read, the first live read any\n  rig has had of the daemon sink; doyle ruled own-id rather than riding #199, at the finder's\n  own request) · **Origin:** unasked-for find inside the #199 instrument's first catch.\n- **What/why:** the rig's temp `SPT_HOME` buys DISK hermeticity ([[IR-45]]'s settlement — which\n  explicitly covered paths, not network) but nothing turns the net off: the run-4 sink shows\n  the rig's own daemon with `BRAIN_NET_CONSUMERS_UP` (dispatcher + peer pump started), three\n  `NET_FAMILY_GATE: binding IPv4-only`, and three `PAIR_MEET_UP:erhome` carrying the box's REAL\n  Tailscale (100.68.35.65) and LAN (192.168.1.81) addresses — live peer work during an e2e —\n  plus an `INBOUND_REACHABILITY` warning whose firewall rule admits the CI-runner's binary path\n  (`C:\\actions-runner\\_work\\spt-bs-core\\spt-bs-core\\target\\debug\\spt.exe`) while this daemon\n  ran from a dev tree. Consequences: test behavior conditioned on shared-box network state;\n  rate-shaped flakes; e2e runs radiating real traffic. SAME SINK, RECORDED NOT DIAGNOSED: conn\n  churn at ~150 ms cadence (327 write-start / 324 transport-close, conn ids past 300 in 58 s) —\n  unattributed. ⚠ CANDIDATE INTERACTION, explicitly NOT established (finder's own framing\n  honoured): the run-4 face (30 s bound blown, zero session events in the window, launch Ok, no\n  error anywhere) matches the SHAPE of the filed offline-but-resolvable-peer pump-stall\n  mechanism (dial does not fast-fail). Discrimination open; nothing here is a #199 attribution.\n- **Remedy:** a rig-honoured net-off switch (peer pump + discovery disabled under test unless\n  the test is ABOUT them) or loopback-only binding; census which e2e rigs start net consumers.\n  Sequencing rule: do NOT fix hermeticity into #199's face before the face is attributed — a\n  green bought by turning the net off would bury the mechanism unread.\n- **Ripe when:** #199 attribution answers whether net state is causal; else the next\n  hermeticity pass.\n- **Size:** product switch + rig adoption + census.\n- **Kin:** [[IR-45]] (the disk half), the subnet-pump dial-does-not-fast-fail mechanism (filed,\n  pump-stall RCA), [[IR-38]] (a live daemon's side effects outliving the test's intent),\n  releases#125 gc-spin (a conn-churn shape candidate).\n\n### IR-53 — failed-address expiry unit panics during the first 10m01s after Windows boot\n- **Status:** BUILT 2026-08-21 on `fix/ir53-cold-boot-instant` — LANDED in v0.59.0\n  (PORTER rider, pick `7b26f28d` on `assembly/porter-205`, main @`c62904e7`; register\n  sweep 2026-08-21 at release close) · **Origin:** todlando,\n  found and falsifiably measured mid-releases#204; this rider fixes the latent CI-pipeline\n  flake before PORTER golden.\n- **Measured:** `failedaddr::tests::an_expired_record_stops_matching_and_is_swept` ages an\n  `Instant` with `Instant::now().checked_sub(FAILED_ADDR_TTL + 1s).expect(...)`, where\n  `FAILED_ADDR_TTL = 600s`. Windows `Instant` counts from boot, so a host younger than 601s\n  cannot represent the requested stamp and panics `monotonic clock older than the TTL`.\n  Todlando predicted and observed the red before the threshold, then observed the identical\n  tree green after it; two subsequent daemon sweeps held 860/860.\n- **Remedy:** when the monotonic clock cannot represent the age, return through the loud\n  `SKIP_FAILED_ADDR_EXPIRED_SWEEP` arm naming the exact unproved property. On every warm host\n  the original direct aging and both expiry assertions still run unchanged; there is no\n  ten-minute sleep and no silent pass on the cold arm.\n- **Class census (untruncated):** four test-side\n  `Instant::now().checked_sub(...TTL/deadline...).expect(...)` patterns total. This cell is\n  the sole 601s member. Three siblings remain recorded, not changed in this rider:\n  `broker.rs:8432-8434` and `broker.rs:9198-9200` age\n  `CONTROLLER_WRITE_DEADLINE + 1s` (6s), while `broker.rs:10385-10388` ages\n  `BRAIN_WRITE_DEADLINE + 1s` (16s). Their much narrower cold-boot windows are the same\n  mechanism class and should use a controlled clock seam when next touched.\n- **Kin:** releases#204 (finder lane), [[IR-25]] (daemon-lib flake population), and\n  [[IR-40]] (a confident verdict without the evidence needed to make it).\n\n### IR-52 — docs-site CLI reference renders SHALLOW; help text below the rendered depth is outside the drift gate, unit-held per-REQ or held by nothing\n- **THIRD INSTANCE, observed 2026-08-24 (todlando, WAX-SEAL #21 W4; not acted on):** the new\n  `spt api seal verify|describe` FLAGS sit below the generator's rendered depth — the entry's\n  exact class. The W4 user page hand-documents them, which is per-page self-defense, not a\n  gate. Conditional-rider condition did NOT fire at W4 (no generator touch); the entry's own\n  trigger stands for whichever lane next touches the generator.\n- **Status:** BUILT 2026-08-24 on SIGNET #218 W1 T6 (todlando; doyle's intake made it the wave's\n  rider when the new `seal enroll-authenticator` verb forced the generator touch that armed the\n  trigger): `xtask` reference-gen now DESCENDS THE FULL COMMAND TREE recursively (the durable\n  remedy), regen published the 22 previously-unrendered leaves + the new section, and a depth\n  regression is a drift RED by construction. Self-holding units censused per the remedy: the\n  SURFACE-SECTION-SITED walk and both MONIC-TRIGGER-SECTION sited-help units are now DOUBLE-held\n  (published surface under the drift gate + content pins kept) — kept, not retired. · **Origin:**\n  todlando's #160 build report, fact flagged for the gate rather than folded silently.\n  (Pre-build status: open, filed 2026-08-19 — doyle, W3 #160 gate prep; second measured instance\n  of a class REQ-CLI-SURFACE-SECTION-SITED's own title already named for its sites.)\n- **What/why:** the generated `docs-site/src/cli/reference.md` renders `spt endpoint monic`\n  but does not descend to `monic add` / `monic update`, so the #160 strike of the maintained\n  kind enumeration at those two flag docs never appeared in the published reference and the\n  docs-drift gate CANNOT see the strike — the REQ-CLI-MONIC-TRIGGER-SECTION rendered-help\n  unit is the only hold. General mechanism: any help text below the generator's descent\n  depth is invisible to the drift gate; a deep help edit (or regression) ships unpublished\n  and ungated unless some REQ's unit happens to pin it. First measured instance:\n  REQ-CLI-SURFACE-SECTION-SITED names \"the three-deep sites the docs-site drift gate cannot\n  reach\" and closes them with its own pinned walk — per-REQ self-defense, not a gate.\n  Consequence beyond drift: adapter builders build BLIND from the public docs (DRI\n  protocol), so a deep-help divergence hands every adapter a thinner contract than the\n  operator's terminal shows.\n- **Remedy:** either xtask reference-gen descends the full command tree (deep help becomes\n  published surface the drift gate already covers), or a generic rendered-help walk over all\n  sites at all depths joins the drift gate; census which REQ units currently self-hold deep\n  sites (known: SURFACE-SECTION-SITED walk, MONIC-TRIGGER-SECTION sited-help unit).\n- **Ripe when:** next xtask docs-gen touch, or the first adapter filing traceable to a\n  deep-help divergence.\n- **Size:** xtask render change + regen + census of self-holding units.\n- **Kin:** the REQ-CLI-SURFACE-SECTION-SITED pinned walk (the per-REQ closure shape this\n  entry generalizes), [[IR-47]] only if its golden.yml/ci-notify surface rides the same\n  docs-gate window.\n\n### CI-RIDER LANE STATE — LANDED 2026-08-04 (post-v0.53.0 merge queue); history below kept for its mechanisms\n- **RESOLVED:** the lane rebased clean onto the post-tag queue and landed ff-only as\n  `2b33a47`/`2a7b016`/`d63f4ce`/`19d7f79` (content byte-identical to `1275e47..bf8c4a2` by lane-diff\n  blob hash). IR-1 and IR-4 are BUILT AND LANDED; IR-9's measurement half is landed with its trigger\n  now armed — the toolchain print reports runner-account versions on the NEXT GOLDEN RUN, which is\n  when doyle's 2026-08-03 ruling (decide from runner-account versions, never the interactive prior)\n  becomes executable. The two golden-only steps (link probe both boxes, toolchain print both legs)\n  remain unexercised until that run — the landing does not change that caveat.\n- **As recorded pre-landing (2026-08-04, doyle):** `ci/locksmith-riders` was at `bf8c4a2` with FOUR\n  commits not contained in `origin/main` and not present in LOCKSMITH's golden head `b7b00c3`. The\n  worktree `.worktrees/hertz-ci-riders` was clean, so the work existed and was simply unlanded:\n  `1275e47` (xtask: assert a load-bearing patch pin is still in force, both ways it lapses) ·\n  `49d4805` (docs/ci: a lock-touching lane reads edges, not just the package set) ·\n  `8ed006b` (ci/golden: print the toolchain that judged the run, both legs) ·\n  `bf8c4a2` (ci/golden: measure the link before rendezvous, read the floor after the checkout that\n  clears it — the floor read AFTER its own reclaim is [[ci-runner-has-no-warm-target]]'s shape).\n- **Why it is recorded rather than quietly re-dispatched:** [[IR-1]]/[[IR-4]]/[[IR-9]] were carried\n  as DISPATCHED, which is now false in BOTH directions — the work is further along than dispatched,\n  and it also did not ship. The cause was the same agent outage that cost `#123` its build, and the\n  operator's standing rule from that drop applies here too: an outage must not be able to remove\n  work from a batch silently. Board requests got a drop comment; register entries get this.\n- **MAPPING CONFIRMED BY ITS BUILDER 2026-08-04, by REQ id rather than by recollection** — hertz\n  noted first that its own context had been cleared between building the lane and answering, and\n  declined to testify from memory about the original instrument. Everything here is either measured\n  that day or read off the commits:\n  `1275e47` → `REQ-CI-LOAD-BEARING-PATCH-PIN` ([[IR-4]] part 1, the mechanical pin guard in xtask) ·\n  `49d4805` → `REQ-LOCK-TOUCHING-LANE-PROCEDURE` ([[IR-4]] part 2, procedure in docs/GOLDEN-CI.md) ·\n  `8ed006b` → `REQ-CI-TOOLCHAIN-VERSION-PRINT` ([[IR-4]] part 3, carrying [[IR-9]]) ·\n  `bf8c4a2` → `REQ-CI-LINK-HEALTH-PROBE` ([[IR-1]], the network axis).\n- **CORRECTION TO THE GATER'S EARLIER WORDING, from the builder:** `8ed006b` does NOT discharge\n  [[IR-9]] — it discharges IR-9's MEASUREMENT half only. IR-9's other half (align the two boxes, or\n  declare one authoritative clippy leg) is held by doyle's own 2026-08-03 ruling: decide once the\n  step reports RUNNER-ACCOUNT versions, never on the interactive-account prior. IR-9 therefore stays\n  OPEN with its trigger now REACHABLE, which is a different state from \"waiting\".\n- **Gate evidence, instrument NAMED:** `cargo nextest run -p xtask` in `.worktrees/hertz-ci-riders`\n  on hfenduleam, box quiet with no runs in flight — 34 run, 34 passed, 0 skipped. Nextest rather\n  than bare `cargo test`, per [[IR-25]]. ⚠ **What that does NOT cover, stated by the builder rather\n  than discovered later:** the two golden steps the lane ADDS (link probe on both boxes, toolchain\n  print on both legs) cannot be exercised outside a golden run. The probe's three arms\n  (five-sample success, no-reply, absent-CLI) were exercised on the real boxes at commit time, and\n  that is reported as a CLAIM RECORDED AT COMMIT TIME, not as a re-verification — the kitsubito arm\n  could not be re-checked from here. This is why the lane wants a golden rather than a quiet ff.\n- **[[IR-5]]/[[IR-6]] CONDITIONAL RIDERS: CONDITION NOT MET — the answer is NO and it closes the\n  question for this lane.** Measured file set `6d291e0..bf8c4a2`: `.gitattributes`,\n  `.github/bench/link-probe.ps1`, `.github/bench/link-probe.sh`, `.github/workflows/golden.yml`,\n  `crates/xtask/src/main.rs`, `crates/xtask/tests/bench_row_parity.rs`, `docs/GOLDEN-CI.md`,\n  `traceable-reqs.toml`. Nothing under `.github/ci/`, where the nextest-summary readers and\n  count-reporting scripts live. IR-5: no consumer of nextest output touched. IR-6: no EXISTING gate\n  output changed — though the NEW output was voluntarily written to IR-6's rule (the LINK line\n  prints `samples=N/M` and the individual rtts, membership beside the count, in both shells). That\n  SHRINKS IR-6's future scope by two lines; it does not discharge it.\n- **Three mechanisms lifted from this lane's REQ titles, worth more than the lane:**\n  (a) **An instrument must not be able to RED the run, and each shell breaks that differently** —\n  bash: `| head` under `pipefail` SIGPIPEs the producer to 141, so a print step reds (trim with\n  parameter expansion instead); pwsh under GitHub's wrapper: a MISSING COMMAND is a terminating\n  error, so rustup's absence must be TESTED with `Get-Command`, never caught. One requirement, two\n  constructions, and neither is portable reasoning about the other.\n  (b) **A negative-control mutation must be COUNTED before it is trusted** — the absent-CLI arm was\n  first \"measured\" against a tree where the mutation had not taken, silently re-measuring the\n  unmutated arm and reading as a pass.\n  (c) **Jitter, not the median, is the signal on a link that mostly works** — the motivating red's\n  link ran 10..83ms and 3..75ms while IDLE, so a median-only probe reads healthy straight through\n  the failure. Both med and max rows ride the ledger.\n- **Disposition:** composes onto the next golden batch as a thin lane, NOT slipped onto main. It\n  changes the golden pipeline itself, so it wants a golden rather than a quiet ff — and while\n  v0.53.0 is untagged, any push to `main` moves the runbook's bare `git tag` off the tested sha.\n\n### IR-55 — the `spt --bins` suite wedges partway through on leaked `findstr .` PTY children; the tests at the frontier are casualties, not culprits\n\n- **Status:** OPEN, **ARMED-FOR-CAPTURE**, owned by **hertz**. Test/rig defect by the dispatch\n  split (test/CI rework is never the product builder's). Filed by doyle 2026-08-22 from the\n  TURNKEY #212 W3 gate on releases#213.\n- **CORRECTED BY REPLACEMENT the same day.** This entry first named\n  `cli::tests::adapter_profile_verbs_local_only` as the wedging test, because that is where the\n  streamed frontier stopped. **That was wrong, and the correction is the useful part of the\n  entry:** run in isolation, on the same pool and binary and with the same env, that test passes\n  in **0.02s**. So do the other two the suite later stalled on —\n  `cli::tests::shell_channels_relay_sensory_and_text_file` (0.20s) and\n  `cli::tests::resolve_proof_target_override_reads_on_disk` (0.00s), each 1 passed / 652 filtered.\n  **A frontier names where progress STOPPED, not what CAUSED it.** Naming the last test printed\n  is the same error shape as reading a stack frame as a root cause, and it would have sent hertz\n  to rewrite three innocent tests.\n- **What is actually measured:**\n  - `cargo test -p spt --bins` unfiltered sat **24 minutes** at 13.5s CPU — blocked, not spinning.\n  - Re-run with `--test-threads=1` and streaming output: stalled after **183** completed.\n  - Re-run again with that frontier test skipped: progressed to **335** completed, then stalled\n    with **two** tests simultaneously past libtest's 60-second notice. Skipping one casualty\n    simply moves the frontier, which is itself evidence the fault is not in any one test.\n  - Every wedged harness carried `findstr.exe .` children under `conhost.exe --headless`.\n    **`findstr` with no file argument reads STDIN and blocks forever.**\n  - The frontier tests are **byte-identical at `c62904e7` and at the #213 tip `3d69f77c`**\n    (function bodies hashed at both blobs), so nothing in that lane introduced this.\n- **Reading, stated as a reading rather than a conclusion:** an EARLIER test spawns the `findstr`\n  stand-in as a PTY child and does not reap it; the children accumulate across the run and a later\n  test blocks behind them. Which test leaks is NOT yet identified and this entry does not guess —\n  the next step is to bisect for the leaker rather than to touch any test at the frontier. Five\n  orphaned `findstr` processes with creation times spread across the day were observed on this box\n  independently of any single run, which is consistent with accumulation across many suite runs.\n- **Hypothesis RAISED AND NOT SUPPORTED, recorded so nobody re-runs it:** the gate scrubs\n  `OWL_SESSION_ID` / `SPT_AGENT_ID` / `SPT_ENDPOINT_ID`, and a scrubbed identity was suspected of\n  routing a normally-REFUSED test down a live PTY path. The isolation runs above were performed\n  **with the scrub applied** and passed, so the scrub alone does not produce the hang. It remains\n  unexplained why the same unfiltered command completed at 652 passed / 1 failed for another agent\n  on the same tree; do not treat the scrub as the differentiator without a fresh one-variable run.\n- **Why it is register-grade:** golden CI runs the `spt` package. A test that never returns cannot\n  red — it consumes the single self-hosted runner slot until the job timeout, which `golden.yml`'s\n  50-minute cap bounds rather than fixes. A wedge that fires only sometimes is worse than a red,\n  because the suite's green record stays intact and nobody audits it — the same self-concealing\n  shape as `exit-code-after-a-pipe-is-the-tails`.\n- **Trigger condition (ripe):** any milestone whose gate wants an unfiltered `spt --bins` sweep,\n  which is every one of them. Ripe now.\n- **REMEDY, MEASURED 2026-08-22 and it changes this entry's urgency:** the same 653 tests under\n  `cargo nextest run -p spt --bins --no-fail-fast` complete in **22.2 seconds, 653 passed, 0\n  skipped, exit 0** — no slow markers, no timeouts — on the very tree and pool where\n  `cargo test -p spt --bins` wedged indefinitely twice. **nextest runs each test in its OWN\n  process**, so a leaked `findstr` child can block only itself. This is the discriminating\n  measurement rather than a workaround reached for to get a green: **the suite is not broken; the\n  SINGLE-PROCESS harness is what lets one test's leaked child wedge every test after it.** Golden\n  CI already runs nextest, which is the likely reason this has never surfaced there — the exposure\n  is to anyone running bare `cargo test` on the `spt` package, which is every local gate.\n- **Count reconciliation, recorded so the figures are not read as a discrepancy:** runs of this\n  suite report 652 passed / 1 failed where the one failure is\n  `cli::tests::adapter_translate_proof_gates_on_commit` — the `--bins`-only artifact, which\n  refuses because `translate_proof_fixture.exe` is not built under a bins-only invocation and says\n  so in its own message. Prebuilding it (`cargo build -p spt --bin translate_proof_fixture`) makes\n  it pass: 652 + 1 = 653. Prebuild the fixture rather than carrying a known-red through every gate.\n- **⚠ AMENDED 2026-08-22 — DO NOT PREBUILD FROM THIS BULLET'S EXAMPLE.** The line above names ONE\n  fixture because one fixture is what *this* wedge needed; read as the prebuild recipe it covers a\n  fraction of the population, and it was read that way twice on one day. **The census already exists\n  in IR-21 above** (`adapters/mock`: mock-session, mock-shell, capture-player, console-mode-probe ·\n  `crates/spt-daemon`: dispatch_fixture, service_fixture, summarizer_fixture · `crates/spt`:\n  translate_proof_fixture, post_step_fixture, gh_fixture, git_fixture), together with the split that\n  matters: **cross-package sites are the hazard members; same-package builds are guaranteed by\n  construction.** Field instances, both 2026-08-22 TURNKEY #212 W4: todlando's lane red on three\n  `spt-daemon::attach_resize_capture` cells wanting `adapters/mock`'s **capture-player** (a\n  cross-package member), and doyle's head gate prebuilding the remembered pair while never running a\n  `spt-daemon` or `spt-term` suite at all. **Prebuild `--workspace --bins`, or read the\n  `build_hint` the helper already composes** (`crates/spt-term/tests/support/fixture_bin.rs:42`) —\n  five test files gate on that panic. Neither of us lacked the census; we prebuilt from memory while\n  our own register held the list.\n- **FIXTURE PREBUILD, RECURRENCE 2026-08-29 (todlando, emission lane):** the rule was\n  already banked AND I am one of its authors, and I still ate three fixture reds in a row —\n  mock-session, then capture-player, then mock-shell — each tripping in about 0.01s with a panic\n  that reads exactly like a test failure. Having the rule is not the same as applying it completely:\n  I prebuilt from RECALL (`-p spt --bins`) rather than from the rule's stronger banked form, and the\n  tell is that my fix arrived in three instalments instead of once. **TWO FACES, both structural\n  rather than careless.** (1) THE FIXTURE MAY LIVE IN ANOTHER PACKAGE — mock-session,\n  capture-player, mock-shell and console-mode-probe are all `adapters/mock` (`-p mock-adapter`), so\n  no amount of `-p spt --bins` ever produces them. (2) ENUMERATING FIXTURES BY GREPPING THEIR\n  PRE-BUILD STRINGS IS STRUCTURALLY INCOMPLETE — it finds the call sites that embed a literal\n  `pre-build: cargo build ...` string and CANNOT find mock-shell, whose helper composes the command\n  at runtime (`sibling_bin(name)` → `fixture_package(name)`), so there is no literal to match. A\n  predicate over source text cannot see a string the program builds at runtime; same blindness\n  class as the emission census's TOKEN-colon-vs-TOKEN-space predicate, met twice in one session.\n  **CLASS FIX:** never hand-list fixtures — build the whole fixture package\n  (`cargo build -p mock-adapter --bins`) or `--workspace --bins` before any\n  `--test`/`--bins`/filtered leg. Chasing named fixtures one red at a time only ever finds them one\n  at a time, and each one costs a full battery run.\n- **Named negative + settle-class result (hertz, 2026-08-23):** current main at\n  `4dd699cb7867979ca0497e7c74d8d0aaf881e9e9` did not reproduce the wedge on HFENDULEAM from\n  isolated checkout `.worktrees/ir55-findstr-bisect`. Test binaries were freshly built before the\n  diagnostic population and reused for the settle sweep; the gate environment scrub was **not**\n  applied; the installed daemon was live. The fleet snapshot taken immediately **after**, not\n  during, the sweep showed BIGNET 7 nodes / 20 endpoints, SPT_MANTLE 3 / 19, SPT_DEV 2 / 19,\n  3-of-7 peers connected, `degraded-partial`. Four startup cells that spawn `findstr` passed alone\n  and reaped their observed ConPTY children; a full single-threaded run passed 663/663 with a","numLines":500,"startLine":2501,"totalLines":3791}},"sourceToolAssistantUUID":"9ee618c9-41d4-4f8d-a419-038956684030","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"ab439e80-e594-42f5-ab06-5375042e450d","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6FMRNU7DrenPZc17bf","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"EsgCCqgBCBEYAipAIqeu6HE90h6NYALCtKeq3LxxALYugLLc5vmQf4hSytBujbtcASIpvKWwv+lBAi9wZuHuCGQPNSENBU2LoHdL/TIPY2xhdWRlLXNvbm5ldC01OABCCHRoaW5raW5nWiQ4MGM5NDZkZC05YzNjLTQ5NzItOGYyZi03NDAxMTQxZGE2MzJyEJcpAiwR8BiFSxd+XzBU5MmIAQGoAZCX9dQGsAECEgwLRQvhWP6B59pMxHAaDBBg/VtzFq/nJftZ5iIwaptkdChR7pzVcZ9YFpWyb3GeRluRBFYdU2qGCJg51vyxYtOI9nmoq53u53XGkF+7Kk26rgmlFwbjxEzRDag6dWS1AdNpb4NKG4Z1As8izAVVWR88M1e8BKQ3/zsc9oabC0b9y03Nxs7RI8KHtkNCMqLMKfVmxxyNafwZCs+zVxgB"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":19327,"cache_read_input_tokens":155513,"cache_creation":{"ephemeral_5m_input_tokens":19327,"ephemeral_1h_input_tokens":0},"output_tokens":8,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6FLez6AgA5KGXdd8Wx","attributionAgent":"general-purpose","type":"assistant","uuid":"566a8471-5749-40b0-b0c0-349163520964","timestamp":"2026-09-06T11:16:32.310Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"566a8471-5749-40b0-b0c0-349163520964","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6FMRNU7DrenPZc17bf","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_011yanC3MQy8bi9WJBhJmgUN","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":3001,"limit":450},"caller":{"type":"direct"}}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":19327,"cache_read_input_tokens":155513,"cache_creation":{"ephemeral_5m_input_tokens":19327,"ephemeral_1h_input_tokens":0},"output_tokens":8,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6FLez6AgA5KGXdd8Wx","attributionAgent":"general-purpose","type":"assistant","uuid":"f8a60759-b0c2-48a9-90cf-0cd843d3990f","timestamp":"2026-09-06T11:16:32.994Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"f8a60759-b0c2-48a9-90cf-0cd843d3990f","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_011yanC3MQy8bi9WJBhJmgUN","type":"tool_result","content":"3001\t  before/after census delta of `IR55_NEW=0`. The ratified settle-class sweep then ran five\n3002\t  consecutive bare `cargo test -p spt --bins` invocations: all 663/663 green in 420.35s total,\n3003\t  with zero `findstr.exe` residents before and after. This is a named negative data point, not a\n3004\t  discharge of the intermittent filing-day measurements.\n3005\t- **Next-wedge capture protocol — do not improvise or clean first:** preserve the exact bare\n3006\t  invocation and snapshot the environment (box, checkout SHA/worktree, fresh-versus-reused test\n3007\t  binary provenance, gate-scrub state, live-daemon state, and fleet roster); stream test output to\n3008\t  durable storage so the last started and completed test names identify the frontier; census\n3009\t  `Win32_Process` immediately before the run and again while wedged, recording each `findstr.exe`\n3010\t  PID, parent PID, creation time, executable path, and command line. **Do not kill any child before\n3011\t  the second census is banked.** The 22 residents found during the 2026-08-23 investigation were\n3012\t  path-verified as `C:\\Windows\\System32\\findstr.exe`, shown to predate its live runs, banked, then\n3013\t  reaped; the pre-sweep and post-sweep resident counts were both zero.\n3014\t- **Size guess:** small if one test is missing a reap or an EOF for its stand-in child; medium if\n3015\t  the shared PTY test scaffolding needs the reap, in which case every sibling spawning the same\n3016\t  stand-in wants it. The RUN-LEVEL exposure has an answer today (nextest); the LEAK itself is\n3017\t  still worth fixing, because a leaked child per run accumulates on any box that runs the suite.\n3018\t- **Gater's craft, worth more than the entry itself:**\n3019\t  (a) The first wedge was undiagnosable because the gate script wrote every leg as\n3020\t  `cargo test … | tail -N > file` — nothing reaches disk until the command completes, so a wedged\n3021\t  leg produces an **empty file** and the process table is the only witness. **Stream to a file and\n3022\t  tail the FILE.**\n3023\t  (b) To NAME a frontier, run `--test-threads=1`: libtest prints each test's name BEFORE running\n3024\t  it, so the last incomplete line is where progress stopped.\n3025\t  (c) **Then prove the frontier test is actually at fault by running it alone** — which is the\n3026\t  step this entry originally skipped, and the one that turned a wrong entry into a right one.\n3027\t\n3028\t### IR-56 — `pool-claim` harvests lane identity from CWD, not from `--pool`; a claim run from the wrong tree writes a WRONG RECORD with a success message\n3029\t\n3030\t- **Status:** BUILT 2026-08-24 for the SIGNET #218 golden batch on\n3031\t  `fix/ir56-pool-claim-cwd`, owned by **hertz**. Tooling/rig defect by the dispatch split. Filed by\n3032\t  doyle 2026-08-22 from todlando's TURNKEY #212 W4 Lane 1 field instance — the first confirmation\n3033\t  of the IR-42 mechanism from a LANE rather than from a source read.\n3034\t- **What happens:** `cargo run -p xtask -- pool-claim --pool <dir> --label <lane>` records the lane\n3035\t  identity it harvests from the **current working directory** — `owner_tree`, `lane_branch`, and the\n3036\t  base sha — not from the tree `--pool` names. Run it from the project root with `--pool` aimed at a\n3037\t  worktree and the record reads `owner_tree = <project root>, lane_branch = <root's branch>` while\n3038\t  every artifact in that pool belongs to the worktree. The verb prints its ordinary success line\n3039\t  naming the wrong owner, and returns 0.\n3040\t- **Why it is silent, which is the whole entry:** the claim verb WRITES and never adjudicates\n3041\t  (IR-42) — every enforcement arm lives in `crates/spt-store/build.rs` and speaks only at the next\n3042\t  BUILD. So a wrong record has no symptom at the moment it is created; the first signal is a build\n3043\t  refusal minutes later, on a lane whose `--pool` argument was correct all along. **`--pool` being\n3044\t  correct is not evidence the record is.** Nothing on the command line shows you cwd, which is the\n3045\t  one input that decided the outcome.\n3046\t- **Recovery is the documented hatch, and the bootstrap is why:** the claim tool builds THROUGH the\n3047\t  pool it is claiming, so a pool already refusing cannot be re-claimed by the ordinary route. The\n3048\t  refusal text says so itself — meaning the bootstrap case is known, and a wrong-cwd claim is the\n3049\t  ordinary way a lane lands in it.