@bongos/core 1.19.1035 → 1.19.1037

package/tests/grader.mjs

@@ -1,8 +1,8 @@
 // tests/grader.mjs
 //
-// Grader tests. Covers both:
-//   - the v1 deterministic process-audit grader (kept for audit-ships.js)
-//   - the v2 subagent quality grader (the actual credits gate from V3.R18 #209)
+// Grader tests: the subagent quality grader (the credits gate since V3.R18 #209).
+// The v1 deterministic process-audit grader was retired in task 1002842; the
+// export-surface test below pins that it stays gone.
 //
 // The v2 subagent itself is a real-network call, so the tests stop at the
 // validator + prompt-builder boundary; the network-touching end-to-end check
@@ -48,127 +48,6 @@ async function testAsync(name, fn) {
   }
 }
 
-// ========================================================================
-// v1 — deterministic grader (legacy, used only by audit-ships.js)
-// ========================================================================
-
-test('v1 scoreEstActualBand: ratio inside [0.5, 2.0] → 10', () => {
-  assert.equal(grader.scoreEstActualBand(60, 60), 10);
-  assert.equal(grader.scoreEstActualBand(30, 60), 10);
-  assert.equal(grader.scoreEstActualBand(120, 60), 10);
-});
-
-test('v1 scoreEstActualBand: ratio outside band drops linearly', () => {
-  assert.equal(grader.scoreEstActualBand(18, 60), 5);
-  assert.equal(grader.scoreEstActualBand(360, 60), 5);
-});
-
-test('v1 scoreEstActualBand: extreme ratios → 0', () => {
-  assert.equal(grader.scoreEstActualBand(6, 60), 0);
-  assert.equal(grader.scoreEstActualBand(600, 60), 0);
-});
-
-test('v1 scoreEstActualBand: missing est → 6, missing actual → 5', () => {
-  assert.equal(grader.scoreEstActualBand(60, null), 6);
-  assert.equal(grader.scoreEstActualBand(null, 60), 5);
-});
-
-test('v1 scoreValueSummary: maps length + verb', () => {
-  assert.equal(grader.scoreValueSummary(''), 0);
-  assert.equal(grader.scoreValueSummary(null), 0);
-  assert.equal(grader.scoreValueSummary('short note'), 5);
-  assert.equal(grader.scoreValueSummary('a moderately worded summary that lands above forty characters'), 8);
-  const s = 'wire the auto-grader into the completed→confirmed transition so every task gets a quality mark before its credits are paid out';
-  assert.ok(s.length > 120);
-  assert.equal(grader.scoreValueSummary(s), 10);
-});
-
-test('v1 scoreDiffHygiene: phantom ship → 0, normal → 10, too-broad → 5', () => {
-  assert.equal(grader.scoreDiffHygiene({ files_changed: 0, lines_added: 0, lines_removed: 0 }), 0);
-  assert.equal(grader.scoreDiffHygiene({ files_changed: 5, lines_added: 200, lines_removed: 30 }), 10);
-  assert.equal(grader.scoreDiffHygiene({ files_changed: 80, lines_added: 1000, lines_removed: 200 }), 5);
-});
-
-test('v1 scoreScopingSignal: maps each level', () => {
-  assert.equal(grader.scoreScopingSignal(0), 2);
-  assert.equal(grader.scoreScopingSignal(1), 4);
-  assert.equal(grader.scoreScopingSignal(2), 6);
-  assert.equal(grader.scoreScopingSignal(3), 7);
-  assert.equal(grader.scoreScopingSignal(4), 8);
-  assert.equal(grader.scoreScopingSignal(5), 10);
-  assert.equal(grader.scoreScopingSignal(null), 6);
-});
-
-test('v1 scoreLocNetNegative', () => {
-  assert.equal(grader.scoreLocNetNegative({ lines_added: 20, lines_removed: 100 }), 10);
-  assert.equal(grader.scoreLocNetNegative({ lines_added: 100, lines_removed: 20 }), 0);
-});
-
-test('v1 scoreLearningRow', () => {
-  assert.equal(grader.scoreLearningRow({ body_md: 'x'.repeat(200) }), 10);
-  assert.equal(grader.scoreLearningRow(null), 0);
-});
-
-test('v1 scoreArtRubricAvg clamps + nulls', () => {
-  assert.equal(grader.scoreArtRubricAvg(8.7), 8.7);
-  assert.equal(grader.scoreArtRubricAvg(15), 10);
-  assert.equal(grader.scoreArtRubricAvg(-1), 0);
-  assert.equal(grader.scoreArtRubricAvg(NaN), null);
-});
-
-test('v1 blendWeightsForKind: feature renorms to 1.0', () => {
-  const w = grader.blendWeightsForKind('feature');
-  const total = Object.values(w).reduce((a, b) => a + b, 0);
-  assert.ok(Math.abs(total - 1.0) < 1e-6, `total=${total}, expected 1.0`);
-});
-
-test('v1 blendWeightsForKind: cleanup replaces diff_hygiene', () => {
-  const w = grader.blendWeightsForKind('cleanup');
-  assert.ok('loc_net_negative' in w);
-  assert.ok(!('diff_hygiene' in w));
