fix(wake): #984 fatal source guard + #985 absorb re-scan — #973 follow-up batch (#1001)

Co-authored-by: mos-dt-0 <[email protected]>

packages/mosaic/framework/tools/wake/validate-973/validate-973.sh

@@ -4,8 +4,8 @@
 #
 #   0. instrument self-test (microtest) — no validate evidence is trusted
 #      before the instrument itself has been proven, including its abort arms.
-#   1. expected set: 261 coordinates from the FROZEN artifact (+3 header
-#      shift), count asserted against the number declared below BEFORE any
+#   1. expected set: 261 coordinates from the FROZEN artifact (+7 header
+#      shift: 3 converter lines + 4 #984 guard lines), count asserted against the number declared below BEFORE any
 #      suite runs.
 #   2. static inventory: converted call sites re-derived from SOURCE TEXT,
 #      must equal the expected set exactly (amendment ONE, leg 1 — the
@@ -33,7 +33,8 @@
 #      site's ledger row must already be present (the append lands before the
 #      grep).
 #   6. residual sweep: the denominator's own classifier finds zero unconverted
-#      verdict greps in the suites — and six per-form plants in the same run.
+#      verdict greps in the suites — and eight plants (six per-form + two
+#      absorb-branch probes, #985) in the same run.
 #
 # Output discipline (A10): every line that reports on a suite names the file
 # under test; exit codes are reported before failure counts.
@@ -180,8 +181,15 @@ while read -r helper site form; do
     bad="$bad no-ARMED-line"
   printf '%s\n' "$out" | grep -q "WAKE-ASSERT ABORT: ${helper} at ${site}: grep exit" ||
     bad="$bad no-ABORT-line"
-  printf '%s\n' "$out" | grep -Eq "$(sentinel_for "$f")" &&
-    bad="$bad sentinel-emitted"
+  # AND-polarity check (a match is the defect): a grep error (rc>=2) must be
+  # its own loud arm — it cannot fall through as "no sentinel = pass".
+  rc_sent=0
+  printf '%s\n' "$out" | grep -Eq "$(sentinel_for "$f")" || rc_sent=$?
+  case "$rc_sent" in
+  0) bad="$bad sentinel-emitted" ;;
+  1) : ;;
+  *) bad="$bad sentinel-grep-error-rc=$rc_sent" ;;
+  esac
   grep -q "^${helper} ${site}\$" "$aled" ||
     bad="$bad no-ledger-row"
   if [ -z "$bad" ]; then