\n3050\t- **The rule, as a must-do:** claim from the lane's own worktree so the identity the verb harvests\n3051\t  is the lane's — `( cd <lane> && cargo run -p xtask -- pool-claim --pool \"$PWD/target\" … )`, or any\n3052\t  form that makes cwd explicit. Then READ THE PRINTED RECORD BACK and confirm `owner_tree` and\n3053\t  `branch` name the lane: the success line carries the record, so the check costs nothing.\n3054\t- **Trigger condition:** ripe now — it is a doc/UX fix on a verb we run every lane. Ripest alongside\n3055\t  any other `xtask` pool-verb touch.\n3056\t- **Size guess:** small. Either make the verb REFUSE when cwd is not inside the tree containing\n3057\t  `--pool` (loud, and it cannot be wrong), or print the harvested identity as a distinct confirmed\n3058\t  line. The refusing form is preferred: it removes the reading step rather than adding one.\n3059\t- **Built evidence, corrected at review:** `pool-claim` resolves the git worktree containing\n3060\t  `--pool` from the pool's nearest existing ancestor and compares it with the cwd worktree before\n3061\t  writing. An accidental cross-worktree call returns 2, names both worktrees and the remedy, and\n3062\t  leaves the not-yet-existing pool absent. The sanctioned sequential takeover carries an explicit\n3063\t  `--foreign-pool`, says that it is harvesting the arriving cwd identity, writes that identity, and\n3064\t  returns 0. Both poolguard refusal remedies now print that flag. An executable xtask test drives\n3065\t  both arms against two real temporary git repositories, pinning VERB-ADMITS-REMEDY rather than\n3066\t  merely testing path equality. This remains identity-harvest validation only: the claim still\n3067\t  writes without adjudicating admission, so IR-42's enforcement boundary remains in the build.\n3068\t\n3069\t### IR-57 — an assembly pick's conflict resolution can silently DROP lines, and every gate run at assembly time is blind to it\n3070\t\n3071\t- **Status:** OPEN, owned by **doyle** (gater craft, not a code defect — no lane to dispatch).\n3072\t  Filed 2026-08-22 from doyle's own defect on the TURNKEY #212 assembly head.\n3073\t- **What happened:** assembly head `5cce533d` **did not compile**, and was carried across a session\n3074\t  boundary as a ready head with \"treqs exit 0\" attached to it. `crates/spt-store/src/access.rs` had\n3075\t  an unclosed `mod tests`: the cherry-pick of the #206 lane commit `b2194aa9` conflicted against the\n3076\t  #209 test block — both add functions to the same region, and the two sides share the trailing\n3077\t  `);` / `}` / `}` — and the resolution deleted the markers without restoring the FIRST side's\n3078\t  function closer. Exactly two lines lost: `        );` and `    }`.\n3079\t- **Every instrument in the assembly path reported success:** `git cherry-pick` completed with no\n3080\t  conflict remaining; `traceable-reqs check` returned 797/797, 0 findings, exit 0 — **it parses\n3081\t  tags and never invokes the compiler**; and the lanes themselves were green and stayed provably\n3082\t  clean (the #206 lane's brace balance is correct at all five of its commits). **Lane-green plus\n3083\t  conflict-free is not a claim about the assembled head.** Same lesson as the #182 v2 assembly\n3084\t  (`E0425`×4) by a different mechanism: that one was a semantic composition break between two\n3085\t  correct hunks, this one is a fidelity LOSS during resolution.\n3086\t- **Two must-dos, both cheap:**\n3087\t  1. **Compile the assembled head before it is handed anywhere — including forward to your own next\n3088\t     session.** A head is not ready on a treqs exit; it is ready on a build. Any sentence carrying a\n3089\t     head sha to another agent must name the instrument that proved it.\n3090\t  2. **Audit pick fidelity on CHANGED LINES for every pick on the chain**, not just the one that\n3091\t     tripped you: hash `git show --format= <sha> | grep -E '^[+-]' | grep -vE '^(\\+\\+\\+|---)'` for\n3092\t     the lane source and for the pick, and compare. Whole-diff comparison is useless here — hunk\n3093\t     headers and context legitimately drift once the head's copy of the file has moved.\n3094\t- **Read COUNT and HASH together, because they fail in opposite directions.** Of 24 picks on this\n3095\t  chain two did not match. `b2194aa9 → 4d6deed1` differed in COUNT (302 lane / 300 pick by the header-excluding pipeline above; **this entry originally cited 310/308, which is the RAW `^[+-]` count INCLUDING the 8 `+++`/`---` header lines of its 4 files** — the figures were taken without the second grep the entry itself prescribes. The DELTA is 2 under either meter, which is why the wrong figures never surfaced: they supported a correct conclusion, so nothing pressed them. Corrected todlando 2026-08-29, measured both ways in-tree) — the real\n3096\t  defect. `f27f15c6 → 5865cc98` had the SAME count and a different HASH — benign: a `CONTEXT.md`\n3097\t  paragraph the head had already amended for #209, whose merged result correctly carries both lanes'\n3098\t  sentences. A count check MISSES the first class entirely; a hash check FLAGS the second as if it\n3099\t  were a defect. Neither alone classifies a pick.\n3100\t- **Repair shape used, recorded because it is the cheap one:** reset to the commit before the bad\n3101\t  pick, re-pick the lane source, resolve the same conflict correctly, then replay the remaining picks\n3102\t  in chain order with the fidelity check on each. Verify the repair changed nothing else with a\n3103\t  WHOLE-TREE diff against the old head — it must show exactly the restored lines and no other file.\n3104\t  Where a later pick re-conflicts, check its pre-pick blobs against the old chain\n3105\t  (`git rev-parse <old-pick>~1:<file>`); if they match, the old chain's post-pick blob is a\n3106\t  transferable, already-reviewed resolution.\n3107\t- **AND GATE THE REPAIR'S OWN SUBJECT.** The rebuilt head passed six legs — clippy `-D warnings`,\n3108\t  sweep 660/660, treqs 803/803, xtask OK — while the restored lines live in `spt-store`, whose LIB\n3109\t  tests `-p spt --bins` never runs. Six greens, and not one executed the function the repair\n3110\t  restored; it was proven to COMPILE and assumed to PASS. Proven afterwards by name (4/4) and by the\n3111\t  full `spt-store --lib` suite (519/519). **A repair's gate must include the suite that owns the\n3112\t  repaired file**, which is not necessarily the suite the head gate runs.\n3113\t- **FIRST LIVE CATCH, and it was the author's own resolution (2026-08-29, one hour after the verb landed):** rebasing the IR-59 rider over the IR-57 rider produced four conflicts — three additive keep-both, one usage line both sides had edited. `xtask pick-audit` read the rebase as **LOSS, 282 lane / 280 pick**. The two missing lines were a `[[requirements]]` header and its blank line in `traceable-reqs.toml`, so `id = REQ-DISK-FLOOR-PREFLIGHT` landed INSIDE the previous table as a duplicate key: **`traceable-reqs check` exit 2, the registry unparseable, every reading after that edit checking nothing**. Restored, the same audit reads **DRIFT 282/282** whose one differing line is the usage string whose base copy legitimately gained the other verb — both verdict classes, on one resolution, in the order the entry predicts. The instrument's first real save was from the hazard it was filed for, against the agent who built it.\n3114\t- **FIRST REAL-ASSEMBLY USE (2026-08-29, #241 emission head, ASM-241-GATE-VERDICT.md):** `xtask\n3115\t  pick-audit --range 57a0d27c..HEAD --lane 4d6007ac..d0fdd58d` over 6 picks — **5 MATCH\n3116\t  (digest-identical), 1 LOSS, 0 drift, 0 unclassified**, exit 1 forcing the accounting. The LOSS\n3117\t  was exactly the one human-resolved conflict (`cfb9d9f8 <- 10f12e4c`, count 432/402), and the\n3118\t  delta RECONCILED to the resolution rather than assumed: lane stat 15 files/235+/197- vs pick\n3119\t  14 files/205+/197-, difference byte-for-byte the deliberately-dropped 30-line interim IR-69\n3120\t  register block superseded by main's consolidated entry. No false positives, no silent pass.\n3121\t  Entry stays OPEN as living procedure; both live uses (the rebase catch above, this assembly)\n3122\t  produced the verdict classes in the order the entry predicts.\n3123\t- **Trigger condition:** ripe at the next assembly — this is procedure, and its cost is one command\n3124\t  per pick.\n3125\t- **Size guess:** small as a scripted check in `xtask` (fidelity audit over a pick range); zero as\n3126\t  discipline, which is how it is being applied now.\n3127\t\n3128\t### IR-58 — a `[[bin]]` grep is not a census: cargo AUTODISCOVERS `src/bin/*.rs` targets, and a hand-built bin list produced a confident false \"this bin does not exist\"\n3129\t\n3130\t- **Status:** OPEN, unowned. Filed by doyle 2026-08-22; **its original filing was WRONG and is\n3131\t  retracted in full below.** The entry is kept because the way it was wrong is the finding.\n3132\t- **RETRACTED CLAIM, stated plainly so no reader acts on it:** this entry first said that\n3133\t  `crates/spt/Cargo.toml:18-21` and `crates/spt/src/cli.rs:30355` forbid a bin-name collision with\n3134\t  `xlate_choreo_fixture`, \"a bin that does not exist\", and that spt-daemon's third helper had been\n3135\t  renamed to `summarizer_fixture`. **`xlate_choreo_fixture` EXISTS** — at\n3136\t  `crates/spt-daemon/src/bin/xlate_choreo_fixture.rs`, verified at the assembly head. The collision\n3137\t  rule's counterpart is real, both prose sites are CORRECT, and IR-21's original table row was\n3138\t  correct too; it merely predated `summarizer_fixture`. Nothing in that prose needs fixing.\n3139\t- **How the false claim was produced, which is the entry:** the census was built by grepping\n3140\t  `^\\[\\[bin\\]\\]` across `Cargo.toml`s. **Cargo AUTODISCOVERS `src/bin/*.rs` as bin targets with no\n3141\t  stanza at all**, so a stanza grep cannot see them, and it fails SILENTLY — it returns a clean,\n3142\t  well-formed list that is simply short. From that list it read as established fact that a named bin\n3143\t  had been renamed away, and that \"fact\" was then written into a register table, an IR entry, and a\n3144\t  message to the builder. **A pattern-built population encodes the pattern's assumption; the count\n3145\t  looks like a census and is a property of the pattern.**\n3146\t  (Found by todlando, resolving one of doyle's figures against his own tree under the pointer rule.)\n3147\t- **A CENSUS IS ALSO A PROPERTY OF A TREE.** Stanza counts differed legitimately across trees the\n3148\t  same hour — 13 at the assembly head, 11 at `dc1c7532` — because `summarizer_fixture` exists at one\n3149\t  and not the other. Two correct censuses of the same workspace disagree unless each names its sha.\n3150\t- **The must-do, and it removes the list rather than lengthening it:** never hand-maintain a bin\n3151\t  roster. Run `cargo build --workspace --bins` and let cargo enumerate its own targets — the same\n3152\t  enumeration the test harness resolves against, so it cannot drift from what a fixture lookup\n3153\t  expects. Stanza-derived lists, remembered pairs, and register tables are all the roster problem at\n3154\t  different depths; only cargo's own enumeration is the population.\n3155\t- **Kin:** IR-55's amended prebuild bullet (prebuild the census, not a remembered pair) and IR-42\n3156\t  (a verb that writes without adjudicating). The shared shape is an instrument returning an orderly\n3157\t  answer about a set it never fully saw.\n3158\t- **Trigger condition:** ripe on any `xtask` check work — a duplicate-bin-name check over cargo's\n3159\t  target enumeration (NOT over manifest stanzas) is a handful of lines and cannot go stale.\n3160\t- **Size guess:** small. The prose fix originally proposed here is WITHDRAWN — there was nothing\n3161\t  wrong with the prose.\n3162\t\n3163\t### IR-59 — pool arithmetic: this box holds TWO cold pools, not four; and a build that exhausts the volume reds as a LINKER defect that names no disk\n3164\t\n3165\t- **Status:** OPEN, unowned — it is arithmetic and discipline, not a code lane. Filed by doyle\n3166\t  2026-08-22 from a live disk-floor abort during the TURNKEY #212 W4 gate; footprint figures measured\n3167\t  by todlando the same hour.\n3168\t- **SECOND FACE, measured 2026-08-23/24 (WAX-SEAL #21 W2 gate, doyle — the violator this time):**\n3169\t  both predicted mechanisms fired at once, WITHOUT the floor guard because the gate legs ran as a\n3170\t  plain script. (1) doyle minted a THIRD cold pool (gate rig) while todlando's lane pool was LIVE —\n3171\t  the two-pool arithmetic, violated by the gater. (2) The lane pool had silently accumulated\n3172\t  **104.8 GB** over repeated full-workspace sweeps (nothing bounds or even measures a pool's\n3173\t  accumulation until the volume dies). The volume hit **3 MB free**; the reds wore exactly the\n3174\t  entry's predicted costume — `LNK1318: Unexpected PDB error; LIMIT (12)` naming no disk — plus a\n3175\t  second face worth keeping: `traceable-reqs check` died as a PANIC printing to stdout\n3176\t  (`os error 112`), so a REGISTRY gate red can also be the disk's. Both gate verdicts VOIDED\n3177\t  (clippy's full compile had exited 0 before space died — the code was never the question).\n3178\t  Recovery measured: gate pool reap 9.6 GB, lane pool clean 100.2 GB, drive back to 109.6 GB free.\n3179\t  **Remedies adopted at the incident:** the gate never mints its own pool while a builder lane is\n3180\t  live on the box — it takes the lane pool over SEQUENTIALLY at pool-release (warm, loud, the\n3181\t  releases#103 pattern); and gate/lane scripts get the disk-floor preflight the golden runner\n3182\t  already carries (this entry's part 2, still unbuilt).\n3183\t- **THIRD FACE, measured 2026-08-24 (WAX-SEAL #21 golden window, doyle):** two new mechanisms, both\n3184\t  about the REMEDY rather than the red. (1) The wax-seal-w1 lane pool **re-accumulated to 152–169 GB\n3185\t  (two meters, IR-46 caveat) within ONE DAY of the 08-23 clean** and rode the volume back down to\n3186\t  4.92 GB free — a reap is an instant, not a state; nothing yet bounds a pool between reaps.\n3187\t  (2) **The remedy itself arrived garbled through relay:** the golden push was held \"waiting on the\n3188\t  IR-59 reboot\" when this entry prescribes no reboot anywhere — tens of releases have shipped without\n3189\t  one; the operator refused the premise and the register's own recorded remedy (reap finished-lane\n3190\t  pools) cleared it in ten minutes. A remedy relayed as a DIFFERENT remedy is the relay trap wearing\n3191\t  infra clothes: the entry is the author — read it before adopting a hold. Recovery measured: five\n3192\t  finished-lane pools reaped after ancestry classification (`git cherry` catches rebased lands that\n3193\t  a plain `merge-base --is-ancestor` calls unlanded — gate-w4l1's 90.9 GB pool was reapable only by\n3194\t  that meter), 4.92 → 260.88 GB free (~256 GB free-delta vs ~270–287 GB sum-of-lengths). Two main\n3195\t  runs red inside the low-disk window (09:17Z/09:41Z) were re-run, not re-read, per this entry's\n3196\t  must-do.\n3197\t- **FOURTH FACE, measured 2026-08-24 same day (SIGNET #218 W2 gate, doyle — the gater's own pool\n3198\t  this time):** the MAIN pool went **13.7 GB → 158.3 GB in ONE DAY** absorbing four full gate\n3199\t  batteries across two lane tips, and dragged the volume to **18 GB free mid-gate** — so the\n3200\t  entry's mechanism is not a lane-pool problem, it is EVERY pool under repeated full sweeps, the\n3201\t  gate rig included. Two riders worth the ink: (1) the golden runner's **free-space floor step\n3202\t  produced its first live catch** — a thin CI leg refused at 14:14 local over exactly this window\n3203\t  with zero test signal, and the register's re-run-not-re-read rule resolved it in one command;\n3204\t  (2) the reap-and-rebuild trade (\"cleaning a live pool buys one window at rebuild price\") was\n3205\t  taken deliberately mid-gate and cost ~35 minutes cold — cheaper than one uninterpretable red.\n3206\t  A red measured at 18 GB free in this gate got NO read at all, and the next sweep's red was a\n3207\t  DIFFERENT test: low disk manufactures random victims before it manufactures link errors.\n3208\t- **The event:** a gate's preflight refused with `GATE_ABORTED_DISK_FLOOR` at **4.75 GB free on a\n3209\t  1863 GB volume**. Four cold pools plus the milestone head's pool were standing at once. The floor\n3210\t  guard did its job — without it a full workspace build would have started with under 5 GB of\n3211\t  headroom and produced a red belonging to nothing.\n3212\t- **THE ARITHMETIC, and it corrects the intuition that worktrees are the cost.** Measured across the\n3213\t  whole `.worktrees` tree: **45 worktrees = 0.79 GB total** (~18 MB each). **3 pools = 130.45 GB.**\n3214\t  Worktrees are **0.6%** of the footprint; pools are **99.4%**. **One cold pool is worth roughly 2,500\n3215\t  worktrees.** A rule keyed on worktree count would cost a day of `git worktree remove` work for under\n3216\t  a gigabyte, risk removing a lane someone still wants, and leave the lever untouched.\n3217\t- **THE CEILING, as arithmetic rather than hygiene:** at **45–75 GB per cold pool** on this workspace\n3218\t  against a **40 GB floor**, this box supports **TWO live pools comfortably, THREE only if one is\n3219\t  small**. The two rules that already exist need no replacement, only this number attached:\n3220\t  - **Reap a pool when its lane is finished** → 45–75 GB back immediately.\n3221\t  - **Do not run two builds at once** → not only the contention argument, but **75–150 GB of\n3222\t    simultaneous allocation** against that floor.\n3223\t- **A FULL VOLUME REDS AS A LINKER DEFECT.** `LINK: fatal error LNK1318: Unexpected PDB error`\n3224\t  (variously `OK (0)` or `LIMIT (12)`), often beside `LNK4209: debugging information corrupt`. It\n3225\t  reads as a corrupt artifact or a broken toolchain and is neither — it is the linker unable to grow\n3226\t  a large `.pdb`. **Nothing in the failure text says \"disk\".** Do not key recognition on the\n3227\t  parenthesised code; it varies.\n3228\t- **THE DANGER WINDOW IS THE TAIL OF A COLD BUILD, not a steady state you can check once.** The\n3229\t  2026-08-22 instance died at the link of `spt` — the last and largest artifact of a **74 GB** cold\n3230\t  pool — while that same build was draining the volume out from under itself. A free-space reading\n3231\t  taken before the build would have looked fine.\n3232\t- **Positive tell, with its own refutation attached:** `traceable-reqs check` alone surviving a leg\n3233\t  table is suggestive, because it is the only leg that never links. It is a POSITIVE tell ONLY — a\n3234\t  full disk can red before any link step, so the signature's ABSENCE clears nothing.\n3235\t- **THE FALSIFIER IS FREE SPACE AT THE TIME OF THE RUN**, not the shape of the leg table.\n3236\t- **Must-do, both cheap:**\n3237\t  1. **A free-space reading goes in the FIRST LINE of any build-failure report** — not in the\n3238\t     controls, not as a follow-up. Two agents spent hours on a mechanism for this failure and neither\n3239\t     ran `df`; the falsifier was one command away throughout.\n3240\t  2. **Rig and gate logs should record free space at run start.** Today they do not, which makes \"was\n3241\t     the disk full\" **unanswerable after the fact for every red already in hand**. Any red produced\n3242\t     under ~1 GB free is UNINTERPRETABLE and must be **re-run, not re-read**.\n3243\t- **Measurement caveat, observed twice in one hour:** sum-of-file-lengths and free-space delta\n3244\t  disagree by several percent when anything else on the box is writing (98.07 GB of subtrees → 92.25\n3245\t  GB reclaimed; 47.28 GB → 40.81 GB). Report BOTH, derive neither from the other, and treat any single\n3246\t  free-space number as an instant rather than headroom — see IR-46.\n3247\t- **FIFTH FACE, measured 2026-08-29 at the CONDUIT #236/v0.65.0 cut (deployah):**\n3248\t  the finished milestone's sequential lane-sharing accumulated **140.51 GB**, while a freshly\n3249\t  rebuilt pool measured **7.78 GB** — about **18× one build's working set** retained across lane\n3250\t  hand-offs with no reap between them. This is the budgetable rate behind that cut's disk-floor\n3251\t  red: sequential execution prevents concurrent ownership corruption, but it does not bound\n3252\t  historical artifacts inside the shared pool. Treat takeover and reclamation as separate\n3253\t  operations; a pool may be safe to reuse and still be too large to keep.\n3254\t- **SEVENTH FACE, measured 2026-08-30 (v0.67.0 milestone close — the PARALLEL-LANE fill\n3255\t  rate):** the #23 wave arc drove C: from ~240 GB free to **0.01 GB in ~3.5 hours**: four\n3256\t  concurrent/serial lane+gate pools totalled **236.6 GB** (ns23-w1 87.7 + ns23-113 72.3 +\n3257\t  gate rig 57.3 + ns23-w3 19.1) — effectively the entire ir57 reclaim re-consumed inside one\n3258\t  milestone's build window. The head gate and two thin-CI runs redded with the entry's exact\n3259\t  costume (\"could not compile\" + treqs panic, zero disk words) at 0.01 GB and all re-earned\n3260\t  green after reclaim (+186.6 GB, finished-lane targets only, single-actor rule held under\n3261\t  racing consent). Budget rule this face adds: a MULTI-WAVE milestone on one box books\n3262\t  ~60-90 GB PER LANE-PLUS-GATE cycle, so the pool budget is per-wave, not per-milestone —\n3263\t  reap each wave's pool at its LAND, not at the milestone party (the party inherited only\n3264\t  ~58 GB because the emergency had already forced the other ~179).\n3265\t- **SIXTH FACE, measured 2026-08-30 (#242 golden r4, Windows test job, LNK1318 at the PDB\n3266\t  write):** the floor is asserted ONCE at job START, but the job's internal LOW-WATER sits at its\n3267\t  LAST heavy step — the docs-drift build, ~28 minutes in. r4's floor read 65.1 GiB honest at\n3268\t  23:07; the box was at ~37–39 GB by the 23:35 link failure. LNK1318 on PDB write = this entry's\n3269\t  documented low-disk costume; the incremental-corruption candidate was retired by preservation\n3270\t  snapshot (no xtask state existed at failure). **Durable fix = a floor RE-READ (or reclaim)\n3271\t  immediately before the docs-drift build** — the WITHIN-job sibling of the across-job\n3272\t  read-after-checkout fix, rides the next workflow commit. Riders: incremental hygiene as\n3273\t  disk-pressure maintenance (the dir measured 4.56 GB), and the box's **~51 GB non-recovering\n3274\t  post-run consumption** is this entry's pool-weight face — classify at the IR-14/26/27/49 audit\n3275\t  slot (composed this sweep).\n3276\t- **Composed for next intake (doyle, v0.65.0 close):** the still-open log-the-floor build half\n3277\t  rides with [[IR-57]]'s scripted pick-fidelity audit as the next milestone's two tooling riders.\n3278\t- **Trigger condition:** ripe now for the log-the-floor half (it rides any gate-script or CI touch);\n3279\t  the arithmetic is discipline and applies immediately.\n3280\t- **Size guess:** small — one line in each rig/gate preflight to record free space alongside the\n3281\t  existing floor check.\n3282\t\n3283\t### IR-60 — a wrapper that CAPTURES a leg's exit status ends with the capture, so the wrapper's own status is the capture's, not the leg's\n3284\t\n3285\t- **Status:** OPEN, unowned — script-shape discipline, not a code lane. Filed by doyle 2026-08-22\n3286\t  during the TURNKEY #212 W5 lane; mechanism measured by todlando, who reported it first as a\n3287\t  possible harness misreport and then RETRACTED that reading himself on a minimal probe.\n3288\t- **The reading that started it:** a background leg was summarised as `exit code 0` while the leg's\n3289\t  own exit file read `100`. Reported as-is, that is a task runner lying about a red — the worst\n3290\t  possible direction for a purposeful-red claim, since it would turn two reds that DID fire into two\n3291\t  reds reported as not having fired.\n3292\t- **The measurement, minimal and on this box:**\n3293\t\n3294\t      ( exit 100 ); echo $? > probe.exit; FINAL=$?\n3295\t      leg status captured to file : 100\n3296\t      wrapper's own final status  : 0\n3297\t\n3298\t  The wrapper's shape is `( cd <lane> && cargo nextest ... > leg.raw 2>&1 ); echo $? > leg.exit`.\n3299\t  **The last command is the `echo`, which succeeds**, so the wrapper genuinely exits 0 while the leg\n3300\t  genuinely exited 100. THE RUNNER TOLD THE TRUTH ABOUT THE WRAPPER. There is nothing to file against\n3301\t  the task runner, and it would have been filed.\n3302\t- **The class, and this is why it is worth an entry rather than a fix:** it is the truncation-pipe\n3303\t  family — the meter measured something real, it just was not the thing about to be quoted. **Three\n3304\t  shapes now share ONE trigger, and the trigger is not \"is this a pipe\":**\n3305\t  1. a truncation pipe (`cmd | tail`, `cmd | head`) — `$?` measures the truncator, and `head` closing\n3306\t     the pipe can MANUFACTURE a status (SIGPIPE → 101), so `PIPESTATUS` is not protection either;\n3307\t  2. a flattened `$?` read after any intervening command;\n3308\t  3. **a wrapper whose last command is the capture itself.**\n3309\t  **The trigger in all three is the REPORTING** — every instance happened while trimming or capturing\n3310\t  output in order to QUOTE it as evidence.\n3311\t- **The practice that held, and the one to keep:** the leg's own file is the leg's verdict. Both reds\n3312\t  were real, and the only reason that was knowable is that every leg wrote its exit to its own file\n3313\t  rather than to the wrapper's status.\n3314\t- **Remedy, in preference order:** (1) never read a wrapper's status as a leg's — read the leg's exit\n3315\t  FILE, which the per-leg rule already requires; (2) if a wrapper's own status must be meaningful,\n3316\t  end it by re-raising the captured status (`exit \"$(cat leg.exit)\"`) or set the status before the\n3317\t  capture is the last word; (3) for anything that becomes evidence, redirect to a file and read the\n3318\t  file.\n3319\t- **Trigger condition:** ripe now — it rides the next gate-script touch, and the gate scripts in this\n3320\t  milestone already write per-leg exit files, which is what makes this discipline rather than debt.\n3321\t- **Size guess:** small — a convention line in the gate-script preamble; no product code.\n3322\t\n3323\t### IR-61 — spacerun's test-module skip carries a SECOND literal tracker; the two answers can drift, and today only a cell stands between them\n3324\t\n3325\t- **Status:** OPEN, unowned, accepted-with-mitigation. Filed by doyle 2026-08-22 at the TURNKEY #212\n3326\t  head gate, as the named residual of the latch repair (the repair itself rides the milestone).\n3327\t- **What the debt is.** `crates/xtask/src/spacerun.rs` now skips a column-0 `#[cfg(test)]` module by\n3328\t  BRACE DEPTH and resumes after its close, rather than latching the scan to end-of-file. Counting\n3329\t  braces safely means knowing when a brace is inside a string, a raw string or a char literal — and\n3330\t  the scanner ALREADY tracks literals for its rendering pass. It does not reuse that tracking. There\n3331\t  are now TWO answers in one file to \"am I inside a literal\", and **two answers to one question is a\n3332\t  disagreement waiting for a reader who fixes one of them.**\n3333\t- **Why it was accepted rather than refactored on the spot, stated so the trade is auditable:** the\n3334\t  two trackers answer genuinely different questions — the rendering walk is PER LINE and forward\n3335\t  from an opening quote (\"where does this literal start and end\"), while the skip needs \"am I inside\n3336\t  a literal right now\" carried CONTINUOUSLY across lines. Unifying them is a real refactor of a check\n3337\t  that is already gated, already carries five fixed defects, and sits on the tree being handed to\n3338\t  golden. The narrow change with an OBSERVABLE failure mode beat the correct-shaped change with a\n3339\t  wide blast radius, on that tree, on that day.\n3340\t- **The mitigation, and its exact limit.** Three brace cells fail the moment the two trackers\n3341\t  disagree about a raw string, a normal string or a char literal, plus a cell that reds when the skip\n3342\t  stops consulting a literal tracker at all (`match lit` -> `match Lit::None`). **That is a cell\n3343\t  standing in for a refactor.** It catches drift in the three forms it names and nothing else — a\n3344\t  fourth literal form, or a change to only one tracker in a form neither cell covers, passes.\n3345\t- **The general shape, which is why this is a register entry rather than a comment:** a check whose\n3346\t  own correctness depends on a second implementation of a thing it already implements is one\n3347\t  refactor away from the defect class it exists to prevent. This same file has already produced\n3348\t  three instrument defects (an indented-marker latch, a column-0 latch, and a suppression that\n3349\t  decided what got PARSED rather than what got REPORTED). The pattern is not carelessness; it is a\n3350\t  scanner accumulating special cases.