From 86ed872109f5e53f47f9df33882c45cb0c206ed9 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 16 Oct 2026 22:10:39 +0000 Subject: [PATCH 1/2] test(dogfood): the authz census reads the runtime route ledger as the 92 rows it holds The route-ledger census row and the population-source docblock read packages/runtime/src/route-ledger.ts as 88 rows. The ledger has held 92 since the GET, PUT, PATCH and DELETE /keys rows arrived with their mounts. Each new row carries the existing domain '/keys', so population and reachable both move 88 -> 92, blindSpot stays 0, keys stays 23, and the "route: '" / "domain: '" controls move 88 -> 92 (RouteLedgerEntry unchanged at 2). Every figure was measured on the ledger with the census's own rule. Claude-Session: https://claude.ai/code/session_018t6a5rvqPRvEDMCVVW9kYT Co-authored-by: Claude --- .../test/authz-probe-blind-spot.census.ts | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/packages/qa/dogfood/test/authz-probe-blind-spot.census.ts b/packages/qa/dogfood/test/authz-probe-blind-spot.census.ts index 6a8c1cf9086..9841799b7a2 100644 --- a/packages/qa/dogfood/test/authz-probe-blind-spot.census.ts +++ b/packages/qa/dogfood/test/authz-probe-blind-spot.census.ts @@ -106,7 +106,7 @@ // `RestServer.getRoutes()` on a booted server and guarded per route by // `rest-route-ledger.conformance.test.ts`. It reaches all 17 registrars; // this table reaches 1. -// `packages/runtime/src/route-ledger.ts`: 88 rows over 23 domains. Its +// `packages/runtime/src/route-ledger.ts`: 92 rows over 23 domains. Its // machine contract is DOMAIN-level, by live registry introspection // (`domainRegistry.list()`), the per-route rows being documentation. It // covers all 15 `async handle*(` methods in `http-dispatcher.ts` and all @@ -469,11 +469,19 @@ export const PROBE_FILE_CENSUS: readonly ProbeFileReading[] = [ // `/security` domain dispatches to it — so the domain-file counts in the // note below are unchanged. Controls moved with the row ("route: '" and // "domain: '" 87 -> 88, RouteLedgerEntry unchanged at 2). - population: 88, - reachable: 88, + // [#23909] 88 -> 92: the `GET`, `PUT`, `PATCH` and `DELETE /keys` rows + // arrived with their mounts (every `/api/v1/keys` verb is mounted, so an + // anonymous caller is answered 401 on the standalone server). All four + // carry `domain: '/keys'`, the EXISTING key the `POST /keys` row already + // carries, so `reachable` moves with `population`, `blindSpot` stays 0 and + // `keys` stays 23 (23 distinct domains before and after, re-derived). + // Controls moved with the rows ("route: '" and "domain: '" 88 -> 92, + // RouteLedgerEntry unchanged at 2). + population: 92, + reachable: 92, blindSpot: 0, populationRule: 'ledger rows inside ROUTE_LEDGER; reachable = rows carrying a `domain` (each distinct value mints a key)', - controls: { "route: '": 88, "domain: '": 88, RouteLedgerEntry: 2 }, + controls: { "route: '": 92, "domain: '": 92, RouteLedgerEntry: 2 }, // [#22432] Re-derived on the merged ref: the note's two counts had stood at // 11 files / 5 classified / 16 baselined since before the `/analytics` // domain was classified (#21061), which named one more file and moved one From 3888a39e728e7948cff1cb76c8be304708f14f4d Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 16 Oct 2026 22:33:56 +0000 Subject: [PATCH 2/2] test(dogfood): the matrix docblock states the runtime route ledger as 92 rows The docblock figure the matrix docblock-figure pin reads still said `packages/runtime/src/route-ledger.ts` (88 rows / 23 domains). The ledger has held 92 rows over the same 23 domains since the GET, PUT, PATCH and DELETE /keys rows arrived, so the pin's two present-tense tests were red on main. One figure moves 88 -> 92; nothing else in the file changes. Claude-Session: https://claude.ai/code/session_018t6a5rvqPRvEDMCVVW9kYT Co-authored-by: Claude --- packages/qa/dogfood/test/authz-conformance.matrix.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/qa/dogfood/test/authz-conformance.matrix.ts b/packages/qa/dogfood/test/authz-conformance.matrix.ts index 97d165b1593..c5d3442b8a7 100644 --- a/packages/qa/dogfood/test/authz-conformance.matrix.ts +++ b/packages/qa/dogfood/test/authz-conformance.matrix.ts @@ -25,7 +25,7 @@ // dispatcher domain files. // // The population comes from `packages/rest/src/rest-route-ledger.ts` (81 rows -// / 18 families) and `packages/runtime/src/route-ledger.ts` (88 rows / 23 +// / 18 families) and `packages/runtime/src/route-ledger.ts` (92 rows / 23 // domains) because those two are enumerated from a RUNNING server and guarded // in both directions by their own conformance tests — so a new family or // domain cannot be silently absent from them, and therefore cannot be silently