ci: path-literal check scans live gate references; historical gate commands move to currentCommand (#30252)

Gate evidence prose and evidence runs record what ran then, so the check reads only each gate's commands and test files (baseline 53 -> 14). Four evidence-pinned historical commands that named deleted tests are removed from their gates' commands and their runs point at the successor via currentCommand, the manifest's existing mechanism. One live command drops a deleted updater test. The managed-SSH catch-all route is renamed remote-sources and its test joins the route contracts.
2026-10-31 00:57:45 +00:00 · 2026-10-18 00:35:33 -07:00
parent ed3ee7e08a
commit 1e4d65ea51
7 changed files with 101 additions and 118 deletions
@@ -3,45 +3,6 @@
 # pnpm check:path-literal-ratchet --prune
 .github/workflows/agent-state-rules-publish.yml src/main/runtime/readiness-census
 .github/workflows/zcode-credential-contract.yml src/shared/windows-security-descriptor
-config/reliability-gates.jsonc src/main/ipc/pty-ipc-producer-flow-control.test.ts
-config/reliability-gates.jsonc src/main/ipc/pty-wsl-cwd-validation.test.ts
-config/reliability-gates.jsonc src/main/ipc/repos-remote.test.ts
-config/reliability-gates.jsonc src/main/native-chat/agent-session-wire/agent-session-journal-recovery.test.ts
-config/reliability-gates.jsonc src/main/runtime/claude-task-wakeup-indexed-read.test.ts
-config/reliability-gates.jsonc src/main/runtime/orchestration-mailbox-detached-routing.test.ts
-config/reliability-gates.jsonc src/main/runtime/orchestration-mailbox-routing-races.test.ts
-config/reliability-gates.jsonc src/main/runtime/orchestration-mailbox-transport-settlement.test.ts
-config/reliability-gates.jsonc src/main/startup/desktop-startup-ordering.test.ts
-config/reliability-gates.jsonc src/main/startup/secure-dns-census.test.ts
-config/reliability-gates.jsonc src/main/startup/serve-desktop-activation-wiring.test.ts
-config/reliability-gates.jsonc src/main/updater.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/status-bar/ResourceUsageStatusSegment.session-polling.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-command-finished-cleanup.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-deferred-reattach-live-output.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-foreground-agent-routing.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-foreground-agent-sampling.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-fresh-spawn-guards.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-hidden-atlas-recovery.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-hidden-codex-queries.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-hidden-output-restore.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-hidden-snapshot-live-overlap.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-hook-completion-side-effects.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-main-side-effect-authority.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-park-reveal-model-snapshot.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-pending-spawn.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-renderer-risk-repaint.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-replay-payload-handling.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-runtime-owner-spawn-routing.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-stalled-hidden-restore.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-task-complete-dispatch.test.ts
-config/reliability-gates.jsonc src/renderer/src/components/terminal-pane/pty-connection-terminal-input-gating.test.ts
-config/reliability-gates.jsonc src/renderer/src/lib/file-preview-capability-cleanup.test.ts
-config/reliability-gates.jsonc src/renderer/src/store/slices/agent-status-nested-resume.test.ts
-config/reliability-gates.jsonc src/renderer/src/store/slices/agent-status-retained-leak.test.ts
-config/reliability-gates.jsonc src/renderer/src/store/slices/agent-status-tool-assistant-fields.test.ts
-config/reliability-gates.jsonc src/renderer/src/store/slices/repos-all-hosts-folder-workspaces.test.ts
-config/reliability-gates.jsonc src/renderer/src/store/slices/repos-remove-project-purge-leak.test.ts
-config/reliability-gates.jsonc src/renderer/src/store/slices/terminal-write-identity-bailouts.test.ts
 config/scripts/check-layout-writer-ratchets.mjs src/renderer/src/runtime/remote-workspace-frozen/
 config/scripts/pr-layout-oracle-route.mjs src/main/runtime/old-session-tabs-stream/
 config/scripts/pr-layout-oracle-route.mjs src/renderer/src/runtime/remote-workspace-frozen/
@@ -1303,8 +1303,6 @@
      "invariant": "Replay preserves latest revisions, original item order, fences, aliases, submissions, a newer schema winning over damage and cursor cleanup while retaining live items rather than all historical bodies; damage fails the load and deletes nothing.",
      "oracle": "Replay 2,048 16 KiB revisions into one latest item with less than 8 MiB sampled live heap growth; name a future-schema row read past a gap, name the first damage, fail a damaged load with every row kept, and hold no SQLite read snapshot across reduction (a mid-replay checkpoint is not busy). Existing journal and subscriber tests cover replayed content.",
      "commands": [
-        // As the 2026-09-11 evidence run ran it; the recovery test it names went with the read-time repair.
