# GOLDEN INTAKE — never-executed cells + changed seams, head 712c987f

Generated 2026-09-18 01:50Z from `git diff ddd7fc7f..712c987f -- crates`, `git log -S`, and the preserved receipts under `.spt/preserved/`. Read-only derivation; nothing built or run. A prior intake by doyle at this path is kept beside it as `GOLDEN-INTAKE-712c987f.prev-doyle.md` (two corrections to it are flagged in A.4).

- Batch: `ddd7fc7f..712c987f` (v0.70.0 golden sha .. main tip), **21 commits**, 33 files under `crates/` (+4075/-434).
- Thin CI on the head (both runs, head 712c987f): push run 35296537885 and PR run 35289449769 — jobs changes / lint / traceability / unit-Windows(hfenduleam) / unit-Linux(kitsubito), all success. Thin CI runs `kind(lib) + kind(bin)` only; **no integration binary was built or executed by CI on any batch sha**.

```
712c987f fix(net): disable portmapping on every endpoint
a593ece0 fix(net): isolate rotating rendezvous listeners from broker workers
84e359aa test: prevent legacy psyche fixture descendant leaks
eed9ff36 fix: preserve hosted liveness during engine-room bring-up
c0ef9571 test: reproduce ER briefing loss during bring-up reconciliation
39241675 fix: avoid ACK backpressure when replaying rc input
8f059b2a ci: pin refresh rig Python for Windows heavy tests
b99715ee test: capture real refresh ACK freeze regression
4b6b03cc fix: point update notices at live local docs
f6b1dd9a docs: record Windows registry-lock validation
c9e80511 fix(serving): serialize registry writers across processes
289e3cdf docs: record IR11 headless census lane as built
93c7c2b9 ci: distinguish unknown headless state in CWD holder census
0c9ada8a docs: retire IR86 and reconcile built infrastructure lanes
82333ca1 ci: report signed shared-volume disk deltas in golden tests
8bb0feb4 docs: record detached rig launch discipline and retire IR137
0cda6235 ci: derive Windows golden admission from recorded disk delta
5e05f02d ci: size Linux golden test admission from measured use
84e20ddd test: share canonical seed broker docs fixture
52d56248 ci: precheck checker pin and runner before authenticated repair
16cd2a67 docs(infra): register IR-127..IR-137 from the S4/S5 field runs
```

Sha classes used below: **ancestor** = commit in `ddd7fc7f..712c987f`; **lane sha** = a pre-rebase/pre-land commit (or working tree) that is NOT an ancestor of 712c987f — evidence about the lane's bytes, not about the merged head.

## SECTION A — Never-executed cells

### A.1 Test fns ADDED by the batch (13; method: test-attribute-preceded fn sets per changed file at both shas, cross-checked against `+` lines in the diff)

