@consiliency/agent-board-schema 1.50.0 → 1.52.0

package/tests/agent_board_atomic_fleet_onboarding.test.sql

@@ -99,17 +99,14 @@
 -- assertion description. Where it has none, that is stated too. An honest narrow
 -- claim beats a broad false one.
 --
--- WHAT IS *STILL* RAW IN THIS FILE. Only the NINE positional claims were converted.
--- Everything else here still reads raw text and is knowingly left alone, so this
--- file must not be read as "the masking class is closed in
--- agent_board_atomic_fleet_onboarding.test.sql". The remainder, enumerated so the
--- next reader does not have to trust a summary:
---   * the 23 `pg_get_functiondef(...) like '%...%'` PRESENCE assertions (26 calls;
---     two assertions read more than one function). A comment mentioning the
---     pattern satisfies them exactly as it did the positional ones; one was
---     demonstrated silenced that way (#198). They are presence claims, so a
---     comment can only make a MISSING construct look present -- the same
---     fail-open direction, on weaker claims;
+-- WHAT IS *STILL* RAW IN THIS FILE. Only the NINE positional claims were converted
+-- by #196; the `pg_get_functiondef(...) like '%...%'` PRESENCE assertions stayed raw
+-- until Consiliency/message-board#417 PR 3, which moved them onto
+-- `stripped_body(<fn>, true)` -- comments removed, LITERALS KEPT, because several of
+-- them look for a string literal (`fleet_onboarding.v1`, a raise message). A
+-- comment mentioning the pattern used to satisfy them exactly as it did the
+-- positional ones; one was demonstrated silenced that way (#198). What remains raw,
+-- so this file is not read as "the masking class is closed":
 --   * the ONE remaining deliberate raw read, added by message-board#277: the
 --     KNOWN-STALE record for set_board_authority_ceiling's inline every-reader
 --     claim. Its evidence IS a comment, so a stripped body cannot see it by
@@ -181,77 +178,77 @@ select function_privs_are(
   'fleet redemption helper is service-role-only'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%fleet_onboarding.v1%',
   'atomic onboarding returns the frozen contract version'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%for update%',
   'atomic onboarding catalog-pins row locking'
 );
 select ok(
-  pg_get_functiondef('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure, true)
     like '%pg_advisory_xact_lock%',
   'exact-key create-or-reuse is serialized by fingerprint'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%pg_advisory_xact_lock(hashtextextended(p_agent_public_key_fingerprint, 0))%',
   'composed onboarding serializes identity disposition by fingerprint'
 );
 select ok(
-  pg_get_functiondef('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure, true)
     like '%fleet invite requires atomic fleet onboarding%',
   'legacy enrollment rejects bounded invites before writes'
 );
 select ok(
-  pg_get_functiondef('agent_board._redeem_invite_for_agent(text,uuid)'::regprocedure)
+  agent_board_test.stripped_body('agent_board._redeem_invite_for_agent(text,uuid)'::regprocedure, true)
     like '%reserved for atomic fleet onboarding%',
   'generic ROOMLINK redemption rejects bounded invites'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%phase_worker%worker%reviewer%reviewer%',
   'only bounded worker and reviewer role pairs are admitted'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%signing_key_id is distinct from v_enroll.signing_key_id%',
