@windyroad/itil 0.61.1 → 0.61.2

package/scripts/test/skill-md-dual-tolerant-coverage-rfc-002-t3.bats

@@ -1,374 +0,0 @@
-#!/usr/bin/env bats
-
-# @rfc RFC-002 T3 — Bats fixture audit + dual-tolerant assertions
-# @adr ADR-031 (Problem-ticket directory layout — per-state subdirs)
-# @adr ADR-051 (load-bearing-from-the-start — each SKILL-prescribed
-#   enumeration pipeline ships with a behavioural enforcement test
-#   exercised against per-state-layout synthetic fixtures, not later
-#   by graceful drift discovery during the T5 migration cutover)
-# @adr ADR-052 (behavioural-bats default — these tests run the actual
-#   shell pipelines the SKILL.md sites prescribe against synthetic
-#   fixtures and assert observable enumeration. They do NOT structurally
-#   grep SKILL.md prose for the dual-pattern string, which would be
-#   P081-class structural-test-disguised-as-behavioural and was
-#   explicitly excluded from T2 per architect finding 3)
-# @adr ADR-014 (single-purpose: one mechanical contract — the
-#   SKILL-prescribed pipelines compose with per-state-layout fixtures)
-# @adr ADR-060 (Phase 1 Slice 5 forward-dogfood — T3 commit grain)
-# @problem P069 (driving — flat layout unskimmable; the migration this
-#   contract guards is the relief)
-# @problem P081 (no structural-grep on SKILL.md content — this test
-#   is the behavioural alternative)
-# @jtbd JTBD-001 (extended scope — multi-commit RFC-grain coordinated
-#   change governance; T3 is one of 11 RFC-002 sub-tasks; behavioural
-#   coverage is how per-edit governance stays trustworthy across the
-#   migration window)
-# @jtbd JTBD-006 (work-backlog-AFK — dual-tolerant pipelines preserve
-#   AFK-loop continuity during the T2-to-T6 migration window; without
-#   this contract, mid-migration AFK iterations silently miss tickets
-#   in the un-migrated layout half)
-# @jtbd JTBD-008 (decompose-fix-into-coordinated-changes — RFC-002 T3
-#   is the load-bearing test artefact for the coordinated-change
-#   sub-workstream; visible as an RFC-002-T3 entity rather than
-#   diffusing across 14 existing files per JTBD review)
-# @jtbd JTBD-101 (extend-the-suite — adopter projects consuming
-#   @windyroad/itil at the T2-shipped state must enumerate correctly
-#   against their flat-layout tickets AND post-auto-migration per-state
-#   tickets; T3 proves both halves)
-#
-# Contract: every SKILL.md call site updated in T2 (commit `0795e91`,
-# 14 SKILL.md surfaces) prescribes a shell pipeline of canonical shape:
-#
-#   ls docs/problems/*.<state>.md docs/problems/<state>/*.md 2>/dev/null
-#   ls docs/problems/*.md         docs/problems/*/*.md       2>/dev/null
-#   ls docs/problems/<ID>-*.md    docs/problems/*/<ID>-*.md  2>/dev/null
-#
-# T2's `dual-tolerant-glob-rfc-002-t2.bats` exercises the canonical
-# pattern shapes generically. T3 extends that coverage to the
-# end-to-end SKILL-prescribed PIPELINES — the next-ID compute pipeline
-# (`ls X Y | sed | grep -oE | sort -n | tail -1`), the multi-state
-# union form (4-pathspec for open + known-error backlog scan), the
-# verifying-state filter as run-retro Step 4a dispatches it, and the
-# brace-expansion ID + state-set form report-upstream uses. Each test
-# runs the pipeline against three synthetic fixture shapes (flat-only,
-# per-state-only, mixed) and asserts observable enumeration.
-#
-# T6 (post-T5 verification) drops the flat-layout half. This test
-# updates at T6 to single-pattern (per-state only), NOT removed — the
-# contract narrows but the behavioural enforcement remains.