-        "ORCA_BACKGROUND_LAUNCH=1 pnpm test src/main/native-chat/agent-session-journal src/main/native-chat/agent-session-wire/agent-session-history-page.test.ts src/main/native-chat/agent-session-wire/agent-session-history-forward-read-budget.test.ts src/main/native-chat/agent-session-wire/structured-agent-session-subscribers.test.ts src/main/native-chat/agent-session-wire/agent-session-journal-recovery.test.ts",
        "ORCA_BACKGROUND_LAUNCH=1 pnpm test src/main/native-chat/agent-session-journal src/main/native-chat/agent-session-wire/agent-session-history-page.test.ts src/main/native-chat/agent-session-wire/agent-session-history-forward-read-budget.test.ts src/main/native-chat/agent-session-wire/structured-agent-session-subscribers.test.ts",
        "ORCA_BACKGROUND_LAUNCH=1 pnpm test src/main/native-chat/agent-session-journal/journal-streaming-replay.test.ts src/main/native-chat/agent-session-journal/journal-damage.test.ts"
      ],
@@ -1341,7 +1339,8 @@
          "command": "ORCA_BACKGROUND_LAUNCH=1 pnpm test src/main/native-chat/agent-session-journal src/main/native-chat/agent-session-wire/agent-session-history-page.test.ts src/main/native-chat/agent-session-wire/agent-session-history-forward-read-budget.test.ts src/main/native-chat/agent-session-wire/structured-agent-session-subscribers.test.ts src/main/native-chat/agent-session-wire/agent-session-journal-recovery.test.ts",
          "result": "passed",
          "durationSeconds": 7.71,
-          "summary": "245 tests passed across 22 files. Retained-heap oracle fails on baseline at 68.6 MB and passes under 8 MiB with streaming; gap/schema and cursor-cleanup assertions passed."
+          "summary": "245 tests passed across 22 files. Retained-heap oracle fails on baseline at 68.6 MB and passes under 8 MiB with streaming; gap/schema and cursor-cleanup assertions passed.",
+          "currentCommand": "ORCA_BACKGROUND_LAUNCH=1 pnpm test src/main/native-chat/agent-session-journal src/main/native-chat/agent-session-wire/agent-session-history-page.test.ts src/main/native-chat/agent-session-wire/agent-session-history-forward-read-budget.test.ts src/main/native-chat/agent-session-wire/structured-agent-session-subscribers.test.ts"
        },
        {
          "date": "2026-10-02",
@@ -4818,7 +4817,7 @@
      "invariant": "A safely promotable headless serve process is the single app owner. Desktop activation preserves its daemon-backed sessions. On macOS, a CLI-supervised serve update keeps the node-mode parent alive across ShipIt's atomic bundle swap, restarts with the original serve arguments only after the target bundle is present, and clears handoff state only after that target version reports runtime readiness. Once a supervised child exits or fails to start, no late handoff completion may signal it or arm force-kill escalation. Unsupported or failed handoffs leave the current serving owner intact or recover it once without an install retry loop.",
      "oracle": "Unit tests coalesce early activation, preserve daemon and SSH identity, and reproduce the update race with a staged target, old serving child, persistent CLI parent, atomic .app replacement, and replacement readiness message. They assert the parent does not exit for launchd to respawn the old app, the native updater does not launch an interactive GUI, the replacement version is verified before handoff completion, mismatches become durable failures without retries, and unsupported/preflight-failed installs do not invoke native quit or PTY cleanup. Force handoff completion to fail after the replacement child exits and require zero later child signals and zero escalation timers. A joined lock-owner/activation/hydration contract asserts that a forced relaunch opens exactly one window and that the renderer promoted inside the serve process launches zero agent resumes, creates no replacement tab or startup command, and leaves every surviving session record untouched. The Electron journey independently verifies headless promotion retains owner/runtime/daemon/PTY identity and terminal I/O.",
      "commands": [
-        "pnpm exec vitest run --config config/vitest.config.ts src/cli/runtime/launch.test.ts src/main/serve-update-handoff.test.ts src/main/updater.headless-serve-install.test.ts src/main/updater.test.ts src/main/updater.mac-install.test.ts src/main/window/attach-main-window-services.test.ts",
+        "pnpm exec vitest run --config config/vitest.config.ts src/cli/runtime/launch.test.ts src/main/serve-update-handoff.test.ts src/main/updater.headless-serve-install.test.ts src/main/updater.mac-install.test.ts src/main/window/attach-main-window-services.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/cli/runtime/serve-signal-exit-diagnostic.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/startup/serve-desktop-activation.test.ts src/main/startup/single-instance-lock.test.ts src/main/startup/window-all-closed-quit-policy.test.ts src/cli/runtime-client.test.ts src/cli/runtime/websocket-transport.test.ts src/main/runtime/orca-runtime.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/lib/serve-desktop-promotion-session-continuity.test.ts",
@@ -9339,8 +9338,6 @@