\n3351\t- **Trigger condition:** the next SUBSTANTIVE change to spacerun's scanning — any new skip, any new\n3352\t  literal form, any change to either tracker. At that point unify, rather than adding a third answer.\n3353\t- **Size guess:** small to medium — one continuous literal-state walk serving both the render pass\n3354\t  and the skip, with the existing corpus and brace cells as the regression net.\n3355\t\n3356\t### IR-62 — an e2e daemon binds well-known ports and collides with the resident fleet on shared runners\n3357\t\n3358\tFiled 2026-08-23 (doyle), from the #212 r2 golden's Windows Phase A red — one witnessed\n3359\tinstance, mechanism verified from the run's own capture, filed on the mechanism per the\n3360\tregister's standard.\n3361\t\n3362\t**Mechanism.** `endpoint_autostart_e2e::saved_endpoint_replays_on_daemon_restart` failed its\n3363\town PRECONDITION (\"daemon B must come up with a fresh brain\") because daemon B's broker came up\n3364\tdegraded: `NODE_KEY_FAIL: identity unavailable` (net-less broker, no retry) and\n3365\t`DOCS_SERVER_BIND_FAIL` port 5474 `os error 10048` — the docs port was held by a CO-RESIDENT\n3366\tdaemon. HFENDULEAM is live infra: the resident fleet's daemon legitimately holds well-known\n3367\tports, and any e2e that brings up a daemon with default port bindings is in a race with it BY\n3368\tCONSTRUCTION. An isolated SPT_HOME isolates the store and broker socket, NOT globally-numbered\n3369\tTCP ports.\n3370\t\n3371\t**Classification history.** r2: red (35.4s, precondition panic). Run 1 and r3 on the same box:\n3372\tgreen. Folded into r3 under a pre-registered predicate (reds twice → dedicated triage); it\n3373\tgreened, so this stays an environment-shaped intermittent, NOT a product defect and NOT\n3374\tclosed — the collision window is real and will re-fire under the right co-residence timing.\n3375\t\n3376\t**Remedy direction (not built).** Test daemons should bind ephemeral/rig-scoped ports for\n3377\tevery advisory surface (the docs server is advisory — a bind failure should degrade the rig\n3378\tloudly, not poison an unrelated cell's precondition), or the precondition should name the\n3379\tport-collision cause distinctly so the red self-classifies. Either lane is test/CI work\n3380\t(hertz's), triggered the next time this class fires anywhere.\n3381\t\n3382\t**Kin.** IR-51 (e2e daemon net-enabled on real interfaces — hermeticity is disk-deep only);\n3383\tthe known not-ours red classes list in the #212 hand-off.\n3384\t\n3385\t**BUILT 2026-08-24 (hertz, SIGNET #218 batch; PR #158).** The class fired its second witnessed\n3386\tinstance the same day — doyle's W2 gate rig, `engine_room_bringup_e2e` precondition panic with\n3387\tthe IR-50 panel naming `DOCS_SERVER_BIND_FAIL` port 5474 `os error 10048` — which armed this\n3388\tentry's own trigger. Hertz repro'd deterministically (held the port; brain still reached\n3389\tBRAIN_UP), pre-ranked three mechanisms before probing, and built the ephemeral-advisory form:\n3390\trig-only `SPT_TEST_EPHEMERAL_ADVISORY_PORTS=1` makes the daemon's docs listener bind port 0\n3391\t(production config/`SPT_DOCS_PORT`/docs-url untouched; the flag matches the literal \"1\" only).\n3392\tThe golden workflow's test job sets it globally on both self-hosted legs, the standalone ER rig\n3393\tsets it too. Scope note kept honest per his own ranking: the docs collision is retired; if a\n3394\tco-diagnostic bind elsewhere still poisons a precondition, that is a residual face of THIS\n3395\tentry, not a closed question.\n3396\t\n3397\t### IR-63 — suite-mix sweeps leak job-escaped autostart daemons that LOCK the pool's spt.exe; and the same box conditions manufacture one random victim per sweep\n3398\t\n3399\t- **Status:** OPEN, mitigated-by-rig-step — the reap is adopted discipline, not yet construction.\n3400\t  Filed by doyle 2026-08-24 at the SIGNET #218 gates; first measured by todlando the same day\n3401\t  (his W1 build: four reap rounds of 2, 8, 1, 1 processes, count-by-path stated each round).\n3402\t- **Mechanism, two faces of one condition:** (1) e2e sweeps that exercise autostart leave\n3403\t  job-escaped daemons running `target/debug/spt.exe`; the NEXT build or `xtask check` then dies\n3404\t  on `os error 5` removing the exe — a rig red wearing a build defect's clothes. nextest's own\n3405\t  `leaky` flags corroborate (4–8 per sweep measured). (2) The same co-residence (leaked daemons +\n3406\t  resident fleet + runner traffic) manufactures ONE red per full sweep with a DIFFERENT victim\n3407\t  each time: doyle's W2 gate measured FOUR distinct one-off victims in four same-sha sweeps\n3408\t  (ER bringup, composite+bootstrap pair under CI load, resident_service, brain_resume), every\n3409\t  one green alone and/or in a sibling sweep. The e2e-leaked-daemons rule holds: a different test\n3410\t  dying each run on one sha is ONE environment cause, and hardening members never closes it.\n3411\t- **Mitigation adopted (rig step, both todlando's lanes and doyle's gate runner):** reap\n3412\t  `spt.exe` BY PATH (`*spt-core\\target*`) before EVERY cargo invocation and after every sweep;\n3413\t  report the count each time so a zero is a claim, not silence.\n3414\t- **Remedy direction (unbuilt):** the durable form is construction, not discipline — either\n3415\t  nextest wrap/xtask verb that performs the by-path reap as a pre-step on this box's rigs, or\n3416\t  autostart e2es gain teardown that provably outlives job escape (kin IR-38's built wedge-namer,\n3417\t  IR-62's ephemeral ports which retire one collision axis, IR-35's victim-rate ledger).\n3418\t- **THIRD FACE, measured 2026-08-30 (doyle, ir57/asm-241 reaps):** the leaked population is not\n3419\t  only daemons — battery legs leave ORPHANED HEADLESS `conhost.exe` processes whose CWD sits in\n3420\t  the worktree's `crates/spt-daemon` (where the leg ran), and a CWD pin blocks `Remove-Item`/\n3421\t  `git worktree remove` on the whole tree with \"being used by another process\" naming the DIR.\n3422\t  This is the mechanism behind every recent \"handle-pinned, retry later\" worktree removal: 31\n3423\t  such conhosts found at once (Aug 26–29 vintages) pinning FIVE dead worktrees. cargo/rustc\n3424\t  absence does NOT clear the suspect list — the conhost outlives its client. Holder census\n3425\t  tool: a ~30-line NtQueryInformationProcess CWD probe (PEB→ProcessParameters→CurrentDirectory)\n3426\t  over all pids, filtered on the path — names every holder in one pass where no handle.exe\n3427\t  exists. 13 killed scoped to the two consented reaps; 18 remain pinning gate-w1-a8f04aff (12),\n3428\t  io-parser-w1 (5), gate-w1-786d2381 (1 after kills) — sweep them at the IR-14/26/27/49 audit\n3429\t  slot before those removals.\n3430\t- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n3431\t  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n3432\t- **Trigger condition:** next rig/gate-script construction touch, or the first golden red that\n3433\t  classifies to face (1).\n3434\t- **Size guess:** small-medium — one wrapper seam plus adopting it in the gate/lane scripts.\n3435\t\n3436\t### IR-64 — HFENDULEAM's disk floor is set by non-CI bulk: ~845 GB of operator payload leaves the golden box ~2 GB of slack against its own 32 GB preflight\n3437\t\n3438\t- **Status:** OPEN · **Origin:** doyle, v0.63.0 close sweep 2026-08-26; mechanism first measured\n3439\t  at the FIELD-SEAL golden window (deployah's IR-31 fifth addendum carries the POOL side of the\n3440\t  same event by agreed division — this entry is the OTHER reservoir, deliberately not his).\n3441\t- **Mechanism:** the 1.86 TB C: carries ~614 GB Steam + ~230 GB Downloads (operator payload, not\n3442\t  CI state). With that floor fixed, normal lane traffic alone walks the box under the 32 GB\n3443\t  golden preflight — a full-sweep pool WEIGHS ~90–112 GB steady state (IR-59's measurement) and\n3444\t  five FIELD-SEAL lanes cost 148.48 GB (IR-31 fifth addendum), so ONE milestone's pools exceed\n3445\t  the entire free margin. Reaping buys windows, not headroom: deployah measured free fall\n3446\t  167 → 108 GB within hours of his reap, ~59 GB re-consumed by lane builds. The recurring shape:\n3447\t  every milestone pays a reap-and-measure tax to rent space the box does not structurally have.\n3448\t- **Why register-worthy rather than \"clean up more\":** agent-side discipline (IR-31's budgeting,\n3449\t  pool reaps, teardown steps) is already adopted and still only rents windows — the reservoir\n3450\t  that would durably move the floor is operator-owned bulk no agent may touch. Naming it here is"}]},"uuid":"3d66590f-f7f3-4b4a-8ac1-cc0bbee199c9","timestamp":"2026-09-06T11:16:33.492Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"  before/after census delta of `IR55_NEW=0`. The ratified settle-class sweep then ran five\n  consecutive bare `cargo test -p spt --bins` invocations: all 663/663 green in 420.35s total,\n  with zero `findstr.exe` residents before and after. This is a named negative data point, not a\n  discharge of the intermittent filing-day measurements.\n- **Next-wedge capture protocol — do not improvise or clean first:** preserve the exact bare\n  invocation and snapshot the environment (box, checkout SHA/worktree, fresh-versus-reused test\n  binary provenance, gate-scrub state, live-daemon state, and fleet roster); stream test output to\n  durable storage so the last started and completed test names identify the frontier; census\n  `Win32_Process` immediately before the run and again while wedged, recording each `findstr.exe`\n  PID, parent PID, creation time, executable path, and command line. **Do not kill any child before\n  the second census is banked.** The 22 residents found during the 2026-08-23 investigation were\n  path-verified as `C:\\Windows\\System32\\findstr.exe`, shown to predate its live runs, banked, then\n  reaped; the pre-sweep and post-sweep resident counts were both zero.\n- **Size guess:** small if one test is missing a reap or an EOF for its stand-in child; medium if\n  the shared PTY test scaffolding needs the reap, in which case every sibling spawning the same\n  stand-in wants it. The RUN-LEVEL exposure has an answer today (nextest); the LEAK itself is\n  still worth fixing, because a leaked child per run accumulates on any box that runs the suite.\n- **Gater's craft, worth more than the entry itself:**\n  (a) The first wedge was undiagnosable because the gate script wrote every leg as\n  `cargo test … | tail -N > file` — nothing reaches disk until the command completes, so a wedged\n  leg produces an **empty file** and the process table is the only witness. **Stream to a file and\n  tail the FILE.**\n  (b) To NAME a frontier, run `--test-threads=1`: libtest prints each test's name BEFORE running\n  it, so the last incomplete line is where progress stopped.\n  (c) **Then prove the frontier test is actually at fault by running it alone** — which is the\n  step this entry originally skipped, and the one that turned a wrong entry into a right one.\n\n### IR-56 — `pool-claim` harvests lane identity from CWD, not from `--pool`; a claim run from the wrong tree writes a WRONG RECORD with a success message\n\n- **Status:** BUILT 2026-08-24 for the SIGNET #218 golden batch on\n  `fix/ir56-pool-claim-cwd`, owned by **hertz**. Tooling/rig defect by the dispatch split. Filed by\n  doyle 2026-08-22 from todlando's TURNKEY #212 W4 Lane 1 field instance — the first confirmation\n  of the IR-42 mechanism from a LANE rather than from a source read.\n- **What happens:** `cargo run -p xtask -- pool-claim --pool <dir> --label <lane>` records the lane\n  identity it harvests from the **current working directory** — `owner_tree`, `lane_branch`, and the\n  base sha — not from the tree `--pool` names. Run it from the project root with `--pool` aimed at a\n  worktree and the record reads `owner_tree = <project root>, lane_branch = <root's branch>` while\n  every artifact in that pool belongs to the worktree. The verb prints its ordinary success line\n  naming the wrong owner, and returns 0.\n- **Why it is silent, which is the whole entry:** the claim verb WRITES and never adjudicates\n  (IR-42) — every enforcement arm lives in `crates/spt-store/build.rs` and speaks only at the next\n  BUILD. So a wrong record has no symptom at the moment it is created; the first signal is a build\n  refusal minutes later, on a lane whose `--pool` argument was correct all along. **`--pool` being\n  correct is not evidence the record is.** Nothing on the command line shows you cwd, which is the\n  one input that decided the outcome.\n- **Recovery is the documented hatch, and the bootstrap is why:** the claim tool builds THROUGH the\n  pool it is claiming, so a pool already refusing cannot be re-claimed by the ordinary route. The\n  refusal text says so itself — meaning the bootstrap case is known, and a wrong-cwd claim is the\n  ordinary way a lane lands in it.\n- **The rule, as a must-do:** claim from the lane's own worktree so the identity the verb harvests\n  is the lane's — `( cd <lane> && cargo run -p xtask -- pool-claim --pool \"$PWD/target\" … )`, or any\n  form that makes cwd explicit. Then READ THE PRINTED RECORD BACK and confirm `owner_tree` and\n  `branch` name the lane: the success line carries the record, so the check costs nothing.\n- **Trigger condition:** ripe now — it is a doc/UX fix on a verb we run every lane. Ripest alongside\n  any other `xtask` pool-verb touch.\n- **Size guess:** small. Either make the verb REFUSE when cwd is not inside the tree containing\n  `--pool` (loud, and it cannot be wrong), or print the harvested identity as a distinct confirmed\n  line. The refusing form is preferred: it removes the reading step rather than adding one.\n- **Built evidence, corrected at review:** `pool-claim` resolves the git worktree containing\n  `--pool` from the pool's nearest existing ancestor and compares it with the cwd worktree before\n  writing. An accidental cross-worktree call returns 2, names both worktrees and the remedy, and\n  leaves the not-yet-existing pool absent. The sanctioned sequential takeover carries an explicit\n  `--foreign-pool`, says that it is harvesting the arriving cwd identity, writes that identity, and\n  returns 0. Both poolguard refusal remedies now print that flag. An executable xtask test drives\n  both arms against two real temporary git repositories, pinning VERB-ADMITS-REMEDY rather than\n  merely testing path equality. This remains identity-harvest validation only: the claim still\n  writes without adjudicating admission, so IR-42's enforcement boundary remains in the build.\n\n### IR-57 — an assembly pick's conflict resolution can silently DROP lines, and every gate run at assembly time is blind to it\n\n- **Status:** OPEN, owned by **doyle** (gater craft, not a code defect — no lane to dispatch).\n  Filed 2026-08-22 from doyle's own defect on the TURNKEY #212 assembly head.\n- **What happened:** assembly head `5cce533d` **did not compile**, and was carried across a session\n  boundary as a ready head with \"treqs exit 0\" attached to it. `crates/spt-store/src/access.rs` had\n  an unclosed `mod tests`: the cherry-pick of the #206 lane commit `b2194aa9` conflicted against the\n  #209 test block — both add functions to the same region, and the two sides share the trailing\n  `);` / `}` / `}` — and the resolution deleted the markers without restoring the FIRST side's\n  function closer. Exactly two lines lost: `        );` and `    }`.\n- **Every instrument in the assembly path reported success:** `git cherry-pick` completed with no\n  conflict remaining; `traceable-reqs check` returned 797/797, 0 findings, exit 0 — **it parses\n  tags and never invokes the compiler**; and the lanes themselves were green and stayed provably\n  clean (the #206 lane's brace balance is correct at all five of its commits). **Lane-green plus\n  conflict-free is not a claim about the assembled head.** Same lesson as the #182 v2 assembly\n  (`E0425`×4) by a different mechanism: that one was a semantic composition break between two\n  correct hunks, this one is a fidelity LOSS during resolution.\n- **Two must-dos, both cheap:**\n  1. **Compile the assembled head before it is handed anywhere — including forward to your own next\n     session.** A head is not ready on a treqs exit; it is ready on a build. Any sentence carrying a\n     head sha to another agent must name the instrument that proved it.\n  2. **Audit pick fidelity on CHANGED LINES for every pick on the chain**, not just the one that\n     tripped you: hash `git show --format= <sha> | grep -E '^[+-]' | grep -vE '^(\\+\\+\\+|---)'` for\n     the lane source and for the pick, and compare. Whole-diff comparison is useless here — hunk\n     headers and context legitimately drift once the head's copy of the file has moved.\n- **Read COUNT and HASH together, because they fail in opposite directions.** Of 24 picks on this\n  chain two did not match. `b2194aa9 → 4d6deed1` differed in COUNT (302 lane / 300 pick by the header-excluding pipeline above; **this entry originally cited 310/308, which is the RAW `^[+-]` count INCLUDING the 8 `+++`/`---` header lines of its 4 files** — the figures were taken without the second grep the entry itself prescribes. The DELTA is 2 under either meter, which is why the wrong figures never surfaced: they supported a correct conclusion, so nothing pressed them. Corrected todlando 2026-08-29, measured both ways in-tree) — the real\n  defect. `f27f15c6 → 5865cc98` had the SAME count and a different HASH — benign: a `CONTEXT.md`\n  paragraph the head had already amended for #209, whose merged result correctly carries both lanes'\n  sentences. A count check MISSES the first class entirely; a hash check FLAGS the second as if it\n  were a defect. Neither alone classifies a pick.\n- **Repair shape used, recorded because it is the cheap one:** reset to the commit before the bad\n  pick, re-pick the lane source, resolve the same conflict correctly, then replay the remaining picks\n  in chain order with the fidelity check on each. Verify the repair changed nothing else with a\n  WHOLE-TREE diff against the old head — it must show exactly the restored lines and no other file.\n  Where a later pick re-conflicts, check its pre-pick blobs against the old chain\n  (`git rev-parse <old-pick>~1:<file>`); if they match, the old chain's post-pick blob is a\n  transferable, already-reviewed resolution.\n- **AND GATE THE REPAIR'S OWN SUBJECT.** The rebuilt head passed six legs — clippy `-D warnings`,\n  sweep 660/660, treqs 803/803, xtask OK — while the restored lines live in `spt-store`, whose LIB\n  tests `-p spt --bins` never runs. Six greens, and not one executed the function the repair\n  restored; it was proven to COMPILE and assumed to PASS. Proven afterwards by name (4/4) and by the\n  full `spt-store --lib` suite (519/519). **A repair's gate must include the suite that owns the\n  repaired file**, which is not necessarily the suite the head gate runs.\n- **FIRST LIVE CATCH, and it was the author's own resolution (2026-08-29, one hour after the verb landed):** rebasing the IR-59 rider over the IR-57 rider produced four conflicts — three additive keep-both, one usage line both sides had edited. `xtask pick-audit` read the rebase as **LOSS, 282 lane / 280 pick**. The two missing lines were a `[[requirements]]` header and its blank line in `traceable-reqs.toml`, so `id = REQ-DISK-FLOOR-PREFLIGHT` landed INSIDE the previous table as a duplicate key: **`traceable-reqs check` exit 2, the registry unparseable, every reading after that edit checking nothing**. Restored, the same audit reads **DRIFT 282/282** whose one differing line is the usage string whose base copy legitimately gained the other verb — both verdict classes, on one resolution, in the order the entry predicts. The instrument's first real save was from the hazard it was filed for, against the agent who built it.\n- **FIRST REAL-ASSEMBLY USE (2026-08-29, #241 emission head, ASM-241-GATE-VERDICT.md):** `xtask\n  pick-audit --range 57a0d27c..HEAD --lane 4d6007ac..d0fdd58d` over 6 picks — **5 MATCH\n  (digest-identical), 1 LOSS, 0 drift, 0 unclassified**, exit 1 forcing the accounting. The LOSS\n  was exactly the one human-resolved conflict (`cfb9d9f8 <- 10f12e4c`, count 432/402), and the\n  delta RECONCILED to the resolution rather than assumed: lane stat 15 files/235+/197- vs pick\n  14 files/205+/197-, difference byte-for-byte the deliberately-dropped 30-line interim IR-69\n  register block superseded by main's consolidated entry. No false positives, no silent pass.\n  Entry stays OPEN as living procedure; both live uses (the rebase catch above, this assembly)\n  produced the verdict classes in the order the entry predicts.\n- **Trigger condition:** ripe at the next assembly — this is procedure, and its cost is one command\n  per pick.\n- **Size guess:** small as a scripted check in `xtask` (fidelity audit over a pick range); zero as\n  discipline, which is how it is being applied now.\n\n### IR-58 — a `[[bin]]` grep is not a census: cargo AUTODISCOVERS `src/bin/*.rs` targets, and a hand-built bin list produced a confident false \"this bin does not exist\"\n\n- **Status:** OPEN, unowned. Filed by doyle 2026-08-22; **its original filing was WRONG and is\n  retracted in full below.** The entry is kept because the way it was wrong is the finding.\n- **RETRACTED CLAIM, stated plainly so no reader acts on it:** this entry first said that\n  `crates/spt/Cargo.toml:18-21` and `crates/spt/src/cli.rs:30355` forbid a bin-name collision with\n  `xlate_choreo_fixture`, \"a bin that does not exist\", and that spt-daemon's third helper had been\n  renamed to `summarizer_fixture`. **`xlate_choreo_fixture` EXISTS** — at\n  `crates/spt-daemon/src/bin/xlate_choreo_fixture.rs`, verified at the assembly head. The collision\n  rule's counterpart is real, both prose sites are CORRECT, and IR-21's original table row was\n  correct too; it merely predated `summarizer_fixture`. Nothing in that prose needs fixing.\n- **How the false claim was produced, which is the entry:** the census was built by grepping\n  `^\\[\\[bin\\]\\]` across `Cargo.toml`s. **Cargo AUTODISCOVERS `src/bin/*.rs` as bin targets with no\n  stanza at all**, so a stanza grep cannot see them, and it fails SILENTLY — it returns a clean,\n  well-formed list that is simply short. From that list it read as established fact that a named bin\n  had been renamed away, and that \"fact\" was then written into a register table, an IR entry, and a\n  message to the builder. **A pattern-built population encodes the pattern's assumption; the count\n  looks like a census and is a property of the pattern.**\n  (Found by todlando, resolving one of doyle's figures against his own tree under the pointer rule.)\n- **A CENSUS IS ALSO A PROPERTY OF A TREE.** Stanza counts differed legitimately across trees the\n  same hour — 13 at the assembly head, 11 at `dc1c7532` — because `summarizer_fixture` exists at one\n  and not the other. Two correct censuses of the same workspace disagree unless each names its sha.\n- **The must-do, and it removes the list rather than lengthening it:** never hand-maintain a bin\n  roster. Run `cargo build --workspace --bins` and let cargo enumerate its own targets — the same\n  enumeration the test harness resolves against, so it cannot drift from what a fixture lookup\n  expects. Stanza-derived lists, remembered pairs, and register tables are all the roster problem at\n  different depths; only cargo's own enumeration is the population.\n- **Kin:** IR-55's amended prebuild bullet (prebuild the census, not a remembered pair) and IR-42\n  (a verb that writes without adjudicating). The shared shape is an instrument returning an orderly\n  answer about a set it never fully saw.\n- **Trigger condition:** ripe on any `xtask` check work — a duplicate-bin-name check over cargo's\n  target enumeration (NOT over manifest stanzas) is a handful of lines and cannot go stale.\n- **Size guess:** small. The prose fix originally proposed here is WITHDRAWN — there was nothing\n  wrong with the prose.\n\n### IR-59 — pool arithmetic: this box holds TWO cold pools, not four; and a build that exhausts the volume reds as a LINKER defect that names no disk\n\n- **Status:** OPEN, unowned — it is arithmetic and discipline, not a code lane. Filed by doyle\n  2026-08-22 from a live disk-floor abort during the TURNKEY #212 W4 gate; footprint figures measured\n  by todlando the same hour.\n- **SECOND FACE, measured 2026-08-23/24 (WAX-SEAL #21 W2 gate, doyle — the violator this time):**\n  both predicted mechanisms fired at once, WITHOUT the floor guard because the gate legs ran as a\n  plain script. (1) doyle minted a THIRD cold pool (gate rig) while todlando's lane pool was LIVE —\n  the two-pool arithmetic, violated by the gater. (2) The lane pool had silently accumulated\n  **104.8 GB** over repeated full-workspace sweeps (nothing bounds or even measures a pool's\n  accumulation until the volume dies). The volume hit **3 MB free**; the reds wore exactly the\n  entry's predicted costume — `LNK1318: Unexpected PDB error; LIMIT (12)` naming no disk — plus a\n  second face worth keeping: `traceable-reqs check` died as a PANIC printing to stdout\n  (`os error 112`), so a REGISTRY gate red can also be the disk's. Both gate verdicts VOIDED\n  (clippy's full compile had exited 0 before space died — the code was never the question).\n  Recovery measured: gate pool reap 9.6 GB, lane pool clean 100.2 GB, drive back to 109.6 GB free.\n  **Remedies adopted at the incident:** the gate never mints its own pool while a builder lane is\n  live on the box — it takes the lane pool over SEQUENTIALLY at pool-release (warm, loud, the\n  releases#103 pattern); and gate/lane scripts get the disk-floor preflight the golden runner\n  already carries (this entry's part 2, still unbuilt).\n- **THIRD FACE, measured 2026-08-24 (WAX-SEAL #21 golden window, doyle):** two new mechanisms, both\n  about the REMEDY rather than the red. (1) The wax-seal-w1 lane pool **re-accumulated to 152–169 GB\n  (two meters, IR-46 caveat) within ONE DAY of the 08-23 clean** and rode the volume back down to\n  4.92 GB free — a reap is an instant, not a state; nothing yet bounds a pool between reaps.\n  (2) **The remedy itself arrived garbled through relay:** the golden push was held \"waiting on the\n  IR-59 reboot\" when this entry prescribes no reboot anywhere — tens of releases have shipped without\n  one; the operator refused the premise and the register's own recorded remedy (reap finished-lane\n  pools) cleared it in ten minutes. A remedy relayed as a DIFFERENT remedy is the relay trap wearing\n  infra clothes: the entry is the author — read it before adopting a hold. Recovery measured: five\n  finished-lane pools reaped after ancestry classification (`git cherry` catches rebased lands that\n  a plain `merge-base --is-ancestor` calls unlanded — gate-w4l1's 90.9 GB pool was reapable only by\n  that meter), 4.92 → 260.88 GB free (~256 GB free-delta vs ~270–287 GB sum-of-lengths). Two main\n  runs red inside the low-disk window (09:17Z/09:41Z) were re-run, not re-read, per this entry's\n  must-do.\n- **FOURTH FACE, measured 2026-08-24 same day (SIGNET #218 W2 gate, doyle — the gater's own pool\n  this time):** the MAIN pool went **13.7 GB → 158.3 GB in ONE DAY** absorbing four full gate\n  batteries across two lane tips, and dragged the volume to **18 GB free mid-gate** — so the\n  entry's mechanism is not a lane-pool problem, it is EVERY pool under repeated full sweeps, the\n  gate rig included. Two riders worth the ink: (1) the golden runner's **free-space floor step\n  produced its first live catch** — a thin CI leg refused at 14:14 local over exactly this window\n  with zero test signal, and the register's re-run-not-re-read rule resolved it in one command;\n  (2) the reap-and-rebuild trade (\"cleaning a live pool buys one window at rebuild price\") was\n  taken deliberately mid-gate and cost ~35 minutes cold — cheaper than one uninterpretable red.\n  A red measured at 18 GB free in this gate got NO read at all, and the next sweep's red was a\n  DIFFERENT test: low disk manufactures random victims before it manufactures link errors.\n- **The event:** a gate's preflight refused with `GATE_ABORTED_DISK_FLOOR` at **4.75 GB free on a\n  1863 GB volume**. Four cold pools plus the milestone head's pool were standing at once. The floor\n  guard did its job — without it a full workspace build would have started with under 5 GB of\n  headroom and produced a red belonging to nothing.\n- **THE ARITHMETIC, and it corrects the intuition that worktrees are the cost.** Measured across the\n  whole `.worktrees` tree: **45 worktrees = 0.79 GB total** (~18 MB each). **3 pools = 130.45 GB.**\n  Worktrees are **0.6%** of the footprint; pools are **99.4%**. **One cold pool is worth roughly 2,500\n  worktrees.** A rule keyed on worktree count would cost a day of `git worktree remove` work for under\n  a gigabyte, risk removing a lane someone still wants, and leave the lever untouched.