timothyandClaude Opus 5 55a7df226e test(785): pin the workflow's TRIGGERS, and sweep the retracted figure by subject ...

Fifth cold review returned MERGEABLE, having reproduced all five of the previous commit's
measurements exactly and verified by execution that all twelve parametrised cases decide for
their labelled reason rather than incidentally. Three residual items, none of which was
coverage claimed and not delivered.

The `on:` trigger was an uncovered channel. `_active_runs` started at `jobs:`, so a workflow
whose triggers no longer include `pull_request` left a perfectly healthy `decisions-guard`
job gating nothing while the proof stayed green. Nothing claimed to cover it, which is why
it was LOW rather than a false coverage claim — but it is two lines and it is now the ninth
disablement case.

`on` parses to the BOOLEAN True in YAML 1.1, not the string `"on"`, so the key is looked up
both ways. Verified which branch is live rather than assuming: pyyaml produces `True` here,
so a lookup of `"on"` alone would have yielded an empty trigger set and fired the assertion
on a correct workflow — a false red that the anti-vacuity check (the unmodified workflow
must still hold) is what catches.

`script.replace("python3", sys.executable)` was unbounded, having been `count=1` on a single
extracted line before the withdrawal. It rewrote every occurrence including inside a path, so
a step spelled `/usr/bin/python3` would have become nonsense and failed with a red blaming
the catalog guard. Now substituted only where `python3` is a bare command word.

And the retracted "1,488 records" figure survived in a second place — the leak guard's
docstring — because the previous sweep went by file rather than by subject. Replaced with the
reproduction and the figure that survives it, the same wording the inventory carries.
`stale-comments-sweep-by-subject-not-verb`.

Two channels remain uncovered and are deliberately not guessed at: a job `if:` whose
expression is false only at run time, and `continue-on-error` as a non-literal expression.
`_falsey`'s docstring already declines these as undecidable outside the runner, and no row,
test name or docstring claims them.

Refs: #785
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-21 21:29:00 +02:00

..

fixtures

feat(610): split the decision corpus into one YAML-frontmatter file per record

2026-07-25 19:45:09 +02:00

__init__.py

feat(521): decision-record parser (decisions_lib)

2026-07-21 02:58:58 +02:00

conftest.py

feat(776): every hook reports that it fired, and the report is measured (#795)

2026-08-14 19:11:05 +00:00

test_bom_guard_detection.py

fix(797): the BOM guard was fail-open wherever xxd is not installed (#798)

2026-08-14 16:50:59 +00:00

test_build_catalog_check_path.py

test(785): pin the workflow's TRIGGERS, and sweep the retracted figure by subject

2026-08-21 21:29:00 +02:00

test_build_catalog.py

fix(603): close four defects found in adversarial review of the stale-after fields

2026-07-25 15:22:50 +02:00

test_check_review_verdict.py

fix(774): cover the WRITE side too, and name the read-side test what it actually is

2026-08-13 23:31:34 +02:00

test_ci_dropped_step_guard.py

fix(756): extend the dropped-step guard to docker-build.yml's required jobs, where a drop is fail-OPEN (#768)

2026-08-10 23:35:08 +00:00

test_ci_image_pin_population.py

fix(775): resolve the record's two competing standards; close the templated-image hole; state the predicate limits

2026-08-13 22:36:08 +02:00

test_ci_release_path_scan_job.py

fix(767): gate the release path on the delimiter ban with a prerequisite job (#770)

2026-08-13 18:04:52 +00:00

test_decisions_lib.py

fix(688): make the n oracle dynamic; correct a tense that asserted false history

2026-08-04 22:35:00 +02:00

test_decisions_validate.py

fix(688): pin p95's inclusivity; drop a stale ratio and hedge the gap width

2026-08-04 23:07:15 +02:00

test_guard_inventory.py

fix(774): the wiring check counted a MENTION, reproducing inside the fix the defect it closed

2026-08-13 22:26:25 +02:00

test_hook_fire_log.py

feat(776): every hook reports that it fired, and the report is measured (#795)

2026-08-14 19:11:05 +00:00

test_jq_preflight.py

test(648): close the mutation gaps round 5 found — two tests passed for the wrong reason

2026-07-26 22:21:07 +02:00

test_merge_consent_base_change.py

fix(632): validate status ROWS, not just the top-level array — the same swallow one level down

2026-07-26 23:38:14 +02:00

test_merge_consent_exemption.py

fix(706,707,711): fence the review-verdict write on the timeline retarget count

2026-08-03 21:41:16 +02:00

test_merge_consent_required_check.py

fix(778): the 200-not-an-array arm had the same lying reason, one branch earlier

2026-08-19 22:50:23 +02:00

test_migration_equivalence.py

feat(610): split the decision corpus into one YAML-frontmatter file per record

2026-07-25 19:45:09 +02:00

test_post_review_verdict.py

fix(778): address the cold review — drop the population filter, grade down three overclaims

2026-08-16 13:20:42 +02:00

test_pr_changed_files.py

fix(756): extend the dropped-step guard to docker-build.yml's required jobs, where a drop is fail-OPEN (#768)

2026-08-10 23:35:08 +00:00

test_prepush_rebase_check_tag_exemption.py

fix(743): re-tense the third stale site, and pin the two surviving mutants

2026-08-06 00:10:45 +02:00

test_prepush_unsets_git_env.py

fix(785): close the re-review's BLOCKER — the leak guard pinned the FIX, not the property

2026-08-21 21:29:00 +02:00

test_prove_fix.py

feat(794): witness a fix's test failing BEFORE the fix, and check the claim in CI (#801)

2026-08-16 10:24:59 +00:00

test_remote_state_inventory.py

fix(778): stop claiming parity with Gitea's glob matcher — classify, or ask

2026-08-19 18:52:18 +02:00

test_worktree_ownership_guard.py

test(785): pin the workflow's TRIGGERS, and sweep the retracted figure by subject

2026-08-21 21:29:00 +02:00