| # | crate | file | kind | fn | added by | golden phase at head |
|---|---|---|---|---|---|---|
| 1 | spt-daemon | src/notif.rs | unit (lib) | `consent_changelog_uses_the_discovered_node_local_docs` | 4b6b03cc | Phase A unit |
| 2 | spt-daemon | src/notif.rs | unit (lib) | `consent_changelog_retains_release_url_without_live_docs` | 4b6b03cc | Phase A unit |
| 3 | spt-daemon | src/pairhost/meet_runtime_tests.rs (`#[cfg(test)] mod` of pairhost.rs) | unit (lib) — but scheduled in HEAVY by the new `kind(lib) & test(/^pairhost::meet_runtime_tests::/)` term (nextest.toml:318/376/462, golden.yml:158) | `three_subnet_rotation_keeps_lifecycle_off_broker_workers` | a593ece0 | HEAVY / Phase B (first time HEAVY carries a `kind(lib)` term) |
| 4 | spt-daemon | src/servehost.rs | unit (lib) | `unavailable_registry_lock_cannot_publish_an_add` | c9e80511 | Phase A unit |
| 5 | spt-daemon | tests/docs_server_e2e.rs | **integration** (binary not in HEAVY list) | `discovery_distinguishes_absent_control_from_unbound_listener` | 84e20ddd | Phase A int — **CI denominator ZERO at golden depth; first golden execution = this run** |
| 6 | spt-daemon | tests/refresh_freeze.rs (`#![cfg(windows)]`; needs `SPT_REFRESH_RIG_PYTHON`, golden.yml:486 pins Python312) | **integration**, HEAVY | `refresh_resumes_bounded_input_ack_without_replacement_poison` | b99715ee | HEAVY / Phase B, Windows only — **CI denominator ZERO; first golden execution = this run** |
| 7 | spt-net | src/net/endpoint.rs | unit (lib, `#[tokio::test]`) | `all_bind_scopes_exchange_without_portmapper_activity` | 712c987f | Phase A unit |
| 8 | spt-store | tests/serving_registry_two_process_int.rs (spawns fixture bin `serving_registry_worker`, new `[[bin]]`) | **integration** | `loaded_reaper_serializes_registration_without_resurrecting_expiry` | c9e80511 | Phase A int — **CI denominator ZERO; first golden execution = this run** |
| 9 | spt-store | tests/serving_registry_two_process_int.rs | **integration** | `later_reap_preserves_a_registration_published_while_it_was_waiting` | c9e80511 | same |
| 10 | spt-store | tests/serving_registry_two_process_int.rs | **integration** | `abrupt_holder_exit_releases_the_sentinel_for_the_waiting_reaper` | c9e80511 | same |
| 11 | spt | src/cli.rs | unit (bin) | `update_messages_link_live_node_docs_or_preserve_offline_fallbacks` | 4b6b03cc | Phase A unit |
| 12 | spt | tests/er_briefing_bringup_reconcile_e2e.rs (`#![cfg(debug_assertions)]`) | **integration**, HEAVY | `bound_engine_room_survives_bringup_reconcile_and_receives_native_briefing` | c0ef9571 (remedy eed9ff36) | HEAVY / Phase B — **CI denominator ZERO; first golden execution = this run** |

Totals: 7 unit fns (CI-executed on the head by the thin lanes), **6 integration fns in 4 integration binaries** (`spt-daemon::docs_server_e2e`, `spt-daemon::refresh_freeze`, `spt-store::serving_registry_two_process_int`, `spt::er_briefing_bringup_reconcile_e2e`) with zero CI executions at golden depth.

### A.2 Removed / renamed / new non-test support

| change | where | commit |
|---|---|---|
| REMOVED unit test `a_reap_shaped_pass_cannot_clobber_a_concurrent_add` (replaced by #4 + the spt-store process cases) | spt-daemon src/servehost.rs | c9e80511 |
| REMOVED helper fn `start_control_server` (not a test) — replaced by shared `tests/support/serving.rs` | spt-daemon tests/docs_server_e2e.rs | 84e20ddd |
| Pre-existing test `serves_published_surface_and_refuses_escapes_and_writes` body rewritten (same name; NOT new) | spt-daemon tests/docs_server_e2e.rs | 84e20ddd |
| Modified bodies, **no test-fn set change**: tests/twohost_web.rs (spt-daemon), tests/webserve_attachment_e2e.rs, tests/webserve_cross_node_e2e.rs (spt) — now call `lock_registry_at` / the shared fixture | — | c9e80511, 84e20ddd |
| New files: tests/support/serving.rs (shared `#[path]` include, not a target), tests/fixtures/refresh_rig_fixture.rs (`[[bin]]`), tests/support/refresh_freeze/{rig.py,producer.py,launch-v2.ps1,launch-v2.cs}, spt-store tests/fixtures/serving_registry_worker.rs (`[[bin]]`), spt-daemon src/er309_gate.rs (`#[cfg(debug_assertions)] mod`, product code, not a test module) | — | b99715ee, c9e80511, c0ef9571 |
| Renamed test files: **none** (`git diff -M --summary` shows only creates) | — | — |