      "oracle": "The shared resolver falls back to the workspace root only when the injected existence probe reports the resolved cwd missing and the workspace root present, and never probes floating terminals or a cwd equal to the root. The renderer sends cwdFallback only for fresh local IPC spawns, main honors it only when connectionId and sessionId are absent, WSL UNC paths never engage the probe-based fallback, main returns fallback metadata only after an actual fallback, the IPC transport preserves that metadata, and the connection layer writes a generic notice that omits the missing path. In real interactive Bash and Zsh PTYs, unset PWD and remove a logical symlink while the physical cwd stays usable, requiring OMP to remain there; then delete and recreate the active project path, require extension-enabled and extension-skipping invocations to observe the replacement inode with byte-exact argv and nonzero status preserved, require the parent shell to remain on the stale inode, unset PWD and require recovery through ORCA_WORKTREE_PATH, clear every logical fallback and require an actionable failure without invoking OMP, and finally delete the replacement and require the same for the missing PWD path.",
      "commands": [
        "pnpm exec vitest run --config config/vitest.config.ts src/shared/terminal-startup-cwd.test.ts",
-        // Historical evidence command; the WSL assertions now live in the next command's file.
-        "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-wsl-cwd-validation.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-transport-connect-spawn.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/renderer/src/components/terminal-pane/pty-connection-spawn-and-startup.test.ts",
@@ -9433,7 +9430,8 @@
          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts src/main/ipc/pty-wsl-cwd-validation.test.ts",
          "result": "passed",
          "durationSeconds": 0.9,
-          "summary": "1 test file passed, 225 tests passed; covers main pty:spawn recovery, fallback metadata, and no-flag/reattach provider-error strictness."
+          "summary": "1 test file passed, 225 tests passed; covers main pty:spawn recovery, fallback metadata, and no-flag/reattach provider-error strictness.",
+          "currentCommand": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-spawn-cwd-fallback.test.ts"
        },
        {
          "date": "2026-07-08",
@@ -12544,8 +12542,6 @@
      "invariant": "High-volume terminal output must stay bounded across daemon socket writes, SSH relay writer/decoder/source retention/reconnect, main model and projection admission, runtime metadata, detectors, and tail checks, main-to-renderer in-flight bytes, renderer scheduler queues, and hidden-output restore without starving focused input. Every new SSH session offers V1 and every same-build relay supports it; legacy delivery is reachable only when capability negotiation proves the peer cannot use V1. Negotiated SSH spans remain exact and contiguous through activation, exit, cancellation, recovery, desktop projection, and required remote replacement; provisional activation data cannot project, reconnect may release it only into the exact attempt's private recovery quarantine after contract validation, and exit seals that quarantine against later same-token frames until ordered admission or exact cancellation proof. Reconnect checkpoint capture freezes exact provider-generation/PTy admission, cancels queued old work, and waits for the running raw completion before exposing its accepted checkpoint; timeout or failure detaches only that PTy's old model, makes the checkpoint unavailable, and releases the bounded fence without closing the shared provider, while the same failure outside an active exact migration remains generation-fatal and overlapping reconnects preserve any earlier outstanding fence. Pending renderer projection IDs are capped and compacted across split remainders, exit preparation owns its renderer fence through finalization, exit-time cancellation transfers published projections before proof commit, generation close fences late proof while draining exact projection waiters, closed-generation identity compacts without weakening stale rejection, canceled source-delivery retirement retains at most one ordered token per PTY, and pause/resume targets only the exact provider generation. Additional subscribers cannot stall the owner, while the required legacy primary retains backpressure.",