   'binding replay pins the exact proven signing key'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%v_inv.board_id is distinct from p_board_id%',
   'requested board is checked against the locked invite before writes'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%not v_completed_replay%v_inv.expires_at <= now()%v_inv.uses_count >= v_inv.max_uses%',
   'only a complete active replay may bypass expiry and exhaustion'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%v_inv.revoked_at is not null%a.status = ''active''%_grant_within_ceiling%',
   'revocation and current creator authority gate every fleet replay'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%a.id = any(array[v_inv.created_by_agent_id, v_existing_agent_id])%order by a.id for update%bm.agent_id = v_inv.created_by_agent_id%order by bm.id for update%_grant_within_ceiling%',
   'creator and enrolled principals lock in UUID order before creator authority'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%board_invite_redemptions red%order by red.id for update%bm.agent_id = v_enroll.agent_id%order by bm.id for update%select exists%',
   'complete-replay proof locks redemption and membership first'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%perform 1 from agent_board.fleet_harness_registrations%perform 1 from agent_board.fleet_repo_scopes%perform 1 from agent_board.fleet_machine_agents%',
   'every matching harness, repo, and binding history row is locked before reuse'
 );
 select ok(
-  pg_get_functiondef('agent_board.revoke_fleet_machine_agent_binding(uuid,uuid,text,jsonb)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.revoke_fleet_machine_agent_binding(uuid,uuid,text,jsonb)'::regprocedure, true)
     like '%lifecycle_state = ''revoked''%',
   'binding revocation is a permanent tombstone'
 );
@@ -320,17 +317,17 @@ select ok(
   'subtree primitive locks the agent before signing keys [SOLE PIN: no isolation spec discriminates this ordering -- measured against all 20]'
 );
 select ok(
-  pg_get_functiondef('agent_board._revoke_agent_principal(uuid,uuid,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board._revoke_agent_principal(uuid,uuid,text)'::regprocedure, true)
     like '%from agent_board.agent_signing_keys%order by id%for update%',
   'subtree primitive locks signing keys in UUID order'
 );
 select ok(
-  pg_get_functiondef('agent_board.revoke_agent_subtree(uuid,uuid,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.revoke_agent_subtree(uuid,uuid,text)'::regprocedure, true)
     like '%select agent_id from subtree order by agent_id%',
   'agent subtree enumerates principals in UUID order'
 );
 select ok(
-  pg_get_functiondef('agent_board.revoke_human_subtree(uuid,uuid,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.revoke_human_subtree(uuid,uuid,text)'::regprocedure, true)
     like '%where owner_user_id = p_owner_user_id%order by id%',
   'human subtree enumerates principals in UUID order'
 );
@@ -366,17 +363,17 @@ select has_pk('agent_board', 'fleet_human_revocations',
 select has_trigger('agent_board', 'agents', 'agents_protect_federation_contract',
   'agents protect their reserved federation contract at every write path');
 select ok(