-});
-
-test('v1 gradeDeterministic: well-shipped feature passes', () => {
-  const result = grader.gradeDeterministic({
-    task: { id: 99, kind: 'feature', est_minutes: 240, actual_minutes: 200, scoping_confidence: 4 },
-    verification: {
-      scanner_clean: true, smoke_clean: true,
-      diff_stats: { files_changed: 10, lines_added: 400, lines_removed: 50 },
-    },
-    actualMinutes: 200,
-    valueSummary: 'wire the auto-grader into ship.js so every task gets a quality mark before credits are paid; gates the completed→confirmed transition',
-  });
-  assert.ok(result.score >= 9.0, `score=${result.score}`);
-  assert.equal(result.passed, true);
-  assert.equal(result.grader_kind, 'auto');
-  assert.equal(result.grader_version, grader.RUBRIC.v1.version);
-  assert.equal(result.threshold, grader.RUBRIC.v1.threshold);
-});
-
-test('v1 gradeDeterministic: phantom ship scores low', () => {
-  const result = grader.gradeDeterministic({
-    task: { id: 100, kind: 'feature', est_minutes: 240, actual_minutes: 30, scoping_confidence: 2 },
-    verification: {
-      scanner_clean: true, smoke_clean: true,
-      diff_stats: { files_changed: 0, lines_added: 0, lines_removed: 0 },
-    },
-    actualMinutes: 30,
-    valueSummary: '',
-  });
-  assert.ok(result.score < 5.0, `score=${result.score}`);
-  assert.equal(result.passed, false);
-});
-
-test('v1 gradeDeterministic: notes_md says deprecated', () => {
-  const result = grader.gradeDeterministic({
-    task: { id: 106, kind: 'feature', est_minutes: 60, actual_minutes: 60, scoping_confidence: 4 },
-    verification: { scanner_clean: true, smoke_clean: true, diff_stats: { files_changed: 3, lines_added: 50, lines_removed: 5 } },
-    actualMinutes: 60,
-    valueSummary: 'a reasonable shipped change',
-  });
-  assert.match(result.notes_md, /v1.*deprecated/i);
-});
-
 // ========================================================================
 // v2 — subagent grader (the credits gate as of V3.R18 #209)
 // ========================================================================
@@ -181,17 +60,29 @@ test('v4 exports the expected surface (current panel-based gate)', () => {
     'buildPrompt', 'selectGraderModel', 'validateAndScore', 'aggregateShots',
     'runSubagent', 'runOneShot', 'gradeSubagentV3MultiShot',
     // constants
-    'THRESHOLD', 'VERSION', 'DEFAULT_GRADER_MODEL', 'DEFAULT_SHOTS', 'ASSUMED_BUILDER_MODEL',
+    'THRESHOLD', 'VERSION', 'DEFAULT_GRADER_MODEL', 'ASSUMED_BUILDER_MODEL',
     // utilities
     'extractJson', 'extractAssistantResult', 'extractCostUsd', 'RUBRIC',
   ];
   for (const name of required) {
     assert.ok(name in grader, `missing export: ${name}`);
   }
+  // task 1002842: the v1 generation is retired, not merely unused.
+  for (const gone of ['gradeDeterministic', 'scoreEstActualBand', 'scoreValueSummary', 'scoreDiffHygiene',
+    'scoreScannerSmoke', 'scoreScopingSignal', 'scoreLocNetNegative', 'scoreLearningRow', 'scoreArtRubricAvg',
+    'blendWeightsForKind']) {
+    assert.equal(gone in grader, false, `retired v1 export came back: ${gone}`);
+  }
+  assert.equal('v1' in grader.RUBRIC, false, 'the v1 rubric block is retired');
+  assert.equal('v3' in grader.RUBRIC, false, 'the v3 rubric block is retired');
+  // The moved plumbing is one implementation, reachable from both homes.
+  const noArtifact = require('../modules/grading/grader-no-artifact.js');
+  assert.equal(grader.aggregateShots, noArtifact.aggregateShots);
+  assert.equal(grader.runOneShot, noArtifact.runOneShot);
   assert.ok(typeof grader.THRESHOLD === 'number');
   assert.ok(grader.THRESHOLD >= 5.0 && grader.THRESHOLD <= 10.0);
   assert.ok(grader.VERSION.startsWith('v4'), `expected v4.*, got ${grader.VERSION}`);
-  assert.equal(grader.DEFAULT_SHOTS, 3); // kept for v3 multi-shot diagnostic path
+  assert.equal('DEFAULT_SHOTS' in grader, false, 'the v3 3-shot default is retired (task 1002842)');
   assert.equal(grader.DEFAULT_GRADER_MODEL, 'claude-sonnet-5'); // task 1002659: Claude 5 family pin
   assert.equal(grader.ASSUMED_BUILDER_MODEL, 'claude-fable-5');
   assert.equal(grader.FALLTHROUGH_CONFIDENCE, 0.3);
@@ -2316,6 +2207,37 @@ test('isTrivialDiff: empty changed-files or zero-line diff → false', () => {
   );
 });
 