### A.3 Where each cell HAS executed (preserved receipts only; nothing inferred)

| cell | executions found (receipt path → sha, OS, result) | on an ancestor of 712c987f? | on 712c987f? |
|---|---|---|---|
| #6 `refresh_freeze::refresh_resumes_…` | `307/gate-228/logs/p3-rig-1.log`, `p3-rig-2.log` (receipt.txt: candidate **39241675**, HFENDULEAM Windows): PASS 83.1 s, PASS 77.2 s · `307/hertz-w2-regression/negative-289e3cdf-{1..4}.nextest.log`: base 289e3cdf = pre-fix negative controls, FAIL by design (nextest 100) · `49-267-refresh-discriminator/windows/candidate-{1,2}/receipt.json`: head c180eb16 (lane sha), passed | YES (39241675, Windows) | **no** |
| #12 `er_briefing_bringup_reconcile_e2e::bound_engine_room_…` | `309/gate-229/cell-scheduled.log` 1/1, `cell-control.log` 1/1 (subject.txt HEAD=**eed9ff36**, Windows) · `309/39241675-plain-red/receipt.json` nextest 100 (red on pre-remedy 39241675 = regression proof), `39241675-plain-control` exit 0, `baseline-red-final` 100, `todlando-windows/control-1` 1/1 | YES (eed9ff36, Windows) | **no** |
| #8–#10 `serving_registry_two_process_int` ×3 | `308-registry-process-lock/windows-validation/green/tests.stderr` (receipt head **e6e9a8ca**, lane sha; 44 tests/5 binaries incl. the 3 + both webserve e2e, all pass) and `red/` negative control 1 failed by design · `308-registry-process-lock/linux-validation/process-regressions.log` 3/3 pass, `negative-control.log` 1 failed by design (receipt.txt: commit **fefc4d64**, lane sha; Linux kitsubito) | **NO** — lane shas only (landed as c9e80511) | **no** |
| #5 `docs_server_e2e::discovery_…` | `hertz-ir136-fixture/linux-v2/nextest.stderr`: 10 tests/2 binaries (twohost_web 7, docs_server_e2e 3) pass, Linux; `handoff.json` commit 84e20ddd; the dir's own tree sha 41ff42f6 is not an object in this repo | ambiguous — handoff names 84e20ddd (ancestor), but the recorded tree sha is not locally resolvable; no Windows execution found | **no** |
| #3 `meet_runtime_tests::three_subnet_rotation_…` | `302/gate-231-712c987f/run2/meet.log` 1/1 (head.txt **712c987f**, Windows) · `302/gate-231-a593ece0/meet.log` 1/1 (a593ece0) · `302/todlando-step2/meet/receipt.json` head 84e359aa + 497-line tracked diff (working tree) · `302/todlando-step2-field/meet-diag` head 0f80fef8 (lane) | YES | **YES (Windows, run2)** |
| #7 `all_bind_scopes_exchange_…` | `302/gate-231-712c987f/run2/mapper.log` 1/1 (712c987f) · `302/todlando-step3/mapper-green` head a593ece0 + 240-line tracked diff, passed; `mapper-red` = regression proof | YES | **YES (Windows, run2)** |
| #1 `consent_changelog_uses_…` | `310-local-update-docs/windows-validation/verify/tests.stderr` PASS (provenance head **e1036ef9**, lane sha; 10/10) · appears only as SKIP in 309 logs | lane sha only; thin CI unit lanes green on head (not a preserved receipt) | via CI unit lanes only |
| #2 `consent_changelog_retains_…` | same 310 verify receipt, PASS | same | same |
| #4 `unavailable_registry_lock_…` | `308/windows-validation/green/tests.stderr` PASS (e6e9a8ca lane) · `308/linux-validation/daemon-servehost-units.log` PASS 13/13 (fefc4d64 lane, Linux) · SKIP-only in 309 logs | lane shas only; CI unit lanes green on head | via CI unit lanes only |
| #11 `update_messages_link_…` | `310/windows-validation/verify/tests.stderr` PASS (e1036ef9 lane) | lane sha only; CI unit lanes green on head | via CI unit lanes only |

Not found in any preserved receipt as an execution on a batch sha: **#8–#10 (spt-store two-process)**, **#5 (docs_server_e2e discovery, Windows)**. Cells #6 and #12 have one Windows execution each on an ancestor (39241675 / eed9ff36) and none on the merged head. **No Linux execution exists for #6 (cfg(windows)) by design; no Linux execution was found for #12.**

### A.4 Corrections to the prior intake at this path
- Prior A6 lists `twohost_web::serves_published_surface_and_refuses_escapes_and_writes` as a new fn; that fn lives in `docs_server_e2e.rs`, pre-exists at ddd7fc7f, and twohost_web.rs gained no test fn.
- Prior "u" row places `unavailable_registry_lock_cannot_publish_an_add` in serving.rs; it is in spt-daemon `src/servehost.rs`.
- Prior A3 cites gate-228 for the spt-store cells; gate-228's p5-seams ran attach/redispatch/rc units, not `serving_registry_two_process_int` (its executions are in `308-registry-process-lock/`).