-  pg_get_functiondef('agent_board.create_fleet_onboarding_invite(uuid,uuid,text,text,text,text,text,text,text,integer,timestamp with time zone,uuid,jsonb)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.create_fleet_onboarding_invite(uuid,uuid,text,text,text,text,text,text,text,integer,timestamp with time zone,uuid,jsonb)'::regprocedure, true)
     like '%from agent_board.boards b%where b.id = p_board_id%for update%v_board.status <> ''active''%',
   'bounded invite mint locks and requires an active board'
 );
 select ok(
-  pg_get_functiondef('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.onboard_federated_fleet_agent(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text,uuid,uuid,text,text,text,text,text,text,text)'::regprocedure, true)
     like '%from agent_board.boards b%where b.id = v_inv.board_id%for update%v_board.status <> ''active''%',
   'atomic onboarding locks and requires the invite board to remain active'
 );
 select ok(
-  pg_get_functiondef('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure)
+  agent_board_test.stripped_body('agent_board.enroll_federated_identity(text,text,text,jsonb,text,text,text,text,boolean,text,text,text[],text[],text)'::regprocedure, true)
     like '%from auth.users u where u.id = v_owner_user_id for update%fleet_human_revocations%r.issuer = p_issuer and r.subject = p_subject%',
   'identity enrollment locks the human owner and rejects durable total revocation'
 );
@@ -434,7 +431,7 @@ select has_function(
   'board-keyed ceiling advisory lock helper exists'
 );
 select ok(
-  pg_get_functiondef('agent_board._lock_board_authority_ceiling(uuid)'::regprocedure)
+  agent_board_test.stripped_body('agent_board._lock_board_authority_ceiling(uuid)'::regprocedure, true)
     like '%pg_advisory_xact_lock(%hashtextextended(''agent_board.board_authority_ceilings:'' || p_board_id::text, 0)%',
   'the ceiling lock key is derived once, from the board id, in a transaction advisory lock'
 );
@@ -530,9 +527,8 @@ create temp table _ceiling_class as
 select 'agent_board.' || regexp_replace(p.oid::regprocedure::text, '^([^(]*\.)?', '') as ident,
        p.proname::text as name,   -- text, not `name`: array_agg(name) has no is(name[], text[]) overload
        (strpos(lower(agent_board_test.stripped_body(p.oid)), '_grant_within_ceiling') > 0) as is_reader,
-       (agent_board_test.stripped_body(p.oid) ~*
-          '(insert\s+into|update|delete\s+from|merge\s+into)\s+(only\s+)?(agent_board\.)?board_authority_ceilings\M') as is_writer,
-       (agent_board_test.stripped_body(p.oid) ~* '\magent_board\._lock_board_authority_ceiling\s*\(') as serialized
+       (agent_board_test.stripped_body(p.oid) ~ agent_board_test.write_re('board_authority_ceilings')) as is_writer,
+       (agent_board_test.stripped_body(p.oid) ~ agent_board_test.call_re('_lock_board_authority_ceiling')) as serialized
   from pg_proc p
   join pg_namespace n on n.oid = p.pronamespace
  where n.nspname = 'agent_board';
@@ -640,6 +636,7 @@ select is(
 -- assertion fails and names itself -- delete it, and re-derive the COMMENT's blocks
 -- from the catalog while you are there. Raw prosrc on purpose: the evidence IS a
 -- comment, so the stripped body cannot see it (presence claim, not positional).
+-- source-scan: raw-subject the evidence IS a comment; a stripped body cannot see it by construction
 select ok(
   (select p.prosrc from pg_proc p join pg_namespace n on n.oid = p.pronamespace
     where n.nspname = 'agent_board' and p.proname = 'set_board_authority_ceiling')