+// ---------- task 1002842: the kept trivial-diff fast path still works ----------
+//
+// The v3 generation is retired, but its fast path is kept (moving it onto a v4
+// panel needs a new reviewer type — an owner decision). These pin that what was
+// kept works: ONE generalist shot by default, the generalist prompt, and the
+// moved aggregateShots collapse — driven through the runShot seam, no model spawned.
+
+await testAsync('fast path: one generalist shot by default, aggregated into a gradeable result', async () => {
+  const calls = [];
+  const r = await grader.gradeSubagentV3MultiShot({
+    task: { id: 1002842, title: 't', description: 'd', kind: 'cleanup' },
+    valueSummary: 'v', diff: '+ docs line', changedFiles: ['docs/x.md'], diffStats: { files_changed: 1, lines_added: 1, lines_removed: 0 },
+    builderModel: 'claude-fable-5', runOpts: {},
+    runShot: async (args) => { calls.push(args); return mkPassShot(8, 8, 0.9, args.shotIndex); },
+  });
+  assert.equal(calls.length, 1, 'the fast path runs exactly one shot unless told otherwise');
+  assert.match(calls[0].prompt, /default-fail|DEFAULT/i, 'it is the generalist default-fail prompt');
+  assert.equal(r.passed, true);
+  assert.equal(r.rubric_scores.functional_fidelity, 8);
+  assert.equal(r.rubric_scores.code_quality, 8);
+  assert.equal(r.signals.confidence, 0.9, 'the server gate reads a real confidence');
+});
+
+await testAsync('fast path: a failing shot still fails the grade (not loosened by the move)', async () => {
+  const r = await grader.gradeSubagentV3MultiShot({
+    task: { id: 1 }, valueSummary: 'v', diff: '+ x', changedFiles: ['docs/x.md'], diffStats: {},
+    runOpts: {}, runShot: async (args) => mkFailShot(4, 8, 0.9, args.shotIndex),
+  });
+  assert.equal(r.passed, false);
+});
+
 // ---------- Summary ----------
 
 console.log('');

package/tests/grader_unbacked_score.mjs

@@ -14,7 +14,7 @@
 //      server's ff gate failed the ship — a PASS verdict inside a FAIL grade;
 //   3. the card had no branch for it, so it printed the ordinary FAIL block.
 // The constraint the task set: close it WITHOUT letting an unbacked low score
-// pass and WITHOUT adding a gate (ADR 0162). Every case below that has a low
+// pass and WITHOUT adding a gate (the task's own scope: it corrects what the grade SAYS). Every case below that has a low
 // score also asserts the server still refuses it.
 //
 // Run:  node tests/grader_unbacked_score.mjs

package/tests/nav_permission_atoms.mjs

@@ -87,7 +87,7 @@ test('the hall-preview fixture carries every atom /me resolves', () => {
 // the file and left the query alone, so a returning browser kept the cached copy —
 // a fix that reaches nobody looks identical to a fix that does not work.
 