## SECTION B — Changed seams and their consumers

### B.1 `pub` fn signatures added / removed / changed (full-signature compare at both shas over every changed non-test src file; test modules skipped)

| fn | crate / file | change | commit | consumers at 712c987f (excluding defining file) | consuming TEST crates/binaries | last FULL execution of each consuming test binary |
|---|---|---|---|---|---|---|
| `spt_store::serving::lock_registry_at(&Path) -> io::Result<File>` | spt-store src/serving.rs | **ADDED** | c9e80511 | src: spt-daemon livehost.rs, servehost.rs; tests: spt-store tests/serving_registry_two_process_int.rs + fixtures/serving_registry_worker.rs, spt tests/webserve_attachment_e2e.rs, tests/webserve_cross_node_e2e.rs | `spt-store::serving_registry_two_process_int`, `spt::webserve_attachment_e2e`, `spt::webserve_cross_node_e2e` | all three: lane shas only — e6e9a8ca Windows (`308/windows-validation/green/tests.stderr`: 44/44 incl. both webserve e2e) and fefc4d64 Linux (`308/linux-validation/affected-e2es.log` 2/2, `process-regressions.log` 3/3). On ancestors of the head: **ddd7fc7f** (v0.70.0 golden) |
| `servehost::with_registry_write<R>(…)` (pub(crate)) | spt-daemon src/servehost.rs | **REMOVED** | c9e80511 | none remain (grep 0 at head) | — | — |
| `docshost::live_docs_url() -> Option<String>` | spt-daemon src/docshost.rs | **ADDED** | 4b6b03cc | src: spt-daemon pump/update.rs, spt src/cli.rs; tests by name: none | drives `spt::bin/spt cli::tests` and `spt-daemon notif::tests` (unit) | unit lanes: thin CI on 712c987f green; `310/…/verify/tests.stderr` 10/10 at lane sha e1036ef9 |
| `notif::produce_consent_notif(…)` | spt-daemon src/notif.rs | **SIGNATURE CHANGED**: new param `docs_base: Option<&str>` after `version` | 4b6b03cc | src: spt-daemon grants.rs, lib.rs, pump/update.rs; tests by name: none | none by name (unit `notif::tests` only) | unit lanes on 712c987f (thin CI); no integration consumer references it |
| `pairhost::spawn_meet_rotation(…)` | spt-daemon src/pairhost.rs | **SIGNATURE CHANGED**: return `()` → `-> MeetRotation` | a593ece0 | src: spt-daemon nethost.rs; tests by name: none | none by name; indirect drivers = spt-daemon tests netbroker / netstream / pairjoin / net_worker_starve / mesh_recovery / attach | `302/gate-231-712c987f/run2/` at **712c987f** (Windows): guards 254/254 (spt-net lib + netbroker/netstream/pairjoin), starve 2/2, mesh 5/5, attach 17/17; `302/gate-231-a593ece0/` at a593ece0: daemon-int 29/29 (attach 16, mesh_recovery 5, netbroker 6, netstream 2), spt-net 73/73. No Linux execution found on a batch sha |
| `er309_gate::hold_publication`, `ReconcileObservation::{begin,finish}` (pub(super)) | spt-daemon src/er309_gate.rs (`#[cfg(debug_assertions)]`, product code) | **ADDED** | c0ef9571 / eed9ff36 | src: spt-daemon broker.rs | `spt::er_briefing_bringup_reconcile_e2e` (cell #12) | eed9ff36 Windows (`309/gate-229/cell-*.log`); not on 712c987f |
| `meet_runtime_tests::{observe_future, observe_listener}` (pub(super), `#[cfg(test)]`) | spt-daemon src/pairhost/meet_runtime_tests.rs | ADDED (test-only hooks called from pairhost.rs under cfg(test)) | a593ece0 | pairhost.rs (cfg(test)) | cell #3 | 712c987f Windows (run2 meet 1/1) |