package/tests/agent_board_authbound_boundary.test.sql

@@ -133,8 +133,9 @@ select ok(
       join pg_namespace n on n.oid = p.pronamespace
      where n.nspname = 'agent_board'
        and p.proname = '_record_signed_write_evidence'
-       and pg_get_functiondef(p.oid) like '%authbound%'
-       and pg_get_functiondef(p.oid) like '%metadata-safe%'
+       -- literals kept: the posture is recorded as jsonb string values, not as code
+       and agent_board_test.stripped_body(p.oid, true) like '%authbound%'
+       and agent_board_test.stripped_body(p.oid, true) like '%metadata-safe%'
   ),
   'signed-write evidence records AUTHBOUND metadata-safe posture'
 );
@@ -146,7 +147,7 @@ select ok(
       join pg_namespace n on n.oid = p.pronamespace
      where n.nspname = 'agent_board'
        and p.proname = 'current_agent_id'
-       and pg_get_functiondef(p.oid) like '%agent_credential_id%'
+       and agent_board_test.stripped_body(p.oid, true) like '%agent_credential_id%'
   ),
   'current_agent_id records AUTHBOUND credential-claim boundary'
 );

package/tests/agent_board_board_claim_policy.test.sql

@@ -431,16 +431,27 @@ end $$;
 -- itself here rather than silently inheriting a policy change that resets nothing.
 --
 -- Two independent bounds, because neither is sufficient alone. BCP-19 is a source scan and a source
--- scan has a floor — it sees `set claim_policy` and not, say, a dynamic EXECUTE. BCP-20 is the
--- privilege bound underneath it: NO role holds UPDATE on agent_board.boards, so the column cannot
--- be written from a session at all, only from a SECURITY DEFINER function (which BCP-19 enumerates)
--- or by the table owner. `boards` also carries no user triggers, so there is no third path.
+-- scan has a floor — it sees a statement assigning the column and not, say, one assembled from
+-- fragments inside a dynamic EXECUTE. BCP-20 is the privilege bound underneath it: NO role holds
+-- UPDATE on agent_board.boards, so the column cannot be written from a session at all, only from a
+-- SECURITY DEFINER function (which BCP-19 enumerates) or by the table owner. `boards` also carries
+-- no user triggers, so there is no third path.
+--
+-- BCP-19's population is `col_write_re('boards','claim_policy')` over EVERY non-system schema —
+-- the same object and the same scope as CPR-6 in agent_board_claimpolicy_race.test.sql, so the
+-- two cannot disagree about who writes the column. It used to be the literal `set\s+claim_policy`
+-- over agent_board only (#416): that spelling missed `SET CLAIM_POLICY`, the multi-column
+-- `set (slug, claim_policy) = (…)`, a MERGE's `then update set`, an INSERT naming the column, and
+-- every no-column-list form that writes all columns — and a SECURITY DEFINER writer living in
+-- another schema was outside its scope entirely. Those forms are pinned by CPR-0's rows.
 -- ---------------------------------------------------------------------------
 select is(
   (select coalesce(string_agg(p.proname, ', ' order by p.proname), '')
      from pg_proc p join pg_namespace n on n.oid = p.pronamespace
-    where n.nspname = 'agent_board'
-      and agent_board_test.stripped_body(p.oid, true) ~ 'set\s+claim_policy'),
+    where n.nspname not in ('pg_catalog', 'information_schema', 'agent_board_test')
+      and n.nspname !~ '^pg_'
+      and p.prolang <> (select oid from pg_language where lanname = 'internal')
+      and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.col_write_re('boards', 'claim_policy')),
   'set_board_claim_policy',
   'BCP-19 CLASS: set_board_claim_policy is the ONLY function that writes boards.claim_policy — a second writer would need the same advisory-revert reset and fails here instead of being remembered');
 

package/tests/agent_board_claim_subject_gate.test.sql

@@ -863,8 +863,7 @@ select is(
   (select coalesce(string_agg(p.proname, ',' order by p.proname), '(none)')
      from pg_proc p
     where p.pronamespace = 'agent_board'::regnamespace
-      and lower(agent_board_test.stripped_body(p.oid, true))
-          ~ '(insert\s+into|merge\s+into|update|delete\s+from|truncate)(\s+table)?(\s+only)?\s+(("?agent_board"?\s*\.\s*)?claims\M|("?agent_board"?\s*\.\s*)?"claims")'),
+      and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.write_re('claims')),
   'acquire_claim,reclaim_fleet_machine,release_claim,renew_claim,set_board_claim_policy',
   'catalog: these five are the ONLY agent_board functions that write claims (insert/merge/update/delete/TRUNCATE) -- a new writer names itself here');
 
@@ -872,10 +871,10 @@ select is(
   (select coalesce(string_agg(p.proname, ',' order by p.proname), '(none)')
      from pg_proc p
     where p.pronamespace = 'agent_board'::regnamespace
-      and lower(agent_board_test.stripped_body(p.oid, true))
-          ~ '(insert\s+into|merge\s+into)(\s+only)?\s+(("?agent_board"?\s*\.\s*)?claims\M|("?agent_board"?\s*\.\s*)?"claims")'
-      and lower(agent_board_test.stripped_body(p.oid))
-          !~ 'not\s+agent_board\._agent_can_access_thread\s*\('),
+      and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.stmt_re('insert into|merge into', 'claims')
+      and agent_board_test.stripped_body(p.oid)
+          !~ agent_board_test.re('\m' || agent_board_test.ci_re('not') || '\s+'
+                                 || agent_board_test.call_frag('_agent_can_access_thread', false))),
   '(none)',
   'catalog: every function that CREATES a claims row contains a REFUSING reference to _agent_can_access_thread (source shape only -- assertion 2 is what proves it refuses)');
 