      "oracle": "The current executable slice injects main-process renderer backlog pressure, then asserts unchanged path-provenance history reuse for pathless output, ordinary terminal-wait detection without a joined-tail allocation and with full prompt-family continuity, per-PTY and total pending-output caps, a 1,024-ID projection cap with split-remainder compaction, preserved sequenced-tail metadata, active-pending protection ahead of background trimming, exact provider-generation pause ownership, renderer exit/data ordering, and ACK-gated in-flight bounds. The negotiation seam proves every initial connection and reconnect offers V1, the same-build relay advertises V1 without launch flags, old clients remain token-free, and method-not-found peers fall back without installing source ACK publication. The joined source-intake/multiplex oracle blocks renderer or headless serialization, admits one snapshot-covered span and one trailing span, requires replacement reservation only after the authoritative sequence is known, advances upstream ACK eligibility exactly to the covered boundary after SnapshotEnd, and delivers then ACKs the trailing span through the ordinary live path without cancellation. Source-range ledger and multiplex seams additionally require cumulative byte ACK 40 then 100 for one 100-byte frame to release exact byte credit without early source settlement, admit a contiguous higher-generation recovered token while the prior token remains unsettled, and reject stale stream or source generations without releasing in-flight byte credit. Replacement reservation rolls back every earlier span on a later failure, commit requires the exact frozen transfer states, and an authoritatively reclaimed covered span rejects commit without local trim authority while rollback removes the reservation idempotently. The exit-deadline oracle publishes a source-backed desktop projection, advances a fake clock to cancellation, and requires one projection transfer, proof commit, preparation, and final exit with no provider close, retained obligation, duplicate finalization, or process-lifetime cancellation tombstone; a second controlled proof remains pending across generation close and must never publish final exit, while both paths release the renderer preparation lease exactly once. The model-migration oracle accepts span A, blocks span B's raw emulator completion, begins disconnect migration, and proves no checkpoint or reconnect attach can remain at A; releasing B advances the exact checkpoint to B and projects B once. Its fake-clock arm reaches the 10-second deadline, requires checkpoint-unavailable, one exact model reset, zero retained admission charge and timers, and no effect from late raw settlement. Its two-PTY failure arm rejects one running raw callback under an active exact migration and requires one checkpoint-unavailable result, one model reset, zero provider closes, retained sibling checkpoint and transport liveness, zero charges and timers, and an unaffected other generation; a non-migrating sibling oracle still requires generation close. The intake additionally closes 2,048 sequential provider generations into one exact range, rejects stale events across that range, and preserves an out-of-order live gap until its own close. Direct-SSH contracts additionally prove activation-response settlement before the first source frame, claim-gated projection under same-decoder-turn response/data delivery, exact early-ACK reservation through send settlement or same-token retry, recovery completion visible before lease-held frames transfers those frames only into the private quarantine and admits no output until exact checkpoint-to-recoveryEnd coverage, invalid-checkpoint restore retention through response settlement followed by fresh-token retry and one live source frame, isolated saturated-subscriber eviction with healthy owner liveness, preserved legacy-primary backpressure, one-write ownership across write(false)/drain, control selection ahead of queued ordinary PTY input with FIFO lanes and bounded fairness, liveness rebasing, failed-exit retention through late ACK or exact recovery, response-settlement cancellation authority, token-scoped exit cancellation, exact checkpoint-to-recoveryEnd continuity, stale-owner one-shot retry, no physical PTY teardown on recovery failure, exact provider-generation closure and once-only cleanup when recovery cancellation publication or proof rejects, 16 MiB-plus-1 MiB decoder caps, charged per-PTY/session retention budgets, and eight-wide isolated reattach. The live Electron perf oracle adds hidden-output floods, renderer scheduler queue depth, dropped-output-zero normal scenarios, and active key latency budgets before promotion.",
      "commands": [
-        // Historical evidence command; producer flow control now lives in the next command's last file.
-        "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-renderer-inflight-credit.test.ts src/main/ipc/pty-global-renderer-credit.test.ts src/main/ipc/pty-output-batching-drain.test.ts src/main/ipc/pty-ipc-producer-flow-control.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-renderer-inflight-credit.test.ts src/main/ipc/pty-global-renderer-credit.test.ts src/main/ipc/pty-output-batching-drain.test.ts src/main/ipc/pty-pending-output-cap.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime-path-candidate-history.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/orca-runtime-tail-wait-memo.test.ts",
@@ -12683,7 +12679,8 @@
          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-renderer-inflight-credit.test.ts src/main/ipc/pty-global-renderer-credit.test.ts src/main/ipc/pty-output-batching-drain.test.ts src/main/ipc/pty-ipc-producer-flow-control.test.ts",
          "result": "passed",
          "durationSeconds": 1.5,
-          "summary": "1 test file(s) passed, 209 tests passed on main@1282f5c2d in a clean checkout."
