@@ -119,7 +119,7 @@
 - 停摆永不自愈,按梯度复位、三次即判不可靠重派;报告丢失时按草稿 PR 直接验收。
 - 复核对 GitHub 核验 ⛔ 不对自述核验,逐项过清单并亲核形态、范围与整包价值密度。
 - CI 收敛读数只属于复核侧;判决三种:验收落卡、返工最多两轮、升级走决策通道。
-- 验收后取路径面,命中规则层即分叉 ⛔ 不翻正式不入队;Tier S 席内达档复核 PASS 在案后入队。
+- 验收后取路径面,命中规则层即分叉 ⛔ 不翻正式不入队;Tier S 席内达档复核 PASS 后入队。
 - 受管面 PR 留 draft 并向两个授权批准账户请审;契约卡无同形复核记录 PASS ⛔ 禁止入队。
 - 入队资格是每一个检查全绿 ⛔ 不是必查子集;碰生成物的 PR 入队前先同步再重生成。
 - 唯一例外:源码自述 pushed 上按设计而红、不跑 `merge_group`、评论记明门与因,三条全立。
 
@@ -3394,6 +3394,12 @@ async function selfTest() {
   // register governs, and what that gate requires the prose to say.
   assert('the-declared-form-is-neither-an-exact-nor-a-glob-value', !GOVERNED_SURFACES.some((s) => ROOT_FILE_WATCH_HINTS.includes(s.exact) || ROOT_FILE_WATCH_HINTS.includes(s.glob)));
 
+  // ── subject → PR (both GitHub spellings; the trailing parenthetical wins) ─
+  assert('squash-subject', pullNumberFromSubject('fix(api): envelope the error paths (#9456)') === 9456);
+  assert('merge-subject', pullNumberFromSubject('Merge pull request #123 from x/y') === 123);
+  assert('mid-title-issue-citation-is-not-the-pr', pullNumberFromSubject('docs: checklist names the renamed check run (#9420) (#9490)') === 9490);
+  assert('no-pr-in-subject', pullNumberFromSubject('chore: direct push') === null);
+
   // ── the two landing tiers (#19133, ruled 2026-09-18) ─────────────────────
   //
   // Membership is pinned above and unchanged; what this battery pins is the
@@ -3435,12 +3441,6 @@ async function selfTest() {
   assert('and-null-once-every-hit-is-lifted', allLifted.governed === false && allLifted.tier === null, JSON.stringify(allLifted.tier));
   assert('the-tier-words-name-the-landing-each-waits-for', /GOVERNED_APPROVERS/.test(GOVERNED_TIERS.H.landing) && /Contract review/.test(GOVERNED_TIERS.S.landing) && /--pair/.test(GOVERNED_TIERS.S.landing));
 
-  // ── subject → PR (both GitHub spellings; the trailing parenthetical wins) ─
-  assert('squash-subject', pullNumberFromSubject('fix(api): envelope the error paths (#9456)') === 9456);
-  assert('merge-subject', pullNumberFromSubject('Merge pull request #123 from x/y') === 123);
-  assert('mid-title-issue-citation-is-not-the-pr', pullNumberFromSubject('docs: checklist names the renamed check run (#9420) (#9490)') === 9490);
-  assert('no-pr-in-subject', pullNumberFromSubject('chore: direct push') === null);
-
   // ── --since parsing ───────────────────────────────────────────────────────
   battery('since parsing');
   const now = new Date('2026-08-18T12:00:00Z');
@@ -4765,13 +4765,13 @@ async function selfTest() {
   const liftedHead = renderTestVerdict(liftedTest).split('\n')[0];
   assert(
     '⭐ the-test-head-no-longer-reports-a-post-lift-zero-as-if-nothing-had-hit-the-register',
-    liftedHead === 'governed-surface predicate: 0 of 4 path(s) hit the register after 1 generated-artifact lift(s) (5 surfaces, repo-agnostic).',
+    liftedHead === 'governed-surface predicate: 0 of 4 path(s) hit the register after 1 generated-artifact lift(s) (6 surfaces, repo-agnostic).',
     liftedHead,
   );
   const plainHead = renderTestVerdict(testVerdict(['packages/spec/src/ui/view.zod.ts'])).split('\n')[0];
   assert(
     'and-a-verdict-with-no-lift-keeps-its-head-line-byte-for-byte',
-    plainHead === 'governed-surface predicate: 0 of 1 path(s) hit the register (5 surfaces, repo-agnostic).',
+    plainHead === 'governed-surface predicate: 0 of 1 path(s) hit the register (6 surfaces, repo-agnostic).',
     plainHead,
   );
 