-const SHELL_SHA = '9cc99bb9b7cce948';
+const SHELL_SHA = '983282a83fd5aa71';
 
 test('shell.js has not changed without its cache-bust being bumped', () => {
   const actual = crypto.createHash('sha256').update(SHELL).digest('hex').slice(0, 16);

package/tests/provisioning_teardown_intent.mjs

@@ -47,20 +47,22 @@ async function ta(name, fn) {
 // A stateful fake of provisioning_intents that ENFORCES ux_provisioning_intents_open
 // (at most ONE open pending|running intent per instance, action-blind) — so the exact
 // collision the bug rode on is reproduced, not approximated. Dispatches on SQL shape.
-function fakeIntentDb(seed = []) {
+function fakeIntentDb(seed = [], { shape = 'co-tenant' } = {}) {
   let nextId = 1;
+  let updates = 0;
   const rows = seed.map((r) => ({ id: nextId++, requested_by: null, last_error: null, resolved_at: null, ...r }));
   const open = (instanceId) => rows.filter((r) =>
     String(r.instance_id) === String(instanceId) && (r.state === 'pending' || r.state === 'running'));
   return {
     rows,
+    get updates() { return updates; },
     query: async (sql, params) => {
       // The self-row guard's shape lookup (task 1003159, ADR 0293 D2): every enqueue
       // now asks "is this the control plane?" before it writes. These cases are all
       // ORDINARY instances, so the honest answer is a tenant shape — answering
       // 'control-plane' here would refuse every teardown in this file.
       if (/SELECT hosting_shape FROM provisioning_instances/.test(sql)) {
-        return { rows: [{ hosting_shape: 'co-tenant' }] };
+        return { rows: [{ hosting_shape: shape }] };
       }
       if (/INSERT INTO provisioning_intents/.test(sql)) {
         const [instance_id, action, requested_by] = params;
@@ -80,6 +82,12 @@ function fakeIntentDb(seed = []) {
         // push, task 1003238 to the restart; an open teardown is left alone for the
         // idempotent path).
         assert.match(sql, /action IN \('provision', 'settings-apply', 'restart', 'repo-private'\) AND state = 'pending'/);
+        updates++;
+        // The supersede must skip the platform's own row IN ITS OWN SQL (task 1004286): the
+        // guard refuses that teardown only afterwards, in enqueueIntent. Modelled, not assumed.
+        if (shape === 'control-plane' && /NOT EXISTS \(SELECT 1 FROM provisioning_instances WHERE id = \$1 AND hosting_shape = 'control-plane'\)/.test(sql)) {
+          return { rows: [] };
+        }
         const hit = rows.filter((r) =>
           String(r.instance_id) === String(params[0]) && SUPERSEDABLE.has(r.action) && r.state === 'pending');
         for (const r of hit) { r.state = 'error'; r.last_error = 'superseded: teardown requested'; }
@@ -135,6 +143,24 @@ await ta('a clean queue just enqueues (no supersede)', async () => {
   assert.equal(r.intent.requested_by, 'api:archon:1');
 });
 
+// task 1004286 — the supersede runs BEFORE the control-plane guard (which lives in
+// enqueueIntent, the one place every intent passes), and the two share no transaction. So a teardown pressed on
+// the platform's own row was correctly refused — after it had already cancelled a
+// pending restart. 'restart' is the one action both allowed on the control plane and
+// superseded by a teardown, so that is the whole blast radius. The owner was told nothing
+// happened while the restart they asked for no longer ran. The supersede now skips that row in
+// its own statement, so the guard still runs once, in one place.
+await ta('a REFUSED teardown of the control-plane row leaves a pending restart pending', async () => {
+  const db = fakeIntentDb([{ instance_id: 1, action: 'restart', state: 'pending' }], { shape: 'control-plane' });
+  await assert.rejects(provisioning.enqueueTeardown(db, 1, 'api:archon:1'),
+    (e) => e.code === 'control_plane_protected', 'the teardown is refused, as before');
+  const restart = db.rows.find((x) => x.action === 'restart');
+  assert.equal(restart.state, 'pending', 'the refused teardown cancelled nothing');
+  assert.equal(restart.last_error, null);
+  assert.equal(db.rows.filter((x) => x.action === 'teardown').length, 0, 'and queued nothing');
+  assert.equal(db.updates, 1, 'one supersede statement ran, and it matched nothing on the control-plane row');
+});
+
 t('PROVISION_ENQUEUE_FROM: an active or tearing-down instance never re-enqueues a provision intent', () => {
   assert.equal(provisioning.PROVISION_ENQUEUE_FROM.has('active'), false, 'active — the enabling misstep');
   assert.equal(provisioning.PROVISION_ENQUEUE_FROM.has('tearing_down'), false, 'tearing_down — mid-reclaim');