+          "summary": "1 test file(s) passed, 209 tests passed on main@1282f5c2d in a clean checkout.",
+          "currentCommand": "pnpm exec vitest run --config config/vitest.config.ts src/main/ipc/pty-renderer-inflight-credit.test.ts src/main/ipc/pty-global-renderer-credit.test.ts src/main/ipc/pty-output-batching-drain.test.ts src/main/ipc/pty-pending-output-cap.test.ts"
        },
        {
          "date": "2026-07-10",
@@ -15089,7 +15086,6 @@
      "commands": [
        "pnpm run build:cli && pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-message-delivery-identity.test.ts --reporter=dot --testTimeout=5000",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-routing.test.ts src/main/runtime/orchestration-mailbox-notification-consistency.test.ts src/main/runtime/orchestration-mailbox-delivery.test.ts src/main/ipc/pty-controller-ownership-routing.test.ts src/main/runtime/orchestration/run-coordinator-handle-migration.test.ts src/main/runtime/orchestration/orchestration-run-delivery-db.test.ts src/main/runtime/orchestration/orchestration-worker-dispatch-db.test.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/orchestration/mailbox-pointer-stage.test.ts src/main/daemon/client.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts",
-        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-routing-races.test.ts src/main/runtime/orchestration-mailbox-notification-consistency.test.ts src/main/runtime/orchestration-mailbox-detached-routing.test.ts src/main/runtime/orchestration-mailbox-transport-settlement.test.ts src/main/ipc/pty-controller-ownership-routing.test.ts src/main/runtime/orchestration/run-coordinator-handle-migration.test.ts src/main/runtime/orchestration/orchestration-run-delivery-db.test.ts src/main/runtime/orchestration/orchestration-worker-dispatch-db.test.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/orchestration/mailbox-pointer-stage.test.ts src/main/daemon/client.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-titles.test.ts src/main/runtime/orchestration-mailbox-delivery.test.ts src/main/runtime/orchestration-mailbox-routing.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orca-runtime.test.ts src/main/runtime/terminal-send-stale-leaf-liveness.test.ts src/main/runtime/rpc/methods/orchestration/runs/runs.test.ts src/main/runtime/rpc/methods/orchestration/messaging/send.test.ts src/main/runtime/rpc/methods/orchestration/messaging/check.test.ts",
        "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration/federation-sync.test.ts src/main/runtime/rpc/methods/orchestration/federation/federation.test.ts src/main/runtime/rpc/methods/orchestration/federation/federation-lifecycle-settlement.test.ts --reporter=dot"
@@ -15256,7 +15252,8 @@
          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-routing-races.test.ts src/main/runtime/orchestration-mailbox-notification-consistency.test.ts src/main/runtime/orchestration-mailbox-detached-routing.test.ts src/main/runtime/orchestration-mailbox-transport-settlement.test.ts src/main/ipc/pty-controller-ownership-routing.test.ts src/main/runtime/orchestration/run-coordinator-handle-migration.test.ts src/main/runtime/orchestration/orchestration-run-delivery-db.test.ts src/main/runtime/orchestration/orchestration-worker-dispatch-db.test.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/orchestration/mailbox-pointer-stage.test.ts src/main/daemon/client.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts",
          "result": "passed",
          "durationSeconds": 4.73,
-          "summary": "267 tests passed after the pointer-write path moved to the three-valued WriteSettlement union. New coverage: a dropped in-flight SSH settlement reaches the stager as unverifiable with bytes handed to the transport, a settled write that throws mid-pointer preserves the write-attempted reservation, an Enter whose settlement is lost stays at enter-attempted with no second Enter after restart, a refusal releases the reservation and drains a delivery parked behind its watermark, the production controller refuses before any byte when the routed provider cannot settle, and a census pins the five production IPtyProvider classes and rejects a settlement synthesized from the fire-and-forget write. Each new assertion was verified red against the pre-fix shape."
