fix(wake): #944 path becomes a hard-locator arm — detector-shape actionable entries can now pass the §2.1 gate + version 0.6.14

The _has_hard_locator gate tested only repo+issue / 40-hex sha / file —
the forge locator vocabulary. detector.sh (A1) builds board_file locators
as kind/id/observed_hash + path (+ snapshot_sha/_ts when attested, #940):
zero keys in common, so a class=actionable board_file entry could NEVER
pass and every heartbeat-planning delta dead-lettered (live seqs 63/68,
dragon-lin, 2026-07-30). Latent since #920; the #920 harness pinned the
detector pilot shape as its malformed example, ratifying the gap.

Fix: `path` becomes a hard-locator arm — and ONLY path. It carries the
same one-call re-verify precision as `file` (re-read <path>; upgrades to
git show <snapshot_sha>:<path> when snapshot-attested). Deliberate
NON-arms: observed_hash (content hash, not an address) and bare path-less
snapshot_sha (would widen the gate past the board_file vocabulary —
review-adopted criterion).

Quarantine is a render-time filter (entries never leave pending.jsonl;
dead-letter.jsonl is ledger + alarm-dedup only), so existing UNCONSUMED
dead-letters re-deliver automatically on the first post-upgrade drain.
Consumed-past dead-letters are not requeued.

Tests: Q11 positive control renders the live seq-68 entry VERBATIM as
CLAIM@seq (real detector emission, not a hand-built dict); negative
controls assert address-free and bare path-less snapshot_sha siblings
still quarantine — the snapshot_sha control at all THREE lengths the
detector's attestation validation ^[0-9a-f]{7,64}$ admits (7-char
abbreviation, 40-hex, 64-char sha-256), so it distinguishes "no arm"
from "arm present but length-gated" (review finding E1). Q1/Q6–Q9
fixtures moved off the now-valid path-bearing shape. RED at base:
exactly the 8 Q11 assertions fail; Q1–Q10 pass under both digests.

Closes #944

Co-Authored-By: Claude Fable 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01NsKce8iZuSuRnu3gVMCBKB
Written-by: pepper (sb-it-1-dt)

packages/mosaic/framework/tools/wake/digest.sh

@@ -25,8 +25,8 @@
 #     sufficiency NEVER exempts a consequential action from its live gate.
 #
 # HARD LOCATORS (§2.1): every actionable claim MUST carry a precise locator
-# (repo + issue#, a 40-char SHA, file:anchor, or path — #944) so re-verification
-# is ONE targeted call. A missing locator = malformed ACTIONABLE entry = FAIL-LOUD.
+# (repo + issue#, a 40-char SHA, or file:anchor) so re-verification is ONE
+# targeted call. A missing locator = malformed ACTIONABLE entry = FAIL-LOUD.
 #
 # #920 (per-entry quarantine — fail-loud WITHOUT head-of-line blocking): a
 # render-refused entry (actionable-tier, no hard locator) is QUARANTINED — durably

packages/mosaic/framework/tools/wake/manifest.txt

@@ -341,12 +341,7 @@
 #              as CLAIM@seq — and Q1/Q6-Q9 fixtures moved off the now-valid
 #              path-bearing shape onto genuinely address-free shapes,
 #              amending the #920-era ruling that had pinned the live pilot's
-#              own locator shape as the malformed example). Doc follow-up:
-#              #948 amends CONVERGED-DESIGN.md §2.1 to add `path` to the
-#              hard-locator enumeration and to state the operative test as
-#              "one targeted call, never a search" (NOT "pins the observed
-#              state") — sequenced AFTER the reseed so the edit itself is a
-#              live delivery test of the fixed gate.
+#              own locator shape as the malformed example).
 component=wake
 version=0.6.14
 

packages/mosaic/framework/tools/wake/test-wake-digest-quarantine.sh

@@ -14,10 +14,9 @@
 #          {kind,id,path,observed_hash} as the malformed case — ratifying a gate
 #          the detector's own locators could never satisfy (every actionable
 #          heartbeat-planning delta dead-lettered; live seqs 63/68). #944 amends
-#          that ruling: `path` is now a hard-locator arm — and ONLY path;
-#          bare snapshot_sha is deliberately NOT an arm, Q11(d) asserts it
-#          still quarantines — so the quarantine fixtures here and in Q6-Q9
-#          use genuinely ADDRESS-FREE shapes instead.]
+#          that ruling: `path` and 40-hex `snapshot_sha` are now hard-locator
+#          arms (see Q11), so the quarantine fixtures here and in Q6-Q9 use
+#          genuinely ADDRESS-FREE shapes instead.]
 #   Q2 (b) ENUM-AS-ORIENTATION: a reconciler enumeration (locators.reconciled==
 #          true) renders as an ORIENTATION-tier pointer and does NOT exit-4 / is
 #          NOT quarantined. RED baseline: reconciled `actionable` + soft locators
@@ -168,11 +167,7 @@ echo "== Q2 (b): reconciler enumeration (reconciled:true) renders ORIENTATION-ti
   unset WAKE_AGENT
   f="$TMP_ROOT/q2.jsonl"
   # A reconciler enumeration: store class actionable (unchanged) + reconciled marker.
-  # ADDRESS-FREE on purpose (#944 F1): no path/file/sha/repo+issue — the reconciled
-  # exemption must be the ONLY thing keeping this entry out of quarantine, so the
-  # exemption is proven load-bearing AT THE GATE (mutation-killable), not merely at
-  # the tier label. (Q3's ENUM-C* stay path-bearing: reconciled + valid-locator mix.)
-  printf '%s\n' '{"observed_seq":5,"class":"actionable","locators":{"kind":"repo","id":"ENUM-B","observed_hash":"cafe1234","reconciled":true},"emit_ts":1}' >"$f"
+  printf '%s\n' '{"observed_seq":5,"class":"actionable","locators":{"kind":"repo","id":"ENUM-B","path":"BOARD.md","observed_hash":"cafe1234","reconciled":true},"emit_ts":1}' >"$f"
   err="$TMP_ROOT/q2.err"
   out="$("$DIGEST" render --from-file "$f" --agent default 2>"$err")"
   rc=$?