package/tests/regrade_actual_minutes.mjs

@@ -32,7 +32,7 @@
 import { strict as assert } from 'node:assert';
 import { test } from 'node:test';
 import { createRequire } from 'node:module';
-import { readFileSync } from 'node:fs';
+import { readFileSync, readdirSync } from 'node:fs';
 
 const require = createRequire(import.meta.url);
 const { buildPrompt } = require('../modules/grading/grader-prompt.js');
@@ -78,23 +78,24 @@ test('a task with no actual_minutes at all builds the same prompt', () => {
   assert.equal(withFigure, without, 'actual_minutes changes nothing about what the panel reads');
 });
 
-test('scoreEstActualBand is reachable only from the retroactive audit', () => {
-  // The one scorer that DOES read the figure. It lives in gradeDeterministic,
-  // which the grader module's own comment calls the legacy v1 entry — its single
-  // non-test caller is scripts/gds/audit-ships.js, a process audit run by hand
-  // over already-shipped tasks, not a gate anything passes through. A new caller
-  // is the same risk as wiring the figure into the prompt.
+test('no grader entry reads actual_minutes — the one scorer that did is retired', () => {
+  // scoreEstActualBand was the ONE scorer that read the figure. It lived in the v1
+  // gradeDeterministic, whose only non-test caller was scripts/gds/audit-ships.js;
+  // task 1002842 retired all three. So the stale-figure risk this file guards is now
+  // closed at the source, and this pins it: nothing in the grading module may
+  // accept or read the figure, and the retired entry may not come back.
   const grader = require('../modules/grading/grader.js');
-  assert.equal(typeof grader.gradeDeterministic, 'function', 'the legacy entry still exists');
-  assert.equal(grader.gradeSubagent.length > 0, true, 'and the live entry is a different function');
+  assert.equal(grader.gradeDeterministic, undefined, 'the retired v1 entry stays gone');
+  assert.equal(grader.scoreEstActualBand, undefined, 'and so does its minutes scorer');
+  assert.equal(typeof grader.gradeSubagent, 'function', 'the live entry is still here');
 
-  // gradeSubagent / gradeSubagentV3MultiShot take a single options object, so the
-  // guard that matters is which KEYS they destructure. Neither may take minutes.
-  const src = readFileSync(new URL('../modules/grading/grader.js', import.meta.url), 'utf8');
-  for (const fn of ['async function gradeSubagent(', 'async function gradeSubagentV3MultiShot(']) {
-    const at = src.indexOf(fn);
-    assert.ok(at !== -1, `${fn} is still the entry point this pins`);
-    const sig = src.slice(at, src.indexOf(')', at));
-    assert.ok(!/actualMinutes/.test(sig), `${fn} does not accept actualMinutes`);
+  // Every grading source, not just grader.js: a new reader anywhere in the module
+  // is the same risk as wiring the figure into the prompt.
+  const dir = new URL('../modules/grading/', import.meta.url);
+  const files = readdirSync(dir, { recursive: true }).filter((f) => String(f).endsWith('.js'));
+  assert.ok(files.length > 5, 'the grading module was found');
+  for (const f of files) {
+    const src = readFileSync(new URL(String(f), dir), 'utf8');
+    assert.doesNotMatch(src, /actualMinutes|actual_minutes/, `${f} must not read actual_minutes`);
   }
 });

package/tests/render_check.mjs

@@ -1,6 +1,6 @@
 // tests/render_check.mjs — the rendered fit check (task 1004203, ADR 0329): which pages a changed path
 // reaches, which report rows it keeps, and that /ship-check shows it as a signal that never flips its exit
-// (ADR 0162). DB-free and browser-free; the in-page measurement is pinned in tests/ui_design_kit_fit.mjs.
+// (ADR 0329, decision 3). DB-free and browser-free; the in-page measurement is pinned in tests/ui_design_kit_fit.mjs.
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
 import fs from 'node:fs';

package/tests/scouting_page_gate.mjs

@@ -174,11 +174,19 @@ await t('the OTHER page gates are untouched — their seam is never consulted at
   assert.ok(vote, 'board.vote.cast floors at xenos on purpose (ADR 0266) — admitted without the seam');
 });
 