+          "summary": "267 tests passed after the pointer-write path moved to the three-valued WriteSettlement union. New coverage: a dropped in-flight SSH settlement reaches the stager as unverifiable with bytes handed to the transport, a settled write that throws mid-pointer preserves the write-attempted reservation, an Enter whose settlement is lost stays at enter-attempted with no second Enter after restart, a refusal releases the reservation and drains a delivery parked behind its watermark, the production controller refuses before any byte when the routed provider cannot settle, and a census pins the five production IPtyProvider classes and rejects a settlement synthesized from the fire-and-forget write. Each new assertion was verified red against the pre-fix shape.",
+          "currentCommand": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-routing.test.ts src/main/runtime/orchestration-mailbox-notification-consistency.test.ts src/main/runtime/orchestration-mailbox-delivery.test.ts src/main/ipc/pty-controller-ownership-routing.test.ts src/main/runtime/orchestration/run-coordinator-handle-migration.test.ts src/main/runtime/orchestration/orchestration-run-delivery-db.test.ts src/main/runtime/orchestration/orchestration-worker-dispatch-db.test.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/orchestration/mailbox-pointer-stage.test.ts src/main/daemon/client.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts"
        },
        {
          "date": "2026-08-13",
@@ -15265,7 +15262,8 @@
          "command": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-routing-races.test.ts src/main/runtime/orchestration-mailbox-notification-consistency.test.ts src/main/runtime/orchestration-mailbox-detached-routing.test.ts src/main/runtime/orchestration-mailbox-transport-settlement.test.ts src/main/ipc/pty-controller-ownership-routing.test.ts src/main/runtime/orchestration/run-coordinator-handle-migration.test.ts src/main/runtime/orchestration/orchestration-run-delivery-db.test.ts src/main/runtime/orchestration/orchestration-worker-dispatch-db.test.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/orchestration/mailbox-pointer-stage.test.ts src/main/daemon/client.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts",
          "result": "passed",
          "durationSeconds": 8.22,
-          "summary": "245 tests passed across mailbox identity, durable coordinator-handle migration, insertion-time canonicalization, duplicate-free 51-row ownership branch caps, unrestricted reservation merging, direct and Dispatch pointer suppression, persisted reconciliation, 50-row paging and filtered waits, cross-PTY serialization, lifecycle fencing, bounded daemon and SSH transport settlement, outstanding Deliveries, reminted Dispatch ownership, acknowledgment, cancellation, and bounded pane lookup."
+          "summary": "245 tests passed across mailbox identity, durable coordinator-handle migration, insertion-time canonicalization, duplicate-free 51-row ownership branch caps, unrestricted reservation merging, direct and Dispatch pointer suppression, persisted reconciliation, 50-row paging and filtered waits, cross-PTY serialization, lifecycle fencing, bounded daemon and SSH transport settlement, outstanding Deliveries, reminted Dispatch ownership, acknowledgment, cancellation, and bounded pane lookup.",
+          "currentCommand": "pnpm exec vitest run --config config/vitest.config.ts src/main/runtime/orchestration-mailbox-routing.test.ts src/main/runtime/orchestration-mailbox-notification-consistency.test.ts src/main/runtime/orchestration-mailbox-delivery.test.ts src/main/ipc/pty-controller-ownership-routing.test.ts src/main/runtime/orchestration/run-coordinator-handle-migration.test.ts src/main/runtime/orchestration/orchestration-run-delivery-db.test.ts src/main/runtime/orchestration/orchestration-worker-dispatch-db.test.ts src/main/runtime/orchestration/formatter.test.ts src/main/runtime/orchestration/mailbox-pointer-stage.test.ts src/main/daemon/client.test.ts src/main/daemon/daemon-pty-router.test.ts src/main/daemon/degraded-daemon-pty-provider.test.ts"
        },
        {
          "date": "2026-08-14",
@@ -1,5 +1,6 @@
 import process from 'node:process'
 import { pathToFileURL } from 'node:url'
+import { parse } from 'jsonc-parser'
 import { listTrackedFiles, readTrackedSources, runEntryRatchet } from './ratchet-baseline.mjs'

 // Ratchet on `src/...` path literals in CI config, workflows and e2e code that name nothing. A
@@ -12,6 +13,7 @@ const SOURCE_ROOTS = 'main|renderer|shared|cli|preload|packages|types|wsl-guest'
 const RESOLVED_EXTENSIONS = ['.ts', '.tsx', '.js', '.mjs', '.cjs', '/index.ts']
 // Generated timings; a stale row only skews shard balance and is rewritten by its generator.
 const EXCLUDED_FILES = new Set(['config/scripts/ci-shard-timings.json'])
+const GATE_MANIFEST = 'config/reliability-gates.jsonc'
 // Command strings in manifests and scripts name paths unquoted; in code only quoted literals count.
 const UNQUOTED_ALLOWED = /\.(?:jsonc?|ya?ml|sh|ps1)$/
 // Comments are prose, not references.
@@ -93,8 +95,8 @@ export function extractPathLiterals(rel, text) {

 /**
 * A literal resolves when it names a tracked file or a module (without extension, or a folder
- * with `index.ts`). A non-import may also name a folder or a prefix of a tracked file. Only tracked files count, so local leftovers can't
- * change the verdict.
+ * with `index.ts`). A non-import may also name a folder or a prefix of a tracked file. Only
+ * tracked files count, so local leftovers can't change the verdict.