\n- **THE CEILING, as arithmetic rather than hygiene:** at **45–75 GB per cold pool** on this workspace\n  against a **40 GB floor**, this box supports **TWO live pools comfortably, THREE only if one is\n  small**. The two rules that already exist need no replacement, only this number attached:\n  - **Reap a pool when its lane is finished** → 45–75 GB back immediately.\n  - **Do not run two builds at once** → not only the contention argument, but **75–150 GB of\n    simultaneous allocation** against that floor.\n- **A FULL VOLUME REDS AS A LINKER DEFECT.** `LINK: fatal error LNK1318: Unexpected PDB error`\n  (variously `OK (0)` or `LIMIT (12)`), often beside `LNK4209: debugging information corrupt`. It\n  reads as a corrupt artifact or a broken toolchain and is neither — it is the linker unable to grow\n  a large `.pdb`. **Nothing in the failure text says \"disk\".** Do not key recognition on the\n  parenthesised code; it varies.\n- **THE DANGER WINDOW IS THE TAIL OF A COLD BUILD, not a steady state you can check once.** The\n  2026-08-22 instance died at the link of `spt` — the last and largest artifact of a **74 GB** cold\n  pool — while that same build was draining the volume out from under itself. A free-space reading\n  taken before the build would have looked fine.\n- **Positive tell, with its own refutation attached:** `traceable-reqs check` alone surviving a leg\n  table is suggestive, because it is the only leg that never links. It is a POSITIVE tell ONLY — a\n  full disk can red before any link step, so the signature's ABSENCE clears nothing.\n- **THE FALSIFIER IS FREE SPACE AT THE TIME OF THE RUN**, not the shape of the leg table.\n- **Must-do, both cheap:**\n  1. **A free-space reading goes in the FIRST LINE of any build-failure report** — not in the\n     controls, not as a follow-up. Two agents spent hours on a mechanism for this failure and neither\n     ran `df`; the falsifier was one command away throughout.\n  2. **Rig and gate logs should record free space at run start.** Today they do not, which makes \"was\n     the disk full\" **unanswerable after the fact for every red already in hand**. Any red produced\n     under ~1 GB free is UNINTERPRETABLE and must be **re-run, not re-read**.\n- **Measurement caveat, observed twice in one hour:** sum-of-file-lengths and free-space delta\n  disagree by several percent when anything else on the box is writing (98.07 GB of subtrees → 92.25\n  GB reclaimed; 47.28 GB → 40.81 GB). Report BOTH, derive neither from the other, and treat any single\n  free-space number as an instant rather than headroom — see IR-46.\n- **FIFTH FACE, measured 2026-08-29 at the CONDUIT #236/v0.65.0 cut (deployah):**\n  the finished milestone's sequential lane-sharing accumulated **140.51 GB**, while a freshly\n  rebuilt pool measured **7.78 GB** — about **18× one build's working set** retained across lane\n  hand-offs with no reap between them. This is the budgetable rate behind that cut's disk-floor\n  red: sequential execution prevents concurrent ownership corruption, but it does not bound\n  historical artifacts inside the shared pool. Treat takeover and reclamation as separate\n  operations; a pool may be safe to reuse and still be too large to keep.\n- **SEVENTH FACE, measured 2026-08-30 (v0.67.0 milestone close — the PARALLEL-LANE fill\n  rate):** the #23 wave arc drove C: from ~240 GB free to **0.01 GB in ~3.5 hours**: four\n  concurrent/serial lane+gate pools totalled **236.6 GB** (ns23-w1 87.7 + ns23-113 72.3 +\n  gate rig 57.3 + ns23-w3 19.1) — effectively the entire ir57 reclaim re-consumed inside one\n  milestone's build window. The head gate and two thin-CI runs redded with the entry's exact\n  costume (\"could not compile\" + treqs panic, zero disk words) at 0.01 GB and all re-earned\n  green after reclaim (+186.6 GB, finished-lane targets only, single-actor rule held under\n  racing consent). Budget rule this face adds: a MULTI-WAVE milestone on one box books\n  ~60-90 GB PER LANE-PLUS-GATE cycle, so the pool budget is per-wave, not per-milestone —\n  reap each wave's pool at its LAND, not at the milestone party (the party inherited only\n  ~58 GB because the emergency had already forced the other ~179).\n- **SIXTH FACE, measured 2026-08-30 (#242 golden r4, Windows test job, LNK1318 at the PDB\n  write):** the floor is asserted ONCE at job START, but the job's internal LOW-WATER sits at its\n  LAST heavy step — the docs-drift build, ~28 minutes in. r4's floor read 65.1 GiB honest at\n  23:07; the box was at ~37–39 GB by the 23:35 link failure. LNK1318 on PDB write = this entry's\n  documented low-disk costume; the incremental-corruption candidate was retired by preservation\n  snapshot (no xtask state existed at failure). **Durable fix = a floor RE-READ (or reclaim)\n  immediately before the docs-drift build** — the WITHIN-job sibling of the across-job\n  read-after-checkout fix, rides the next workflow commit. Riders: incremental hygiene as\n  disk-pressure maintenance (the dir measured 4.56 GB), and the box's **~51 GB non-recovering\n  post-run consumption** is this entry's pool-weight face — classify at the IR-14/26/27/49 audit\n  slot (composed this sweep).\n- **Composed for next intake (doyle, v0.65.0 close):** the still-open log-the-floor build half\n  rides with [[IR-57]]'s scripted pick-fidelity audit as the next milestone's two tooling riders.\n- **Trigger condition:** ripe now for the log-the-floor half (it rides any gate-script or CI touch);\n  the arithmetic is discipline and applies immediately.\n- **Size guess:** small — one line in each rig/gate preflight to record free space alongside the\n  existing floor check.\n\n### IR-60 — a wrapper that CAPTURES a leg's exit status ends with the capture, so the wrapper's own status is the capture's, not the leg's\n\n- **Status:** OPEN, unowned — script-shape discipline, not a code lane. Filed by doyle 2026-08-22\n  during the TURNKEY #212 W5 lane; mechanism measured by todlando, who reported it first as a\n  possible harness misreport and then RETRACTED that reading himself on a minimal probe.\n- **The reading that started it:** a background leg was summarised as `exit code 0` while the leg's\n  own exit file read `100`. Reported as-is, that is a task runner lying about a red — the worst\n  possible direction for a purposeful-red claim, since it would turn two reds that DID fire into two\n  reds reported as not having fired.\n- **The measurement, minimal and on this box:**\n\n      ( exit 100 ); echo $? > probe.exit; FINAL=$?\n      leg status captured to file : 100\n      wrapper's own final status  : 0\n\n  The wrapper's shape is `( cd <lane> && cargo nextest ... > leg.raw 2>&1 ); echo $? > leg.exit`.\n  **The last command is the `echo`, which succeeds**, so the wrapper genuinely exits 0 while the leg\n  genuinely exited 100. THE RUNNER TOLD THE TRUTH ABOUT THE WRAPPER. There is nothing to file against\n  the task runner, and it would have been filed.\n- **The class, and this is why it is worth an entry rather than a fix:** it is the truncation-pipe\n  family — the meter measured something real, it just was not the thing about to be quoted. **Three\n  shapes now share ONE trigger, and the trigger is not \"is this a pipe\":**\n  1. a truncation pipe (`cmd | tail`, `cmd | head`) — `$?` measures the truncator, and `head` closing\n     the pipe can MANUFACTURE a status (SIGPIPE → 101), so `PIPESTATUS` is not protection either;\n  2. a flattened `$?` read after any intervening command;\n  3. **a wrapper whose last command is the capture itself.**\n  **The trigger in all three is the REPORTING** — every instance happened while trimming or capturing\n  output in order to QUOTE it as evidence.\n- **The practice that held, and the one to keep:** the leg's own file is the leg's verdict. Both reds\n  were real, and the only reason that was knowable is that every leg wrote its exit to its own file\n  rather than to the wrapper's status.\n- **Remedy, in preference order:** (1) never read a wrapper's status as a leg's — read the leg's exit\n  FILE, which the per-leg rule already requires; (2) if a wrapper's own status must be meaningful,\n  end it by re-raising the captured status (`exit \"$(cat leg.exit)\"`) or set the status before the\n  capture is the last word; (3) for anything that becomes evidence, redirect to a file and read the\n  file.\n- **Trigger condition:** ripe now — it rides the next gate-script touch, and the gate scripts in this\n  milestone already write per-leg exit files, which is what makes this discipline rather than debt.\n- **Size guess:** small — a convention line in the gate-script preamble; no product code.\n\n### IR-61 — spacerun's test-module skip carries a SECOND literal tracker; the two answers can drift, and today only a cell stands between them\n\n- **Status:** OPEN, unowned, accepted-with-mitigation. Filed by doyle 2026-08-22 at the TURNKEY #212\n  head gate, as the named residual of the latch repair (the repair itself rides the milestone).\n- **What the debt is.** `crates/xtask/src/spacerun.rs` now skips a column-0 `#[cfg(test)]` module by\n  BRACE DEPTH and resumes after its close, rather than latching the scan to end-of-file. Counting\n  braces safely means knowing when a brace is inside a string, a raw string or a char literal — and\n  the scanner ALREADY tracks literals for its rendering pass. It does not reuse that tracking. There\n  are now TWO answers in one file to \"am I inside a literal\", and **two answers to one question is a\n  disagreement waiting for a reader who fixes one of them.**\n- **Why it was accepted rather than refactored on the spot, stated so the trade is auditable:** the\n  two trackers answer genuinely different questions — the rendering walk is PER LINE and forward\n  from an opening quote (\"where does this literal start and end\"), while the skip needs \"am I inside\n  a literal right now\" carried CONTINUOUSLY across lines. Unifying them is a real refactor of a check\n  that is already gated, already carries five fixed defects, and sits on the tree being handed to\n  golden. The narrow change with an OBSERVABLE failure mode beat the correct-shaped change with a\n  wide blast radius, on that tree, on that day.\n- **The mitigation, and its exact limit.** Three brace cells fail the moment the two trackers\n  disagree about a raw string, a normal string or a char literal, plus a cell that reds when the skip\n  stops consulting a literal tracker at all (`match lit` -> `match Lit::None`). **That is a cell\n  standing in for a refactor.** It catches drift in the three forms it names and nothing else — a\n  fourth literal form, or a change to only one tracker in a form neither cell covers, passes.\n- **The general shape, which is why this is a register entry rather than a comment:** a check whose\n  own correctness depends on a second implementation of a thing it already implements is one\n  refactor away from the defect class it exists to prevent. This same file has already produced\n  three instrument defects (an indented-marker latch, a column-0 latch, and a suppression that\n  decided what got PARSED rather than what got REPORTED). The pattern is not carelessness; it is a\n  scanner accumulating special cases.\n- **Trigger condition:** the next SUBSTANTIVE change to spacerun's scanning — any new skip, any new\n  literal form, any change to either tracker. At that point unify, rather than adding a third answer.\n- **Size guess:** small to medium — one continuous literal-state walk serving both the render pass\n  and the skip, with the existing corpus and brace cells as the regression net.\n\n### IR-62 — an e2e daemon binds well-known ports and collides with the resident fleet on shared runners\n\nFiled 2026-08-23 (doyle), from the #212 r2 golden's Windows Phase A red — one witnessed\ninstance, mechanism verified from the run's own capture, filed on the mechanism per the\nregister's standard.\n\n**Mechanism.** `endpoint_autostart_e2e::saved_endpoint_replays_on_daemon_restart` failed its\nown PRECONDITION (\"daemon B must come up with a fresh brain\") because daemon B's broker came up\ndegraded: `NODE_KEY_FAIL: identity unavailable` (net-less broker, no retry) and\n`DOCS_SERVER_BIND_FAIL` port 5474 `os error 10048` — the docs port was held by a CO-RESIDENT\ndaemon. HFENDULEAM is live infra: the resident fleet's daemon legitimately holds well-known\nports, and any e2e that brings up a daemon with default port bindings is in a race with it BY\nCONSTRUCTION. An isolated SPT_HOME isolates the store and broker socket, NOT globally-numbered\nTCP ports.\n\n**Classification history.** r2: red (35.4s, precondition panic). Run 1 and r3 on the same box:\ngreen. Folded into r3 under a pre-registered predicate (reds twice → dedicated triage); it\ngreened, so this stays an environment-shaped intermittent, NOT a product defect and NOT\nclosed — the collision window is real and will re-fire under the right co-residence timing.\n\n**Remedy direction (not built).** Test daemons should bind ephemeral/rig-scoped ports for\nevery advisory surface (the docs server is advisory — a bind failure should degrade the rig\nloudly, not poison an unrelated cell's precondition), or the precondition should name the\nport-collision cause distinctly so the red self-classifies. Either lane is test/CI work\n(hertz's), triggered the next time this class fires anywhere.\n\n**Kin.** IR-51 (e2e daemon net-enabled on real interfaces — hermeticity is disk-deep only);\nthe known not-ours red classes list in the #212 hand-off.\n\n**BUILT 2026-08-24 (hertz, SIGNET #218 batch; PR #158).** The class fired its second witnessed\ninstance the same day — doyle's W2 gate rig, `engine_room_bringup_e2e` precondition panic with\nthe IR-50 panel naming `DOCS_SERVER_BIND_FAIL` port 5474 `os error 10048` — which armed this\nentry's own trigger. Hertz repro'd deterministically (held the port; brain still reached\nBRAIN_UP), pre-ranked three mechanisms before probing, and built the ephemeral-advisory form:\nrig-only `SPT_TEST_EPHEMERAL_ADVISORY_PORTS=1` makes the daemon's docs listener bind port 0\n(production config/`SPT_DOCS_PORT`/docs-url untouched; the flag matches the literal \"1\" only).\nThe golden workflow's test job sets it globally on both self-hosted legs, the standalone ER rig\nsets it too. Scope note kept honest per his own ranking: the docs collision is retired; if a\nco-diagnostic bind elsewhere still poisons a precondition, that is a residual face of THIS\nentry, not a closed question.\n\n### IR-63 — suite-mix sweeps leak job-escaped autostart daemons that LOCK the pool's spt.exe; and the same box conditions manufacture one random victim per sweep\n\n- **Status:** OPEN, mitigated-by-rig-step — the reap is adopted discipline, not yet construction.\n  Filed by doyle 2026-08-24 at the SIGNET #218 gates; first measured by todlando the same day\n  (his W1 build: four reap rounds of 2, 8, 1, 1 processes, count-by-path stated each round).\n- **Mechanism, two faces of one condition:** (1) e2e sweeps that exercise autostart leave\n  job-escaped daemons running `target/debug/spt.exe`; the NEXT build or `xtask check` then dies\n  on `os error 5` removing the exe — a rig red wearing a build defect's clothes. nextest's own\n  `leaky` flags corroborate (4–8 per sweep measured). (2) The same co-residence (leaked daemons +\n  resident fleet + runner traffic) manufactures ONE red per full sweep with a DIFFERENT victim\n  each time: doyle's W2 gate measured FOUR distinct one-off victims in four same-sha sweeps\n  (ER bringup, composite+bootstrap pair under CI load, resident_service, brain_resume), every\n  one green alone and/or in a sibling sweep. The e2e-leaked-daemons rule holds: a different test\n  dying each run on one sha is ONE environment cause, and hardening members never closes it.\n- **Mitigation adopted (rig step, both todlando's lanes and doyle's gate runner):** reap\n  `spt.exe` BY PATH (`*spt-core\\target*`) before EVERY cargo invocation and after every sweep;\n  report the count each time so a zero is a claim, not silence.\n- **Remedy direction (unbuilt):** the durable form is construction, not discipline — either\n  nextest wrap/xtask verb that performs the by-path reap as a pre-step on this box's rigs, or\n  autostart e2es gain teardown that provably outlives job escape (kin IR-38's built wedge-namer,\n  IR-62's ephemeral ports which retire one collision axis, IR-35's victim-rate ledger).\n- **THIRD FACE, measured 2026-08-30 (doyle, ir57/asm-241 reaps):** the leaked population is not\n  only daemons — battery legs leave ORPHANED HEADLESS `conhost.exe` processes whose CWD sits in\n  the worktree's `crates/spt-daemon` (where the leg ran), and a CWD pin blocks `Remove-Item`/\n  `git worktree remove` on the whole tree with \"being used by another process\" naming the DIR.\n  This is the mechanism behind every recent \"handle-pinned, retry later\" worktree removal: 31\n  such conhosts found at once (Aug 26–29 vintages) pinning FIVE dead worktrees. cargo/rustc\n  absence does NOT clear the suspect list — the conhost outlives its client. Holder census\n  tool: a ~30-line NtQueryInformationProcess CWD probe (PEB→ProcessParameters→CurrentDirectory)\n  over all pids, filtered on the path — names every holder in one pass where no handle.exe\n  exists. 13 killed scoped to the two consented reaps; 18 remain pinning gate-w1-a8f04aff (12),\n  io-parser-w1 (5), gate-w1-786d2381 (1 after kills) — sweep them at the IR-14/26/27/49 audit\n  slot before those removals.\n- **LANE-LINKED 2026-08-30 (#242 close sweep):** hertz's queued daemon-leak fixup lane carries\n  this entry (brief cites IR-7/17/20/34/35/63); leaves the register when that lane lands.\n- **Trigger condition:** next rig/gate-script construction touch, or the first golden red that\n  classifies to face (1).\n- **Size guess:** small-medium — one wrapper seam plus adopting it in the gate/lane scripts.\n\n### IR-64 — HFENDULEAM's disk floor is set by non-CI bulk: ~845 GB of operator payload leaves the golden box ~2 GB of slack against its own 32 GB preflight\n\n- **Status:** OPEN · **Origin:** doyle, v0.63.0 close sweep 2026-08-26; mechanism first measured\n  at the FIELD-SEAL golden window (deployah's IR-31 fifth addendum carries the POOL side of the\n  same event by agreed division — this entry is the OTHER reservoir, deliberately not his).\n- **Mechanism:** the 1.86 TB C: carries ~614 GB Steam + ~230 GB Downloads (operator payload, not\n  CI state). With that floor fixed, normal lane traffic alone walks the box under the 32 GB\n  golden preflight — a full-sweep pool WEIGHS ~90–112 GB steady state (IR-59's measurement) and\n  five FIELD-SEAL lanes cost 148.48 GB (IR-31 fifth addendum), so ONE milestone's pools exceed\n  the entire free margin. Reaping buys windows, not headroom: deployah measured free fall\n  167 → 108 GB within hours of his reap, ~59 GB re-consumed by lane builds. The recurring shape:\n  every milestone pays a reap-and-measure tax to rent space the box does not structurally have.\n- **Why register-worthy rather than \"clean up more\":** agent-side discipline (IR-31's budgeting,\n  pool reaps, teardown steps) is already adopted and still only rents windows — the reservoir\n  that would durably move the floor is operator-owned bulk no agent may touch. Naming it here is","numLines":450,"startLine":3001,"totalLines":3791}},"sourceToolAssistantUUID":"f8a60759-b0c2-48a9-90cf-0cd843d3990f","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"3d66590f-f7f3-4b4a-8ac1-cc0bbee199c9","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6FaHn5xqGvdSg4yD1z","type":"message","role":"assistant","content":[{"type":"text","text":"Continuing with the remaining lines."}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":16828,"cache_read_input_tokens":174840,"cache_creation":{"ephemeral_5m_input_tokens":16828,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6FZYdDbzZBT7xxc8uZ","attributionAgent":"general-purpose","type":"assistant","uuid":"211ff614-0de1-4268-84bf-c61d5faf946c","timestamp":"2026-09-06T11:16:34.837Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"211ff614-0de1-4268-84bf-c61d5faf946c","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6FaHn5xqGvdSg4yD1z","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01JXD5f7tpe4Uj4zs9rTUanj","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":3451,"limit":339},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":16828,"cache_read_input_tokens":174840,"output_tokens":141,"output_tokens_details":{"thinking_tokens":0},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":16828},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":141,"cache_read_input_tokens":174840,"cache_creation_input_tokens":16828,"cache_creation":{"ephemeral_5m_input_tokens":16828,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6FZYdDbzZBT7xxc8uZ","attributionAgent":"general-purpose","type":"assistant","uuid":"967f5175-5181-4548-a2dc-fb53424115f5","timestamp":"2026-09-06T11:16:35.792Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"967f5175-5181-4548-a2dc-fb53424115f5","isSidechain":true,"promptId":"049c9b0a-4748-4001-92b5-fe08ca987bec","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01JXD5f7tpe4Uj4zs9rTUanj","type":"tool_result","content":"3451\t  the boundary: agents keep budgeting IN POOLS (not GB); moving Steam/Downloads (or adding a\n3452\t  disk, or pinning golden to a box without operator payload) is an OPERATOR decision this entry\n3453\t  exists to put in front of them once, with numbers, instead of re-deriving the floor each cut.\n3454\t- **Ripe when:** operator rules on the bulk (move/expand/accept-the-tax), OR the first golden\n3455\t  that dies at the 32 GB preflight despite adopted pool discipline (IR-59's LNK1180-class red).\n3456\t- **Size:** zero code; one operator decision + at most a runbook line naming the chosen floor.\n3457\t\n3458\t### IR-65 — kitsubito kernel-audit backpressure: a tailscale-snap AppArmor denial storm + no auditd turned the default audit backlog into a CI-wide stall amplifier (REMEDIATED AT BOX; re-check triggers named)\n3459\t\n3460\t- **Status:** REMEDIATED-AT-BOX 2026-08-25 (doyle, operator-authorized root — ruling pinned\n3461\t  releases#225 comment 5418800776); entry stays OPEN as the re-check record because the storm\n3462\t  SOURCE persists and two named events can silently revert the fix.\n3463\t- **Mechanism:** `snap.tailscale.tailscaled` (1.92.5) polls /proc and takes an AppArmor\n3464\t  ptrace-read DENIED per poll — a continuous kernel-audit record storm scaling with process\n3465\t  count (spawn-heavy serialized CI legs amplify their own storm). With NO auditd installed the\n3466\t  records rode printk (kauditd throttling) and the 8192 kernel backlog overran\n3467\t  (lost=1,537,743); the default `backlog_wait_time` 60000ms turns a full backlog into A 60s\n3468\t  SLEEP INSIDE ANY AUDITED SYSCALL — the broker dispatch stall that stretched IR-30's\n3469\t  Linux-face race window (see IR-30's Linux-face addendum; deaths clustered 59–63s ↔ this\n3470\t  knob's value).\n3471\t- **Remediation (verified at the EFFECTIVE layer, not the fragment):** auditd installed +\n3472\t  active (storm consumed, backlog drains to 0, lost flat), backlog_limit 32768,\n3473\t  backlog_wait_time 0 (full backlog may DROP, never STALL). ⚠ THE TRAP PAID FOR ONCE: the first\n3474\t  knob write (`50-backlog.rules`) silently LOST the augenrules merge — apt's own\n3475\t  `/etc/audit/rules.d/audit.rules` sorts LAST (digits before letters) and its `-b 8192` /\n3476\t  `--backlog_wait_time 60000` won; a whole proof run executed under the defaults while the\n3477\t  fragment grepped perfect. Values now live in the merge-WINNING file; verified `auditctl -s`.\n3478\t- **Re-check triggers (the reason this entry stays):** (1) tailscale snap update — the plug\n3479\t  landscape may change, the storm may stop or grow; (2) auditd package update/reinstall — may\n3480\t  rewrite `rules.d/audit.rules` and re-lose the merge; (3) box reimage. On any of these: one\n3481\t  `auditctl -s` (expect 32768/0) + one `journalctl -k | grep 'backlog limit'` (expect silence).\n3482\t- **Ripe when:** a re-check trigger fires. **Size:** two read-only commands per check.\n3483\t\n3484\t### IR-66 — first-chunk-needle test class: two latent members remain after the v0.63.0 fix (attach.rs:561, :672)\n3485\t\n3486\t- **Status:** BUILT — hertz rider PR #161, landed ff at `d04b922d` (2026-08-27, IO-PARSER #22\n3487\t  intake rider). Both members got the later-needle treatment (TICK39 delayed past burst on both\n3488\t  OS arms; alt-screen entered before delayed ALT_VIEWPORT_MARKER). Gate: doyle — diff-scope\n3489\t  review; Windows isolated worktree 3× TICK39 PASS + clippy + treqs; Linux CLEAN worktree at the\n3490\t  PR sha on kitsubito 3× both cells PASS (independent of the builder's dirty-shared-tree proof,\n3491\t  disclosure on record). · **Origin:** doyle tree-wide census at `dbe3daad`\n3492\t  (releases#225 comment 5418844404 — the census that corrected my own resume.rs-scoped\n3493\t  overclaim), after the class's first member was RCA'd and fixed in v0.63.0's head.\n3494\t- **Mechanism (cite, not restate):** KNOWN-HAZARDS 6.9 same-session face, amended at\n3495\t  `dbe3daad` — `spawn_session_pid`'s Spawned-wait consumes-and-discards a first output chunk\n3496\t  that races the reply (~2ms window on a healthy Linux box; load-stretched under backpressure,\n3497\t  see IR-30 Linux-face + IR-65). A test whose needle exists ONLY in the child's first chunk\n3498\t  asserts winning a race the contract does not promise.\n3499\t- **The two members:** `crates/spt-daemon/tests/attach.rs:561` (TICK0..39 instant burst then\n3500\t  `cat`; needle TICK39 read directly after spawn — the whole burst can sit in the first\n3501\t  chunks) and `:672` `cross_node_cold_attach_to_alt_screen_gets_clean_repaint` (unix-only;\n3502\t  `printf '…ALT_VIEWPORT_MARKER'; cat` — needle in the first chunk). Failure shape differs from\n3503\t  the fixed member: both children idle on `cat`, so a lost prefix is a HANG killed by nextest's\n3504\t  backstop at exactly 240s (slow-timeout 60s × terminate-after 4) — not a natural-life death.\n3505\t  Verified NOT in the class: daemon_e2e.rs:209 (needle = echo of post-spawn input), attach.rs:995\n3506\t  + brain_swap.rs:170 (attach/replay reads, not spawn-waits).\n3507\t- **Fix shape (ruled at the v0.63.0 close):** hertz lane, NEXT intake — the same one-line\n3508\t  later-needle / robust-read treatment the resume seed got in `dbe3daad`; deliberately NOT\n3509\t  landed mid-r4. Both cells passed r4 (0.010–0.058s) — the members are latent, not failing.\n3510\t- **Ripe when:** next milestone intake (hertz test lane) or the first golden red at ~240s on an\n3511\t  attach cell — either way the mechanism and fix are pre-derived, triage should cite this entry\n3512\t  and skip the RCA. **Size:** two one-line test edits.\n3513\t\n3514\t### IR-67 — wave-battery gap: a `-p spt --bins` leg compiles bin targets as harnesses and runs ZERO integration/e2e tests, so batteries that lean on it carry silent no-coverage legs\n3515\t\n3516\t- **Status:** BUILT — remedy applied across the IO-PARSER #22 milestone (2026-08-27/28): every\n3517\t  wave battery named explicit `-p spt --test <suite>` e2e legs beside the `--bins` unit leg\n3518\t  (GW1..GW5 evidence), every builder evidence report carried a named real e2e per the dispatch\n3519\t  template, and the one filter mistake (a `--test` name not matching its file) REFUSED loudly\n3520\t  rather than silently skipping — the failure mode this entry exists to kill. Battery template =\n3521\t  the dispatch text now carried forward in gate craft.\n3522\t- **Was:** OPEN · **Origin:** doyle, banked at the SIGNET #218 gates 2026-08-25 (\"gate\n3523\t  battery gap learned\"), filed at this sweep per the standing rule.\n3524\t- **Mechanism:** `cargo test/nextest -p spt --bins` builds `[[bin]]` targets as TEST HARNESSES\n3525\t  (unit tests inside bins only) — `tests/` integration and e2e suites of the crate NEVER run,\n3526\t  and the leg's green output is indistinguishable from coverage. Kin of the two banked pool\n3527\t  faces (`--bins` never emits fixture exes; fresh-pool fixture reds) but this face is about the\n3528\t  BATTERY TEMPLATE: my SIGNET wave batteries carried a `-p spt --bins` leg believed to cover\n3529\t  the crate.\n3530\t- **Remedy:** at next intake, the wave-battery template gains an explicit `tests/` leg for the\n3531\t  spt crate (nextest `-p spt --test <suites>` or unfiltered `-p spt` where pool history\n3532\t  permits), and any battery doc that lists `--bins` as a coverage leg gets the one-line caveat.\n3533\t- **Ripe when:** next milestone intake (the battery template is touched at every intake).\n3534\t  **Size:** template lines only.\n3535\t\n3536\t### IR-68 — PSYCHE_INGEST_FAIL cause class unproven: git index.lock did NOT reproduce the ingest failure it was blamed for\n3537\t\n3538\t- **Status:** OPEN, investigation-shaped · **Origin:** todlando measurement at the W2 int-leg rig\n3539\t  (IO-PARSER #22, PR #163 at `769fb0a9`, 2026-08-27), reported measure-first; filed by doyle.