-#
-# CONTRACT NOTE: when one half of the dual-pattern has zero matches
-# in the current fixture (single-layout fixtures), `ls X Y 2>/dev/null`
-# exits nonzero — the unmatched literal pathname propagates to ls's
-# argv and `2>/dev/null` only suppresses the stderr noise, not the
-# exit code. SKILL.md call sites MUST treat STDOUT emptiness as the
-# canonical "no tickets" signal, NOT exit code zero. Test assertions
-# probe stdout content via `run` (which absorbs the exit code into
-# `$status`); `$status` is asserted only in the empty-fixture and
-# missing-ID cases where nonzero exit is the intended contract.
-
-setup() {
-  REPO_ROOT="$(mktemp -d)"
-  cd "$REPO_ROOT"
-  mkdir -p docs/problems
-}
-
-teardown() {
-  cd /
-  rm -rf "$REPO_ROOT"
-}
-
-# ── fixture builders ─────────────────────────────────────────────────────────
-
-build_flat_layout() {
-  cat > docs/problems/100-foo.open.md <<'EOF'
-# Problem 100: Foo
-**Status**: Open
-**WSJF**: 5.0
-EOF
-  cat > docs/problems/101-bar.known-error.md <<'EOF'
-# Problem 101: Bar
-**Status**: Known Error
-**WSJF**: 4.0
-EOF
-  cat > docs/problems/102-baz.verifying.md <<'EOF'
-# Problem 102: Baz
-**Status**: Verification Pending
-EOF
-  cat > docs/problems/103-qux.parked.md <<'EOF'
-# Problem 103: Qux
-**Status**: Parked
-EOF
-  cat > docs/problems/104-quux.closed.md <<'EOF'
-# Problem 104: Quux
-**Status**: Closed
-EOF
-}
-
-build_per_state_layout() {
-  mkdir -p docs/problems/open docs/problems/known-error docs/problems/verifying docs/problems/parked docs/problems/closed
-  cat > docs/problems/open/200-foo2.md <<'EOF'
-# Problem 200: Foo2
-**Status**: Open
-**WSJF**: 6.0
-EOF
-  cat > docs/problems/known-error/201-bar2.md <<'EOF'
-# Problem 201: Bar2
-**Status**: Known Error
-**WSJF**: 3.5
-EOF
-  cat > docs/problems/verifying/202-baz2.md <<'EOF'
-# Problem 202: Baz2
-**Status**: Verification Pending
-EOF
-  cat > docs/problems/parked/203-qux2.md <<'EOF'
-# Problem 203: Qux2
-**Status**: Parked
-EOF
-  cat > docs/problems/closed/204-quux2.md <<'EOF'
-# Problem 204: Quux2
-**Status**: Closed
-EOF
-}
-
-build_mixed_layout() {
-  build_flat_layout
-  build_per_state_layout
-}
-
-# ── Pipeline 1: Next-ID compute (manage-problem Step 3 + capture-problem Step 3)
-#
-# SKILL.md prescribes the recursive local_max formula:
-#   ls docs/problems/*.md docs/problems/*/*.md 2>/dev/null \
-#     | sed 's|.*/||' \
-#     | grep -oE '^[0-9]+' \
-#     | sort -n | tail -1
-#
-# Architect finding 2 (T2): the recursive enumeration MUST contribute
-# tickets from BOTH layouts to max-ID, otherwise a per-state ticket at
-# ID 204 is invisible to a flat-only-enumerating capture-problem and
-# the next ID re-allocates an already-taken slot. T3 exercises the
-# pipeline against per-state-only AND mixed fixtures to prove the
-# dual-pathspec composes with the downstream sed/grep/sort pipeline.
