ci/woodpecker/pr/ci Pipeline failed
The guard's population is 'basename matches *test*.sh'. That is not a tools/ property, but Direction A scanned only framework/tools/, so a suite in a SIBLING of tools/ was structurally invisible to the guard whose stated purpose is making that impossible. The live specimen, found by @scooby on origin/next: framework/systemd/user/test-fleet-units.sh — a population member by the guard's own definition, named on neither package.json nor ci.yml, and in no exclusion. It is the only such file today. Same shape as #1017's original 17-of-39, reintroduced for one subtree. Three symmetric changes. The scan root moves to the framework. The S2 ci.yml regex widens with it — not cosmetic: S1 is already general, S2 was the only tools-scoped surface, so without it 'enumerate the file' would not be a reachable disposition and an exclusion would be the only way to green. And the directory-exists precondition follows the root it guards. Disposition for the specimen: enumerated, not excluded. Its tmux block self-skips on `command -v tmux && cc`; the rest — the unit-file assertions and `systemd-analyze verify --user` — is real structural coverage that runs in CI today. Measured in a CI shape (/usr/bin minus tmux, cc, systemd-analyze): rc=0. That is strictly better than the two send-message siblings at exclusion lines 31-32, which have no CI-valuable tmux-free half. Needles n9/c5 added, since a widening with no needle is the same silence one layer up. n9 fails against the original guard. c5's scope is narrower than it looks and the comment records the measurement: it passes vacuously on the original and discriminates against the half-patch (scan wide, S2 narrow), which is the realistic future regression. guard, real tree: OK — population 53 (was 52), enumerated 38, excluded 15 needles: 16 passed, 0 failed