\n3540\t- **The contradiction:** the six silent `PSYCHE_INGEST_FAIL:todlando` lines observed at the\n3541\t  drop-dir probe (2026-08-25) were attributed to shared-checkout git `index.lock` contention. The\n3542\t  W2 rig planted NON-EMPTY `index.lock` files in BOTH places git takes one (bare git-dir + every\n3543\t  `<git_dir>/worktrees/<name>/`, mirroring `branchstore::sweep_stale_index_locks`, plant count\n3544\t  asserted >= 2) — and the ingest COMMITTED ANYWAY (tier write `Written`; `route_slices`\n3545\t  propagates `commit_live(...)?`, so a blocked checkpoint would have failed it). Non-empty was\n3546\t  deliberate: KH 1.3 reaps only 0-byte locks, and `pulse_tick` runs no boot sweep. So on this\n3547\t  store an `index.lock` does not block the checkpoint, and the field incident's mechanism is\n3548\t  UNKNOWN, not merely unconfirmed. The rig's doc comment records the attempt; the shipped int leg\n3549\t  fails the ingest at the drop READ instead (upstream of the store).\n3550\t- **Strongest negative evidence, pinned to the executable rig:**\n3551\t  `crates/spt-daemon/tests/commune_io_events_int.rs:95-107` documents that the lock mechanism was\n3552\t  tried **first**, planted non-empty locks in both the bare git-dir and every linked-worktree\n3553\t  location, asserted that the population was non-empty, and still observed `Written`. Its own\n3554\t  sentence is the required scope boundary: “This leg does not claim to reproduce a mechanism it\n3555\t  measured as inert.” The working injection is instead drop-file → directory replacement, which\n3556\t  fails the upstream read deterministically and proves only the `COMMUNE_FAIL` event contract.\n3557\t- **NOT claimed:** that the field incident was misattributed to ingest failure generally — the\n3558\t  files did survive with failed-ingest log lines; what is unproven is the index.lock CAUSE.\n3559\t- **Ripe when:** next PSYCHE_INGEST_FAIL sighting in the field (capture the failing store state\n3560\t  before touching it), or a dedicated probe slot. W2's COMMUNE_FAIL event now pushes a NAMED\n3561\t  reason on every failure, so the next occurrence self-reports its cause — read that first.\n3562\t  **Size:** investigation; no product change until the mechanism is pinned.\n3563\t\n3564\t### IR-69 — inherited stderr tokens can tear between format fragments; 26 test consumers parse that surface as structured truth\n3565\t\n3566\t- **Status:** OPEN, product remedy complete and parked GREEN-AND-READY at `d0fdd58d` on\n3567\t  `feat/emit-single-write`, owned by **todlando**, awaiting golden-batch assembly; board request\n3568\t  releases#241 carries the product remedy and full lane evidence in comment 5461613480. This entry\n3569\t  is the exposure map and census discipline, not the implementation. · **Origin:** CONDUIT #236 r3\n3570\t  golden attempt 2,\n3571\t  2026-08-29: `endpoint_autostart_e2e` missed its contiguous\n3572\t  `ENDPOINT_AUTOSTART:gwauto` keystone although the matching fresh session id proved the replay\n3573\t  happened. Attempt 3 was clean on the same discarded SHA after 139 GB was reaped; unequal load\n3574\t  makes the pair corroborating, never a rate.\n3575\t- **Mechanism, recovered from the literal torn bytes:** two daemon processes inherited one stderr\n3576\t  pipe. `BRAIN_UP` and `ENDPOINT_AUTOSTART` are each one `eprintln!`, but `write_fmt` may reach the\n3577\t  handle once per format fragment; the per-process stderr lock cannot serialize the other process.\n3578\t  The observed interleave split the autostart token between `ENDPOINT_AUTOSTART:` and `gwauto`.\n3579\t  This is fragment-level cross-process interleaving, not a failed replay and not a two-thread race.\n3580\t- **Durable remedy, ruled product-side:** render a complete diagnostic line into one buffer and\n3581\t  issue the complete rendered text, newline included, as **ONE handle call**. An OS short-write\n3582\t  may retry the late tail so completeness wins over a silently truncated line; the deterministic\n3583\t  property pins application-side fragmentation, not syscall count under that rare retry. It makes\n3584\t  no claim that the OS write is atomic on Windows, and no CI re-fire against a 1-of-2 observation\n3585\t  may stand in for it. Widening one test's grep is refused: it greens one consumer while every\n3586\t  sibling token remains exposed.\n3587\t- **Cut-SHA census** (todlando generator, independently hash-verified by hertz), measured from\n3588\t  `4d6007ac4ee3d0991f4bc60b7e1a55825aad1aaf` via `git show`, not a dirty worktree:\n3589\t  **486 real emitter sites / 383 distinct tokens / 26 consumer test files**. The generator emitted\n3590\t  487 site rows, but one is a known phantom: `sealverb.rs:456` is a `format!` inside `map_err`\n3591\t  that the four-line lookback attributed to a neighbouring real `eprintln!`. Corrected real emitters\n3592\t  by crate: spt-daemon 270, spt 194, spt-runtime 8, spt-live 5, spt-net 5, spt-store 4; by macro:\n3593\t  `eprintln!` 484, `println!` 1, `eprint!` 1. `DRIVEN_BY` is the sole stdout row and therefore\n3594\t  outside the stderr remedy. A consumer means the test both mentions `TOKEN:` and reads a\n3595\t  stderr/log surface; bare-token matching inflated the population to 72 files by admitting prose.\n3596\t  This is an **exposure map**, not a rate and not a claim that all 26 have torn.\n3597\t- **Artifacts (the preserved raw generator outputs contain 487 site rows):** cut census SHA-256:\n3598\t  sites `f10d6bfe5e0399f98945cf63bb5719a01a62e1251be84165c73030fa9bb224f5`,\n3599\t  tokens `80b0d1835d9d46376b2f200b1c50be4ca0e185a135168444414255f9308ed92b`,\n3600\t  consumers `249a2e33df43a30570ca82b5bd200d8b6e2bf07aa8250fcc8bace47fe23e3cbc`.\n3601\t  The sealed sites file's macro column is wrong on 7 of its 487 raw rows; the corrected raw split\n3602\t  is `eprintln!` 485 / `println!` 1 / `eprint!` 1. The sealed tokens file has no final newline, so\n3603\t  `wc -l` reports 382 although it contains 383 logical records. The sealed files remain unedited;\n3604\t  these corrections are textual.\n3605\t  Generator `81df82f01ef33a82307920d9804a2394b787ef2ffbe3b41d2d7dda560d9a62a9`\n3606\t  was recorded as asserting newline-terminated output, but the sealed tokens artifact refutes that\n3607\t  claim for at least one output. Its remaining guards cover logical record counts, a known-positive\n3608\t  `SUBSCRIBE_DECISION` sentinel, four-line macro lookback, and truncation only at a\n3609\t  `#[cfg(test)]` that opens a module.\n3610\t- **Census hazards paid for while constructing and reconciling the population:** the provisional\n3611\t  instrument moved `277/243 → 286 → 412 → 487 raw → 486 real` as four silent assumptions were\n3612\t  found: same-line matching misses multi-line macros; truncating at the first `#[cfg(test)]` drops\n3613\t  later shipping code; lookback must prefer the token line's own macro over a neighbouring arm;\n3614\t  and even that lookback can promote a nested token literal beneath a real macro into a phantom\n3615\t  second site. A file without a final newline also makes `wc -l` silently undercount logical\n3616\t  records by one. Every future census must name its SHA, assert a known member, count records\n3617\t  inside the generator, and reconcile emitted rows to real sites.\n3618\t- **Separate anchored-matcher finding:** `IDLE`, `DISPATCH`, `BUSY`, and `BOUND` are common words\n3619\t  matched as substrings in exposed consumers. One-write emission does not prevent an unrelated log\n3620\t  line from satisfying them; those predicates need anchored token matching. Keep this separate from\n3621\t  the tear remedy so neither defect is claimed to close the other.\n3622\t- **Kin:** [[IR-50]] (the sink must be read before its absence means anything), [[IR-40]] (a\n3623\t  confident signal that does not describe the source truth), [[IR-8]] (a plausible census whose\n3624\t  blind spot returns a clean answer).\n3625\t- **CLOSE-OUT ADDENDUM 2026-08-30 (#242/v0.66.0 sweep — the entry's own close-out re-census RAN\n3626\t  and FOUND the predicted blind spot LIVE; entry stays OPEN):** re-census at the landed sha\n3627\t  `ec6da9b0` (independent containment-classified meter, reconciled with todlando's independent\n3628\t  meter — full write-up `EMISSION-RESIDUAL-CENSUS-FINDING.md`): the generator truncated\n3629\t  `crates/spt/src/cli.rs` at its FIRST module-opening `#[cfg(test)]` (line 3007, module closes\n3630\t  3164, file runs to 39118) and never scanned the rest — **338 TOKEN-shaped shipping sites remain\n3631\t  bare (332 colon-form, i.e. misses under the sealed census's own predicate, + 6 space-form)**,\n3632\t  plus `main.rs` 2 sites behind the same mechanism; exactly TWO files tree-wide carry the\n3633\t  triggering property (first module-opening cfg(test) precedes shipping code) — the generator\n3634\t  fix's owed blind-spot measurement, answered. The census-hazards bullet above already NAMES this\n3635\t  third-face truncation hazard; the module-opening fix narrowed the trigger and kept the blind\n3636\t  spot for files where a test module CLOSES and shipping resumes — IR-8 shape, predicted by this\n3637\t  entry's own text. The shipped #241 conversions are UNAFFECTED (495 removals ≈ censused 486 +\n3638\t  space family; the SEEN population is closed; golden green stands). Residual conversion +\n3639\t  generator fix + enforcement-at-the-seam = **releases#243** (BACKLOG, operator triages);\n3640\t  delivery.rs:149/313 are post-cut MINTS relative to the census sha (todlando's own, settled\n3641\t  attribution), deliberately outside #243's census-mechanism scope — and ALREADY CONVERTED: the\n3642\t  fix rode his breadcrumb branch (`60a12056`) into the r4 head and shipped IN-TAG (todlando\n3643\t  flagged the stale \"his thin lane converts post-cut\" claim 2026-08-30; re-measured — zero bare\n3644\t  TOKEN `eprintln!` in delivery.rs at both `d931dd63` and origin/main). No lane is owed for it. Re-runnable meter\n3645\t  `EMISSION-RESIDUAL-CENSUS-METER.py` (repo root, untracked; version-control rides #243's lane).\n3646\t  **Common-word matcher RULED at this sweep (discharges the \"decide\" clause below):** the four\n3647\t  common-word consumers (`IDLE`/`DISPATCH`/`BUSY`/`BOUND` substring predicates) get a SEPARATE\n3648\t  hertz test-side rider — anchored token matching is consumer-predicate work, NOT folded into\n3649\t  #243 (keeps #243 product-scoped) and not claimed closed by one-write emission; lane-link when\n3650\t  hertz's spool drains.\n3651\t- **Closes when:** releases#243's residual conversion + generator fix land and a re-census at\n3652\t  that sha reads zero shipping residue under both delimiter forms. **Size:** product lane\n3653\t  complete elsewhere; register follow-through small.\n3654\t\n3655\t### IR-70 — a hand-built `IoBus` silently omitted later sinks while every gate stayed green\n3656\t\n3657\t- **Status:** OPEN, remedy unscheduled; the v0.65.0 respin fixed the witnessed call site on PR #173.\n3658\t  This entry owns the recurrence class, not that shipped correction. · **Origin:** releases#234,\n3659\t  commit `c5459795167`, CONDUIT #236 respin.\n3660\t- **Mechanism:** `publish_commune_io` constructed `IoBus` itself and registered only the sink it\n3661\t  knew. `default_bus` already existed as the assembly point and its module contract explicitly says\n3662\t  emitters must know only `IoBus::publish`, so adding a later sink costs one registration rather\n3663\t  than an emitter sweep. The hand-built publisher recreated exactly the drift that contract warned\n3664\t  against: `COMMUNE` and `COMMUNE_FAIL` reached the old sink but never the adapter log, leaving\n3665\t  `spt api io-events` permanently short on two documented kinds.\n3666\t- **Why the complete battery was green:** the e2e was vacuous on the broken kinds; units synthesized\n3667\t  rows without traversing `publish_commune_io`; and traceability checked attached tags, not whether\n3668\t  the tagged path exercised the real publisher. Three green instruments shared one blind seam.\n3669\t  The respin routed the site through `crate::iobus::default_bus`, and its source comment now records\n3670\t  the failure shape.\n3671\t- **Durable remedy direction (todlando mechanism, not scheduled):** enforce the assembly point so\n3672\t  the next hand-built bus is impossible rather than found — make production publishers obtain the\n3673\t  composed bus through one construction API, and gate the real publish path for every documented\n3674\t  kind. A search or comment is not enforcement; another emitter can satisfy both while rebuilding\n3675\t  a partial sink list.\n3676\t- **Kin:** [[IR-39]] (a green fixture never reached the missing dependency), [[IR-37]]\n3677\t  (traceability tags prove coverage bookkeeping, not behavioral truth), [[IR-58]] (a hand-built\n3678\t  population returns an orderly but incomplete answer).\n3679\t- **Ripe when:** the next `IoBus` construction/API touch, or a new sink registration. **Size:**\n3680\t  small-to-medium assembly-point enforcement plus a real-path population test.\n3681\t\n3682\t### IR-71 — controller-seat release has no persisted breadcrumb, so tests cannot distinguish propagation lag from a missing detach\n3683\t\n3684\t- **Status:** OPEN, observability gap; no remedy scheduled. · **Origin:** CONDUIT #236 r3\n3685\t  `er_brief_once_per_session_e2e` intermittent, classified test-side and fixed on PR #174.\n3686\t- **What/why:** killing rc1 reaps the controller process, but the broker is another process and\n3687\t  notices the socket close later. On that detach edge it clears `driven_by` and `controlled` in\n3688\t  `info.json`; rc2's preflight reads that file locally and can race the write, refuse normally, and\n3689\t  exit 0 without dialing the broker. The test originally spawned rc2 immediately and had no\n3690\t  observable precondition separating “release is propagating” from “release never happened.”\n3691\t- **The missing surface:** broker lifecycle state records `session-detach was_controller=true`, but\n3692\t  there is no always-on persisted breadcrumb that states the controller stamp was cleared, names\n3693\t  the resulting `driven_by`/`controlled` state, or measures detach-to-persist latency. The repaired\n3694\t  test therefore polls `info.json` itself, prints elapsed time (0.075s on the first local real run),\n3695\t  and uses a named 60s timeout whose failure promotes the finding from timing to missing release.\n3696\t  Its deliberately latched-seat unit proves the barrier can red.\n3697\t- **Remedy direction:** add one structured release breadcrumb after the persisted clear, carrying\n3698\t  session/connection identity and the resulting control state; if latency is carried, measure it\n3699\t  from the detach edge. It must ride the persisted daemon sink and remain distinct from\n3700\t  `session-detach`, which proves the connection event but not the file write.\n3701\t- **Kin:** [[IR-50]] (the sink a test must actually read), [[IR-40]] (an event timestamp is not a\n3702\t  completion signal), REQ-HAZARD-CONTROL-STAMP-CONVERGENCE.\n3703\t- **Ripe when:** the next controller lifecycle or structured-breadcrumb touch, or a field timeout\n3704\t  from PR #174's barrier. **Size:** small emitter plus one contract-level assertion.\n3705\t\n3706\t### IR-72 — no product read verb surfaces which process holds a perch or controller seat\n3707\t\n3708\t- **Status:** OPEN, observability gap; no remedy scheduled. · **Origin:** CONDUIT #236 r3\n3709\t  two-host RCA and PR #174 (`70c1a303`), corrected by doyle after IR-18 and daemon-status were\n3710\t  ruled out as different classes.\n3711\t- **Source-verified boundary:** the holder identity already exists in durable/internal records\n3712\t  (`InfoJson.pid`, `parent_pid`, and the broker's session pid), and product internals read it for\n3713\t  liveness, teardown, and self-detection. No product **read verb** returns the process that holds a\n3714\t  named perch/seat. PID-bearing teardown messages are failure outcomes, not an inspection surface;\n3715\t  daemon status is process-wide, not perch- or seat-scoped. This also does not collapse into\n3716\t  [[IR-18]], where an existing internal `read_pid` collapses absent and unreadable records.\n3717\t- **Paid-for consequence 1 — rigs manufacture custody:** PR #174's two-host repair had to add\n3718\t  `PidHolder` in `crates/spt/tests/twohost_cli.rs:401-437`, spawn a long-lived sibling process,\n3719\t  write that pid directly into each synthetic perch, retain the child handle, and kill+wait it on\n3720\t  drop. The rig can make a known holder; it cannot ask the product which holder the product sees.\n3721\t- **Paid-for consequence 2 — ambiguity stayed latent until behavior flipped:** the r3 fixture\n3722\t  seeded three perches with one test-process pid. Self-detection then enumerated a directory whose\n3723\t  first matching row was a filesystem-order coin, so a green could name the wrong perch. The\n3724\t  repaired resolver refuses an ambiguous candidate set instead of guessing, and the fixture's\n3725\t  `assert_only_ancestor_candidate` now re-reads every `info.json` rig-side\n3726\t  (`twohost_cli.rs:439-457`). Refusal is enforcement, not observability: it proves a tie but still\n3727\t  offers no supported verb that names each holding process.\n3728\t- **Remedy direction:** add one machine-readable, named-perch inspection surface that reports the\n3729\t  custody fields the product actually used — holder pid and role/source (bind relay, stable harness\n3730\t  parent, brokered controller/session) — without asking callers to parse private `info.json` or\n3731\t  scan the process table. PID alone is recyclable; where a birth/image/session stamp exists, carry\n3732\t  it so the output does not become a new bare-pid oracle.\n3733\t- **Kin:** [[IR-18]] (read primitive loses error class, explicitly distinct), [[IR-71]] (release\n3734\t  completion lacks a persisted breadcrumb), REQ-HAZARD-SELF-DETECT-TIE (refuse ambiguous ancestry\n3735\t  rather than select by enumeration order).\n3736\t- **Ripe when:** the next roster/status read-model change or another rig needs to reap a named\n3737\t  holder. **Size:** small read-model/API addition, medium if seat and perch custody need separate\n3738\t  typed variants.\n3739\t\n3740\t### IR-73 — ci.yml and release.yml still read the free-space floor PRE-checkout (literal-first sites off the golden path); and any job's floor is stale by its last heavy step\n3741\t\n3742\t- **Status:** OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep (deployah flag\n3743\t  2026-08-29, widen lane). · **Origin:** the #242 cut lost two golden attempts to exactly this\n3744\t  REQ-CI-FREE-SPACE-PREFLIGHT trap on `golden.yml`'s n1-gate (floor read BEFORE checkout, so the\n3745\t  checkout's own cost lands after the assertion); `golden.yml` is fully reshaped (`ac7d2609`,\n3746\t  both jobs, checkout-protective reaps verified to stay pre-checkout) — but `ci.yml` (5 tagged\n3747\t  sites) and `release.yml` (3 tagged sites) keep the literal-first shape, deliberately NOT\n3748\t  widened off the back of a golden.yml-scoped ruling.\n3749\t- **What/why:** review each of the 8 sites' comments for checkout-protective purpose (the\n3750\t  `ac7d2609` method), then reorder the read after checkout or RECORD why not, per site. The\n3751\t  \"other jobs keep the literal-first shape\" clause is the trap's carrier: every un-reviewed site\n3752\t  is a queued golden-attempt loss on a loaded box.\n3753\t- **Second half (from #242 r4, same family):** a single job-start floor read is stale by the\n3754\t  job's LAST heavy step — the r4 LNK1318 low-water face recorded on [[IR-59]] (sixth face);\n3755\t  the within-job re-read before the docs-drift build rides the next workflow commit alongside\n3756\t  this entry's reorders.\n3757\t- **Kin:** [[IR-46]] (a floor asserts an instant), [[IR-59]] (full volume reds as a linker\n3758\t  defect), REQ-CI-FREE-SPACE-PREFLIGHT.\n3759\t- **Ripe when:** next touch of `ci.yml`/`release.yml`, or the next intake's tooling-rider slot\n3760\t  (compose with IR-59/IR-57's standing pair). · **Size:** small — reorder or comment per site,\n3761\t  8 sites.\n3762\t\n3763\t### IR-74 — kitsubito holds 21,643 /tmp endpoint homes: box-side accumulation nothing bounds or measures\n3764\t\n3765\t- **Status:** OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep; measurement by\n3766\t  hertz (2026-08-29). · **Origin:** rig work on kitsubito found `/tmp` carrying 21,643 endpoint\n3767\t  homes — per-run spt homes that outlive their runs.\n3768\t- **What/why:** sibling of the [[IR-31]]/[[IR-59]]/[[IR-64]] family (box accumulation the\n3769\t  preflights never see): each is small, the population is not, and /tmp on a long-lived box is\n3770\t  never reaped by CI. Un-reaped homes also widen every by-path census a rig runs. Needs a\n3771\t  bounded lifecycle (per-run temp root reaped at run end, or a box-side sweep with a stated\n3772\t  retention), and the reap must state its count so a zero is a claim.\n3773\t- **Ripe when:** next kitsubito rig touch, or the between-milestone box-audit slot.\n3774\t- **Size:** small (one sweep script + adoption in the box's rig steps); the measurement rerun is\n3775\t  one `find | wc`.\n3776\t\n3777\t### IR-75 — traceable-reqs is not installed on kitsubito, so every Linux gate driver's treqs leg exits 127 (vacuous, wrapper-green shape)\n3778\t\n3779\t- **Status:** OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep (deployah\n3780\t  co-flagged at intake). · **Origin:** ASM-241 Linux battery — `ASM_treqs.exit` = 127, raw\n3781\t  `env: 'traceable-reqs': No such file or directory`; leg vacuous, covered that day by the\n3782\t  Windows treqs = 0 at the identical tree (treqs is a platform-independent text scan).\n3783\t- **What/why:** a 127 leg is exactly the wrapper-green shape [[IR-60]] documents — a driver that\n3784\t  doesn't read the exit FILE would report the leg green. Fix is either: install traceable-reqs on\n3785\t  kitsubito (then the leg is real), or DROP the leg from Linux gate drivers and state the\n3786\t  Windows-covers-it rule in the driver comment. Do NOT reopen [[IR-37]] for this — IR-37's\n3787\t  consume lane is spt-core CI (GitHub runners, green all week); this is BOX tooling, a different\n3788\t  surface (ruled at the sweep against the enumerating agent's overcautious flag).\n3789\t- **Ripe when:** next Linux gate-driver touch or kitsubito box-audit slot."}]},"uuid":"97eb0cd8-1b6c-4b8f-959f-bf1899d54cf6","timestamp":"2026-09-06T11:16:36.415Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"  the boundary: agents keep budgeting IN POOLS (not GB); moving Steam/Downloads (or adding a\n  disk, or pinning golden to a box without operator payload) is an OPERATOR decision this entry\n  exists to put in front of them once, with numbers, instead of re-deriving the floor each cut.\n- **Ripe when:** operator rules on the bulk (move/expand/accept-the-tax), OR the first golden\n  that dies at the 32 GB preflight despite adopted pool discipline (IR-59's LNK1180-class red).\n- **Size:** zero code; one operator decision + at most a runbook line naming the chosen floor.\n\n### IR-65 — kitsubito kernel-audit backpressure: a tailscale-snap AppArmor denial storm + no auditd turned the default audit backlog into a CI-wide stall amplifier (REMEDIATED AT BOX; re-check triggers named)\n\n- **Status:** REMEDIATED-AT-BOX 2026-08-25 (doyle, operator-authorized root — ruling pinned\n  releases#225 comment 5418800776); entry stays OPEN as the re-check record because the storm\n  SOURCE persists and two named events can silently revert the fix.\n- **Mechanism:** `snap.tailscale.tailscaled` (1.92.5) polls /proc and takes an AppArmor\n  ptrace-read DENIED per poll — a continuous kernel-audit record storm scaling with process\n  count (spawn-heavy serialized CI legs amplify their own storm). With NO auditd installed the\n  records rode printk (kauditd throttling) and the 8192 kernel backlog overran\n  (lost=1,537,743); the default `backlog_wait_time` 60000ms turns a full backlog into A 60s\n  SLEEP INSIDE ANY AUDITED SYSCALL — the broker dispatch stall that stretched IR-30's\n  Linux-face race window (see IR-30's Linux-face addendum; deaths clustered 59–63s ↔ this\n  knob's value).\n- **Remediation (verified at the EFFECTIVE layer, not the fragment):** auditd installed +\n  active (storm consumed, backlog drains to 0, lost flat), backlog_limit 32768,\n  backlog_wait_time 0 (full backlog may DROP, never STALL). ⚠ THE TRAP PAID FOR ONCE: the first\n  knob write (`50-backlog.rules`) silently LOST the augenrules merge — apt's own\n  `/etc/audit/rules.d/audit.rules` sorts LAST (digits before letters) and its `-b 8192` /\n  `--backlog_wait_time 60000` won; a whole proof run executed under the defaults while the\n  fragment grepped perfect. Values now live in the merge-WINNING file; verified `auditctl -s`.\n- **Re-check triggers (the reason this entry stays):** (1) tailscale snap update — the plug\n  landscape may change, the storm may stop or grow; (2) auditd package update/reinstall — may\n  rewrite `rules.d/audit.rules` and re-lose the merge; (3) box reimage. On any of these: one\n  `auditctl -s` (expect 32768/0) + one `journalctl -k | grep 'backlog limit'` (expect silence).\n- **Ripe when:** a re-check trigger fires. **Size:** two read-only commands per check.\n\n### IR-66 — first-chunk-needle test class: two latent members remain after the v0.63.0 fix (attach.rs:561, :672)\n\n- **Status:** BUILT — hertz rider PR #161, landed ff at `d04b922d` (2026-08-27, IO-PARSER #22\n  intake rider). Both members got the later-needle treatment (TICK39 delayed past burst on both\n  OS arms; alt-screen entered before delayed ALT_VIEWPORT_MARKER). Gate: doyle — diff-scope\n  review; Windows isolated worktree 3× TICK39 PASS + clippy + treqs; Linux CLEAN worktree at the\n  PR sha on kitsubito 3× both cells PASS (independent of the builder's dirty-shared-tree proof,\n  disclosure on record). · **Origin:** doyle tree-wide census at `dbe3daad`\n  (releases#225 comment 5418844404 — the census that corrected my own resume.rs-scoped\n  overclaim), after the class's first member was RCA'd and fixed in v0.63.0's head.\n- **Mechanism (cite, not restate):** KNOWN-HAZARDS 6.9 same-session face, amended at\n  `dbe3daad` — `spawn_session_pid`'s Spawned-wait consumes-and-discards a first output chunk\n  that races the reply (~2ms window on a healthy Linux box; load-stretched under backpressure,\n  see IR-30 Linux-face + IR-65). A test whose needle exists ONLY in the child's first chunk\n  asserts winning a race the contract does not promise.\n- **The two members:** `crates/spt-daemon/tests/attach.rs:561` (TICK0..39 instant burst then\n  `cat`; needle TICK39 read directly after spawn — the whole burst can sit in the first\n  chunks) and `:672` `cross_node_cold_attach_to_alt_screen_gets_clean_repaint` (unix-only;\n  `printf '…ALT_VIEWPORT_MARKER'; cat` — needle in the first chunk). Failure shape differs from\n  the fixed member: both children idle on `cat`, so a lost prefix is a HANG killed by nextest's\n  backstop at exactly 240s (slow-timeout 60s × terminate-after 4) — not a natural-life death.\n  Verified NOT in the class: daemon_e2e.rs:209 (needle = echo of post-spawn input), attach.rs:995\n  + brain_swap.rs:170 (attach/replay reads, not spawn-waits).\n- **Fix shape (ruled at the v0.63.0 close):** hertz lane, NEXT intake — the same one-line\n  later-needle / robust-read treatment the resume seed got in `dbe3daad`; deliberately NOT\n  landed mid-r4. Both cells passed r4 (0.010–0.058s) — the members are latent, not failing.\n- **Ripe when:** next milestone intake (hertz test lane) or the first golden red at ~240s on an\n  attach cell — either way the mechanism and fix are pre-derived, triage should cite this entry\n  and skip the RCA. **Size:** two one-line test edits.\n\n### IR-67 — wave-battery gap: a `-p spt --bins` leg compiles bin targets as harnesses and runs ZERO integration/e2e tests, so batteries that lean on it carry silent no-coverage legs\n\n- **Status:** BUILT — remedy applied across the IO-PARSER #22 milestone (2026-08-27/28): every\n  wave battery named explicit `-p spt --test <suite>` e2e legs beside the `--bins` unit leg\n  (GW1..GW5 evidence), every builder evidence report carried a named real e2e per the dispatch\n  template, and the one filter mistake (a `--test` name not matching its file) REFUSED loudly\n  rather than silently skipping — the failure mode this entry exists to kill. Battery template =\n  the dispatch text now carried forward in gate craft.\n- **Was:** OPEN · **Origin:** doyle, banked at the SIGNET #218 gates 2026-08-25 (\"gate\n  battery gap learned\"), filed at this sweep per the standing rule.\n- **Mechanism:** `cargo test/nextest -p spt --bins` builds `[[bin]]` targets as TEST HARNESSES\n  (unit tests inside bins only) — `tests/` integration and e2e suites of the crate NEVER run,\n  and the leg's green output is indistinguishable from coverage. Kin of the two banked pool\n  faces (`--bins` never emits fixture exes; fresh-pool fixture reds) but this face is about the\n  BATTERY TEMPLATE: my SIGNET wave batteries carried a `-p spt --bins` leg believed to cover\n  the crate.