 
@@ -447,7 +447,7 @@ const SELF_TEST_BATTERIES = Object.freeze({
   'decomposition, and the multi-PR group trap': 6,
   'the verdict table, both events': 10,
   'the pull_request leg is an EARLY WARNING and never reddens': 5,
-  'the replay fixtures: the three incidents this guard descends from': 9,
+  'the replay fixtures: the three incidents this guard descends from': 11,
   '⭐ the ordering guarantee, measured with a spy that THROWS': 7,
   'the words a reader acts on (requirement (e))': 26,
   '⭐ #14063 END TO END: what the dependency install actually buys': 9,
@@ -2214,10 +2214,14 @@ export async function selfTest() {
   // The same authorized approval, on a commit that is no longer the head. Under
   // the retired sha pin this exact fixture was the REFUSAL case.
   const authorizedPassOnOlder = (login = GOVERNED_APPROVERS[0]) => authorizedApprovalVerdict([approvedAt(login, OLD)], HEAD);
-  const run = (event, rows, approvals = new Map()) => {
+  const run = (event, rows, approvals = new Map(), records = new Map()) => {
     const { governed, unattributed } = decomposeGovernedWork(rows);
-    return guardVerdict({ event, governed, unattributed, approvals, apiCalls: governed.length });
+    return guardVerdict({ event, governed, unattributed, approvals, records, apiCalls: governed.length });
   };
+  // The record reading a Tier S entry gets when the thread was READ and held
+  // nothing — the incident shape (#19133): "no record" is a refusal of its own
+  // kind, distinct from "the thread could not be read".
+  const absentRecord = (pr) => new Map([[pr, { state: 'absent', read: { pr: 0, card: 0 }, readSummary: '0 on the PR and 0 on its card', cardNote: 'replay fixture, no card thread searched' }]]);
 
   // ── the register is READ, never restated (#9840) ──────────────────────────
   //
@@ -2440,8 +2444,18 @@ export async function selfTest() {
   battery('the replay fixtures: the three incidents this guard descends from');
   for (const replay of REPLAYS) {
     const rows = [row(replay.pr, replay.files, 'e'.repeat(40), replay.subject)];
-    const queued = run('merge_group', rows, new Map([[replay.pr, authorizedApprovalVerdict([], HEAD)]]));
-    assert(`replay-REFUSES-at-the-queue: ${replay.name}`, queued.exitCode === EXIT_REFUSED_UNAPPROVED, JSON.stringify(queued.conclusion));
+    // #19133: two of the three incidents are `.claude/**` and therefore Tier S
+    // today, so the queue judges them on the record leg too. Each incident's
+    // thread carried no record — the reading is ABSENT, and the refusal is the
+    // same "unapproved" the incident deserved. A Tier S entry with NO reading
+    // at all refuses as UNREADABLE instead: "could not find out" never clears.
+    const tier = governedTierFor(replay.files);
+    const queued = run('merge_group', rows, new Map([[replay.pr, authorizedApprovalVerdict([], HEAD)]]), tier === TIER_S ? absentRecord(replay.pr) : new Map());
+    assert(`replay-REFUSES-at-the-queue: ${replay.name}`, queued.exitCode === EXIT_REFUSED_UNAPPROVED, JSON.stringify([queued.conclusion, tier]));
+    if (tier === TIER_S) {
+      const unread = run('merge_group', rows, new Map([[replay.pr, authorizedApprovalVerdict([], HEAD)]]));
+      assert(`replay-is-Tier-S-and-with-NO-record-reading-refuses-UNREADABLE-never-clears: ${replay.name}`, unread.exitCode === EXIT_REFUSED_UNREADABLE, JSON.stringify(unread.conclusion));
+    }
     const early = run('pull_request', rows, new Map([[replay.pr, approvalVerdict([])]]));
     assert(`replay-only-WARNS-on-the-pr: ${replay.name}`, early.conclusion === 'warned' && early.exitCode === EXIT_CLEAR);
     const text = renderGuardVerdict(queued);
@@ -3677,7 +3691,7 @@ export async function selfTest() {
 
   // The words a reader acts on — requirement (e) reaches the new leg too.
   const tierRefusalText = renderGuardVerdict(tierAbsent);
-  assert('the-refusal-names-the-tier-on-the-entry-so-a-reader-knows-why-a-record-would-help', /landing tier: REFERENCES/.test(tierRefusalText));
+  assert('the-refusal-names-the-tier-on-the-entry-so-a-reader-knows-why-a-record-would-help', /landing tier: S/.test(tierRefusalText), tierRefusalText);
   assert('and-offers-the-record-as-a-THIRD-remedy-naming-the-three-facts-it-must-carry', /3\. Or — ONLY for a pull request whose governed paths all lie under/.test(tierRefusalText) && /Reviewed-by:/.test(tierRefusalText) && /Served-tier:/.test(tierRefusalText));
   assert('⛔ and-a-RULES-layer-refusal-is-offered-no-such-remedy-the-control-for-the-line-above', !/3\. Or — ONLY for a pull request/.test(renderGuardVerdict(rulesDismissed)));
   assert('the-below-tier-refusal-names-the-reading-it-actually-got', /does not stand/.test(renderGuardVerdict(tierBelow)) && /a-lesser-tier/.test(renderGuardVerdict(tierBelow)));