test(mosaic): gate #797 ledger upgrade-survival + harden manifest parity (#791)

Fold the Mos-elevated #797 Runtime-Ledger survival sentinel into #791 PR1 and
harden the .txt-format parity test per the accepted-format conditions.

- framework-manifest.txt: annotate the existing fleet/run/** operator carve-out
  to name the #797 ledger (fleet/run/sessions/) so it reads as load-bearing.
  The glob already matches the #797 spec exactly — no location divergence.
- HARD GATE (test-upgrade-manifest-guard.sh): seed a populated ledger
  (events.ndjson journal + ledger.json projection, 0600 under 0700) as an
  operator sentinel; assert byte-identical + mtime-unchanged + dir-perms
  unchanged after a keep-mode upgrade. Relabel the prune check as the explicit
  negative control. 48 -> 58 checks.
- Parity (manifest-parity.spec.ts): add format-edge fixtures driven through
  BOTH resolvers via MANIFEST_FILE — comments/blanks/whitespace, duplicate and
  overlapping globs (deny-wins), section/glob-ordering independence, and an
  explicit UNKNOWN->operator negative probe; add ledger probe paths.
- manifest.spec.ts: isolate the carve-out's load-bearing value with a resolver
  red->green — under a hypothetical fleet/** framework glob, the ledger is
  pruned WITHOUT the fleet/run/** carve-out and protected WITH it (deny-wins).

Gates: typecheck, lint, format:check green; mosaic vitest 1069 passed;
HARD GATE 58/58; migration 21/21. Commits forward on 34e55d4a (no rebase).

Part of #791
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

packages/mosaic/framework/tools/quality/scripts/test-upgrade-manifest-guard.sh

@@ -27,7 +27,8 @@ SECRET='SUPER-SECRET-TOKEN-do-not-log-3f9a'
 seed_home() {
   local H="$1"
   mkdir -p "$H/agents" "$H/policy" "$H/memory" "$H/tools/_lib" \
-           "$H/fleet/agents" "$H/harvester" "$H/unknown-operator-dir" "$H/guides"
+           "$H/fleet/agents" "$H/fleet/run/sessions" "$H/harvester" \
+           "$H/unknown-operator-dir" "$H/guides"
   printf '# persona\n' > "$H/SOUL.md"          # marks a recognized existing install → keep mode
   printf 'MODEL=opus\n' > "$H/agents/coder0.conf"
   printf '# operator policy\n' > "$H/policy/custom.md"
@@ -39,6 +40,23 @@ seed_home() {
   printf '# harvester SOP\n' > "$H/harvester/sop.md"
   printf 'operator data the manifest never anticipated\n' > "$H/unknown-operator-dir/x"
   printf 'version: 1\nagents:\n  - name: mine\n' > "$H/fleet/my-fleet.yaml"
+
+  # #797 Runtime Session Ledger (Mos-elevated to a #791 PR1 merge-blocker): a
+  # populated ledger under fleet/run/sessions/ must survive the upgrade — a
+  # runtime ledger an upgrade rsync can wipe is worthless. Seed it exactly as
+  # #797 writes it: a non-empty append journal + a non-empty compacted
+  # projection, files 0600 under a 0700 dir.
+  printf '%s\n%s\n%s\n' \
+    '{"seq":1,"kind":"session.spawn","node":"sess-42","generation":7}' \
+    '{"seq":2,"kind":"lease.grant","node":"sess-42","lease":"web1"}' \
+    '{"seq":3,"kind":"dispatch.create","from":"sess-42","to":"disp-9"}' \
+    > "$H/fleet/run/sessions/events.ndjson"
+  printf '%s\n' \
+    '{"generation":7,"nodes":[{"id":"sess-42","kind":"session"}],"edges":[{"from":"sess-42","to":"disp-9","kind":"dispatch"}]}' \
+    > "$H/fleet/run/sessions/ledger.json"
+  chmod 0700 "$H/fleet/run" "$H/fleet/run/sessions"
+  chmod 0600 "$H/fleet/run/sessions/events.ndjson" "$H/fleet/run/sessions/ledger.json"
+
   # A retired framework file inside a shipped subtree (absent from source) — must be pruned.
   printf '# retired guide\n' > "$H/guides/RETIRED-OLD-GUIDE.md"
   echo 3 > "$H/.framework-version"
@@ -55,6 +73,9 @@ OPERATOR_SENTINELS=(
   "harvester/sop.md"
   "unknown-operator-dir/x"
   "fleet/my-fleet.yaml"
+  # #797 Runtime Session Ledger — populated journal + projection must survive.
+  "fleet/run/sessions/events.ndjson"
+  "fleet/run/sessions/ledger.json"
 )
 
 run_matrix() {
@@ -69,6 +90,10 @@ run_matrix() {
     stat -c %Y "$H/$rel" > "$E/$(echo "$rel" | tr / _).mt"
   done
 
+  # Snapshot the ledger directory permission bits (#797 assert: perms unchanged).
+  local before_dirperm after_dirperm
+  before_dirperm=$(stat -c %a "$H/fleet/run/sessions")
+
   # The upgrade under test (keep + sync-only = the `mosaic update` reseed path).
   MOSAIC_HOME="$H" MOSAIC_INSTALL_MODE=keep MOSAIC_SYNC_ONLY=1 "$@" bash "$INSTALL" >"$OUT" 2>&1
 
@@ -84,10 +109,18 @@ run_matrix() {
       "[ '$before_mt' = '$after_mt' ]"
   done
 
-  # Positive controls: the framework tree still updates, retired file pruned.
-  chk "[$label] framework file present after upgrade (guides synced)" \
+  # #797 assert 7: the ledger directory's permission bits are unchanged.
+  after_dirperm=$(stat -c %a "$H/fleet/run/sessions" 2>/dev/null || echo MISSING)
+  chk "[$label] ledger dir perms unchanged (#797): $before_dirperm" \
+    "[ '$before_dirperm' = '$after_dirperm' ]"
+
+  # Positive controls / negative controls — prove the test discriminates: the
+  # upgrade DOES write and prune framework-owned paths, so the operator sentinels
+  # (incl. the #797 ledger) survive because of the manifest, not because the
+  # upgrade is a no-op.
+  chk "[$label] positive control: framework file present after upgrade (guides synced)" \
     "[ -f '$H/guides/E2E-DELIVERY.md' ]"
-  chk "[$label] retired framework file inside a subtree is pruned" \
+  chk "[$label] negative control: retired framework file inside a subtree IS pruned" \
     "[ ! -f '$H/guides/RETIRED-OLD-GUIDE.md' ]"
   chk "[$label] manifest itself is installed" "[ -f '$H/framework-manifest.txt' ]"