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "next-ID pipeline: flat-only fixture yields max ID 104" {
-  build_flat_layout
-  run bash -c "ls docs/problems/*.md docs/problems/*/*.md 2>/dev/null | sed 's|.*/||' | grep -oE '^[0-9]+' | sort -n | tail -1"
-  [ "$output" = "104" ]
-}
-
-@test "next-ID pipeline: per-state-only fixture yields max ID 204" {
-  build_per_state_layout
-  run bash -c "ls docs/problems/*.md docs/problems/*/*.md 2>/dev/null | sed 's|.*/||' | grep -oE '^[0-9]+' | sort -n | tail -1"
-  [ "$output" = "204" ]
-}
-
-@test "next-ID pipeline: mixed fixture yields max ID 204 (recursive enumeration spans both layouts)" {
-  # Architect finding 2: a per-state ticket at ID 204 MUST contribute
-  # to max-ID even when flat-layout 104 also exists. Drop the per-state
-  # half of the dual-pathspec and this test fails — capture-problem
-  # would re-allocate ID 105 instead of advancing to 205.
-  build_mixed_layout
-  run bash -c "ls docs/problems/*.md docs/problems/*/*.md 2>/dev/null | sed 's|.*/||' | grep -oE '^[0-9]+' | sort -n | tail -1"
-  [ "$output" = "204" ]
-}
-
-@test "next-ID pipeline: empty fixture yields empty result" {
-  run bash -c "ls docs/problems/*.md docs/problems/*/*.md 2>/dev/null | sed 's|.*/||' | grep -oE '^[0-9]+' | sort -n | tail -1"
-  [ -z "$output" ]
-}
-
-# ── Pipeline 2: Open + known-error multi-state union
-#   (work-problems Step 1, list-problems live scan)
-#
-# SKILL.md prescribes the 4-pathspec form:
-#   ls docs/problems/*.open.md docs/problems/*.known-error.md \
-#      docs/problems/open/*.md docs/problems/known-error/*.md 2>/dev/null
-#
-# This is wider than T2's single-state filter — it unions two states
-# across two layouts in one ls invocation. The prove-out shape: the
-# union enumerates open + known-error from BOTH layouts and excludes
-# verifying / parked / closed from BOTH layouts.
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "open+known-error union: per-state-only fixture enumerates 200 and 201" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/*.open.md docs/problems/*.known-error.md docs/problems/open/*.md docs/problems/known-error/*.md 2>/dev/null'
-  [[ "$output" == *"open/200-foo2.md"* ]]
-  [[ "$output" == *"known-error/201-bar2.md"* ]]
-}
-
-@test "open+known-error union: per-state-only fixture excludes verifying/parked/closed" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/*.open.md docs/problems/*.known-error.md docs/problems/open/*.md docs/problems/known-error/*.md 2>/dev/null'
-  [[ "$output" != *"202-baz2"* ]]
-  [[ "$output" != *"203-qux2"* ]]
-  [[ "$output" != *"204-quux2"* ]]
-}
-
-@test "open+known-error union: mixed fixture enumerates all four (100, 101, 200, 201)" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/*.open.md docs/problems/*.known-error.md docs/problems/open/*.md docs/problems/known-error/*.md 2>/dev/null'
-  [[ "$output" == *"100-foo.open.md"* ]]
-  [[ "$output" == *"101-bar.known-error.md"* ]]
-  [[ "$output" == *"open/200-foo2.md"* ]]
-  [[ "$output" == *"known-error/201-bar2.md"* ]]
-}
-
-@test "open+known-error union: mixed fixture excludes verifying/parked/closed from BOTH layouts" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/*.open.md docs/problems/*.known-error.md docs/problems/open/*.md docs/problems/known-error/*.md 2>/dev/null'
-  [[ "$output" != *"102-baz"* ]]
-  [[ "$output" != *"103-qux"* ]]
-  [[ "$output" != *"104-quux"* ]]
-  [[ "$output" != *"202-baz2"* ]]
-  [[ "$output" != *"203-qux2"* ]]
-  [[ "$output" != *"204-quux2"* ]]
-}
-
-# ── Pipeline 3: Verifying-state filter (run-retro Step 4a)
-#
-# SKILL.md prescribes:
-#   ls docs/problems/*.verifying.md docs/problems/verifying/*.md 2>/dev/null
-#
-# run-retro Step 4a uses this to surface verification-close candidates
-# from the session-context evidence. T3 proves the pipeline finds the
-# verifying ticket in BOTH layouts independently.