@@ -893,8 +892,8 @@ select is(
   (select coalesce(string_agg(p.proname, ',' order by p.proname), '(none)')
      from pg_proc p
     where p.pronamespace = 'agent_board'::regnamespace
-      and lower(agent_board_test.stripped_body(p.oid, true))
-          ~ '(delete\s+from|merge\s+into|truncate)(\s+table)?(\s+only)?\s+(("?agent_board"?\s*\.\s*)?claims\M|("?agent_board"?\s*\.\s*)?"claims")'),
+      and agent_board_test.stripped_body(p.oid, true)
+          ~ agent_board_test.stmt_re('delete from|merge into|truncate|truncate table', 'claims')),
   '(none)',
   'catalog: NOTHING REAPS -- no agent_board function deletes or truncates a claims row, which is what makes the ratified permanence true by construction');
 

package/tests/agent_board_claimkey.test.sql

@@ -206,7 +206,7 @@ select set_eq(
        join pg_namespace n on n.oid = p.pronamespace
       where n.nspname = 'agent_board'
         and p.prokind = 'f'
-        and pg_get_functiondef(p.oid) ~* '(insert\s+into|update)\s+(agent_board\.)?claims\M' $$,
+        and agent_board_test.stripped_body(p.oid, true) ~ agent_board_test.write_re('claims') $$,
   -- reclaim_fleet_machine (#150) is a fourth writer: on operator reclaim it RELEASES the squatter's
   -- active machine claim(s) on the reclaimed fingerprint so the new owner can acquire. It routes the
   -- key through _canonical_claim_key (assertion 25 stays 0); its positive state claim (status set to
@@ -225,7 +225,7 @@ select is(
      join pg_namespace n on n.oid = p.pronamespace
     where n.nspname = 'agent_board'
       and p.prokind = 'f'
-      and agent_board_test.stripped_body(p.oid) ~* '(insert\s+into|update)\s+(agent_board\.)?claims\M'
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.write_re('claims')
       -- #400: SCOPED TO WRITERS THAT HAVE A KEY TO NORMALIZE. A claims writer whose body never
       -- mentions resource_key cannot set one -- an UPDATE must name the column in its SET list and
       -- an INSERT must name it in its column list (resource_key is NOT NULL) -- so requiring it to
@@ -234,19 +234,22 @@ select is(
       -- is still in the population and still fails closed. STATED HOLE: `insert into claims select *
       -- from ...` names no column and would slip past, which is the same shape assertion 24's regex
       -- already cannot see.
-      and agent_board_test.stripped_body(p.oid) ~* '\mresource_key\M'
+      -- The column token QUALIFIED OR BARE (col_ref_frag): `col_frag` alone is the SET-list form
+      -- and rejects a preceding dot, so `c.resource_key` would drop a writer out of this set
+      -- (measured: _claimgate_promotion_blockers and reclaim_fleet_machine).
+      and agent_board_test.stripped_body(p.oid) ~ agent_board_test.re(agent_board_test.col_ref_frag('resource_key'))
       -- message-board#196 Bucket B: read RAW, one comment naming _canonical_claim_key
       -- dropped a bypass writer out of this set and the count went to 0 green.
       -- anchored to the CALL shape: a bare-substring `!~` is satisfied by any
       -- identifier containing the name, e.g. an argument `p_canonical_claim_key`.
-      -- SCHEMA-QUALIFIED, because a bare-name anchor proves call SYNTAX, not callee
-      -- IDENTITY: `\m_canonical_claim_key\s*\(` also matches
+      -- SCHEMA-QUALIFIED (`bare_ok => false`), because a bare-name anchor proves call
+      -- SYNTAX, not callee IDENTITY: the old `\m_canonical_claim_key\s*\(` also matched
       -- `zz_other._canonical_claim_key(...)` (measured true). Every live call
       -- site in agent_board is `agent_board.`-qualified, so requiring the
       -- qualification costs nothing today and is fail-CLOSED if someone later writes
       -- an unqualified call (it reads as NOT calling). Overload count is pinned
       -- separately, so schema + name is the identity.
-      and agent_board_test.stripped_body(p.oid) !~* '\magent_board\._canonical_claim_key\s*\('),
+      and agent_board_test.stripped_body(p.oid) !~ agent_board_test.call_re('_canonical_claim_key', false)),
   0,
   'every catalog-enumerated claims writer routes its resource_key through _canonical_claim_key');