-await t('only ONE gate declares a second door (a widening must be opted into, one gate at a time)', () => {
+await t('only the gates WITH A PROOF declare a second door (a widening must be opted into, one gate at a time)', () => {
   const src = require('node:fs').readFileSync(new URL('../src/bongos/auth.js', import.meta.url), 'utf8');
-  const declarations = [...src.matchAll(/alsoAdmits:\s*'([^']+)'/g)].map((m) => m[1]);
-  assert.deepEqual(declarations, ['isProjectOwner'],
+  // Keyed by GATE, not just the door's name, so a third gate borrowing 'isProjectOwner'
+  // fails here instead of hiding behind an unchanged list of names. Each entry names the
+  // file that proves its widening:
+  //   requireProjectCuratePage — this file (ADR 0210 D3);
+  //   requireCorePinPage       — tests/core_upgrade_owner_door.mjs (ADR 0339, task 1004174).
+  const declarations = [...src.matchAll(/(require\w+Page):\s*Object\.freeze\(\{[^}]*alsoAdmits:\s*'([^']+)'/g)]
+    .map((m) => `${m[1]}:${m[2]}`);
+  assert.deepEqual(declarations, ['requireProjectCuratePage:isProjectOwner', 'requireCorePinPage:isProjectOwner'],
     'a second alsoAdmits appearing without its own proof is how a page gate quietly widens');
+  const plain = [...src.matchAll(/alsoAdmits:\s*'([^']+)'/g)].length;
+  assert.equal(plain, declarations.length, 'every alsoAdmits sits on a named page gate this test can see');
 });
 
 seams._reset();

package/tests/skill_grade_audit.mjs

@@ -2,8 +2,8 @@
 // accountability sweep from the grader-hardening evaluation §6 (task 1002657):
 // the override ledger, dropped blocker/major findings on passing grades (with
 // the advisory-Narc attribution filter), the false-pass spot-check, and the
-// outage roll-up handoff — describing and queueing ONLY (ADR 0162/0158: it
-// never confirms a task or flips status).
+// outage roll-up handoff — describing and queueing ONLY (ADR 0158 §2: it
+// never confirms a task or flips status; ADR 0162: it adds no approval step to a ship).
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
 import { readFileSync, existsSync } from 'node:fs';
@@ -45,6 +45,6 @@ test('/grade-audit exists, covers the sweep legs, and stays describe-and-queue o
 
   // The hard constraint.
   assert.match(md, /never confirm/i, 'states it never confirms');
-  assert.match(md, /ADR 0162/, 'anchors the no-new-gates constraint');
+  assert.match(md, /ADR 0162/, 'anchors the no-approval-step-on-a-ship constraint');
   assert.ok(!/curl[^\n]*\/confirm/.test(md), 'carries no ready-to-paste confirm curl');
 });

package/tests/skill_grader_health.mjs

@@ -2,7 +2,7 @@
 // the four health axes from the grader-hardening evaluation §6 (task 1002656):
 // outage runs, pass-rate drift, cost anomalies, and stale model pins — reading
 // LIVE data surfaces, emitting exact --regrade remediation lines, and staying
-// read-only (describe, never confirm/flip — ADR 0162).
+// read-only (describe, never confirm/flip — ADR 0158 §2; no approval step on anyone's ship — ADR 0162).
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
 import { readFileSync, existsSync } from 'node:fs';
@@ -44,5 +44,5 @@ test('/grader-health exists and covers the four health axes on live data', (t) =
   assert.match(md, /--probe/, 'offers the optional live calibration probe');
   assert.match(md, /grade-smoke\.js/, 'names the probe script');
   assert.match(md, /read-only/i, 'states the read-only contract');
-  assert.match(md, /ADR 0162/, 'anchors the no-new-gates constraint');
+  assert.match(md, /ADR 0162/, 'anchors the no-approval-step-on-a-ship constraint');
 });