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "verifying-state pipeline: flat-only fixture finds 102" {
-  build_flat_layout
-  run bash -c 'ls docs/problems/*.verifying.md docs/problems/verifying/*.md 2>/dev/null'
-  [[ "$output" == *"102-baz.verifying.md"* ]]
-}
-
-@test "verifying-state pipeline: per-state-only fixture finds 202" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/*.verifying.md docs/problems/verifying/*.md 2>/dev/null'
-  [[ "$output" == *"verifying/202-baz2.md"* ]]
-}
-
-@test "verifying-state pipeline: mixed fixture finds 102 AND 202" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/*.verifying.md docs/problems/verifying/*.md 2>/dev/null'
-  [[ "$output" == *"102-baz.verifying.md"* ]]
-  [[ "$output" == *"verifying/202-baz2.md"* ]]
-}
-
-# ── Pipeline 4: ID-anchored ticket lookup
-#   (manage-problem ticket-by-ID, link-incident, close-incident,
-#   transition-problem Step 2, capture-problem Step 2 dup-detect)
-#
-# SKILL.md prescribes:
-#   ls docs/problems/<ID>-*.md docs/problems/*/<ID>-*.md 2>/dev/null
-#
-# T3 exercises lookup of a known-existing ID across both layouts and
-# the missing-ID case (asserts empty stdout + nonzero exit).
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "ID-anchored pipeline: per-state-only fixture finds 200 in subdir" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/200-*.md docs/problems/*/200-*.md 2>/dev/null'
-  [[ "$output" == *"open/200-foo2.md"* ]]
-}
-
-@test "ID-anchored pipeline: mixed fixture finds 100 (flat) and 200 (per-state)" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/100-*.md docs/problems/*/100-*.md 2>/dev/null'
-  [[ "$output" == *"100-foo.open.md"* ]]
-  run bash -c 'ls docs/problems/200-*.md docs/problems/*/200-*.md 2>/dev/null'
-  [[ "$output" == *"open/200-foo2.md"* ]]
-}
-
-@test "ID-anchored pipeline: missing ID yields empty stdout + nonzero exit" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/999-*.md docs/problems/*/999-*.md 2>/dev/null'
-  [ -z "$output" ]
-  [ "$status" -ne 0 ]
-}
-
-# ── Pipeline 5: Brace-expansion ID + state-set (report-upstream)
-#
-# SKILL.md prescribes:
-#   ls docs/problems/<ID>-*.{open,known-error,verifying,closed}.md \
-#      docs/problems/*/<ID>-*.md 2>/dev/null
-#
-# The flat half restricts to a state-set (excludes parked); the
-# per-state half is unrestricted (no state filter). T3 proves the
-# brace expansion composes with the per-state pathspec without false
-# positives across the migration window.
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "brace-id-state pipeline: per-state-only fixture finds 200 via per-state half" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/200-*.{open,known-error,verifying,closed}.md docs/problems/*/200-*.md 2>/dev/null'
-  [[ "$output" == *"open/200-foo2.md"* ]]
-}
-
-@test "brace-id-state pipeline: mixed fixture finds flat 100 (open) and per-state 200 (open)" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/100-*.{open,known-error,verifying,closed}.md docs/problems/*/100-*.md 2>/dev/null'
-  [[ "$output" == *"100-foo.open.md"* ]]
-  run bash -c 'ls docs/problems/200-*.{open,known-error,verifying,closed}.md docs/problems/*/200-*.md 2>/dev/null'
-  [[ "$output" == *"open/200-foo2.md"* ]]
-}
-
-@test "brace-id-state pipeline: parked ticket excluded from flat half but matched in per-state half" {
-  # Flat 103 is parked (excluded by the brace state-set); per-state 203
-  # is parked but the per-state pathspec is state-unrestricted, so it
-  # MUST surface. This is the contract architect finding 2 codifies.
