fix(wake): #952 quarantine-audit clean sweep names BOTH unprovable residual classes (#967)

Closes #952. GATE RECORD: review CLEAR at this exact head (author != reviewer, pre-registered diff-blind checks) + terminal-green CI at this exact head + queue guard clear. CI CAVEAT (#973): green on the wake suites is currently WEAKER THAN IT LOOKS, IN BOTH DIRECTIONS. grep error/spawn exit codes are read as absence across 257 assertion sites in six idiom forms; 36 inverted (&&-fail) sites — including 19 credential-security canaries — fail toward GREEN under load. These greens were obtained on solo reruns after load-correlated FALSE reds (2115/2116/2118; main itself was red). This merge's safety therefore rests on the CONTENT review, not on the green. Remediation charter fa551c2d0 is authored and in flight. Co-authored-by: mos-dt-0 <[email protected]>
2026-07-30 23:25:34 +00:00
parent 8d1d6e5e76
commit 47f8689231
3 changed files with 92 additions and 9 deletions
@@ -446,8 +446,27 @@
 #              reconcile.sh (+ test-wake-preimage.sh P1-P17; P13-P17 are the
 #              #964 re-verdict regression needles: symlinked store, live
 #              secret value, polarity, ledger deletion, allowlist-symlink).
+#   0.7.1  #952 quarantine-audit clean-sweep message named only ONE of the
+#              two unprovable residual classes ("rows without surviving
+#              dead-letter evidence"), so an operator reading the OK concluded
+#              NO evidence exists when evidence can exist and be UNUSABLE: a
+#              surviving dead-letter row whose locator extracts an empty
+#              observed_hash (live specimen: mos-dt seq 13,
+#              bench/malformed-locator-test, "deliberately non-conformant")
+#              can never satisfy the four-field conviction match, because
+#              _record_last_consumed only writes rows with a NON-empty hash.
+#              WORDING-ONLY fix (measurement defect, #951 review finding 1):
+#              THREE surfaces — the clean-sweep message, the PROVABILITY
+#              BOUND comment, and (second commit, author-side self-catch)
+#              the usage() help text — now name both classes; the
+#              conviction predicate is UNCHANGED.
+#              Test T17 drives the real writer flow and plants the verbatim
+#              live specimen (nested .locators.*, NO observed_hash key) —
+#              never a hand-built flat dead-letter row, which would make the
+#              audit's correct non-conviction look exactly like the defect
+#              under hunt (the #951 review's false-defect near-miss).
 component=wake
-version=0.7.0
+version=0.7.1

 # Watch-list schema this component consumes, and the INCLUSIVE range of
 # schema_version values it supports. A wake-watch-list.json whose schema_version