\n- **Remedy:** at next intake, the wave-battery template gains an explicit `tests/` leg for the\n  spt crate (nextest `-p spt --test <suites>` or unfiltered `-p spt` where pool history\n  permits), and any battery doc that lists `--bins` as a coverage leg gets the one-line caveat.\n- **Ripe when:** next milestone intake (the battery template is touched at every intake).\n  **Size:** template lines only.\n\n### IR-68 — PSYCHE_INGEST_FAIL cause class unproven: git index.lock did NOT reproduce the ingest failure it was blamed for\n\n- **Status:** OPEN, investigation-shaped · **Origin:** todlando measurement at the W2 int-leg rig\n  (IO-PARSER #22, PR #163 at `769fb0a9`, 2026-08-27), reported measure-first; filed by doyle.\n- **The contradiction:** the six silent `PSYCHE_INGEST_FAIL:todlando` lines observed at the\n  drop-dir probe (2026-08-25) were attributed to shared-checkout git `index.lock` contention. The\n  W2 rig planted NON-EMPTY `index.lock` files in BOTH places git takes one (bare git-dir + every\n  `<git_dir>/worktrees/<name>/`, mirroring `branchstore::sweep_stale_index_locks`, plant count\n  asserted >= 2) — and the ingest COMMITTED ANYWAY (tier write `Written`; `route_slices`\n  propagates `commit_live(...)?`, so a blocked checkpoint would have failed it). Non-empty was\n  deliberate: KH 1.3 reaps only 0-byte locks, and `pulse_tick` runs no boot sweep. So on this\n  store an `index.lock` does not block the checkpoint, and the field incident's mechanism is\n  UNKNOWN, not merely unconfirmed. The rig's doc comment records the attempt; the shipped int leg\n  fails the ingest at the drop READ instead (upstream of the store).\n- **Strongest negative evidence, pinned to the executable rig:**\n  `crates/spt-daemon/tests/commune_io_events_int.rs:95-107` documents that the lock mechanism was\n  tried **first**, planted non-empty locks in both the bare git-dir and every linked-worktree\n  location, asserted that the population was non-empty, and still observed `Written`. Its own\n  sentence is the required scope boundary: “This leg does not claim to reproduce a mechanism it\n  measured as inert.” The working injection is instead drop-file → directory replacement, which\n  fails the upstream read deterministically and proves only the `COMMUNE_FAIL` event contract.\n- **NOT claimed:** that the field incident was misattributed to ingest failure generally — the\n  files did survive with failed-ingest log lines; what is unproven is the index.lock CAUSE.\n- **Ripe when:** next PSYCHE_INGEST_FAIL sighting in the field (capture the failing store state\n  before touching it), or a dedicated probe slot. W2's COMMUNE_FAIL event now pushes a NAMED\n  reason on every failure, so the next occurrence self-reports its cause — read that first.\n  **Size:** investigation; no product change until the mechanism is pinned.\n\n### IR-69 — inherited stderr tokens can tear between format fragments; 26 test consumers parse that surface as structured truth\n\n- **Status:** OPEN, product remedy complete and parked GREEN-AND-READY at `d0fdd58d` on\n  `feat/emit-single-write`, owned by **todlando**, awaiting golden-batch assembly; board request\n  releases#241 carries the product remedy and full lane evidence in comment 5461613480. This entry\n  is the exposure map and census discipline, not the implementation. · **Origin:** CONDUIT #236 r3\n  golden attempt 2,\n  2026-08-29: `endpoint_autostart_e2e` missed its contiguous\n  `ENDPOINT_AUTOSTART:gwauto` keystone although the matching fresh session id proved the replay\n  happened. Attempt 3 was clean on the same discarded SHA after 139 GB was reaped; unequal load\n  makes the pair corroborating, never a rate.\n- **Mechanism, recovered from the literal torn bytes:** two daemon processes inherited one stderr\n  pipe. `BRAIN_UP` and `ENDPOINT_AUTOSTART` are each one `eprintln!`, but `write_fmt` may reach the\n  handle once per format fragment; the per-process stderr lock cannot serialize the other process.\n  The observed interleave split the autostart token between `ENDPOINT_AUTOSTART:` and `gwauto`.\n  This is fragment-level cross-process interleaving, not a failed replay and not a two-thread race.\n- **Durable remedy, ruled product-side:** render a complete diagnostic line into one buffer and\n  issue the complete rendered text, newline included, as **ONE handle call**. An OS short-write\n  may retry the late tail so completeness wins over a silently truncated line; the deterministic\n  property pins application-side fragmentation, not syscall count under that rare retry. It makes\n  no claim that the OS write is atomic on Windows, and no CI re-fire against a 1-of-2 observation\n  may stand in for it. Widening one test's grep is refused: it greens one consumer while every\n  sibling token remains exposed.\n- **Cut-SHA census** (todlando generator, independently hash-verified by hertz), measured from\n  `4d6007ac4ee3d0991f4bc60b7e1a55825aad1aaf` via `git show`, not a dirty worktree:\n  **486 real emitter sites / 383 distinct tokens / 26 consumer test files**. The generator emitted\n  487 site rows, but one is a known phantom: `sealverb.rs:456` is a `format!` inside `map_err`\n  that the four-line lookback attributed to a neighbouring real `eprintln!`. Corrected real emitters\n  by crate: spt-daemon 270, spt 194, spt-runtime 8, spt-live 5, spt-net 5, spt-store 4; by macro:\n  `eprintln!` 484, `println!` 1, `eprint!` 1. `DRIVEN_BY` is the sole stdout row and therefore\n  outside the stderr remedy. A consumer means the test both mentions `TOKEN:` and reads a\n  stderr/log surface; bare-token matching inflated the population to 72 files by admitting prose.\n  This is an **exposure map**, not a rate and not a claim that all 26 have torn.\n- **Artifacts (the preserved raw generator outputs contain 487 site rows):** cut census SHA-256:\n  sites `f10d6bfe5e0399f98945cf63bb5719a01a62e1251be84165c73030fa9bb224f5`,\n  tokens `80b0d1835d9d46376b2f200b1c50be4ca0e185a135168444414255f9308ed92b`,\n  consumers `249a2e33df43a30570ca82b5bd200d8b6e2bf07aa8250fcc8bace47fe23e3cbc`.\n  The sealed sites file's macro column is wrong on 7 of its 487 raw rows; the corrected raw split\n  is `eprintln!` 485 / `println!` 1 / `eprint!` 1. The sealed tokens file has no final newline, so\n  `wc -l` reports 382 although it contains 383 logical records. The sealed files remain unedited;\n  these corrections are textual.\n  Generator `81df82f01ef33a82307920d9804a2394b787ef2ffbe3b41d2d7dda560d9a62a9`\n  was recorded as asserting newline-terminated output, but the sealed tokens artifact refutes that\n  claim for at least one output. Its remaining guards cover logical record counts, a known-positive\n  `SUBSCRIBE_DECISION` sentinel, four-line macro lookback, and truncation only at a\n  `#[cfg(test)]` that opens a module.\n- **Census hazards paid for while constructing and reconciling the population:** the provisional\n  instrument moved `277/243 → 286 → 412 → 487 raw → 486 real` as four silent assumptions were\n  found: same-line matching misses multi-line macros; truncating at the first `#[cfg(test)]` drops\n  later shipping code; lookback must prefer the token line's own macro over a neighbouring arm;\n  and even that lookback can promote a nested token literal beneath a real macro into a phantom\n  second site. A file without a final newline also makes `wc -l` silently undercount logical\n  records by one. Every future census must name its SHA, assert a known member, count records\n  inside the generator, and reconcile emitted rows to real sites.\n- **Separate anchored-matcher finding:** `IDLE`, `DISPATCH`, `BUSY`, and `BOUND` are common words\n  matched as substrings in exposed consumers. One-write emission does not prevent an unrelated log\n  line from satisfying them; those predicates need anchored token matching. Keep this separate from\n  the tear remedy so neither defect is claimed to close the other.\n- **Kin:** [[IR-50]] (the sink must be read before its absence means anything), [[IR-40]] (a\n  confident signal that does not describe the source truth), [[IR-8]] (a plausible census whose\n  blind spot returns a clean answer).\n- **CLOSE-OUT ADDENDUM 2026-08-30 (#242/v0.66.0 sweep — the entry's own close-out re-census RAN\n  and FOUND the predicted blind spot LIVE; entry stays OPEN):** re-census at the landed sha\n  `ec6da9b0` (independent containment-classified meter, reconciled with todlando's independent\n  meter — full write-up `EMISSION-RESIDUAL-CENSUS-FINDING.md`): the generator truncated\n  `crates/spt/src/cli.rs` at its FIRST module-opening `#[cfg(test)]` (line 3007, module closes\n  3164, file runs to 39118) and never scanned the rest — **338 TOKEN-shaped shipping sites remain\n  bare (332 colon-form, i.e. misses under the sealed census's own predicate, + 6 space-form)**,\n  plus `main.rs` 2 sites behind the same mechanism; exactly TWO files tree-wide carry the\n  triggering property (first module-opening cfg(test) precedes shipping code) — the generator\n  fix's owed blind-spot measurement, answered. The census-hazards bullet above already NAMES this\n  third-face truncation hazard; the module-opening fix narrowed the trigger and kept the blind\n  spot for files where a test module CLOSES and shipping resumes — IR-8 shape, predicted by this\n  entry's own text. The shipped #241 conversions are UNAFFECTED (495 removals ≈ censused 486 +\n  space family; the SEEN population is closed; golden green stands). Residual conversion +\n  generator fix + enforcement-at-the-seam = **releases#243** (BACKLOG, operator triages);\n  delivery.rs:149/313 are post-cut MINTS relative to the census sha (todlando's own, settled\n  attribution), deliberately outside #243's census-mechanism scope — and ALREADY CONVERTED: the\n  fix rode his breadcrumb branch (`60a12056`) into the r4 head and shipped IN-TAG (todlando\n  flagged the stale \"his thin lane converts post-cut\" claim 2026-08-30; re-measured — zero bare\n  TOKEN `eprintln!` in delivery.rs at both `d931dd63` and origin/main). No lane is owed for it. Re-runnable meter\n  `EMISSION-RESIDUAL-CENSUS-METER.py` (repo root, untracked; version-control rides #243's lane).\n  **Common-word matcher RULED at this sweep (discharges the \"decide\" clause below):** the four\n  common-word consumers (`IDLE`/`DISPATCH`/`BUSY`/`BOUND` substring predicates) get a SEPARATE\n  hertz test-side rider — anchored token matching is consumer-predicate work, NOT folded into\n  #243 (keeps #243 product-scoped) and not claimed closed by one-write emission; lane-link when\n  hertz's spool drains.\n- **Closes when:** releases#243's residual conversion + generator fix land and a re-census at\n  that sha reads zero shipping residue under both delimiter forms. **Size:** product lane\n  complete elsewhere; register follow-through small.\n\n### IR-70 — a hand-built `IoBus` silently omitted later sinks while every gate stayed green\n\n- **Status:** OPEN, remedy unscheduled; the v0.65.0 respin fixed the witnessed call site on PR #173.\n  This entry owns the recurrence class, not that shipped correction. · **Origin:** releases#234,\n  commit `c5459795167`, CONDUIT #236 respin.\n- **Mechanism:** `publish_commune_io` constructed `IoBus` itself and registered only the sink it\n  knew. `default_bus` already existed as the assembly point and its module contract explicitly says\n  emitters must know only `IoBus::publish`, so adding a later sink costs one registration rather\n  than an emitter sweep. The hand-built publisher recreated exactly the drift that contract warned\n  against: `COMMUNE` and `COMMUNE_FAIL` reached the old sink but never the adapter log, leaving\n  `spt api io-events` permanently short on two documented kinds.\n- **Why the complete battery was green:** the e2e was vacuous on the broken kinds; units synthesized\n  rows without traversing `publish_commune_io`; and traceability checked attached tags, not whether\n  the tagged path exercised the real publisher. Three green instruments shared one blind seam.\n  The respin routed the site through `crate::iobus::default_bus`, and its source comment now records\n  the failure shape.\n- **Durable remedy direction (todlando mechanism, not scheduled):** enforce the assembly point so\n  the next hand-built bus is impossible rather than found — make production publishers obtain the\n  composed bus through one construction API, and gate the real publish path for every documented\n  kind. A search or comment is not enforcement; another emitter can satisfy both while rebuilding\n  a partial sink list.\n- **Kin:** [[IR-39]] (a green fixture never reached the missing dependency), [[IR-37]]\n  (traceability tags prove coverage bookkeeping, not behavioral truth), [[IR-58]] (a hand-built\n  population returns an orderly but incomplete answer).\n- **Ripe when:** the next `IoBus` construction/API touch, or a new sink registration. **Size:**\n  small-to-medium assembly-point enforcement plus a real-path population test.\n\n### IR-71 — controller-seat release has no persisted breadcrumb, so tests cannot distinguish propagation lag from a missing detach\n\n- **Status:** OPEN, observability gap; no remedy scheduled. · **Origin:** CONDUIT #236 r3\n  `er_brief_once_per_session_e2e` intermittent, classified test-side and fixed on PR #174.\n- **What/why:** killing rc1 reaps the controller process, but the broker is another process and\n  notices the socket close later. On that detach edge it clears `driven_by` and `controlled` in\n  `info.json`; rc2's preflight reads that file locally and can race the write, refuse normally, and\n  exit 0 without dialing the broker. The test originally spawned rc2 immediately and had no\n  observable precondition separating “release is propagating” from “release never happened.”\n- **The missing surface:** broker lifecycle state records `session-detach was_controller=true`, but\n  there is no always-on persisted breadcrumb that states the controller stamp was cleared, names\n  the resulting `driven_by`/`controlled` state, or measures detach-to-persist latency. The repaired\n  test therefore polls `info.json` itself, prints elapsed time (0.075s on the first local real run),\n  and uses a named 60s timeout whose failure promotes the finding from timing to missing release.\n  Its deliberately latched-seat unit proves the barrier can red.\n- **Remedy direction:** add one structured release breadcrumb after the persisted clear, carrying\n  session/connection identity and the resulting control state; if latency is carried, measure it\n  from the detach edge. It must ride the persisted daemon sink and remain distinct from\n  `session-detach`, which proves the connection event but not the file write.\n- **Kin:** [[IR-50]] (the sink a test must actually read), [[IR-40]] (an event timestamp is not a\n  completion signal), REQ-HAZARD-CONTROL-STAMP-CONVERGENCE.\n- **Ripe when:** the next controller lifecycle or structured-breadcrumb touch, or a field timeout\n  from PR #174's barrier. **Size:** small emitter plus one contract-level assertion.\n\n### IR-72 — no product read verb surfaces which process holds a perch or controller seat\n\n- **Status:** OPEN, observability gap; no remedy scheduled. · **Origin:** CONDUIT #236 r3\n  two-host RCA and PR #174 (`70c1a303`), corrected by doyle after IR-18 and daemon-status were\n  ruled out as different classes.\n- **Source-verified boundary:** the holder identity already exists in durable/internal records\n  (`InfoJson.pid`, `parent_pid`, and the broker's session pid), and product internals read it for\n  liveness, teardown, and self-detection. No product **read verb** returns the process that holds a\n  named perch/seat. PID-bearing teardown messages are failure outcomes, not an inspection surface;\n  daemon status is process-wide, not perch- or seat-scoped. This also does not collapse into\n  [[IR-18]], where an existing internal `read_pid` collapses absent and unreadable records.\n- **Paid-for consequence 1 — rigs manufacture custody:** PR #174's two-host repair had to add\n  `PidHolder` in `crates/spt/tests/twohost_cli.rs:401-437`, spawn a long-lived sibling process,\n  write that pid directly into each synthetic perch, retain the child handle, and kill+wait it on\n  drop. The rig can make a known holder; it cannot ask the product which holder the product sees.\n- **Paid-for consequence 2 — ambiguity stayed latent until behavior flipped:** the r3 fixture\n  seeded three perches with one test-process pid. Self-detection then enumerated a directory whose\n  first matching row was a filesystem-order coin, so a green could name the wrong perch. The\n  repaired resolver refuses an ambiguous candidate set instead of guessing, and the fixture's\n  `assert_only_ancestor_candidate` now re-reads every `info.json` rig-side\n  (`twohost_cli.rs:439-457`). Refusal is enforcement, not observability: it proves a tie but still\n  offers no supported verb that names each holding process.\n- **Remedy direction:** add one machine-readable, named-perch inspection surface that reports the\n  custody fields the product actually used — holder pid and role/source (bind relay, stable harness\n  parent, brokered controller/session) — without asking callers to parse private `info.json` or\n  scan the process table. PID alone is recyclable; where a birth/image/session stamp exists, carry\n  it so the output does not become a new bare-pid oracle.\n- **Kin:** [[IR-18]] (read primitive loses error class, explicitly distinct), [[IR-71]] (release\n  completion lacks a persisted breadcrumb), REQ-HAZARD-SELF-DETECT-TIE (refuse ambiguous ancestry\n  rather than select by enumeration order).\n- **Ripe when:** the next roster/status read-model change or another rig needs to reap a named\n  holder. **Size:** small read-model/API addition, medium if seat and perch custody need separate\n  typed variants.\n\n### IR-73 — ci.yml and release.yml still read the free-space floor PRE-checkout (literal-first sites off the golden path); and any job's floor is stale by its last heavy step\n\n- **Status:** OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep (deployah flag\n  2026-08-29, widen lane). · **Origin:** the #242 cut lost two golden attempts to exactly this\n  REQ-CI-FREE-SPACE-PREFLIGHT trap on `golden.yml`'s n1-gate (floor read BEFORE checkout, so the\n  checkout's own cost lands after the assertion); `golden.yml` is fully reshaped (`ac7d2609`,\n  both jobs, checkout-protective reaps verified to stay pre-checkout) — but `ci.yml` (5 tagged\n  sites) and `release.yml` (3 tagged sites) keep the literal-first shape, deliberately NOT\n  widened off the back of a golden.yml-scoped ruling.\n- **What/why:** review each of the 8 sites' comments for checkout-protective purpose (the\n  `ac7d2609` method), then reorder the read after checkout or RECORD why not, per site. The\n  \"other jobs keep the literal-first shape\" clause is the trap's carrier: every un-reviewed site\n  is a queued golden-attempt loss on a loaded box.\n- **Second half (from #242 r4, same family):** a single job-start floor read is stale by the\n  job's LAST heavy step — the r4 LNK1318 low-water face recorded on [[IR-59]] (sixth face);\n  the within-job re-read before the docs-drift build rides the next workflow commit alongside\n  this entry's reorders.\n- **Kin:** [[IR-46]] (a floor asserts an instant), [[IR-59]] (full volume reds as a linker\n  defect), REQ-CI-FREE-SPACE-PREFLIGHT.\n- **Ripe when:** next touch of `ci.yml`/`release.yml`, or the next intake's tooling-rider slot\n  (compose with IR-59/IR-57's standing pair). · **Size:** small — reorder or comment per site,\n  8 sites.\n\n### IR-74 — kitsubito holds 21,643 /tmp endpoint homes: box-side accumulation nothing bounds or measures\n\n- **Status:** OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep; measurement by\n  hertz (2026-08-29). · **Origin:** rig work on kitsubito found `/tmp` carrying 21,643 endpoint\n  homes — per-run spt homes that outlive their runs.\n- **What/why:** sibling of the [[IR-31]]/[[IR-59]]/[[IR-64]] family (box accumulation the\n  preflights never see): each is small, the population is not, and /tmp on a long-lived box is\n  never reaped by CI. Un-reaped homes also widen every by-path census a rig runs. Needs a\n  bounded lifecycle (per-run temp root reaped at run end, or a box-side sweep with a stated\n  retention), and the reap must state its count so a zero is a claim.\n- **Ripe when:** next kitsubito rig touch, or the between-milestone box-audit slot.\n- **Size:** small (one sweep script + adoption in the box's rig steps); the measurement rerun is\n  one `find | wc`.\n\n### IR-75 — traceable-reqs is not installed on kitsubito, so every Linux gate driver's treqs leg exits 127 (vacuous, wrapper-green shape)\n\n- **Status:** OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep (deployah\n  co-flagged at intake). · **Origin:** ASM-241 Linux battery — `ASM_treqs.exit` = 127, raw\n  `env: 'traceable-reqs': No such file or directory`; leg vacuous, covered that day by the\n  Windows treqs = 0 at the identical tree (treqs is a platform-independent text scan).\n- **What/why:** a 127 leg is exactly the wrapper-green shape [[IR-60]] documents — a driver that\n  doesn't read the exit FILE would report the leg green. Fix is either: install traceable-reqs on\n  kitsubito (then the leg is real), or DROP the leg from Linux gate drivers and state the\n  Windows-covers-it rule in the driver comment. Do NOT reopen [[IR-37]] for this — IR-37's\n  consume lane is spt-core CI (GitHub runners, green all week); this is BOX tooling, a different\n  surface (ruled at the sweep against the enumerating agent's overcautious flag).\n- **Ripe when:** next Linux gate-driver touch or kitsubito box-audit slot.","numLines":339,"startLine":3451,"totalLines":3791}},"sourceToolAssistantUUID":"967f5175-5181-4548-a2dc-fb53424115f5","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"97eb0cd8-1b6c-4b8f-959f-bf1899d54cf6","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6FntZBNXBKzELD3syn","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"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"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":12470,"cache_read_input_tokens":191668,"cache_creation":{"ephemeral_5m_input_tokens":12470,"ephemeral_1h_input_tokens":0},"output_tokens":3,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6Fn1yNgT2qQpw7bboQ","attributionAgent":"general-purpose","type":"assistant","uuid":"eabf492a-1812-4df5-ad05-6c348be480a1","timestamp":"2026-09-06T11:16:38.587Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"eabf492a-1812-4df5-ad05-6c348be480a1","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6FntZBNXBKzELD3syn","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_018PRypTQuLa8za44Pgp5AW7","name":"Read","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","offset":3789,"limit":10},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":12470,"cache_read_input_tokens":191668,"output_tokens":173,"output_tokens_details":{"thinking_tokens":44},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":12470},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":173,"cache_read_input_tokens":191668,"cache_creation_input_tokens":12470,"cache_creation":{"ephemeral_5m_input_tokens":12470,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6Fn1yNgT2qQpw7bboQ","attributionAgent":"general-purpose","type":"assistant","uuid":"fd215f9d-0c85-4223-885f-5bb84cfa8242","timestamp":"2026-09-06T11:16:39.289Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"fd215f9d-0c85-4223-885f-5bb84cfa8242","isSidechain":true,"promptId":"3d7e7d71-7778-43b3-8e52-012cbc987ff4","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_018PRypTQuLa8za44Pgp5AW7","type":"tool_result","content":"3789\t- **Ripe when:** next Linux gate-driver touch or kitsubito box-audit slot.\n3790\t- **Size:** trivial (install or one driver edit + comment).\n3791\t"}]},"uuid":"ff9a40a3-23e5-43ab-b60b-8dad98ea37e1","timestamp":"2026-09-06T11:16:40.046Z","toolUseResult":{"type":"text","file":{"filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\docs\\INFRA-REGISTER.md","content":"- **Ripe when:** next Linux gate-driver touch or kitsubito box-audit slot.\n- **Size:** trivial (install or one driver edit + comment).\n","numLines":3,"startLine":3789,"totalLines":3791}},"sourceToolAssistantUUID":"fd215f9d-0c85-4223-885f-5bb84cfa8242","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"ff9a40a3-23e5-43ab-b60b-8dad98ea37e1","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6G4H2AHKmNbD19aynb","type":"message","role":"assistant","content":[{"type":"thinking","thinking":"","signature":"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"}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":283,"cache_read_input_tokens":204138,"cache_creation":{"ephemeral_5m_input_tokens":283,"ephemeral_1h_input_tokens":0},"output_tokens":2,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6G3arBy9LZrqJADBvn","attributionAgent":"general-purpose","type":"assistant","uuid":"5857d2e3-1c71-40eb-9f52-217986078a03","timestamp":"2026-09-06T11:21:17.681Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"5857d2e3-1c71-40eb-9f52-217986078a03","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6G4H2AHKmNbD19aynb","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01K9Rq7BZhCRC98s1wAPRnVs","name":"Write","input":{"file_path":"C:\\Users\\decid\\Documents\\projects\\spt-core\\REGISTER-SWEEP-0671-DRAFT.md","content":"# Register sweep draft — DOCS-NITS-0671\n\nRead-only enumeration of `docs/INFRA-REGISTER.md` (3791 lines, read in full, offset/limit chunks\nthrough EOF). Draft for the gater; no rulings, no recommendations made below.\n\n**Note on IR-31:** the file contains no `### IR-31 —` heading. Content that is clearly IR-31's\n(the \"box hit 0.00 bytes free mid-build\" disk-floor material, cross-referenced elsewhere in the\nfile as `[[IR-31]]` and \"IR-31's fifth addendum\") appears as a run of bullets directly under the\n`### IR-30` section, starting around line 1875, with no header of its own. It is included below\nas its own row because the rest of the file treats it as a distinct entry; flagging the missing\nheading for the gater to confirm rather than silently normalizing it.\n\n## Main table\n\n| id | title | status field as written | trigger condition as written | size guess | lane-linked? | last touched |\n|---|---|---|---|---|---|---|\n| IR-1 | Quiet predicate needs network axis (tailscale RTT probe) | \"open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]] at the foot of this file\" | \"next CI-touching wave, or the next network-shaped golden red — whichever first\" | \"small (one probe step + ledger row + predicate doc)\" | Yes — LOCKSMITH (#132) CI-rider cluster, hertz thin lane; landed per CI-RIDER LANE STATE | 2026-08-04 |\n| IR-2 | Settle warm-runner CARGO_INCREMENTAL delta | \"RETIRED 2026-08-28, measurement run, verdict NO FLIP — incremental stays ON\" | (retired; original) \"a quiet between-milestone window with no queued lanes (the measurement burns two golden windows)\" | \"medium (two proving runs + verdict + possible leg flips)\" | No | 2026-08-28 |\n| IR-3 | Daemon-level guard: broker-net wakeup rate bounded | \"open\" | \"the next milestone touching spt-net endpoint lifecycle or daemon supervision\" | \"medium (churn harness + counter plumbing + flake-safe assertion)\" | No | not stated |\n| IR-4 | Lock-pin guard, procedure rule, toolchain print | \"open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]]\" | \"next CI-touching wave; part 1 sooner if any iroh bump is proposed\" | \"small-medium (one xtask leg, one docs section, one workflow step)\" | Yes — LOCKSMITH (#132), hertz thin lane; landed per CI-RIDER LANE STATE | 2026-08-04 |\n| IR-5 | Shared nextest summary parser | \"open\" | \"the next time anyone — agent or lane — needs a nextest summary COUNT, the shared parser is built FIRST\" | \"small\" | Conditional rider on LOCKSMITH hertz lane; condition NOT MET | 2026-08-04 |\n| IR-6 | Membership logging on subnet gates | \"open\" | \"next wave touching gate scripts / CI legs that report counts\" | \"small\" | Conditional rider on LOCKSMITH hertz lane; condition NOT MET | 2026-08-04 |\n| IR-7 | Phase A rigs leak daemon+brain pair (Windows) | \"open\" | \"next wave touching the Phase A rigs or daemon autostart path\" | \"medium\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-8 | reap-census scoped_survivors=0 blind to unreadable holders | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"next census/reap script wave (natural pair with IR-7's lane) — now BOTH platforms\" | \"small\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-9 | Golden boxes run different clippy versions | \"pin LANDED 2026-08-18 ... then audited BUILT at the 2026-08-29 v0.65.0 close sweep\" | none stated (built) | \"built\" | LOCKSMITH (#132), hertz | 2026-08-29 |\n| IR-10 | Wave gate should run predicate's consumers | \"open\" | \"next gate-runbook/docs wave\" | \"small (docs + gate-script checklist)\" | No | not stated |\n| IR-11 | find-cwd-holders.ps1 needs headless column | \"open\" | \"any rig-tooling wave; trivial rider\" | \"tiny\" | No | not stated |\n| IR-12 | xtask drift gate misses stale schema | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane (the narrowed blind arm only)\" | \"next xtask/docs-gate wave (now sized to the blind arm only)\" | \"tiny\" | KEYSTONE #182 hygiene lane; kin note added by todlando 2026-08-30 | 2026-08-30 |\n| IR-13 | Test-soundness follow-ups from uniform-table sweep | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | none (built) | not stated | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-14 | .worktrees audit: four answers to \"how many\" | \"open\" | \"between-milestone idle window (it is a dev-box chore, zero product risk) — but the class-A pool findings are armed hazards\" | \"small for the sweep; the hygiene rule and the pool-claim gaps are separate small items\" | Composed with IR-26/27/49 as one between-milestone pool/worktree audit slot | 2026-08-30 |\n| IR-15 | provably_gone is pid-only on Windows | \"BUILT 2026-08-03\" | none (built) | not stated | hertz `golden/ir15` lane | 2026-08-03 |\n| IR-16 | kill_tree discards termination return values | \"BUILT 2026-08-03 (landed @62c5623 on the LOCKSMITH t1 lane...)