-  build_mixed_layout
-  run bash -c 'ls docs/problems/103-*.{open,known-error,verifying,closed}.md docs/problems/*/103-*.md 2>/dev/null'
-  [[ "$output" != *"103-qux.parked.md"* ]]
-  run bash -c 'ls docs/problems/203-*.{open,known-error,verifying,closed}.md docs/problems/*/203-*.md 2>/dev/null'
-  [[ "$output" == *"parked/203-qux2.md"* ]]
-}
-
-# ── Pipeline 6: Closed-ticket ID-anchored lookup
-#   (review-problems Step 5: closed-section rendering uses
-#   `docs/problems/*.closed.md docs/problems/closed/*.md`)
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "closed-ticket pipeline: mixed fixture enumerates flat 104 and per-state 204" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/*.closed.md docs/problems/closed/*.md 2>/dev/null'
-  [[ "$output" == *"104-quux.closed.md"* ]]
-  [[ "$output" == *"closed/204-quux2.md"* ]]
-}
-
-@test "closed-ticket pipeline: per-state-only fixture excludes other-state subdirs" {
-  build_per_state_layout
-  run bash -c 'ls docs/problems/*.closed.md docs/problems/closed/*.md 2>/dev/null'
-  [[ "$output" == *"closed/204-quux2.md"* ]]
-  [[ "$output" != *"open/200"* ]]
-  [[ "$output" != *"known-error/201"* ]]
-  [[ "$output" != *"verifying/202"* ]]
-  [[ "$output" != *"parked/203"* ]]
-}
-
-# ── Pipeline 7: Parked-state filter (review-problems Step 3 parked section)
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "parked-state pipeline: mixed fixture enumerates flat 103 and per-state 203" {
-  build_mixed_layout
-  run bash -c 'ls docs/problems/*.parked.md docs/problems/parked/*.md 2>/dev/null'
-  [[ "$output" == *"103-qux.parked.md"* ]]
-  [[ "$output" == *"parked/203-qux2.md"* ]]
-}
-
-# ── Composition: ls-with-2>/dev/null exit-code semantics
-# (mirrors T2's empty-fixture contract; proves the SKILL.md contract
-# remains "stdout content is the signal, not exit code")
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "all pipelines: empty fixture produces empty stdout across every shape" {
-  run bash -c "ls docs/problems/*.md docs/problems/*/*.md 2>/dev/null | sed 's|.*/||' | grep -oE '^[0-9]+' | sort -n | tail -1"
-  [ -z "$output" ]
-  run bash -c 'ls docs/problems/*.open.md docs/problems/*.known-error.md docs/problems/open/*.md docs/problems/known-error/*.md 2>/dev/null'
-  [ -z "$output" ]
-  run bash -c 'ls docs/problems/*.verifying.md docs/problems/verifying/*.md 2>/dev/null'
-  [ -z "$output" ]
-  run bash -c 'ls docs/problems/100-*.md docs/problems/*/100-*.md 2>/dev/null'
-  [ -z "$output" ]
-}

package/scripts/test/story-oversight-lib.bats

@@ -1,190 +0,0 @@
-#!/usr/bin/env bats
-# Behavioural test for lib/story-oversight.sh — ADR-090 lazy-fingerprint helpers.
-# The hash EXCLUDES the marker lines (so writing the marker is idempotent), and
-# "ratified" = confirmed marker AND stored hash matches current content. Any
-# content edit drifts the hash → not ratified (ADR-090 drift-invalidation).
