@amsterdamdatalabs/adl-agent-control-linux-x64 0.1.29 → 0.1.32

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/check.py

@@ -11,8 +11,9 @@ third rule that makes this check unlike any other ported so far:
 DIR-003 is why this gate has no way to point it at one tree. A narrower set
 makes every unreachable entry look stale, so narrowing INFLATES the answer
 rather than reducing it: measured on this row, 7 findings over the registered
-trees against 92 when pointed at one crate. That is also why the row declares
-tree-scoped globs and why `runner.run(exhaustive=...)` matters here more than
+trees against 92 when pointed at one crate. That is also why the row's scope is
+the whole repository (`**`, no exclusion: what a repository exempts it declares
+in the register and the ceilings) and why `runner.run(exhaustive=...)` matters here more than
 anywhere else — an empty intersection is a dead scope, not a clean tree.
 
 Children means FILES. A directory holding ten subdirectories and no files of
@@ -33,7 +34,7 @@ gates must read as one family):
      `page_cap` resolves its limit: each entry must be a repo-relative path
      and a base-10 positive integer; any malformed entry is could-not-run
      naming the config key and the entry. NO ceilings declared means nothing
-     to enforce — the gate is inert and the register is not even read.
+     to enforce, though the register is still read and validated.
   2. The register records STATE only — the consumer-owned
      `<compliance>/ratchets/LAY-004-over-limit-directory.yaml` (the estate's
      settled location for a consumer-owned ratchet number), holding
@@ -104,10 +105,10 @@ class DirectoryRatchet(Check):
 
     # CONSUMER-OWNED, not package data. This shipped as a `resources` entry
     # (`grants.yaml`) holding one donor repository's entire directory shape:
-    # 88 of its 104 lines named `<rust>/crates/enact-*`,
-    # `<typescript>/packages/desktop/src/renderer/*` and `infra/stacks/*`. None of
-    # the four repositories in this estate has any of those trees, so the gate
-    # raised could-not-run on its FIRST registered tree for every one of them.
+    # 88 of its 104 lines named that repository's own crate, application and
+    # infrastructure directories. None of the other repositories in this estate
+    # has any of those trees, so the gate raised could-not-run on its FIRST
+    # registered tree for every one of them.
     #
     # The old docstring defended the file as "not a consumer path". That is
     # backwards: a ratchet baseline IS the consumer's own state by definition —
@@ -140,13 +141,10 @@ class DirectoryRatchet(Check):
 
     def graded(self, ctx: Context, files: FileSet) -> Iterable[Report]:
         ceilings = self._ceilings(ctx)
+        ratchet = self._register(ctx)
         if not ceilings:
-            # Nothing configured is nothing to enforce: the gate is inert,
-            # and the register is not read (its entries could only ever
-            # REMOVE findings).
             return
 
-        ratchet = self._register(ctx)
         over_children: dict[str, int] = {}
         single_file: dict[str, str] = {}
         if ratchet is not None:
@@ -188,7 +186,7 @@ class DirectoryRatchet(Check):
         declaration (`[controls.compliance.directory-ratchet].max_children`).
 
         Absent is `{}`: no table declared, nothing to enforce — the gate is
-        inert and the register is not read. Each entry must be
+        inert (the register is still read and validated). Each entry must be
         `<path>:<positive int>` with ASCII digits (paths carry slashes,
         letters, dashes, underscores and dots — never a comma or a colon,
         which are the list and entry separators); ANY malformed entry is

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-clean/grants.yaml

@@ -1,4 +1,4 @@
 schema_version: 2
 over_children_baseline: {}
 single_file_baseline:
-  frontend/packages/desktop/src/renderer/solo: item.ts
+  web/src/renderer/solo: item.ts

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-clean/web/src/renderer/solo/item.ts

@@ -0,0 +1 @@
+export const item = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-empty-register/web/src/a.ts

@@ -0,0 +1 @@
+a

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-empty-register/web/src/b.ts

@@ -0,0 +1 @@
+b

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/grants.yaml

@@ -1,4 +1,4 @@
 schema_version: 2
 over_children_baseline: {}
 single_file_baseline:
-  frontend/packages/desktop/src/renderer/solo: item.ts
+  web/src/renderer/solo: item.ts