 */
 export function createPathResolver(trackedFiles) {
  const tracked = new Set(trackedFiles)
@@ -114,13 +116,21 @@ export function createPathResolver(trackedFiles) {
  }
  return (literal, isImport = false) =>
    ['', ...RESOLVED_EXTENSIONS].some((extension) => tracked.has(literal + extension)) ||
-    (!isImport && (hasPrefix(literal) || hasPrefix(`${literal.replace(/\/$/, '')}/`)))
+    (!isImport && hasPrefix(literal))
+}
+
+/** A gate's commands and test files; evidence prose and runs record what ran then. */
+export function liveGateReferences(text) {
+  return (parse(text).gates ?? [])
+    .flatMap((gate) => [...(gate.commands ?? []), ...(gate.testFiles ?? [])])
+    .join('\n')
 }

 export function collectUnresolvedPathLiterals(root = process.cwd()) {
  const resolves = createPathResolver(listTrackedFiles(root, ['src']))
  const entries = []
-  for (const [rel, text] of readTrackedSources(root, SCAN_ROOTS, isScannedPath)) {
+  for (const [rel, source] of readTrackedSources(root, SCAN_ROOTS, isScannedPath)) {
+    const text = rel === GATE_MANIFEST ? liveGateReferences(source) : source
    for (const { literal, isImport } of extractPathLiterals(rel, text)) {
      if (!resolves(literal, isImport)) {
        entries.push(`${rel} ${literal}`)
@@ -4,6 +4,7 @@ import {
  createPathResolver,
  extractPathLiterals,
  isScannedPath,
+  liveGateReferences,
  stripSlashComments
 } from './check-path-literal-ratchet.mjs'

@@ -122,3 +123,25 @@ describe('createPathResolver', () => {
    expect(resolves('src/main/ssh')).toBe(true)
  })
 })
+
+describe('liveGateReferences', () => {
+  it('reads every gate command and test file, never evidence prose or evidence runs', () => {
+    const manifest = `{
+      // a comment
+      "gates": [{
+        "commands": ["vitest run src/main/kept.test.ts"],
+        "testFiles": ["src/main/listed.test.ts"],
+        "evidence": "once ran src/main/prose.test.ts",
+        "evidenceRuns": [{
+          "command": "vitest run src/main/ran-then.test.ts",
+          "currentCommand": "vitest run src/main/kept.test.ts"
+        }]
+      }]
+    }`
+    const literals = extractPathLiterals(
+      'config/reliability-gates.jsonc',
+      liveGateReferences(manifest)
+    ).map(({ literal }) => literal)
+    expect(literals).toEqual(['src/main/kept.test.ts', 'src/main/listed.test.ts'])
+  })
+})
@@ -1,57 +0,0 @@
-import { describe, expect, it } from 'vitest'
-import { existsSync, readdirSync } from 'node:fs'
-import { join, resolve } from 'node:path'
-import { PR_E2E_SOURCE_ROUTES, selectPrE2eSpecs } from './pr-e2e-source-routing.mjs'
-
-const projectDir = resolve(import.meta.dirname, '../..')
-const MANAGED_SSH_SPEC = /^tests\/e2e\/ssh-orcad-/
-
-function selectsManagedSshLane(file) {
-  return selectPrE2eSpecs([file]).some((spec) => MANAGED_SSH_SPEC.test(spec))
-}
-
-describe('managed-SSH remote fallback route', () => {
-  it('gives every managed-SSH spec a source route', () => {
-    const routed = new Set(PR_E2E_SOURCE_ROUTES.flatMap((route) => route.specs))
-    const specs = readdirSync(join(projectDir, 'tests/e2e'))
-      .filter((name) => /^ssh-orcad-.*\.spec\.ts$/.test(name))
-      .map((name) => `tests/e2e/${name}`)
-    expect(specs.length).toBeGreaterThan(0)
-    expect(specs.filter((spec) => !routed.has(spec))).toEqual([])
-  })
-
-  it('starts the lane for remote product sources no hand-kept route names', () => {
-    for (const file of [
-      // #30130 and #30120 merged with the lane skipped.
-      'src/main/ipc/ssh.ts',
-      'src/cli/runtime/serve-orcad-launch.ts',
-      'src/main/orcad/orcad-entry.ts',
-      'src/main/ssh/ssh-connection.ts',
-      'src/main/ipc/runtime-environment-status-probe.ts',
-      'src/main/ipc/orcad-runtime-lifecycle-handlers.ts',
-      'src/shared/protocol-version.ts',
-      'src/shared/remote-runtime-client-error-classification.ts',
-      // #30047 and #30060: sidebar sleep and project removal.