-#
-# @adr ADR-090
-# @problem P404 (Phase 2)
-
-setup() {
-  REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
-  LIB="${REPO_ROOT}/packages/itil/lib/story-oversight.sh"
-  TMPD="$(mktemp -d)"
-  # shellcheck source=/dev/null
-  source "$LIB"
-}
-teardown() { rm -rf "$TMPD"; }
-
-@test "oversight_content_hash: identical content → identical hash" {
-  printf '# body\nline two\n' > "$TMPD/a"; printf '# body\nline two\n' > "$TMPD/b"
-  [ "$(oversight_content_hash "$TMPD/a")" = "$(oversight_content_hash "$TMPD/b")" ]
-}
-
-@test "oversight_content_hash: adding/changing the marker lines does NOT change the hash" {
-  printf -- '---\nstatus: accepted\n---\n# body\n' > "$TMPD/f"
-  before="$(oversight_content_hash "$TMPD/f")"
-  printf -- '---\nstatus: accepted\nhuman-oversight: confirmed\noversight-hash: %064d\n---\n# body\n' 0 > "$TMPD/f"
-  [ "$before" = "$(oversight_content_hash "$TMPD/f")" ]
-}
-
-@test "oversight_content_hash: a real content edit DOES change the hash" {
-  printf '# body\n' > "$TMPD/f"; before="$(oversight_content_hash "$TMPD/f")"
-  printf '# body EDITED\n' > "$TMPD/f"
-  [ "$before" != "$(oversight_content_hash "$TMPD/f")" ]
-}
-
-@test "oversight_content_hash: ticking an acceptance-criterion checkbox does NOT drift (lifecycle progress)" {
-  printf -- '---\nstatus: accepted\n---\n- [ ] a criterion\n' > "$TMPD/f"; before="$(oversight_content_hash "$TMPD/f")"
-  printf -- '---\nstatus: accepted\n---\n- [x] a criterion\n' > "$TMPD/f"
-  [ "$before" = "$(oversight_content_hash "$TMPD/f")" ]
-}
-
-@test "oversight_content_hash: advancing frontmatter status: does NOT drift (lifecycle)" {
-  printf -- '---\nstatus: accepted\n---\n# body\n' > "$TMPD/f"; before="$(oversight_content_hash "$TMPD/f")"
-  printf -- '---\nstatus: done\n---\n# body\n' > "$TMPD/f"
-  [ "$before" = "$(oversight_content_hash "$TMPD/f")" ]
-}
-
-@test "oversight_content_hash: changing criterion TEXT DOES drift (substance)" {
-  printf -- '---\nstatus: accepted\n---\n- [ ] original\n' > "$TMPD/f"; before="$(oversight_content_hash "$TMPD/f")"
-  printf -- '---\nstatus: accepted\n---\n- [ ] a DIFFERENT criterion\n' > "$TMPD/f"
-  [ "$before" != "$(oversight_content_hash "$TMPD/f")" ]
-}
-
-@test "oversight_content_hash: advancing slice data-status does NOT drift (HTML map lifecycle)" {
-  printf '<a class="slice" data-story-id="STORY-1" data-status="draft">x</a>\n' > "$TMPD/m.html"; before="$(oversight_content_hash "$TMPD/m.html")"
-  printf '<a class="slice" data-story-id="STORY-1" data-status="done">x</a>\n' > "$TMPD/m.html"
-  [ "$before" = "$(oversight_content_hash "$TMPD/m.html")" ]
-}
-
-@test "is_story_map_ratified: confirmed + matching hash → ratified (md)" {
-  printf -- '---\nstatus: accepted\n---\n# body\n' > "$TMPD/f"
-  h="$(oversight_content_hash "$TMPD/f")"
-  printf -- '---\nstatus: accepted\nhuman-oversight: confirmed\noversight-hash: %s\n---\n# body\n' "$h" > "$TMPD/f"
-  run is_story_map_ratified "$TMPD/f"; [ "$status" -eq 0 ]
-}
-
-@test "is_story_map_ratified: confirmed but STALE hash (drifted) → not ratified" {
-  printf -- '---\nhuman-oversight: confirmed\noversight-hash: %064d\n---\n# body EDITED AFTER RATIFY\n' 1 > "$TMPD/f"
-  run is_story_map_ratified "$TMPD/f"; [ "$status" -ne 0 ]
-}
-
