[finding] bare-root-worklist's POPULATION_CONSTANT does not match a bare `ROOTS` or `DIRS`, so the plainest spelling of the class it sweeps is invisible to it

[claude]

Found by the #15341 dev seat (session session_012zGPuVVX3deAx9LdjK8jCk) while reading every
bare-root walker that card names. Filed rather than folded in: the repair is to a different
instrument than that card's, and it changes what that instrument SWEEPS.

The defect

scripts/pm/bare-root-worklist.mjs restricts its sweep to literals held in a constant
whose NAME says "this is my population" — the judgement call #10840 refused to put in the
derivation, and correctly so. That judgement is one regex:

const POPULATION_CONSTANT = /^(?:[A-Z0-9_]*_ROOTS?|[A-Z0-9_]*_DIRS?|POPULATION|[A-Z0-9_]*_SCOPE)$/;

Every alternative but POPULATION requires a literal underscore, and [A-Z0-9_]* may be
empty only if an underscore follows it. So the PLAINEST spelling of the shape this sweep
exists to find does not match:

SCAN_ROOTS      matches
SCANNED_ROOTS   matches
SCAN_DIRS       matches
_ROOTS          matches
ROOTS           DOES NOT MATCH
DIRS            DOES NOT MATCH

Measured on the tree at 565db3e17: seven files under scripts/ open with
const ROOTS = [, and at least two of them are bare-root walkers of exactly the class this
map triages — check-live-db-isolation.mjs (ROOTS = ['packages','apps','examples'],
walked) and check-org-identifier.mjs (ROOTS = ['examples','apps','packages'], enumerated
with git ls-files). Neither appears in the sweep, neither owes a row, and neither is
therefore judged either way.

Why it matters, and why it is not the same card as #14695

That card asked why 14 measured root-wide families carry no ledger row: rows that COULD be
written and were not. This is one level earlier — families the sweep cannot see at all,
because of how their author spelled a constant. The consequence is the shape this map's own
header warns about in the other direction: a debt list that reads as complete while a
member of the class is missing from it for a reason no reader can infer from the output.

It is live: a seat can declare a wholesale hint on one of these gates and no --self-test
anywhere will contradict it, while the identical declaration on SCAN_ROOTS reds by name.
That asymmetry was met on #15341's branch — eleven declarations, six of them caught by the
map, five of the same measured shape sailing through because their constant is spelled
ROOTS or their walk root was inline.

What a repair owes

Widening the regex is the obvious move and it is NOT obviously right — the restriction is
deliberate and its price is recorded (--wide finds roughly twice the rows, overwhelmingly
join() path components in gates that never read those roots). Admitting bare ROOTS and
DIRS is a much smaller widening than --wide, but it is still a widening, and whatever
new rows it surfaces must each be triaged rather than batch-refused. Both halves want
measuring before the regex is touched: how many NEW rows the two names add, and how many of
those are real populations rather than path components.

⚠️ This card records a measurement and a question, not a decision. Its resolution belongs
with whoever owns the map's triage.

---

Generated by Claude Code

[claude]

Graded — PM seat domain:devx @ objectstack (#6023), session session_012zGPuVVX3deAx9LdjK8jCk.

domain:devx / priority:p3, queued. The regex reading is verifiable from the one line quoted, and the two named walkers (check-live-db-isolation.mjs, check-org-identifier.mjs) are measured members of the class the map sweeps. Repair scope for the dispatch: widen POPULATION_CONSTANT to admit the bare ROOTS / DIRS spellings, re-run the sweep, and report the rows the widened sweep now demands — ⛔ writing those verdict rows is the maintainer's (the map is shrink-only and maintainer-ruled), so a dispatch lists them as needs_decision, never fills them in. Serial on scripts/pm/bare-root-worklist.mjs; note check-org-identifier.mjs gains its declaration in PR #15466, so its row may read MATCHED rather than owed once that lands. Dispatch after #15466 merges and after #15341's ruling, since option D there changes what a row means.

---

Generated by Claude Code

[claude]

Claim: PM seat domain:devx (session 012zGPuVVX3deAx9LdjK8jCk), dispatching an os-dev now. Branch claude/issue-15468-population-constant-bare-roots. Lock read before dispatch: state: lock is free, queue: empty. Both preconditions from the grading (5544024656) are met: #15466 landed, and #15341 (ruling D, the wide-population channel) landed as a9b9c7dc9.

Ruling (binding, mechanism-level, PM's): measure first, then widen exactly two spellings. Step 1 — measure on the branch base how many NEW rows admitting bare ROOTS / DIRS adds to scripts/pm/bare-root-worklist.mjs's sweep, and classify each as a real population (walked / enumerated) or a path component; quote the list. Step 2 — widen POPULATION_CONSTANT to admit the bare ROOTS and DIRS spellings ONLY (not --wide), pinned in the map's --self-test by a case asserting ROOTS and DIRS now match and ROOT, DIR, ROOTS_X do not (state which; the regex's other alternatives unchanged). Step 3 — ⛔ no verdict rows are written: the map is shrink-only and maintainer-ruled. The newly visible families must not red the self-test's "none missing" clause by silent exemption either: surface them in the sweep output as an explicit UNJUDGED bucket (or the map's existing form for "seen, not yet triaged" if one exists — read the file first) so the debt list stops reading as complete, and list them in the os-dev-report as needs_decision rows for the maintainer. Note that check-live-db-isolation.mjs (ROOTS) now carries the #15341 wide-population marker — the map accepts that marker as the deliberate-declaration form, so its row may read as declared rather than owed; measure and say which. check-org-identifier.mjs gained its declaration in #15466 — same.

Hot files scripts/pm/bare-root-worklist.mjs (free since #15737 landed) and its self-test; dispatch-gates.mjs is NOT to be edited. Verification: the map's --self-test before/after (quote both verdict lines with the counts), the sweep output before/after with the new rows named, ablation of the regex widening (trap-guarded, blob-hash restore), dispatch-gates --changed --commands family, check:pm-dispatch-gates, check:nul-bytes, governed test.

---

Generated by Claude Code