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/fresh/fresh.ts

@@ -0,0 +1 @@
+export const fresh = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub1/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub10/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub11/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub2/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub3/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub4/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub5/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub6/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub7/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub8/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/many/sub9/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/services/i18n/locales/de/common.json

@@ -0,0 +1 @@
+{"a":1}

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/renderer/solo/item.ts

@@ -0,0 +1 @@
+export const item = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-excluded/web/src/vendored-crate/Cargo.toml

@@ -0,0 +1,2 @@
+[package]
+name = "x"

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-missing-tree/grants.yaml

@@ -2,4 +2,4 @@ schema_version: 2
 over_children_baseline:
   infra/stacks: 5
 single_file_baseline:
-  frontend/packages/desktop/src/renderer/solo: item.ts
+  web/src/renderer/solo: item.ts

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-missing-tree/web/src/renderer/solo/item.ts

@@ -0,0 +1 @@
+export const item = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-no-ceilings/grants.yaml

@@ -1,4 +1,4 @@
 schema_version: 2
 over_children_baseline:
-  frontend/packages/desktop/src: 3
+  web/src: 3
 single_file_baseline: {}

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-no-ceilings/web/src/a.ts

@@ -0,0 +1 @@
+a

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-no-ceilings/web/src/b.ts

@@ -0,0 +1 @@
+b

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-no-ceilings/web/src/c.ts

@@ -0,0 +1 @@
+c

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-stale-entry/grants.yaml

@@ -1,5 +1,5 @@
 schema_version: 2
 over_children_baseline:
-  frontend/packages/desktop/src/renderer/gone: 4
+  web/src/renderer/gone: 4
 single_file_baseline:
-  frontend/packages/desktop/src/renderer/solo: item.ts
+  web/src/renderer/solo: item.ts

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-stale-entry/web/src/renderer/solo/item.ts

@@ -0,0 +1 @@
+export const item = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/grants.yaml

@@ -1,4 +1,4 @@
 schema_version: 2
 over_children_baseline: {}
 single_file_baseline:
-  frontend/packages/desktop/src/renderer/solo: item.ts
+  web/src/renderer/solo: item.ts

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/fresh/fresh.ts

@@ -0,0 +1 @@
+export const fresh = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub1/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub10/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub11/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub2/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub3/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub4/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub5/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub6/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub7/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub8/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/many/sub9/only.ts

@@ -0,0 +1 @@
+export const v = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unbaselined/web/src/renderer/solo/item.ts

@@ -0,0 +1 @@
+export const item = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/fixtures/directory-ratchet-unusable-register/web/src/renderer/solo/item.ts

@@ -0,0 +1 @@
+export const item = 1;

package/packages/repo-controls/package/adl-compliance/src/adl_compliance/checks/layout/directory_ratchet/test_check.py

@@ -6,9 +6,8 @@ principle (v3 for this gate): `directory-ratchet-clean` (one baselined
 single-file directory, nothing else), `directory-ratchet-unbaselined` (an
 unbaselined single-file directory, plus a control: eleven single-file
 subdirectories of a parent that itself holds zero direct files),
-`directory-ratchet-excluded` (the row's own `!` exclusions under test, run
-twice against the same files through two Row variants that differ by exactly
-those two patterns), `directory-ratchet-missing-tree` (a ceiling-configured
+`directory-ratchet-excluded` (a locale directory and a vendored crate, which the
+row used to exclude and now grades: PBI 598 deleted every row exclusion), `directory-ratchet-missing-tree` (a ceiling-configured
 tree with no directory — advisory, not failure),
 `directory-ratchet-stale-entry` (DIR-003's kept reach: a baseline entry under
 a live tree whose directory was deleted), `directory-ratchet-unusable-register`
@@ -80,7 +79,7 @@ def run(
 