### B.2 `pub` fns whose BODY changed with signature unchanged (hunk-header sweep) — the #272 class

| fn | file | commit | test consumers by name at 712c987f | last FULL execution of each consuming test binary |
|---|---|---|---|---|
| `attach::serve_attach`, `attach::request_attach`, `attach::attach_client_policy` | spt-daemon src/attach.rs | 39241675 (send_effect → send_effect_no_ack at the pending-input drain) | spt-daemon tests: attach, attach_idempotent_replay, controller_lease, dispatch, endpoint_lifecycle, exit_every_reap, inject_control_wedge, input_ack_deadlock, redispatch, redispatch_stall, render_lifecycle, restart_replay_lifetime, transport_death_eof, twohost; spt tests: attach_wedge_e2e, dummy_harness_e2e, engine_room_bringup_e2e | **712c987f** (Windows, `302/gate-231-712c987f/run2/attach.log`): `spt-daemon::attach` 16/16 + `spt::attach_wedge_e2e` 1/1. **39241675** (Windows, `307/gate-228/logs/p5-seams.log` 100/100): attach 16, redispatch 5, redispatch_stall 6, input_ack_deadlock 1, broker 2, spt::bin/spt 67. **ddd7fc7f** for: attach_idempotent_replay, controller_lease, dispatch, endpoint_lifecycle, exit_every_reap, inject_control_wedge, render_lifecycle, restart_replay_lifetime, transport_death_eof, twohost, dummy_harness_e2e, engine_room_bringup_e2e. Linux: ddd7fc7f for all |
| `livehost::spawn_live_host` | spt-daemon src/livehost.rs (204-line churn) | eed9ff36, 84e359aa | spt-daemon tests/daemon_lifecycle_real_brain.rs | `spt-daemon::daemon_lifecycle_real_brain`: **ddd7fc7f**. Unit `livehost::tests` 27/27 at eed9ff36 (`309/gate-229/livehost-unit.log`) and 84e359aa (`309/gate-leak-84e359aa/livehost-unit.log`, cells 1-3) |
| `docshost::docs_url` | spt-daemon src/docshost.rs | 4b6b03cc | spt-daemon tests/docs_server_e2e.rs | `spt-daemon::docs_server_e2e`: Linux run in `hertz-ir136-fixture/linux-v2` is on the 84e20ddd lane, which PREDATES 4b6b03cc → stale for this change; Windows **ddd7fc7f** |
| `servehost::apply_at` (pub(crate)) | spt-daemon src/servehost.rs | c9e80511 | src webproxy.rs; tests none by name | unit `servehost::tests` 13/13 at lane fefc4d64 (Linux) / e6e9a8ca (Windows); thin CI on head |
| `notif::render_via_shell_notif_templates`, `pairhost::respond` | spt-daemon | 4b6b03cc / a593ece0 | none outside defining file | — |

### B.3 Consumer crates whose last full execution predates the seam change (runbook: run in full on both OSes BEFORE hand-off, or carry as declared risk)

| test binary | seam it drives | last full sha | gap |
|---|---|---|---|
| `spt::webserve_attachment_e2e`, `spt::webserve_cross_node_e2e` | `lock_registry_at` (bodies modified in batch) | ddd7fc7f on ancestors; lane shas e6e9a8ca (Win) / fefc4d64 (Linux) | never on the merged head |
| `spt-store::serving_registry_two_process_int` | `lock_registry_at` | never on an ancestor | first ancestor execution = golden |
| `spt-daemon::docs_server_e2e`, `spt-daemon::twohost_web` | `docs_url`, shared `support/serving.rs` fixture | Linux: 84e20ddd lane (pre-4b6b03cc); Windows: ddd7fc7f | stale for 4b6b03cc, c9e80511 |
| `spt-daemon::daemon_lifecycle_real_brain` | `spawn_live_host` | ddd7fc7f | stale for eed9ff36, 84e359aa |
| spt-daemon attach-family int binaries not in gate-228/run2 (attach_idempotent_replay, controller_lease, dispatch, endpoint_lifecycle, exit_every_reap, inject_control_wedge, render_lifecycle, restart_replay_lifetime, transport_death_eof, twohost) + `spt::dummy_harness_e2e`, `spt::engine_room_bringup_e2e` | `serve_attach` / `request_attach` | ddd7fc7f | stale for 39241675 |
| everything above on **Linux** | all seams | ddd7fc7f (only Linux batch-sha evidence is thin-CI unit lanes) | golden is the first Linux run of every integration consumer on the merged head |