\" | \"RIPE NOW ... land with the next daemon-teardown wave or sooner\" | \"small\" | LOCKSMITH (#132) todlando product lane | 2026-08-04 |\n| IR-17 | Deadline-burn bring-up family (daemon never comes up) | \"open\" | \"next occurrence of the signature (immediate instrumented dispatch), or a hertz test-hardening wave\" | \"medium (bring-up instrumentation + attribution; the fix depends on what it shows)\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-18 | resident_service_e2e kills breadcrumb pids bare | \"BUILT 2026-08-04 — the named acceptance carrier RAN and the condition is DISCHARGED\" | \"RIPE NOW, and not gated on the rate run that was cancelled\" | \"small\" | hertz `fix/ir18-authenticated-teardown`, MERGED @6e1a962 (PR #142) | 2026-08-04 |\n| IR-19 | Docs-only pushes run full unit legs | \"RETIRED 2026-08-18 — intentional for main pushes, not a classifier defect\" | (retired; original) \"next CI-touching wave, after the intent question is answered on the REQ record\" | \"small (one conditional, if the answer is 'extend')\" | LOCKSMITH (#132) — doyle reads consuming gates | 2026-08-18 |\n| IR-20 | `daemon stop --force` does not stop daemon | \"open\" | \"a hertz test-hardening wave, or alongside the (b) helper lane's touch of this rig\" | \"small (stderr-captured discrimination run × two machines, then the scoped remedy)\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-21 | Helper binary build never requested, only location | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"the next gate-rig or CI-touching wave. Cheap, and it pays for itself the first time\" | \"remedy (1) small AND optional; medium for (2), the only remedy that closes the class\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-22 | Inherited identity env var fails test one-at-a-time | \"open\" | \"next CI/test-hygiene wave\" | \"small\" | No | 2026-08-03 |\n| IR-23 | Two tests collide via machine-global spt home | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"next test-hygiene wave; the 182s -> 14s figure makes it pay for itself on the bare path\" | \"small per test, unknown until the sweep\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-24 | terminate_job discards TerminateJobObject's return | \"BUILT — landed 3d12cf3 on main (2026-08-03), fulfilment verified ... by doyle 2026-08-04\" | \"any wave touching reap/teardown; it inherits IR-16's vocabulary and its discrimination note\" | \"small, once the cost-of-loss question is answered for this subject\" | No (deliberately not folded into IR-16) | 2026-08-04 |\n| IR-25 | spt-daemon --lib reds under concurrent load (bare cargo test) | \"open\" | \"alongside [[IR-21]] on the next gate-rig or CI-touching wave, or immediately if anyone starts gating on bare `cargo test` on a loaded box\" | \"small to document the rig rule (gate with nextest); medium to harden the three marginal tests\" | No | 2026-08-03 |\n| IR-26 | POOL-OWNER claims authorize dead-holder takeover | \"open, LANE BUILT BUT UNCOMMITTED (see the warning below — this is not a figure of speech)\" | \"next CI/infra batch, gated on the polarity question above being answered first\" | \"small once the remedy question is settled\" | Its own thin lane (`ci/poolowner-lane-claim` = 8ce40d9+98cfafe); composed with IR-14/27/49 audit slot | 2026-08-30 |\n| IR-27 | Junction-pooled rig is two objects; teardown removes one | \"open, found in the wild 2026-08-04\" | \"next CI/infra batch\" | \"small (one enumeration + report, no new policy)\" | Composed with IR-14/26/49 audit slot | 2026-08-30 |\n| IR-28 | Wave-gap rider invisible to notes pass | \"BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`)\" | none (built) | not stated | PR #176 | 2026-08-29 |\n| IR-29 | twohost ladder fires done-barrier before last rung | \"open, FIX AUTHORED-AND-COMPILED unlanded — hertz `test/twohost-serve-window` @`17bbbd8`\" | \"proving run at the next two-host window\" | \"landed-sized already\" | hertz `test/twohost-serve-window` (instrument later landed v0.54.0/v0.55.0 per IR-30) | 2026-08-24 |\n| IR-30 | Golden 4b37512: four distinct Windows victims, one sha | \"open for the FAMILY SIGHTINGS ONLY — the instrument lanes LANDED as planned\" | \"family sightings stay until the family record closes them — the entry now waits on FIRES, not landings\" | \"nothing left to build; the next family sighting carries its own verdict via the landed instruments\" | Multiple instrument lanes landed v0.54.0/v0.55.0 | 2026-08-25 |\n| IR-31 | Box hit 0.00 bytes free mid-build (no header in file) | \"open\" | \"next CI/rig-touching wave, or the next ENOSPC-signature red — whichever first\" | \"small-medium (claim-verb print + floor; census verb optional)\" | No single formal lane; multiple addenda (hertz/doyle/deployah) | 2026-08-25 (fifth addendum) |\n| IR-32 | Docs-drift gate blesses its own empty gen | \"open\" | \"next docs-tooling or xtask-touching lane; SOONER if any lane regenerates the CLI reference before the floor exists\" | \"small (one refusal + a length-plausibility floor in gen)\" | No | 2026-08-04 |\n| IR-33 | Debug-build clap Command tree near stack ceiling | \"open\" | \"#5 (U3 verb surface) PLANNING ... the smoke tooth (a) is ripe for the next CI-touching lane regardless\" | \"small for (a); medium for (b)/(c) with the measurement\" | No formal lane; ties to planned #5 U3 verb surface | 2026-08-04 |\n| IR-34 | nextest LEAK flag dominant but intermittent | \"open\" | \"hertz's next nextest-config-touching lane; blocks nothing today\" | \"small\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-35 | hfenduleam Windows victim rate ~half of executions | \"open\" | \"operator brief at USHER close (immediate); re-measure after the hertz package lands\" | \"visibility entry + the re-measure; fix cost carried by the hertz package\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-36 | output_bounded is a 51-copy clone estate | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"a dedicated post-batch test-hygiene lane (natural companion to IR-13's mutation-proof loop and IR-23's home-collision fix)\" | \"medium by file count, small by risk (mechanical hoist; no assertion changes)\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-37 | traceable-reqs check is coverage-only, placement unenforced | \"UPSTREAM CLOSED THROUGH RELEASE 2026-08-19 — traceable-reqs PR #19 squash-merged @`82d8b14`\" | \"Entry closes when the consume lane lands\" (close condition, not a ripe-when) | \"measurement complete; remedy scope is upstream-owned and dispatched\" | hertz's test-hygiene family lane (KEYSTONE #182) as prerequisite consumer | 2026-08-19 |\n| IR-38 | Live daemon-spawning e2e wedges next build | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"the test-hygiene lane (IR-13/IR-23/IR-36 family) — sweep every e2e that ends with a live spawning binary\" | \"small per test; population unknown until swept\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-39 | Missing-fixture-bin defect has two failure faces | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"the test-hygiene lane (IR-13/IR-23/IR-36/IR-38 family) — same sweep population; or standalone small if that lane keeps slipping\" | \"small — one shared helper + a sweep of local sibling_bin resolver copies (24 known)\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-40 | No ordering signal on resume brief / early CI informant | \"open\" | \"the next commune/psyche-tier touch for arm A ...; for arm B, the next `golden.yml` informant touch\" | \"arm B small (message text + scope word in one workflow step). Arm A unsized\" | No | 2026-08-05 |\n| IR-41 | Queued main run superseded without a record | \"open — mechanism CONFIRMED (doyle ruling 2026-08-05); the runbook sentence it falsified is already corrected\" | \"next ci.yml/runbook touch\" | \"docs half DONE in this commit; ci.yml half small but load-bearing — needs its own lane if taken\" | No | 2026-08-05 |\n| IR-42 | pool-claim writes a record; only build enforces | \"BUILT 2026-08-19 — the AGENTS.md corrective line lands in the SAME COMMIT as this entry\" | none (built); optional nicety is \"a candidate rider on the IR-26 remedy lane\" | not stated | Candidate rider on IR-26 remedy lane | 2026-08-19 |\n| IR-43 | knock NoReply landed at 60s vs 30s deadline | \"open, OBSERVATION — mechanism unmeasured, filed exactly as wide as the datum\" | \"next knock-carrier touch, or the next `NoReply`-shaped red — whichever first\" | \"small (code read; a token only if the read forks)\" | No | 2026-08-18 |\n| IR-44 | perch-sentinel comment overclaims preservation | \"open\" | \"next spt-store/info.rs touch\" | \"tiny (comment + possibly one REQ doc line)\" | No | 2026-08-18 |\n| IR-45 | twohost rig home premise, SETTLED | \"RETIRED 2026-08-19 — ask answered by the one code read at main @`78a9a16`\" | none (retired) | not stated | KEYSTONE #182 hygiene lane repaired the comment | 2026-08-19 |\n| IR-46 | Disk-floor preflight asserts an instant | \"open — mechanism CONFIRMED by a measurement series on hfenduleam; doyle ruled it register-shaped 2026-08-18\" | \"next `golden.yml` touch. Remedies to weigh THEN, not as a drive-by\" | \"small in golden.yml, load-bearing in what a green run is taken to prove\" | No formal lane; golden additions measured at #242/v0.66.0 close | 2026-08-30 |\n| IR-47 | ci-notify treats missing co-author trailer as quiet | \"open — patch AUTHORED and stashed unlanded since 2026-07-29\" | \"next golden.yml/ci-notify touch — natural co-rider with [[IR-46]]'s remedy window\" | \"~10 lines in one shell script plus its test\" | No | 2026-08-19 |\n| IR-48 | nextest.toml parity tolerates CRLF by accident | \"open — filed 2026-08-19 (doyle route, hertz verdict: REGISTER as preventive hardening, not current defect)\" | \"next xtask parity-cell touch; explicitly OUTSIDE the family-B lane\" | \"one fixture-pair cell\" | Explicitly excluded from hertz family-B lane | 2026-08-19 |\n| IR-49 | poolguard's landed-lane predicate is ancestry-only | \"open — filed 2026-08-19 (todlando measurement...doyle ruling; doyle re-verified the predicate at source before filing)\" | \"next poolguard touch, or the first landed-lane pool takeover request\" | \"one fallback arm in `git_lane_state` + two fixtures\" | Composed with IR-14/26/27 audit slot | 2026-08-30 |\n| IR-50 | e2e panels read pre-redirect stderr capture | \"CLOSED — BUILT 2026-08-19; adoption-completion lane `docs/ir50-register-close` @`e02f565f` ... LANDED in v0.59.0\" | none (closed) | \"census + mechanical panel edits per rig\" | hertz `fix/ir50-stderr-sink-census`, PORTER rider v0.59.0 | 2026-08-21 |\n| IR-51 | engine-room e2e daemon is net-enabled on real interfaces | \"open — filed 2026-08-19 (todlando's x40 run-4 sink read...)\" | \"#199 attribution answers whether net state is causal; else the next hermeticity pass\" | \"product switch + rig adoption + census\" | No | 2026-08-19 |\n| IR-52 | docs-site CLI reference renders shallow | \"BUILT 2026-08-24 on SIGNET #218 W1 T6\" (pre-build: \"open, filed 2026-08-19\") | \"next xtask docs-gen touch, or the first adapter filing traceable to a deep-help divergence\" | \"xtask render change + regen + census of self-holding units\" | SIGNET #218 W1 T6; conditional rider on WAX-SEAL W4 (condition not met there) | 2026-08-24 |\n| IR-53 | failed-address expiry panics near Windows boot | \"BUILT 2026-08-21 on `fix/ir53-cold-boot-instant` — LANDED in v0.59.0\" | none (built) | not stated | PORTER rider v0.59.0, pick `7b26f28d` | 2026-08-21 |\n| IR-54 | golden-head-intake runbook: construction not discipline | \"BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`)\" | none (built) | \"small (one runbook doc lane; no code)\" | PR #176 | 2026-08-29 |\n| IR-55 | spt --bins suite wedges on leaked findstr children | \"OPEN, ARMED-FOR-CAPTURE, owned by hertz\" | \"any milestone whose gate wants an unfiltered `spt --bins` sweep, which is every one of them. Ripe now\" | \"small if one test is missing a reap or an EOF for its stand-in child; medium if the shared PTY test scaffolding needs the reap\" | Owned by hertz, no named branch (ARMED-FOR-CAPTURE) | 2026-08-29 |\n| IR-56 | pool-claim harvests identity from CWD, not --pool | \"BUILT 2026-08-24 for the SIGNET #218 golden batch on `fix/ir56-pool-claim-cwd`, owned by hertz\" | \"ripe now — it is a doc/UX fix on a verb we run every lane\" | \"small\" | hertz `fix/ir56-pool-claim-cwd`, SIGNET #218 | 2026-08-24 |\n| IR-57 | Assembly pick conflict resolution can drop lines | \"OPEN, owned by doyle (gater craft, not a code defect — no lane to dispatch)\" | \"ripe at the next assembly — this is procedure, and its cost is one command per pick\" | \"small as a scripted check in xtask (fidelity audit over a pick range); zero as discipline, which is how it is being applied now\" | No code lane; `xtask pick-audit` built and used at #241 assembly | 2026-08-29 |\n| IR-58 | [[bin]] grep is not a census | \"OPEN, unowned. Filed by doyle 2026-08-22; its original filing was WRONG and is retracted in full below\" | \"ripe on any xtask check work — a duplicate-bin-name check over cargo's target enumeration ... is a handful of lines and cannot go stale\" | \"small. The prose fix originally proposed here is WITHDRAWN\" | No | 2026-08-22 |\n| IR-59 | Pool arithmetic: two cold pools, not four | \"OPEN, unowned — it is arithmetic and discipline, not a code lane\" | \"ripe now for the log-the-floor half (it rides any gate-script or CI touch); the arithmetic is discipline and applies immediately\" | \"small — one line in each rig/gate preflight to record free space alongside the existing floor check\" | Composed with IR-57's scripted pick-fidelity audit as next intake's tooling pair | 2026-08-30 |\n| IR-60 | Wrapper's exit status is the capture's, not the leg's | \"OPEN, unowned — script-shape discipline, not a code lane\" | \"ripe now — it rides the next gate-script touch\" | \"small — a convention line in the gate-script preamble; no product code\" | No | 2026-08-22 |\n| IR-61 | spacerun test-module skip carries second literal tracker | \"OPEN, unowned, accepted-with-mitigation\" | \"the next SUBSTANTIVE change to spacerun's scanning — any new skip, any new literal form, any change to either tracker\" | \"small to medium — one continuous literal-state walk serving both the render pass and the skip\" | No | 2026-08-22 |\n| IR-62 | e2e daemon binds well-known ports, collides with fleet | \"BUILT 2026-08-24 (hertz, SIGNET #218 batch; PR #158)\" | pre-build: \"triggered the next time this class fires anywhere\" | not stated (pre-build); see remedy direction | hertz, PR #158, SIGNET #218 | 2026-08-24 |\n| IR-63 | Suite-mix sweeps leak job-escaped autostart daemons | \"OPEN, mitigated-by-rig-step — the reap is adopted discipline, not yet construction\" | \"next rig/gate-script construction touch, or the first golden red that classifies to face (1)\" | \"small-medium — one wrapper seam plus adopting it in the gate/lane scripts\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-64 | Disk floor set by operator's non-CI bulk payload | \"OPEN · Origin: doyle, v0.63.0 close sweep 2026-08-26\" | \"operator rules on the bulk (move/expand/accept-the-tax), OR the first golden that dies at the 32 GB preflight despite adopted pool discipline\" | \"zero code; one operator decision + at most a runbook line naming the chosen floor\" | No | 2026-08-26 |\n| IR-65 | kitsubito kernel-audit backpressure (remediated) | \"REMEDIATED-AT-BOX 2026-08-25 ...; entry stays OPEN as the re-check record because the storm SOURCE persists\" | \"a re-check trigger fires\" (tailscale snap update / auditd update / box reimage) | \"two read-only commands per check\" | releases#225 | 2026-08-25 |\n| IR-66 | First-chunk-needle test class: two members remain | \"BUILT — hertz rider PR #161, landed ff at `d04b922d` (2026-08-27, IO-PARSER #22 intake rider)\" | \"next milestone intake (hertz test lane) or the first golden red at ~240s on an attach cell\" | \"two one-line test edits\" | hertz rider PR #161, IO-PARSER #22 | 2026-08-27 |\n| IR-67 | `-p spt --bins` leg runs zero e2e coverage | \"BUILT — remedy applied across the IO-PARSER #22 milestone (2026-08-27/28)\" | \"next milestone intake (the battery template is touched at every intake)\" | \"template lines only\" | IO-PARSER #22 milestone | 2026-08-28 |\n| IR-68 | PSYCHE_INGEST_FAIL cause unproven, index.lock cleared | \"OPEN, investigation-shaped\" | \"next PSYCHE_INGEST_FAIL sighting in the field (capture the failing store state before touching it), or a dedicated probe slot\" | \"investigation; no product change until the mechanism is pinned\" | IO-PARSER #22, PR #163 | 2026-08-27 |\n| IR-69 | Inherited stderr tokens tear between fragments | \"OPEN, product remedy complete and parked GREEN-AND-READY at `d0fdd58d` on `feat/emit-single-write`, owned by todlando, awaiting golden-batch assembly\" | \"Closes when: releases#243's residual conversion + generator fix land and a re-census at that sha reads zero shipping residue under both delimiter forms\" | \"product lane complete elsewhere; register follow-through small\" | releases#241 (product remedy, landed); releases#243 (residual conversion, BACKLOG) | 2026-08-30 |\n| IR-70 | Hand-built IoBus silently omitted later sinks | \"OPEN, remedy unscheduled; the v0.65.0 respin fixed the witnessed call site on PR #173\" | \"the next `IoBus` construction/API touch, or a new sink registration\" | \"small-to-medium assembly-point enforcement plus a real-path population test\" | PR #173 (witnessed call site only) | 2026-08-29 |\n| IR-71 | Controller-seat release has no persisted breadcrumb | \"OPEN, observability gap; no remedy scheduled\" | \"the next controller lifecycle or structured-breadcrumb touch, or a field timeout from PR #174's barrier\" | \"small emitter plus one contract-level assertion\" | PR #174 | 2026-08-29 |\n| IR-72 | No read verb names a perch/seat holder | \"OPEN, observability gap; no remedy scheduled\" | \"the next roster/status read-model change or another rig needs to reap a named holder\" | \"small read-model/API addition, medium if seat and perch custody need separate typed variants\" | PR #174 (`70c1a303`) | 2026-08-29 |\n| IR-73 | ci.yml/release.yml read floor pre-checkout | \"OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep\" | \"next touch of `ci.yml`/`release.yml`, or the next intake's tooling-rider slot (compose with IR-59/IR-57's standing pair)\" | \"small — reorder or comment per site, 8 sites\" | Compose with IR-59/IR-57 tooling-rider slot; per top-of-file note this arc's workflow commits did NOT carry it | 2026-08-30 |\n| IR-74 | kitsubito holds 21,643 /tmp endpoint homes | \"OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep\" | \"next kitsubito rig touch, or the between-milestone box-audit slot\" | \"small (one sweep script + adoption in the box's rig steps); the measurement rerun is one `find \\| wc`\" | No | 2026-08-30 |\n| IR-75 | traceable-reqs not installed on kitsubito (treqs exit 127) | \"OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep\" | \"next Linux gate-driver touch or kitsubito box-audit slot\" | \"trivial (install or one driver edit + comment)\" | No | 2026-08-30 |\n\nNote: no `IR-76` entry exists anywhere in `docs/INFRA-REGISTER.md` as read — the highest numbered\nentry in the file is IR-75. The task brief's IR-76 (golden Windows box shared with builders;\nthree-arm pre-flight) is therefore not yet reflected in this register.\n\n## Candidates\n\nEntry ids whose **trigger condition** field (quoted above) contains words that also appear in the\nsix now-true facts. One line each: which fact, which words.\n\n- **IR-3** — trigger \"the next milestone touching spt-net endpoint lifecycle or daemon supervision\"\n  matches WEBSERVE #272's \"cross-node proxy over Iroh streams\" / \"bootstrap LAN listener\" waves —\n  both are spt-net endpoint-lifecycle / daemon-supervision surface.\n- **IR-12** — trigger \"next xtask/docs-gate wave\" matches \"a new docs-site [service] manifest\n  section published\" — the words \"docs\" and \"manifest\" (this entry's subject is\n  `manifest.schema.json`) both appear in the fact.\n- **IR-34** — trigger \"hertz's next nextest-config-touching lane\" matches \"nextest --no-fail-fast\n  now mandatory in driver templates\" on the word \"nextest-config\".\n- **IR-46** — trigger \"next `golden.yml` touch\" matches \"v0.67.1 shipped (golden 34017906638 att4\n  green...)\" on the word \"golden\", and also the pre-flight subject of \"IR-76 ... three-arm\n  pre-flight\" (both entries are about the golden Windows preflight).\n- **IR-52** — trigger \"next xtask docs-gen touch, or the first adapter filing traceable to a\n  deep-help divergence\" matches \"a new docs-site [service] manifest section published\" on\n  \"docs-gen\"/\"docs-site\", and WEBSERVE's \"docs facets\" wave on \"docs\".\n- **IR-59** — trigger \"ripe now for the log-the-floor half (it rides any gate-script or CI touch)\"\n  matches \"IR-76 (golden Windows box shared with builders; three-arm pre-flight) filed\" — both\n  concern logging/reading the free-space floor on the same golden Windows box.\n- **IR-64** — trigger \"OR the first golden that dies at the 32 GB preflight despite adopted pool\n  discipline\" matches \"IR-76 (golden Windows box ... three-arm pre-flight)\" on \"golden\" +\n  \"preflight\", and \"v0.67.1 shipped (golden ... green)\" on \"golden\".\n- **IR-66** — trigger \"next milestone intake (hertz test lane)\" matches \"WEBSERVE milestone #272\n  GREENLIT with waves W0–W3\" on the word \"milestone intake\".\n- **IR-67** — trigger \"next milestone intake (the battery template is touched at every intake)\"\n  matches \"WEBSERVE milestone #272 GREENLIT\" on \"milestone intake\", and also matches \"nextest\n  --no-fail-fast now mandatory in driver templates\" in subject (battery template = driver\n  template) though the word \"nextest\" itself is not in this entry's trigger text.\n- **IR-73** — trigger \"next intake's tooling-rider slot (compose with IR-59/IR-57's standing pair)\"\n  matches \"WEBSERVE milestone #272 GREENLIT\" on \"next intake\", and its subject (ci.yml/release.yml\n  floor sites) matches \"IR-76 ... three-arm pre-flight\" on the shared golden-box preflight topic.\n\nWeaker / topic-adjacent, not a literal trigger-text match — listed so the gater can judge rather\nthan have them silently dropped:\n\n- **IR-48** — subject is the `nextest.toml` parity cell; trigger text itself (\"next xtask\n  parity-cell touch\") does not contain the word \"nextest\" or \"--no-fail-fast\", but the entry's\n  title does. Possible fact-4 relation by subject, not by trigger wording.\n- **IR-14 / IR-26 / IR-27 / IR-49** — the composed \"between-milestone pool/worktree audit slot\"\n  triggers (\"between-milestone idle window\", \"next CI/infra batch\", \"next poolguard touch\") share\n  the general topic of pool/worktree contention on a shared box with \"IR-76 (golden Windows box\n  shared with builders)\", but none of their trigger text names the golden box or a pre-flight\n  literally.\n- **IR-74** — trigger \"the between-milestone box-audit slot\" shares the word \"milestone\" with\n  WEBSERVE #272, but its subject (kitsubito, the Linux box) is a different box from IR-76's golden\n  Windows box.\n- Fact 5 (io-events seq-reset bug #277 filed) — no entry's trigger text contains \"io-events\",\n  \"seq\", or \"#277\". IR-68 (PSYCHE_INGEST_FAIL) and IR-70 (IoBus omitted sinks, \"spt api io-events\"\n  in its body) are topic-adjacent (ingest/io-events plumbing) but neither trigger mentions a\n  sequence-reset shape; noted rather than claimed as a match.\n\n## Count\n\n75 entries enumerated (IR-1 through IR-75, including IR-31 which has no `###` heading of its own —\nsee note above), 10 candidates (plus 4 weaker/topic-adjacent notes). Last entry read ends at line\n3790 of `docs/INFRA-REGISTER.md` (IR-75, \"Size guess: trivial (install or one driver edit +\ncomment).\"), file read through its final line 3791 (blank).\n"},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":283,"cache_read_input_tokens":204138,"output_tokens":42443,"output_tokens_details":{"thinking_tokens":29989},"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":0,"ephemeral_5m_input_tokens":283},"inference_geo":"not_available","iterations":[{"input_tokens":2,"output_tokens":42443,"cache_read_input_tokens":204138,"cache_creation_input_tokens":283,"cache_creation":{"ephemeral_5m_input_tokens":283,"ephemeral_1h_input_tokens":0},"type":"message"}],"speed":"standard"},"diagnostics":null},"apiBlockIndex":1,"requestId":"req_011Cen6G3arBy9LZrqJADBvn","attributionAgent":"general-purpose","type":"assistant","uuid":"605cbf1b-1cd2-4ae8-b75c-f4a6d13478c2","timestamp":"2026-09-06T11:23:03.174Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"605cbf1b-1cd2-4ae8-b75c-f4a6d13478c2","isSidechain":true,"promptId":"ce917338-967f-48d8-92f1-e0a8e34eff8b","agentId":"a854aff5dd30b27ec","type":"user","message":{"role":"user","content":[{"tool_use_id":"toolu_01K9Rq7BZhCRC98s1wAPRnVs","type":"tool_result","content":"File created successfully at: C:\\Users\\decid\\Documents\\projects\\spt-core\\REGISTER-SWEEP-0671-DRAFT.md (file state is current in your context — no need to Read it back)"}]},"uuid":"0426479e-0c7a-43b2-ae7f-de2673c44aa2","timestamp":"2026-09-06T11:23:03.976Z","toolUseResult":{"type":"create","filePath":"C:\\Users\\decid\\Documents\\projects\\spt-core\\REGISTER-SWEEP-0671-DRAFT.md","content":"# Register sweep draft — DOCS-NITS-0671\n\nRead-only enumeration of `docs/INFRA-REGISTER.md` (3791 lines, read in full, offset/limit chunks\nthrough EOF). Draft for the gater; no rulings, no recommendations made below.\n\n**Note on IR-31:** the file contains no `### IR-31 —` heading. Content that is clearly IR-31's\n(the \"box hit 0.00 bytes free mid-build\" disk-floor material, cross-referenced elsewhere in the\nfile as `[[IR-31]]` and \"IR-31's fifth addendum\") appears as a run of bullets directly under the\n`### IR-30` section, starting around line 1875, with no header of its own. It is included below\nas its own row because the rest of the file treats it as a distinct entry; flagging the missing\nheading for the gater to confirm rather than silently normalizing it.