fix(wake): #952 quarantine-audit clean sweep names BOTH unprovable residual classes (#967)

Closes #952.

GATE RECORD: review CLEAR at this exact head (author != reviewer, pre-registered diff-blind checks) + terminal-green CI at this exact head + queue guard clear.
CI CAVEAT (#973): green on the wake suites is currently WEAKER THAN IT LOOKS, IN BOTH DIRECTIONS. grep error/spawn exit codes are read as absence across 257 assertion sites in six idiom forms; 36 inverted (&&-fail) sites — including 19 credential-security canaries — fail toward GREEN under load. These greens were obtained on solo reruns after load-correlated FALSE reds (2115/2116/2118; main itself was red). This merge's safety therefore rests on the CONTENT review, not on the green. Remediation charter fa551c2d0 is authored and in flight.

Co-authored-by: mos-dt-0 <[email protected]>

packages/mosaic/framework/tools/wake/store.sh

@@ -110,9 +110,13 @@ Commands:
                                          found); --repair removes exactly those
                                          rows (atomic, loud). The dead-letter
                                          ledger itself is NEVER modified (it is
-                                         history). Rows whose dead-letter evidence
-                                         was pruned are NOT provable and are
-                                         never touched.
+                                         history). TWO residual classes are
+                                         unprovable and never touched (#952):
+                                         rows whose dead-letter evidence was
+                                         pruned away, AND rows whose surviving
+                                         evidence extracts an empty
+                                         observed_hash (it can never satisfy
+                                         the four-field conviction match).
   cursors                                Print observed_seq / consumed_seq / depth.
 
 Environment:
@@ -563,10 +567,17 @@ cmd_quarantine_sync() {
 # it on (kind, id, observed_seq, observed_hash) AND row.observed_seq <=
 # consumed_seq: the per-key max_by merge means the surviving row's provenance IS
 # that quarantined entry (a healed row differs in seq/hash and never matches).
-# PROVABILITY BOUND: a row whose dead-letter evidence was pruned/rotated away is
-# NOT provable and is never touched — this audit only ever removes what the
-# ledger can convict. The dead-letter ledger itself is history and is NEVER
-# modified here.
+# PROVABILITY BOUND — TWO residual classes, both unprovable (#952): (1) a row
+# whose dead-letter evidence was pruned/rotated away — no evidence to convict
+# on; (2) a row whose dead-letter evidence SURVIVES but extracts an empty
+# observed_hash (e.g. a deliberately non-conformant locator: nested
+# .locators.* with no observed_hash key) — evidence exists but can never
+# satisfy the four-field match, because _record_last_consumed only ever writes
+# rows with a NON-empty hash. Neither class is touched — this audit only ever
+# removes what the ledger can convict, and the clean-sweep message names BOTH
+# classes: "no evidence" and "evidence unusable" are different operator
+# conclusions. The dead-letter ledger itself is history and is NEVER modified
+# here.
 cmd_quarantine_audit() {
   local repair=0
   while [ $# -gt 0 ]; do
@@ -605,7 +616,7 @@ cmd_quarantine_audit() {
       )) | length) > 0)
   ' "$rec" 2>/dev/null || true)"
   if [ -z "$false_rows" ]; then
-    echo "store.sh quarantine-audit: OK — no provably-false consumed-hash rows (rows without surviving dead-letter evidence are not provable and were not judged)"
+    echo "store.sh quarantine-audit: OK — no provably-false consumed-hash rows. Two residual classes are unprovable and were NOT judged: rows whose dead-letter evidence was pruned/rotated away (no evidence to convict on), and rows whose surviving dead-letter evidence extracts an empty observed_hash (evidence exists but can never satisfy the four-field conviction match)."
     return 0
   fi
   local n row