 
 def test_a_fully_baselined_tree_passes() -> None:
-    verdict = run("directory-ratchet-clean", ceilings="frontend/packages/desktop/src:10")
+    verdict = run("directory-ratchet-clean", ceilings="web/src:10")
     assert verdict.outcome is Outcome.CLEAN, verdict.render()
     assert not verdict.findings
     assert not verdict.advisories
@@ -90,8 +89,7 @@ def test_no_ceilings_configured_means_nothing_to_enforce() -> None:
     """The generic principle's config half: no `[controls.compliance.directory-
     ratchet]` table, no ceilings declared — the gate has NOTHING to enforce
     and passes clean even with a three-file directory on disk whose register
-    would exempt it (proving the register is not even read: its entry could
-    only ever REMOVE findings)."""
+    would exempt it (a VALID register is read and changes nothing here)."""
     verdict = run("directory-ratchet-no-ceilings")
     assert verdict.outcome is Outcome.CLEAN, verdict.render()
     assert not verdict.findings
@@ -104,7 +102,7 @@ def test_a_baseline_entry_exempts_its_directory_up_to_the_recorded_count() -> No
     entry forgives the directory up to the count recorded (growing past it
     is DIR-002, reported separately)."""
     verdict = run(
-        "directory-ratchet-no-ceilings", ceilings="frontend/packages/desktop/src:2"
+        "directory-ratchet-no-ceilings", ceilings="web/src:2"
     )
     assert verdict.outcome is Outcome.CLEAN, verdict.render()
     assert not verdict.findings
@@ -118,23 +116,23 @@ def test_an_over_ceiling_directory_with_no_register_is_dir_001() -> None:
     verdict = runner.run(
         ROW, directory, corpus_files(directory),
         inputs={ROW.id: {"register": directory / "does-not-exist.yaml"}},
-        declarations={DirectoryRatchet.CEILINGS_DECLARATION: "frontend/packages/desktop/src:2"},
+        declarations={DirectoryRatchet.CEILINGS_DECLARATION: "web/src:2"},
     )
     assert verdict.outcome is Outcome.FINDINGS
     findings = [f for f in verdict.findings if f.rule == "DIR-001"]
     assert len(findings) == 1, tuple(f.render() for f in verdict.findings)
-    assert findings[0].path == "frontend/packages/desktop/src"
+    assert findings[0].path == "web/src"
     assert findings[0].message == "3 direct children (max 2), no ratchet entry"
 
 
 def test_a_malformed_ceilings_declaration_is_could_not_run() -> None:
-    for bad in ("frontend/packages/desktop/src:banana", "frontend/packages/desktop/src:0"):
+    for bad in ("web/src:banana", "web/src:0"):
         verdict = run("directory-ratchet-clean", ceilings=bad)
         assert verdict.outcome is Outcome.COULD_NOT_RUN, bad
         assert "directory-ratchet" in verdict.message
-        assert "frontend/packages/desktop/src" in verdict.message
+        assert "web/src" in verdict.message
     # An entry with no ceiling half at all:
-    verdict = run("directory-ratchet-clean", ceilings="frontend/packages/desktop/src")
+    verdict = run("directory-ratchet-clean", ceilings="web/src")
     assert verdict.outcome is Outcome.COULD_NOT_RUN
     assert "directory-ratchet" in verdict.message
 
@@ -146,7 +144,7 @@ def test_a_register_recording_zero_state_is_a_load_failure() -> None:
     as a load failure, never as a silent empty pass."""
     verdict = run(
         "directory-ratchet-empty-register",
-        ceilings="frontend/packages/desktop/src:2",
+        ceilings="web/src:2",
     )
     assert verdict.outcome is Outcome.COULD_NOT_RUN
     assert "a register grading nothing" in verdict.message
@@ -156,56 +154,39 @@ def test_a_register_recording_zero_state_is_a_load_failure() -> None:
 
 
 def test_an_unbaselined_single_file_directory_is_reported() -> None:
-    verdict = run("directory-ratchet-unbaselined", ceilings="frontend/packages/desktop/src:10")
+    verdict = run("directory-ratchet-unbaselined", ceilings="web/src:10")
     assert verdict.outcome is Outcome.FINDINGS
     paths = {f.path for f in verdict.findings if f.rule == "DIR-001"}
-    assert "frontend/packages/desktop/src/renderer/fresh" in paths
-    assert "frontend/packages/desktop/src/renderer/solo" not in paths
+    assert "web/src/renderer/fresh" in paths
+    assert "web/src/renderer/solo" not in paths
 