\n\n## Main table\n\n| id | title | status field as written | trigger condition as written | size guess | lane-linked? | last touched |\n|---|---|---|---|---|---|---|\n| IR-1 | Quiet predicate needs network axis (tailscale RTT probe) | \"open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]] at the foot of this file\" | \"next CI-touching wave, or the next network-shaped golden red — whichever first\" | \"small (one probe step + ledger row + predicate doc)\" | Yes — LOCKSMITH (#132) CI-rider cluster, hertz thin lane; landed per CI-RIDER LANE STATE | 2026-08-04 |\n| IR-2 | Settle warm-runner CARGO_INCREMENTAL delta | \"RETIRED 2026-08-28, measurement run, verdict NO FLIP — incremental stays ON\" | (retired; original) \"a quiet between-milestone window with no queued lanes (the measurement burns two golden windows)\" | \"medium (two proving runs + verdict + possible leg flips)\" | No | 2026-08-28 |\n| IR-3 | Daemon-level guard: broker-net wakeup rate bounded | \"open\" | \"the next milestone touching spt-net endpoint lifecycle or daemon supervision\" | \"medium (churn harness + counter plumbing + flake-safe assertion)\" | No | not stated |\n| IR-4 | Lock-pin guard, procedure rule, toolchain print | \"open, LANE EXISTS UNLANDED — see [[CI-RIDER LANE STATE]]\" | \"next CI-touching wave; part 1 sooner if any iroh bump is proposed\" | \"small-medium (one xtask leg, one docs section, one workflow step)\" | Yes — LOCKSMITH (#132), hertz thin lane; landed per CI-RIDER LANE STATE | 2026-08-04 |\n| IR-5 | Shared nextest summary parser | \"open\" | \"the next time anyone — agent or lane — needs a nextest summary COUNT, the shared parser is built FIRST\" | \"small\" | Conditional rider on LOCKSMITH hertz lane; condition NOT MET | 2026-08-04 |\n| IR-6 | Membership logging on subnet gates | \"open\" | \"next wave touching gate scripts / CI legs that report counts\" | \"small\" | Conditional rider on LOCKSMITH hertz lane; condition NOT MET | 2026-08-04 |\n| IR-7 | Phase A rigs leak daemon+brain pair (Windows) | \"open\" | \"next wave touching the Phase A rigs or daemon autostart path\" | \"medium\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-8 | reap-census scoped_survivors=0 blind to unreadable holders | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"next census/reap script wave (natural pair with IR-7's lane) — now BOTH platforms\" | \"small\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-9 | Golden boxes run different clippy versions | \"pin LANDED 2026-08-18 ... then audited BUILT at the 2026-08-29 v0.65.0 close sweep\" | none stated (built) | \"built\" | LOCKSMITH (#132), hertz | 2026-08-29 |\n| IR-10 | Wave gate should run predicate's consumers | \"open\" | \"next gate-runbook/docs wave\" | \"small (docs + gate-script checklist)\" | No | not stated |\n| IR-11 | find-cwd-holders.ps1 needs headless column | \"open\" | \"any rig-tooling wave; trivial rider\" | \"tiny\" | No | not stated |\n| IR-12 | xtask drift gate misses stale schema | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane (the narrowed blind arm only)\" | \"next xtask/docs-gate wave (now sized to the blind arm only)\" | \"tiny\" | KEYSTONE #182 hygiene lane; kin note added by todlando 2026-08-30 | 2026-08-30 |\n| IR-13 | Test-soundness follow-ups from uniform-table sweep | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | none (built) | not stated | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-14 | .worktrees audit: four answers to \"how many\" | \"open\" | \"between-milestone idle window (it is a dev-box chore, zero product risk) — but the class-A pool findings are armed hazards\" | \"small for the sweep; the hygiene rule and the pool-claim gaps are separate small items\" | Composed with IR-26/27/49 as one between-milestone pool/worktree audit slot | 2026-08-30 |\n| IR-15 | provably_gone is pid-only on Windows | \"BUILT 2026-08-03\" | none (built) | not stated | hertz `golden/ir15` lane | 2026-08-03 |\n| IR-16 | kill_tree discards termination return values | \"BUILT 2026-08-03 (landed @62c5623 on the LOCKSMITH t1 lane...)\" | \"RIPE NOW ... land with the next daemon-teardown wave or sooner\" | \"small\" | LOCKSMITH (#132) todlando product lane | 2026-08-04 |\n| IR-17 | Deadline-burn bring-up family (daemon never comes up) | \"open\" | \"next occurrence of the signature (immediate instrumented dispatch), or a hertz test-hardening wave\" | \"medium (bring-up instrumentation + attribution; the fix depends on what it shows)\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-18 | resident_service_e2e kills breadcrumb pids bare | \"BUILT 2026-08-04 — the named acceptance carrier RAN and the condition is DISCHARGED\" | \"RIPE NOW, and not gated on the rate run that was cancelled\" | \"small\" | hertz `fix/ir18-authenticated-teardown`, MERGED @6e1a962 (PR #142) | 2026-08-04 |\n| IR-19 | Docs-only pushes run full unit legs | \"RETIRED 2026-08-18 — intentional for main pushes, not a classifier defect\" | (retired; original) \"next CI-touching wave, after the intent question is answered on the REQ record\" | \"small (one conditional, if the answer is 'extend')\" | LOCKSMITH (#132) — doyle reads consuming gates | 2026-08-18 |\n| IR-20 | `daemon stop --force` does not stop daemon | \"open\" | \"a hertz test-hardening wave, or alongside the (b) helper lane's touch of this rig\" | \"small (stderr-captured discrimination run × two machines, then the scoped remedy)\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-21 | Helper binary build never requested, only location | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"the next gate-rig or CI-touching wave. Cheap, and it pays for itself the first time\" | \"remedy (1) small AND optional; medium for (2), the only remedy that closes the class\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-22 | Inherited identity env var fails test one-at-a-time | \"open\" | \"next CI/test-hygiene wave\" | \"small\" | No | 2026-08-03 |\n| IR-23 | Two tests collide via machine-global spt home | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"next test-hygiene wave; the 182s -> 14s figure makes it pay for itself on the bare path\" | \"small per test, unknown until the sweep\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-24 | terminate_job discards TerminateJobObject's return | \"BUILT — landed 3d12cf3 on main (2026-08-03), fulfilment verified ... by doyle 2026-08-04\" | \"any wave touching reap/teardown; it inherits IR-16's vocabulary and its discrimination note\" | \"small, once the cost-of-loss question is answered for this subject\" | No (deliberately not folded into IR-16) | 2026-08-04 |\n| IR-25 | spt-daemon --lib reds under concurrent load (bare cargo test) | \"open\" | \"alongside [[IR-21]] on the next gate-rig or CI-touching wave, or immediately if anyone starts gating on bare `cargo test` on a loaded box\" | \"small to document the rig rule (gate with nextest); medium to harden the three marginal tests\" | No | 2026-08-03 |\n| IR-26 | POOL-OWNER claims authorize dead-holder takeover | \"open, LANE BUILT BUT UNCOMMITTED (see the warning below — this is not a figure of speech)\" | \"next CI/infra batch, gated on the polarity question above being answered first\" | \"small once the remedy question is settled\" | Its own thin lane (`ci/poolowner-lane-claim` = 8ce40d9+98cfafe); composed with IR-14/27/49 audit slot | 2026-08-30 |\n| IR-27 | Junction-pooled rig is two objects; teardown removes one | \"open, found in the wild 2026-08-04\" | \"next CI/infra batch\" | \"small (one enumeration + report, no new policy)\" | Composed with IR-14/26/49 audit slot | 2026-08-30 |\n| IR-28 | Wave-gap rider invisible to notes pass | \"BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`)\" | none (built) | not stated | PR #176 | 2026-08-29 |\n| IR-29 | twohost ladder fires done-barrier before last rung | \"open, FIX AUTHORED-AND-COMPILED unlanded — hertz `test/twohost-serve-window` @`17bbbd8`\" | \"proving run at the next two-host window\" | \"landed-sized already\" | hertz `test/twohost-serve-window` (instrument later landed v0.54.0/v0.55.0 per IR-30) | 2026-08-24 |\n| IR-30 | Golden 4b37512: four distinct Windows victims, one sha | \"open for the FAMILY SIGHTINGS ONLY — the instrument lanes LANDED as planned\" | \"family sightings stay until the family record closes them — the entry now waits on FIRES, not landings\" | \"nothing left to build; the next family sighting carries its own verdict via the landed instruments\" | Multiple instrument lanes landed v0.54.0/v0.55.0 | 2026-08-25 |\n| IR-31 | Box hit 0.00 bytes free mid-build (no header in file) | \"open\" | \"next CI/rig-touching wave, or the next ENOSPC-signature red — whichever first\" | \"small-medium (claim-verb print + floor; census verb optional)\" | No single formal lane; multiple addenda (hertz/doyle/deployah) | 2026-08-25 (fifth addendum) |\n| IR-32 | Docs-drift gate blesses its own empty gen | \"open\" | \"next docs-tooling or xtask-touching lane; SOONER if any lane regenerates the CLI reference before the floor exists\" | \"small (one refusal + a length-plausibility floor in gen)\" | No | 2026-08-04 |\n| IR-33 | Debug-build clap Command tree near stack ceiling | \"open\" | \"#5 (U3 verb surface) PLANNING ... the smoke tooth (a) is ripe for the next CI-touching lane regardless\" | \"small for (a); medium for (b)/(c) with the measurement\" | No formal lane; ties to planned #5 U3 verb surface | 2026-08-04 |\n| IR-34 | nextest LEAK flag dominant but intermittent | \"open\" | \"hertz's next nextest-config-touching lane; blocks nothing today\" | \"small\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-35 | hfenduleam Windows victim rate ~half of executions | \"open\" | \"operator brief at USHER close (immediate); re-measure after the hertz package lands\" | \"visibility entry + the re-measure; fix cost carried by the hertz package\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-36 | output_bounded is a 51-copy clone estate | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"a dedicated post-batch test-hygiene lane (natural companion to IR-13's mutation-proof loop and IR-23's home-collision fix)\" | \"medium by file count, small by risk (mechanical hoist; no assertion changes)\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-37 | traceable-reqs check is coverage-only, placement unenforced | \"UPSTREAM CLOSED THROUGH RELEASE 2026-08-19 — traceable-reqs PR #19 squash-merged @`82d8b14`\" | \"Entry closes when the consume lane lands\" (close condition, not a ripe-when) | \"measurement complete; remedy scope is upstream-owned and dispatched\" | hertz's test-hygiene family lane (KEYSTONE #182) as prerequisite consumer | 2026-08-19 |\n| IR-38 | Live daemon-spawning e2e wedges next build | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"the test-hygiene lane (IR-13/IR-23/IR-36 family) — sweep every e2e that ends with a live spawning binary\" | \"small per test; population unknown until swept\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-39 | Missing-fixture-bin defect has two failure faces | \"BUILT 2026-08-18 on KEYSTONE #182 hygiene lane\" | \"the test-hygiene lane (IR-13/IR-23/IR-36/IR-38 family) — same sweep population; or standalone small if that lane keeps slipping\" | \"small — one shared helper + a sweep of local sibling_bin resolver copies (24 known)\" | KEYSTONE #182 hygiene lane | 2026-08-18 |\n| IR-40 | No ordering signal on resume brief / early CI informant | \"open\" | \"the next commune/psyche-tier touch for arm A ...; for arm B, the next `golden.yml` informant touch\" | \"arm B small (message text + scope word in one workflow step). Arm A unsized\" | No | 2026-08-05 |\n| IR-41 | Queued main run superseded without a record | \"open — mechanism CONFIRMED (doyle ruling 2026-08-05); the runbook sentence it falsified is already corrected\" | \"next ci.yml/runbook touch\" | \"docs half DONE in this commit; ci.yml half small but load-bearing — needs its own lane if taken\" | No | 2026-08-05 |\n| IR-42 | pool-claim writes a record; only build enforces | \"BUILT 2026-08-19 — the AGENTS.md corrective line lands in the SAME COMMIT as this entry\" | none (built); optional nicety is \"a candidate rider on the IR-26 remedy lane\" | not stated | Candidate rider on IR-26 remedy lane | 2026-08-19 |\n| IR-43 | knock NoReply landed at 60s vs 30s deadline | \"open, OBSERVATION — mechanism unmeasured, filed exactly as wide as the datum\" | \"next knock-carrier touch, or the next `NoReply`-shaped red — whichever first\" | \"small (code read; a token only if the read forks)\" | No | 2026-08-18 |\n| IR-44 | perch-sentinel comment overclaims preservation | \"open\" | \"next spt-store/info.rs touch\" | \"tiny (comment + possibly one REQ doc line)\" | No | 2026-08-18 |\n| IR-45 | twohost rig home premise, SETTLED | \"RETIRED 2026-08-19 — ask answered by the one code read at main @`78a9a16`\" | none (retired) | not stated | KEYSTONE #182 hygiene lane repaired the comment | 2026-08-19 |\n| IR-46 | Disk-floor preflight asserts an instant | \"open — mechanism CONFIRMED by a measurement series on hfenduleam; doyle ruled it register-shaped 2026-08-18\" | \"next `golden.yml` touch. Remedies to weigh THEN, not as a drive-by\" | \"small in golden.yml, load-bearing in what a green run is taken to prove\" | No formal lane; golden additions measured at #242/v0.66.0 close | 2026-08-30 |\n| IR-47 | ci-notify treats missing co-author trailer as quiet | \"open — patch AUTHORED and stashed unlanded since 2026-07-29\" | \"next golden.yml/ci-notify touch — natural co-rider with [[IR-46]]'s remedy window\" | \"~10 lines in one shell script plus its test\" | No | 2026-08-19 |\n| IR-48 | nextest.toml parity tolerates CRLF by accident | \"open — filed 2026-08-19 (doyle route, hertz verdict: REGISTER as preventive hardening, not current defect)\" | \"next xtask parity-cell touch; explicitly OUTSIDE the family-B lane\" | \"one fixture-pair cell\" | Explicitly excluded from hertz family-B lane | 2026-08-19 |\n| IR-49 | poolguard's landed-lane predicate is ancestry-only | \"open — filed 2026-08-19 (todlando measurement...doyle ruling; doyle re-verified the predicate at source before filing)\" | \"next poolguard touch, or the first landed-lane pool takeover request\" | \"one fallback arm in `git_lane_state` + two fixtures\" | Composed with IR-14/26/27 audit slot | 2026-08-30 |\n| IR-50 | e2e panels read pre-redirect stderr capture | \"CLOSED — BUILT 2026-08-19; adoption-completion lane `docs/ir50-register-close` @`e02f565f` ... LANDED in v0.59.0\" | none (closed) | \"census + mechanical panel edits per rig\" | hertz `fix/ir50-stderr-sink-census`, PORTER rider v0.59.0 | 2026-08-21 |\n| IR-51 | engine-room e2e daemon is net-enabled on real interfaces | \"open — filed 2026-08-19 (todlando's x40 run-4 sink read...)\" | \"#199 attribution answers whether net state is causal; else the next hermeticity pass\" | \"product switch + rig adoption + census\" | No | 2026-08-19 |\n| IR-52 | docs-site CLI reference renders shallow | \"BUILT 2026-08-24 on SIGNET #218 W1 T6\" (pre-build: \"open, filed 2026-08-19\") | \"next xtask docs-gen touch, or the first adapter filing traceable to a deep-help divergence\" | \"xtask render change + regen + census of self-holding units\" | SIGNET #218 W1 T6; conditional rider on WAX-SEAL W4 (condition not met there) | 2026-08-24 |\n| IR-53 | failed-address expiry panics near Windows boot | \"BUILT 2026-08-21 on `fix/ir53-cold-boot-instant` — LANDED in v0.59.0\" | none (built) | not stated | PORTER rider v0.59.0, pick `7b26f28d` | 2026-08-21 |\n| IR-54 | golden-head-intake runbook: construction not discipline | \"BUILT 2026-08-29 — PR #176 (`880b3b9c`, landed on main via `37368263`)\" | none (built) | \"small (one runbook doc lane; no code)\" | PR #176 | 2026-08-29 |\n| IR-55 | spt --bins suite wedges on leaked findstr children | \"OPEN, ARMED-FOR-CAPTURE, owned by hertz\" | \"any milestone whose gate wants an unfiltered `spt --bins` sweep, which is every one of them. Ripe now\" | \"small if one test is missing a reap or an EOF for its stand-in child; medium if the shared PTY test scaffolding needs the reap\" | Owned by hertz, no named branch (ARMED-FOR-CAPTURE) | 2026-08-29 |\n| IR-56 | pool-claim harvests identity from CWD, not --pool | \"BUILT 2026-08-24 for the SIGNET #218 golden batch on `fix/ir56-pool-claim-cwd`, owned by hertz\" | \"ripe now — it is a doc/UX fix on a verb we run every lane\" | \"small\" | hertz `fix/ir56-pool-claim-cwd`, SIGNET #218 | 2026-08-24 |\n| IR-57 | Assembly pick conflict resolution can drop lines | \"OPEN, owned by doyle (gater craft, not a code defect — no lane to dispatch)\" | \"ripe at the next assembly — this is procedure, and its cost is one command per pick\" | \"small as a scripted check in xtask (fidelity audit over a pick range); zero as discipline, which is how it is being applied now\" | No code lane; `xtask pick-audit` built and used at #241 assembly | 2026-08-29 |\n| IR-58 | [[bin]] grep is not a census | \"OPEN, unowned. Filed by doyle 2026-08-22; its original filing was WRONG and is retracted in full below\" | \"ripe on any xtask check work — a duplicate-bin-name check over cargo's target enumeration ... is a handful of lines and cannot go stale\" | \"small. The prose fix originally proposed here is WITHDRAWN\" | No | 2026-08-22 |\n| IR-59 | Pool arithmetic: two cold pools, not four | \"OPEN, unowned — it is arithmetic and discipline, not a code lane\" | \"ripe now for the log-the-floor half (it rides any gate-script or CI touch); the arithmetic is discipline and applies immediately\" | \"small — one line in each rig/gate preflight to record free space alongside the existing floor check\" | Composed with IR-57's scripted pick-fidelity audit as next intake's tooling pair | 2026-08-30 |\n| IR-60 | Wrapper's exit status is the capture's, not the leg's | \"OPEN, unowned — script-shape discipline, not a code lane\" | \"ripe now — it rides the next gate-script touch\" | \"small — a convention line in the gate-script preamble; no product code\" | No | 2026-08-22 |\n| IR-61 | spacerun test-module skip carries second literal tracker | \"OPEN, unowned, accepted-with-mitigation\" | \"the next SUBSTANTIVE change to spacerun's scanning — any new skip, any new literal form, any change to either tracker\" | \"small to medium — one continuous literal-state walk serving both the render pass and the skip\" | No | 2026-08-22 |\n| IR-62 | e2e daemon binds well-known ports, collides with fleet | \"BUILT 2026-08-24 (hertz, SIGNET #218 batch; PR #158)\" | pre-build: \"triggered the next time this class fires anywhere\" | not stated (pre-build); see remedy direction | hertz, PR #158, SIGNET #218 | 2026-08-24 |\n| IR-63 | Suite-mix sweeps leak job-escaped autostart daemons | \"OPEN, mitigated-by-rig-step — the reap is adopted discipline, not yet construction\" | \"next rig/gate-script construction touch, or the first golden red that classifies to face (1)\" | \"small-medium — one wrapper seam plus adopting it in the gate/lane scripts\" | Yes — hertz's queued daemon-leak fixup lane (cites IR-7/17/20/34/35/63) | 2026-08-30 |\n| IR-64 | Disk floor set by operator's non-CI bulk payload | \"OPEN · Origin: doyle, v0.63.0 close sweep 2026-08-26\" | \"operator rules on the bulk (move/expand/accept-the-tax), OR the first golden that dies at the 32 GB preflight despite adopted pool discipline\" | \"zero code; one operator decision + at most a runbook line naming the chosen floor\" | No | 2026-08-26 |\n| IR-65 | kitsubito kernel-audit backpressure (remediated) | \"REMEDIATED-AT-BOX 2026-08-25 ...; entry stays OPEN as the re-check record because the storm SOURCE persists\" | \"a re-check trigger fires\" (tailscale snap update / auditd update / box reimage) | \"two read-only commands per check\" | releases#225 | 2026-08-25 |\n| IR-66 | First-chunk-needle test class: two members remain | \"BUILT — hertz rider PR #161, landed ff at `d04b922d` (2026-08-27, IO-PARSER #22 intake rider)\" | \"next milestone intake (hertz test lane) or the first golden red at ~240s on an attach cell\" | \"two one-line test edits\" | hertz rider PR #161, IO-PARSER #22 | 2026-08-27 |\n| IR-67 | `-p spt --bins` leg runs zero e2e coverage | \"BUILT — remedy applied across the IO-PARSER #22 milestone (2026-08-27/28)\" | \"next milestone intake (the battery template is touched at every intake)\" | \"template lines only\" | IO-PARSER #22 milestone | 2026-08-28 |\n| IR-68 | PSYCHE_INGEST_FAIL cause unproven, index.lock cleared | \"OPEN, investigation-shaped\" | \"next PSYCHE_INGEST_FAIL sighting in the field (capture the failing store state before touching it), or a dedicated probe slot\" | \"investigation; no product change until the mechanism is pinned\" | IO-PARSER #22, PR #163 | 2026-08-27 |\n| IR-69 | Inherited stderr tokens tear between fragments | \"OPEN, product remedy complete and parked GREEN-AND-READY at `d0fdd58d` on `feat/emit-single-write`, owned by todlando, awaiting golden-batch assembly\" | \"Closes when: releases#243's residual conversion + generator fix land and a re-census at that sha reads zero shipping residue under both delimiter forms\" | \"product lane complete elsewhere; register follow-through small\" | releases#241 (product remedy, landed); releases#243 (residual conversion, BACKLOG) | 2026-08-30 |\n| IR-70 | Hand-built IoBus silently omitted later sinks | \"OPEN, remedy unscheduled; the v0.65.0 respin fixed the witnessed call site on PR #173\" | \"the next `IoBus` construction/API touch, or a new sink registration\" | \"small-to-medium assembly-point enforcement plus a real-path population test\" | PR #173 (witnessed call site only) | 2026-08-29 |\n| IR-71 | Controller-seat release has no persisted breadcrumb | \"OPEN, observability gap; no remedy scheduled\" | \"the next controller lifecycle or structured-breadcrumb touch, or a field timeout from PR #174's barrier\" | \"small emitter plus one contract-level assertion\" | PR #174 | 2026-08-29 |\n| IR-72 | No read verb names a perch/seat holder | \"OPEN, observability gap; no remedy scheduled\" | \"the next roster/status read-model change or another rig needs to reap a named holder\" | \"small read-model/API addition, medium if seat and perch custody need separate typed variants\" | PR #174 (`70c1a303`) | 2026-08-29 |\n| IR-73 | ci.yml/release.yml read floor pre-checkout | \"OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep\" | \"next touch of `ci.yml`/`release.yml`, or the next intake's tooling-rider slot (compose with IR-59/IR-57's standing pair)\" | \"small — reorder or comment per site, 8 sites\" | Compose with IR-59/IR-57 tooling-rider slot; per top-of-file note this arc's workflow commits did NOT carry it | 2026-08-30 |\n| IR-74 | kitsubito holds 21,643 /tmp endpoint homes | \"OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep\" | \"next kitsubito rig touch, or the between-milestone box-audit slot\" | \"small (one sweep script + adoption in the box's rig steps); the measurement rerun is one `find \\| wc`\" | No | 2026-08-30 |\n| IR-75 | traceable-reqs not installed on kitsubito (treqs exit 127) | \"OPEN, filed by doyle 2026-08-30 at the #242/v0.66.0 close sweep\" | \"next Linux gate-driver touch or kitsubito box-audit slot\" | \"trivial (install or one driver edit + comment)\" | No | 2026-08-30 |\n\nNote: no `IR-76` entry exists anywhere in `docs/INFRA-REGISTER.md` as read — the highest numbered\nentry in the file is IR-75. The task brief's IR-76 (golden Windows box shared with builders;\nthree-arm pre-flight) is therefore not yet reflected in this register.\n\n## Candidates\n\nEntry ids whose **trigger condition** field (quoted above) contains words that also appear in the\nsix now-true facts. One line each: which fact, which words.\n\n- **IR-3** — trigger \"the next milestone touching spt-net endpoint lifecycle or daemon supervision\"\n  matches WEBSERVE #272's \"cross-node proxy over Iroh streams\" / \"bootstrap LAN listener\" waves —\n  both are spt-net endpoint-lifecycle / daemon-supervision surface.\n- **IR-12** — trigger \"next xtask/docs-gate wave\" matches \"a new docs-site [service] manifest\n  section published\" — the words \"docs\" and \"manifest\" (this entry's subject is\n  `manifest.schema.json`) both appear in the fact.\n- **IR-34** — trigger \"hertz's next nextest-config-touching lane\" matches \"nextest --no-fail-fast\n  now mandatory in driver templates\" on the word \"nextest-config\".\n- **IR-46** — trigger \"next `golden.yml` touch\" matches \"v0.67.1 shipped (golden 34017906638 att4\n  green...)\" on the word \"golden\", and also the pre-flight subject of \"IR-76 ... three-arm\n  pre-flight\" (both entries are about the golden Windows preflight).\n- **IR-52** — trigger \"next xtask docs-gen touch, or the first adapter filing traceable to a\n  deep-help divergence\" matches \"a new docs-site [service] manifest section published\" on\n  \"docs-gen\"/\"docs-site\", and WEBSERVE's \"docs facets\" wave on \"docs\".\n- **IR-59** — trigger \"ripe now for the log-the-floor half (it rides any gate-script or CI touch)\"\n  matches \"IR-76 (golden Windows box shared with builders; three-arm pre-flight) filed\" — both\n  concern logging/reading the free-space floor on the same golden Windows box.\n- **IR-64** — trigger \"OR the first golden that dies at the 32 GB preflight despite adopted pool\n  discipline\" matches \"IR-76 (golden Windows box ... three-arm pre-flight)\" on \"golden\" +\n  \"preflight\", and \"v0.67.1 shipped (golden ... green)\" on \"golden\".\n- **IR-66** — trigger \"next milestone intake (hertz test lane)\" matches \"WEBSERVE milestone #272\n  GREENLIT with waves W0–W3\" on the word \"milestone intake\".\n- **IR-67** — trigger \"next milestone intake (the battery template is touched at every intake)\"\n  matches \"WEBSERVE milestone #272 GREENLIT\" on \"milestone intake\", and also matches \"nextest\n  --no-fail-fast now mandatory in driver templates\" in subject (battery template = driver\n  template) though the word \"nextest\" itself is not in this entry's trigger text.\n- **IR-73** — trigger \"next intake's tooling-rider slot (compose with IR-59/IR-57's standing pair)\"\n  matches \"WEBSERVE milestone #272 GREENLIT\" on \"next intake\", and its subject (ci.yml/release.yml\n  floor sites) matches \"IR-76 ... three-arm pre-flight\" on the shared golden-box preflight topic.\n\nWeaker / topic-adjacent, not a literal trigger-text match — listed so the gater can judge rather\nthan have them silently dropped:\n\n- **IR-48** — subject is the `nextest.toml` parity cell; trigger text itself (\"next xtask\n  parity-cell touch\") does not contain the word \"nextest\" or \"--no-fail-fast\", but the entry's\n  title does. Possible fact-4 relation by subject, not by trigger wording.\n- **IR-14 / IR-26 / IR-27 / IR-49** — the composed \"between-milestone pool/worktree audit slot\"\n  triggers (\"between-milestone idle window\", \"next CI/infra batch\", \"next poolguard touch\") share\n  the general topic of pool/worktree contention on a shared box with \"IR-76 (golden Windows box\n  shared with builders)\", but none of their trigger text names the golden box or a pre-flight\n  literally.\n- **IR-74** — trigger \"the between-milestone box-audit slot\" shares the word \"milestone\" with\n  WEBSERVE #272, but its subject (kitsubito, the Linux box) is a different box from IR-76's golden\n  Windows box.\n- Fact 5 (io-events seq-reset bug #277 filed) — no entry's trigger text contains \"io-events\",\n  \"seq\", or \"#277\". IR-68 (PSYCHE_INGEST_FAIL) and IR-70 (IoBus omitted sinks, \"spt api io-events\"\n  in its body) are topic-adjacent (ingest/io-events plumbing) but neither trigger mentions a\n  sequence-reset shape; noted rather than claimed as a match.\n\n## Count\n\n75 entries enumerated (IR-1 through IR-75, including IR-31 which has no `###` heading of its own —\nsee note above), 10 candidates (plus 4 weaker/topic-adjacent notes). Last entry read ends at line\n3790 of `docs/INFRA-REGISTER.md` (IR-75, \"Size guess: trivial (install or one driver edit +\ncomment).\"), file read through its final line 3791 (blank).\n","structuredPatch":[],"originalFile":null,"userModified":false},"sourceToolAssistantUUID":"605cbf1b-1cd2-4ae8-b75c-f4a6d13478c2","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}
{"parentUuid":"0426479e-0c7a-43b2-ae7f-de2673c44aa2","isSidechain":true,"agentId":"a854aff5dd30b27ec","message":{"model":"claude-sonnet-5","id":"msg_011Cen6kN1Q5Eg4j7p6uucMk","type":"message","role":"assistant","content":[{"type":"text","text":"I read `docs/INFRA-REGISTER.md` in full (3791 lines, chunked reads from offset 1 through EOF at line 3790/3791) and produced the draft sweep table at:\n\n`C:\\Users\\decid\\Documents\\projects\\spt-core\\REGISTER-SWEEP-0671-DRAFT.md`\n\nKey points for the gater:\n\n- **75 entries enumerated**, IR-1 through IR-75. No `IR-76` exists in the register file as read — the task brief's IR-76 (golden Windows box shared with builders; three-arm pre-flight) is not yet reflected there.\n- **IR-31 has no `### IR-31 —` heading in the file.** Its content (the \"box hit 0.00 bytes free mid-build\" disk-floor material) runs as bullets directly under the `### IR-30` section starting around line 1875, even though the rest of the file cross-references it everywhere as `[[IR-31]]`. I included it as its own table row but flagged the missing heading explicitly rather than silently normalizing it.\n- Each row has: title (≤8 words), status field as literally quoted, trigger/ripe-when as literally quoted (≤25 words), size guess, lane-linkage (named lane/PR/issue where the entry states one), and a last-touched date pulled from the entry's own dated content.\n- **Candidates section**: 10 entries whose trigger text contains words overlapping the six now-true facts (IR-3, IR-12, IR-34, IR-46, IR-52, IR-59, IR-64, IR-66, IR-67, IR-73), each with one line naming which fact matched which words — plus 4 weaker/topic-adjacent notes (IR-48, the IR-14/26/27/49 audit-slot cluster, IR-74) and an explicit statement that no entry's trigger text contains \"io-events\", \"seq\", or \"#277\" for fact 5.\n- No rulings or recommendations were made anywhere in the draft, per the brief.\n\nCount line in the file: \"75 entries enumerated (IR-1 through IR-75, including IR-31...), 10 candidates (plus 4 weaker/topic-adjacent notes)... last entry read ends at line 3790... file read through its final line 3791 (blank).\""}],"stop_reason":null,"stop_sequence":null,"stop_details":null,"usage":{"input_tokens":2,"cache_creation_input_tokens":42663,"cache_read_input_tokens":204313,"cache_creation":{"ephemeral_5m_input_tokens":42663,"ephemeral_1h_input_tokens":0},"output_tokens":1,"service_tier":"standard","inference_geo":"not_available"},"diagnostics":null},"apiBlockIndex":0,"requestId":"req_011Cen6kM4bnEeQTarAVSJKn","attributionAgent":"general-purpose","type":"assistant","uuid":"d34ae013-579d-4ad2-b7c2-7cb9d16d8267","timestamp":"2026-09-06T11:23:12.576Z","effort":"high","userType":"external","entrypoint":"cli","cwd":"C:\\Users\\decid\\Documents\\projects\\spt-core","sessionId":"92d10fe5-5b17-4f07-8185-ccbe80d54ce9","version":"2.1.258","gitBranch":"main"}