-@test "is_story_map_ratified: confirmed with NO hash (legacy hand-ratified) → not ratified" {
-  printf -- '---\nhuman-oversight: confirmed\n---\n# body\n' > "$TMPD/f"
-  run is_story_map_ratified "$TMPD/f"; [ "$status" -ne 0 ]
-}
-
-@test "is_story_map_ratified: unconfirmed → not ratified" {
-  printf -- '---\nhuman-oversight: unconfirmed\n---\n# body\n' > "$TMPD/f"
-  run is_story_map_ratified "$TMPD/f"; [ "$status" -ne 0 ]
-}
-
-@test "is_story_map_ratified: HTML map confirmed + matching hash → ratified" {
-  printf '<h1>map</h1>\n' > "$TMPD/m.html"
-  h="$(oversight_content_hash "$TMPD/m.html")"
-  printf '<meta name="human-oversight" content="confirmed">\n<meta name="oversight-hash" content="%s">\n<h1>map</h1>\n' "$h" > "$TMPD/m.html"
-  run is_story_map_ratified "$TMPD/m.html"; [ "$status" -eq 0 ]
-}
-
-# --- P474 / STORY-055: the extraction must not move a single hash --------------
-#
-# `oversight_content_hash` and `oversight_content_hash_excluding_stories` shared a
-# verbatim grep|sed filter, which is why the P474 mirror had to be removed twice
-# and why a third copy could have been missed. The filter is now extracted.
-#
-# The extraction boundary is the whole risk. The two functions' INPUT paths are
-# NOT equivalent and must stay that way: one passes the file to grep directly,
-# the other round-trips through $(cat) — which strips all trailing newlines —
-# then printf '%s\n' re-adds exactly one. So trailing blank lines are preserved
-# by the first and collapsed by the second. Extract the filter only; unify the
-# input paths "for symmetry" and the hash silently changes for any artefact with
-# anomalous trailing whitespace, un-ratifying every stored fingerprint at once.
-#
-# `_ref_*` below are VERBATIM copies of the pre-extraction implementation. They
-# exist to be compared against, so do NOT refactor them to call the new helper —
-# that would make the equivalence assertions circular and worthless.
-
-_ref_hash() {
-  grep -vE '^(human-oversight|oversight-hash|oversight-basis|status):|<meta[^>]*name="(human-oversight|oversight-hash|oversight-basis|status)"' "$1" \
-    | sed -E 's/- \[[ xX]\]/- [ ]/g; s/data-status="[^"]*"/data-status=""/g' \
-    | shasum -a 256 | awk '{print $1}'
-}
-
-_ref_hash_excluding() {
-  local f="$1"; shift
-  local filtered id
-  filtered="$(cat "$f")"
-  for id in "$@"; do
-    [ -n "$id" ] || continue
-    filtered="$(printf '%s\n' "$filtered" | grep -vF "data-story-id=\"${id}\"" || true)"
-  done
-  printf '%s\n' "$filtered" \
-    | grep -vE '^(human-oversight|oversight-hash|oversight-basis|status):|<meta[^>]*name="(human-oversight|oversight-hash|oversight-basis|status)"' \
-    | sed -E 's/- \[[ xX]\]/- [ ]/g; s/data-status="[^"]*"/data-status=""/g' \
-    | shasum -a 256 | awk '{print $1}'
-}
-
-@test "extraction: byte-identical to the frozen reference across edge shapes" {
-  # No final newline.
-  printf -- '---\nstatus: draft\n---\nbody' > "$TMPD/a"
-  # Multiple trailing blank lines — the shape the input-path divergence hinges on.
-  printf -- '---\nstatus: draft\n---\nbody\n\n\n\n' > "$TMPD/b"
-  # CRLF.
-  printf -- '---\r\nstatus: draft\r\n---\r\nbody\r\n' > "$TMPD/c"
-  # Empty file.
-  : > "$TMPD/d"
-  # A criterion tick and a data-status, both normalised.
