fix: the retired flow list's two CI reds — a citation that resolves, and every 82-row ledger figure

- retired-defs/18.api__ListFlowsRequest.ts cited #8715, which never resolved;
  it now names the precedent by its ADR-0087 entry id
  (package-rollback-response-retired). Registry regenerated.
- The runtime route ledger holds 81 rows over 21 domains (derived from the
  table, domains unchanged): the #17111-pinned figure in
  authz-conformance.matrix.ts, the census reading in
  authz-probe-blind-spot.census.ts and the dated note in
  authz-ledger-population.baseline.ts now say so; lint.yml's comment on the
  census gate states its 26-of-82 reading as the one taken when the gate landed.

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Rjy9MeetSfq34PKn81CRiN

Author: claude

.github/workflows/lint.yml

@@ -3586,8 +3586,9 @@ jobs:
       # exited 0; it was caught only because an unrelated gate happened to redden.
       # The file's own package suite is domain-level ("every registered dispatcher
       # domain has at least one ledger entry"), which a shorter list satisfies, and
-      # the cross-ledger guards compare against a UNION that still holds 26 of the
-      # 82 rows' wire patterns from other ledgers. This gate holds the GENERATED
+      # the cross-ledger guards compare against a UNION that held 26 of the then
+      # 82 rows' wire patterns from other ledgers when this gate landed (the
+      # dated reading is in the script's header). This gate holds the GENERATED
       # census sentence above the array to the array's real length, so a deletion
       # reds and a deliberate change shows its digits moving in the same diff.
       # Full-repo state, not diff-shaped, so it runs its real check unconditionally.

packages/qa/dogfood/test/authz-conformance.matrix.ts

@@ -25,7 +25,7 @@
 // dispatcher domain files.
 //
 // The population comes from `packages/rest/src/rest-route-ledger.ts` (83 rows
-// / 18 families) and `packages/runtime/src/route-ledger.ts` (82 rows / 21
+// / 18 families) and `packages/runtime/src/route-ledger.ts` (81 rows / 21
 // domains) because those two are enumerated from a RUNNING server and guarded
 // in both directions by their own conformance tests — so a new family or
 // domain cannot be silently absent from them, and therefore cannot be silently

packages/qa/dogfood/test/authz-ledger-population.baseline.ts

@@ -59,8 +59,9 @@
  * Ledger-sourced population keys with no classifying matrix row.
  *
  * MEASURED 2026-08-31 against `rest-route-ledger.ts` (94 rows / 19 families)
- * and `route-ledger.ts` (80 rows / 21 domains — 82 since the two operator
- * run-lifecycle rows landed, both under the already-classified `/automation`
+ * and `route-ledger.ts` (80 rows / 21 domains — 82 after the two operator
+ * run-lifecycle rows landed, and 81 since #19543 retired the `GET /automation`
+ * flow-list row, all three moves under the already-classified `/automation`
  * domain, so the key arithmetic below is unmoved): 40 keys minted, 6 classified
  * by rows that already pin the same surface through the probe table, 34 here.
  *

packages/qa/dogfood/test/authz-probe-blind-spot.census.ts

@@ -106,7 +106,7 @@
 //     `RestServer.getRoutes()` on a booted server and guarded per route by
 //     `rest-route-ledger.conformance.test.ts`. It reaches all 17 registrars;
 //     this table reaches 1.
-//   `packages/runtime/src/route-ledger.ts`: 82 rows over 21 domains. Its
+//   `packages/runtime/src/route-ledger.ts`: 81 rows over 21 domains. Its
 //     machine contract is DOMAIN-level, by live registry introspection
 //     (`domainRegistry.list()`), the per-route rows being documentation. It
 //     covers all 15 `async handle*(` methods in `http-dispatcher.ts` and all

packages/spec/src/migrations/entries/retired-defs/18.api__ListFlowsRequest.ts

@@ -10,5 +10,7 @@
 // objectstack, objectui (pinned sha and main) and cloud. No carrier key and no
 // authored document, so no tombstone and no D2 conversion — this table plus
 // the D3 semantic entry `automation-flow-list-route-retired` ARE the
-// declaration (the #8715 route-3 shape).
+// declaration — the whole-def route-3 shape, as the precedent entry
+// `package-rollback-response-retired` (and its `api/PackageRollbackResponse`
+// row) recorded it.
 export const entry = 'api/ListFlowsRequest';

packages/spec/src/migrations/registry.ts

@@ -18213,7 +18213,9 @@ export const RETIRED_DEFS_BY_MAJOR: Readonly<Record<number, readonly string[]>>
     // objectstack, objectui (pinned sha and main) and cloud. No carrier key and no
     // authored document, so no tombstone and no D2 conversion — this table plus
     // the D3 semantic entry `automation-flow-list-route-retired` ARE the
-    // declaration (the #8715 route-3 shape).
+    // declaration — the whole-def route-3 shape, as the precedent entry
+    // `package-rollback-response-retired` (and its `api/PackageRollbackResponse`
+    // row) recorded it.
     'api/ListFlowsRequest',
     // #19543 (door ④) — `api/ListFlowsResponse`, the answer of the retired
     // `GET /api/v1/automation` flow list. It declared `FlowSummary[]`, `total`,