 
 def test_a_subdirectory_alone_never_trips_the_rule() -> None:
     """`many` holds eleven subdirectories and zero direct files of its own, so it
     needs no baseline entry; each subdirectory holds exactly one file and IS
     reported. Both halves matter, or this corpus is silent by accident."""
-    verdict = run("directory-ratchet-unbaselined", ceilings="frontend/packages/desktop/src:10")
+    verdict = run("directory-ratchet-unbaselined", ceilings="web/src:10")
     paths = {f.path for f in verdict.findings if f.rule == "DIR-001"}
-    assert "frontend/packages/desktop/src/renderer/many" not in paths
-    assert "frontend/packages/desktop/src/renderer/many/sub1" in paths
+    assert "web/src/renderer/many" not in paths
+    assert "web/src/renderer/many/sub1" in paths
 
 
-def test_the_row_exclusions_silence_locales_and_vendored_cargo() -> None:
-    verdict = run("directory-ratchet-excluded", ceilings="frontend/packages/desktop/src:20")
-    assert verdict.outcome is Outcome.FINDINGS
-    paths = {f.path for f in verdict.findings}
-    assert not any("locales" in p for p in paths)
-    assert not any("vendored-crate" in p for p in paths)
-    assert "frontend/packages/desktop/src/renderer/fresh" in {
-        f.path for f in verdict.findings if f.rule == "DIR-001"
-    }
-
-
-def test_falsifiability_without_the_row_exclusions() -> None:
-    """The same corpus, read through a Row differing by exactly the two `!`
-    patterns. Without this, the rejections above would pass just as well
-    against a row whose exclusions never matched anything."""
-    unscoped = tuple(
-        pattern for pattern in ROW.engine.scope
-        if not (pattern.startswith("!") and ("locales" in pattern or "Cargo.toml" in pattern))
-    )
-    assert len(unscoped) == len(ROW.engine.scope) - 2
-
-    verdict = run("directory-ratchet-excluded", scope=unscoped, ceilings="frontend/packages/desktop/src:20")
+def test_the_row_excludes_nothing_so_locales_and_vendored_cargo_are_graded() -> None:
+    """PBI 598: the ratchet is repo-wide with no hardcoded exclusion, locale and vendored dirs included."""
+    assert ROW.engine.scope == ("**",)
+    verdict = run("directory-ratchet-excluded", ceilings="web/src:20")
     assert verdict.outcome is Outcome.FINDINGS
     paths = {f.path for f in verdict.findings if f.rule == "DIR-001"}
-    assert any("locales" in p for p in paths)
-    assert any("vendored-crate" in p for p in paths)
+    assert any("locales" in p for p in paths), paths
+    assert any("vendored-crate" in p for p in paths), paths
+    assert "web/src/renderer/fresh" in paths
 
 
 def test_the_ratchet_register_is_not_a_grant_catalogue() -> None:
     """`structural_grant = True` forces the allowance to 0 regardless of the
     row's own `grants:` field. Passing the register's size as the allowance is
     the trap: a failing gate would report green."""
-    verdict = run("directory-ratchet-unbaselined", ceilings="frontend/packages/desktop/src:10")
+    verdict = run("directory-ratchet-unbaselined", ceilings="web/src:10")
     assert verdict.granted == 0
     assert verdict.outcome is Outcome.FINDINGS
 
@@ -222,12 +203,12 @@ def test_an_absent_register_enforces_the_ceilings_bare() -> None:
     verdict = runner.run(
         ROW, directory, corpus_files(directory),
         inputs={ROW.id: {"register": directory / "does-not-exist.yaml"}},
-        declarations={DirectoryRatchet.CEILINGS_DECLARATION: "frontend/packages/desktop/src:10"},
+        declarations={DirectoryRatchet.CEILINGS_DECLARATION: "web/src:10"},
     )
     assert verdict.outcome is Outcome.FINDINGS
     findings = [f for f in verdict.findings if f.rule == "DIR-001"]
     assert {f.path for f in findings} == {
-        "frontend/packages/desktop/src/renderer/solo",
+        "web/src/renderer/solo",
     }
 