-  printf -- '- [x] done\n<a data-status="done">x</a>\n' > "$TMPD/e"
-  # Every excluded key present, in both encodings.
-  printf -- 'human-oversight: confirmed\noversight-hash: deadbeef\noversight-basis: pure-decomposition\nstatus: accepted\n<meta name="status" content="draft">\nbody\n' > "$TMPD/f"
-  # Only a newline.
-  printf '\n' > "$TMPD/g"
-
-  for n in a b c d e f g; do
-    [ "$(oversight_content_hash "$TMPD/$n")" = "$(_ref_hash "$TMPD/$n")" ] || {
-      echo "oversight_content_hash diverged on fixture $n"; false
-    }
-  done
-}
-
-@test "extraction: map variant byte-identical, including the id-exclusion loop" {
-  printf -- '<meta name="status" content="draft">\n<a data-story-id="STORY-05">short</a>\n<a data-story-id="STORY-054">long</a>\n<a class="slice" data-status="done">s</a>\nbody\n\n\n' \
-    > "$TMPD/m.html"
-  # Zero ids, one id, and the prefix-collision pair — STORY-05 must not strip
-  # STORY-054's card, which is what the closing-quote anchor buys.
-  [ "$(oversight_content_hash_excluding_stories "$TMPD/m.html")" = "$(_ref_hash_excluding "$TMPD/m.html")" ]
-  [ "$(oversight_content_hash_excluding_stories "$TMPD/m.html" STORY-054)" = "$(_ref_hash_excluding "$TMPD/m.html" STORY-054)" ]
-  [ "$(oversight_content_hash_excluding_stories "$TMPD/m.html" STORY-05)" = "$(_ref_hash_excluding "$TMPD/m.html" STORY-05)" ]
-  [ "$(oversight_content_hash_excluding_stories "$TMPD/m.html" STORY-05 STORY-054)" = "$(_ref_hash_excluding "$TMPD/m.html" STORY-05 STORY-054)" ]
-  # And the divergence itself is preserved rather than accidentally unified.
-  [ "$(oversight_content_hash_excluding_stories "$TMPD/m.html")" != "$(oversight_content_hash "$TMPD/m.html")" ]
-}
-
-# Golden hashes are pinned over FIXTURES, never over live artefacts. Pinning to
-# the corpus would redden this suite on every later legitimate artefact edit —
-# ADR-052's refactor-blocking failure mode. Their job is to catch the frozen
-# reference itself rotting, which the equivalence cases above cannot.
-@test "extraction: pinned golden hashes over a canonical fixture" {
-  printf -- '---\nstatus: draft\nhuman-oversight: confirmed\n---\n\n# STORY-900: canonical\n\n**Reported**: 2026-07-30\n\n- [ ] a criterion\n' \
-    > "$TMPD/golden.md"
-  [ "$(oversight_content_hash "$TMPD/golden.md")" = "1a18f2501f7092b64316a1566795e64860f90893c2b4d0d36cd9a783ada21414" ]
-}
-
-@test "extraction: the excluded-key accessor agrees with the operative pattern both ways" {
-  local keys; keys="$(oversight_excluded_keys)"
-  [ -n "$keys" ]
-  # Every accessor key appears as an alternation branch in the operative filter.
-  for k in $keys; do
-    grep -qF -- "$k" "$LIB" || { echo "accessor key '$k' absent from the lib pattern"; false; }
-  done
-  # And every branch in the operative pattern appears in the accessor — the
-  # direction that catches a key ADDED to the regex but not to the accessor,
-  # which would leave the corpus lint blind to it.
-  local branch
-  for branch in $(grep -oE '\^\(([a-z-]+\|)+[a-z-]+\):' "$LIB" | head -1 | tr -d '^():' | tr '|' ' '); do
-    printf '%s\n' "$keys" | grep -qx -- "$branch" || {
-      echo "pattern branch '$branch' missing from oversight_excluded_keys()"; false
-    }
-  done
-}