-      'src/renderer/src/components/sidebar/sleep-worktree-flow.ts',
-      'src/renderer/src/components/sidebar/ssh-host-remove-resolution.ts',
-      'src/renderer/src/store/repos/repo-removal.ts'
-    ]) {
-      expect(existsSync(join(projectDir, file)), file).toBe(true)
-      expect(selectsManagedSshLane(file), file).toBe(true)
-    }
-  })
-
-  it('leaves unit tests and local-only sources alone', () => {
-    for (const file of [
-      'src/main/ssh/ssh-connection.test.ts',
-      'src/main/ipc/ssh.test.ts',
-      'src/main/daemon/daemon-server.ts',
-      'src/main/runtime/rpc/methods/accounts.ts',
-      'src/renderer/src/components/sidebar/WorktreeCard.tsx',
-      'src/renderer/src/store/repos/repo-ordering.ts',
-      'docs/STYLEGUIDE.md'
-    ]) {
-      expect(selectsManagedSshLane(file), file).toBe(false)
-    }
-  })
-})
@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest'
-import { existsSync, readFileSync } from 'node:fs'
+import { existsSync, readdirSync, readFileSync } from 'node:fs'
 import { join, resolve } from 'node:path'
 import { parse } from 'yaml'
 import {
@@ -482,3 +482,53 @@ describe('orcad-e2e-routing', () => {
    }
  })
 })
+
+function selectsManagedSshLane(file) {
+  return selectPrE2eSpecs([file]).some((spec) => spec.startsWith(MANAGED_SSH_E2E_SPEC_PREFIX))
+}
+
+describe('managed-SSH remote sources routing', () => {
+  it('gives every managed-SSH spec a source route', () => {
+    const routed = new Set(PR_E2E_SOURCE_ROUTES.flatMap((route) => route.specs))
+    const specs = readdirSync(join(projectDir, 'tests/e2e'))
+      .filter((name) => /^ssh-orcad-.*\.spec\.ts$/.test(name))
+      .map((name) => `tests/e2e/${name}`)
+    expect(specs.length).toBeGreaterThan(0)
+    expect(specs.filter((spec) => !routed.has(spec))).toEqual([])
+  })
+
+  it('starts the lane for remote product sources no hand-kept route names', () => {
+    for (const file of [
+      // #30130 and #30120 merged with the lane skipped.
+      'src/main/ipc/ssh.ts',
+      'src/cli/runtime/serve-orcad-launch.ts',
+      'src/main/orcad/orcad-entry.ts',
+      'src/main/ssh/ssh-connection.ts',
+      'src/main/ipc/runtime-environment-status-probe.ts',
+      'src/main/ipc/orcad-runtime-lifecycle-handlers.ts',
+      'src/shared/protocol-version.ts',
+      'src/shared/remote-runtime-client-error-classification.ts',
+      // #30047 and #30060: sidebar sleep and project removal.
+      'src/renderer/src/components/sidebar/sleep-worktree-flow.ts',
+      'src/renderer/src/components/sidebar/ssh-host-remove-resolution.ts',
+      'src/renderer/src/store/repos/repo-removal.ts'
+    ]) {
+      expect(existsSync(join(projectDir, file)), file).toBe(true)
+      expect(selectsManagedSshLane(file), file).toBe(true)
+    }
+  })
+
+  it('leaves unit tests and local-only sources alone', () => {
+    for (const file of [
+      'src/main/ssh/ssh-connection.test.ts',
+      'src/main/ipc/ssh.test.ts',
+      'src/main/daemon/daemon-server.ts',
+      'src/main/runtime/rpc/methods/accounts.ts',
+      'src/renderer/src/components/sidebar/WorktreeCard.tsx',
+      'src/renderer/src/store/repos/repo-ordering.ts',
+      'docs/STYLEGUIDE.md'
+    ]) {
+      expect(selectsManagedSshLane(file), file).toBe(false)
+    }
+  })
+})
@@ -253,10 +253,8 @@ export const PR_E2E_SOURCE_ROUTES = [
        ))
  },
  {
-    // Why a fallback: hand-kept routes missed #30130 and #30120, so the lane skipped. Scoped to the
-    // managed-host transport, server and wire contracts (about 20% of commits, not the 37% that
-    // also counted rpc/, daemon/ and renderer runtime) to keep the 2x17 min lane affordable.
-    id: 'ssh.orcad-remote-fallback',
+    // Why: hand-kept routes missed #30130 and #30120; scoped to managed-host code to bound lane cost.
+    id: 'ssh.orcad-remote-sources',
    specs: [
      'tests/e2e/ssh-orcad-paired-phone-projects.spec.ts',
      'tests/e2e/ssh-orcad-retained-upgrade-state.spec.ts',