 
@@ -241,7 +222,7 @@ def test_an_absent_register_with_an_empty_scope_is_still_the_runners_dead_scope(
         ROW, directory, (),
         exhaustive=True,
         inputs={ROW.id: {"register": directory / "does-not-exist.yaml"}},
-        declarations={DirectoryRatchet.CEILINGS_DECLARATION: "frontend/packages/desktop/src:10"},
+        declarations={DirectoryRatchet.CEILINGS_DECLARATION: "web/src:10"},
     )
     assert verdict.outcome is Outcome.COULD_NOT_RUN
     assert "matches no file on disk" in verdict.message
@@ -253,18 +234,29 @@ def test_a_register_that_exists_but_is_unusable_is_could_not_run() -> None:
     enforcement, UNUSABLE is not. A register that exists but cannot be parsed
     may be mid-edit; grading it as "no baselines" would silently drop every
     exemption it names."""
-    verdict = run("directory-ratchet-unusable-register", ceilings="frontend/packages/desktop/src:10")
+    verdict = run("directory-ratchet-unusable-register", ceilings="web/src:10")
     assert verdict.outcome is Outcome.COULD_NOT_RUN
     assert "unusable" in verdict.message
 
 
+def test_an_unusable_register_is_could_not_run_even_with_no_ceilings_declared() -> None:
+    verdict = run("directory-ratchet-unusable-register")
+    assert verdict.outcome is Outcome.COULD_NOT_RUN, verdict.render()
+    assert "unusable" in verdict.message
+
+
+def test_a_register_recording_zero_state_is_a_load_failure_with_no_ceilings_declared() -> None:
+    verdict = run("directory-ratchet-empty-register")
+    assert verdict.outcome is Outcome.COULD_NOT_RUN, verdict.render()
+
+
 def test_a_configured_tree_that_is_gone_is_an_advisory_not_a_failure() -> None:
     """Generic principle, the cleanup half: a tree the CONFIGURATION names
     but the repository no longer has is cleanup, not a defect. One advisory
     names what is unaccounted; the remaining trees are graded normally."""
     verdict = run(
         "directory-ratchet-missing-tree",
-        ceilings="frontend/packages/desktop/src:10,infra:10",
+        ceilings="web/src:10,infra:10",
     )
     assert verdict.outcome is Outcome.CLEAN, verdict.render()
     assert not verdict.findings
@@ -281,10 +273,10 @@ def test_a_baseline_entry_for_a_deleted_directory_is_still_reported_stale() -> N
     repository deleted, is DIR-003 exactly as before. Cleanup of the CONTENT
     is free; cleanup of the REGISTER is the owner's edit, and the gate still
     says so."""
-    verdict = run("directory-ratchet-stale-entry", ceilings="frontend/packages/desktop/src:10")
+    verdict = run("directory-ratchet-stale-entry", ceilings="web/src:10")
     assert verdict.outcome is Outcome.FINDINGS
     stale = {f.path for f in verdict.findings if f.rule == "DIR-003"}
-    assert "frontend/packages/desktop/src/renderer/gone" in stale
+    assert "web/src/renderer/gone" in stale
 
 
 def test_the_register_is_not_packaged_data() -> None:
@@ -309,9 +301,9 @@ def test_a_baselines_only_register_is_valid() -> None:
     ratchet = Ratchet.model_validate(
         {
             "schema_version": 2,
-            "over_children_baseline": {"frontend/packages/desktop/src/renderer": 12},
+            "over_children_baseline": {"web/src/renderer": 12},
             "single_file_baseline": {
-                "frontend/packages/desktop/src/renderer/solo": "item.ts"
+                "web/src/renderer/solo": "item.ts"
             },
         }
     )
@@ -331,7 +323,7 @@ def test_a_register_carrying_max_children_is_refused() -> None:
         Ratchet.model_validate(
             {
                 "schema_version": 2,
-                "max_children": {"frontend/packages/desktop/src": 10},
+                "max_children": {"web/src": 10},
                 "over_children_baseline": {},
                 "single_file_baseline": {},
             }