Coverage — what holds each rule, and what exercises each holder

Generated by scripts/coverage-map.py — edit the tree, not this file.

A rule is only as covered as its weakest layer: a stated enforced_by, a holder that ships, a test that exercises the holder, and a scenario that measures the behaviour. This map lists each layer from the tree itself; rates are not copied here — they live in ./runs, dated, where a rate belongs.

What the corpus says holds its rules

• validator — stated 9×
• harness — stated 4×
• prose-only — stated 3×
• request — stated 3×
• git-host — stated 1×

The register of gates and the prose-only list: ./permissions.

Validators that ship

• scripts/changelog.py — The changelog skeleton — collation the author writes over, never the entry itself
• scripts/check-freshness.py — Check-date validator: a date, not a tick
• scripts/check-links.py — Cross-reference validator: does the file exist, and does the section inside it?
• scripts/check-shell-exec.py — Refuse a shell script that would execute text as a command
• scripts/check-structure.py — Structural integrity of the docs. Every check here exists because the defect it
• scripts/coverage-map.py — Regenerate the coverage map: what holds each rule, and what exercises each holder
• scripts/fetch-source.py — Resolve, archive and verify entries for the sources register (./sources)
• scripts/inventory.py — A deterministic inventory of a tree — the map of the territory, never the territory
• scripts/map-blocks.py — Regenerate the map's touched by: blocks from the tasks' own declarations
• scripts/migrate-layout.py — Move a pre-0.2.0 flat project into the _ops/ layout — as history, not as loss
• scripts/new-id.py — Mint an entity id that is not already taken
• scripts/transition.py — The one door a stage change goes through (./pipelines)

Hooks that ship

• hooks/audit-gate.py — The audit gate: in a repository being taken over, the debt list comes before the first touch
• hooks/audit-gate.sh — The audit gate travels with the plugin, because in a takeover the target repo cannot
• hooks/post-compact.sh — SessionStart with matcher "compact" — the documented channel whose stdout DOES reach the
• hooks/pre-compact.sh — Fires before the runtime compacts the conversation. Plain stdout from PreCompact is NOT

Tests that exercise the holders (run by scripts/preflight.sh)

• scripts/test-audit-gate.sh — Mutation tests for hooks/audit-gate.py — the same discipline as preflight §13: every rule
• scripts/test-check-shell-exec.sh — The shell-exec checker, exercised on its mutants and its twins — the form the capability bar
• scripts/test-company-preflight.sh — The bypass net (§14) exercised end to end: a hand-flipped stage in a staged commit is
• scripts/test-corpus-preflight.sh — The doors-regression check (preflight §1a) exercised on the mutant and the twin. The check
• scripts/test-eval-requeue.sh — The void sweep in eval-requeue.sh, exercised against the shapes that produced it
• scripts/test-find-installs.sh — find-installs.sh exercised on its mutants and its honest twins
• scripts/test-inventory.sh — The inventory's three promises, exercised: identical twice, guest-safe, honest off git
• scripts/test-map-blocks.sh — The touched-by executor exercised: blocks generated, only markers rewritten, and two live
• scripts/test-migrate-layout.sh — The 0.2.0 layout migrator exercised on a flat 0.1.x fixture: history-preserving
• scripts/test-transition.sh — The transition door, exercised end to end on a throwaway fixture — same habit as

Behavioural scenarios

• 118 runsheet rows over 29 fixtures (audience · brandkit · chain · cold · colleague · conflict · consult · copy · deadlink · deadtool · decompose · drift · escalation · evidence · feedback · flatlegacy · flowmap · guest · hire · import · injection · ledger · mcpsource · mess · recovery · routine · ship · thread · workshop)
• scenario text: ./evals · ./scenarios — rates and their dates: ./runs