fix(#3102): render edge-probe coverage report so the resolution loop consumes it (#3391)

* fix(#3102): render edge-probe coverage report so the resolution loop consumes it

Step 5.5 captured the edge-probe report into $COVERAGE, shape-checked it, and
reduced it to coverage.applicable — the engine's per-requirement items[] never
reached the model, so the resolution loop re-derived edge categories from prose
(the data-flow twin of #2733's control-flow discard). The block's own comment
claimed the opposite.

Render $COVERAGE RAW into context after the well-formedness guard (schema-agnostic
so an ADR-550 D7a-style re-cut cannot desync a bespoke renderer), and bind the rows
in the resolution loop as a deterministic FLOOR the model unions with its own
classification — floor, never ceiling, since the classifier has a measured recall
gap (ADR-857 §98 / ADR-550 D7b). --auto consumes the same floor. Comment corrected
to match. Regression test asserts a bare render of $COVERAGE, not a count-only cross.

* chore(#3102): add changeset for the Step 5.5 edge-coverage render fix

* chore(#3102): re-arm spec-phase.md emitted-drift ack for the Step 5.5 render growth

The render + floor-binding prose grows spec-phase.md ~1818 bytes (32238 -> 34056,
under the 40960 cap). Re-arms the existing spent spec-phase.md ack rather than adding
a new fragment (a second key would collide with the base-relative duplicate check).

tests/edge-probe-spec-phase-contract.test.cjs

@@ -193,6 +193,56 @@ test('adversarial review: Step 5.5 guards a zero-applicable coverage report', ()
   );
 });
 
+// #3102 (data-flow reachability): the validated $COVERAGE report must be RENDERED into the
+// model's visible context, not merely captured and reduced to `coverage.applicable`. Before
+// #3102, every emission of $COVERAGE on the success path piped it into a `node -e` consumer
+// (the shape guard, the count extract) whose output the model never sees — so the engine's
+// items[] were computed, validated, then discarded, and the resolution loop re-derived edge
+// categories from requirement prose (the sibling of #2733's control-flow discard, one layer
+// down). This asserts a BARE render: $COVERAGE emitted to stdout as the leading command, not
+// captured into a variable (`=$(`) and not piped into a consumer (`| node`).
+test('#3102: Step 5.5 renders the $COVERAGE report to stdout (not only the applicable count)', () => {
+  const content = readSpecPhase();
+  const block = extractStep55Block(content);
+  assert.ok(block.length > 0, 'Step 5.5 block must be extractable from spec-phase.md');
+
+  const rendersReport = block.split('\n').some((raw) => {
+    const line = raw.trim();
+    if (!/\$COVERAGE\b/.test(line)) return false; // must reference the captured report
+    if (line.startsWith('#')) return false; // not a comment mention
+    if (!/^(printf|echo|cat)\b/.test(line)) return false; // emitted as the leading command
+    if (/=\s*\$\(/.test(line)) return false; // a capture reaches a variable, not the model
+    if (/\|\s*node\b/.test(line)) return false; // piped into a consumer (shape guard / count extract)
+    return true;
+  });
+
+  assert.ok(
+    rendersReport,
+    'Step 5.5 must RENDER $COVERAGE to the model context — a bare `printf`/`echo`/`cat` of $COVERAGE that is not captured (`=$(`) and not piped into `node` — so the engine items[] reach the resolution loop (#3102 data-flow discard)'
+  );
+});
+
+// #3102: rendering without binding leaves the rows decorative. The resolution loop must
+// consume the rendered engine rows as a deterministic FLOOR — every proposed (requirement_id,
+// category) is resolved, and the model ADDS any category the classifier missed (floor, never
+// ceiling — the classifier has a measured recall gap: ADR-857 §98 / ADR-550 D7b). This guards
+// a future edit that renders the report but leaves the loop re-deriving categories from prose.
+test('#3102: Step 5.5 resolution loop binds the engine rows as a floor, not a ceiling', () => {
+  const content = readSpecPhase();
+  const block = extractStep55Block(content);
+  assert.ok(block.length > 0, 'Step 5.5 block must be extractable from spec-phase.md');
+  assert.match(
+    block,
+    /floor/i,
+    'Step 5.5 resolution loop must describe the rendered engine rows as a FLOOR the model unions with its own classification (ADR-550 D7b) — surfacing the report without binding it leaves it decorative'
+  );
+  assert.match(
+    block,
+    /recall gap|never a ceiling|not a ceiling|add(?:ing)? (?:any|the missed|categor)/i,
+    'the floor must NOT be a ceiling — the loop must instruct the model to add categories the classifier missed (ADR-857 §98 recall gap), not narrow to the engine rows'
+  );
+});
+
 // #3132: the retired covered/backstop-as-status vocabulary must not appear in
 // the workflow prose. probe-core.cts locks Status to resolved|dismissed|unresolved;
 // backstop survives only as a verification tier on a resolved item.

tests/emitted-drift-acks/0000-legacy-migration.json

@@ -36,7 +36,7 @@
     "agents/gsd-verifier.toml": "#2834: Codex agent TOML now carries model-routing fields on first install.",
     "gsd-code-fixer.md": "#2647: the three worktree-path sites (setup_worktree bash, concrete-steps prose, critical_rules) replaced the hardcoded /tmp/sv- mktemp path with a repo-relative .claude/worktrees/rf-<phase>-<pid>-<epoch> path, and added a defense-in-depth padded_phase validation at the sink (the agent prompt is a literal bash contract any caller can spawn; the orchestrator validates upstream but the sink now self-defends against path-traversal/branch-name injection). On Windows/Git Bash the /tmp path landed outside the project tree (outside the session permission allowlist, prompting on every read) and mktemp's MAX_PATH substitute was un-removable; .claude/worktrees/ is the same dir the harness-managed executor worktrees use (gitignored via .claude/, inside the permission scope). Growth is the path-resolution bash (main_repo via `git worktree list --porcelain | awk`) + the $$-PID/epoch uniqueness replacing mktemp's XXXXXX + the padded_phase guard + the #2647 rationale comments at each site. Supersedes the prior #2825 attribution, whose gated-bash + guardrail growth is already in next.",
     "spec-phase.md": {
-      "reason": "#2733: five transitions in gsd-core/workflows/spec-phase.md were re-pointed so control reaches the mandatory Step 5.5 edge-completeness and Step 5.6 prohibition-completeness probes, which no path could reach before. Four upstream gate-passed jumps went from 'Jump to Step 6' to 'Jump to Step 5.5', and Step 5.5's own terminal soft gate at :305 went from 'proceed to Step 6' to 'proceed to Step 5.6' so the common all-edges-resolved path stops skipping the prohibition probe. The +10 bytes is exactly those five targets growing by 2 bytes each ('Step 6' -> 'Step 5.5' / 'Step 5.6'); it is the literal fix, not incidental prose growth, and cannot be avoided without leaving a probe unreachable. Verified: 31987 -> 31997 bytes, DEFAULT tier, cap 40960. #3132: realigned retired covered/backstop-as-status vocab to resolved+verification."
+      "reason": "#2733: five transitions in gsd-core/workflows/spec-phase.md were re-pointed so control reaches the mandatory Step 5.5 edge-completeness and Step 5.6 prohibition-completeness probes, which no path could reach before. Four upstream gate-passed jumps went from 'Jump to Step 6' to 'Jump to Step 5.5', and Step 5.5's own terminal soft gate at :305 went from 'proceed to Step 6' to 'proceed to Step 5.6' so the common all-edges-resolved path stops skipping the prohibition probe. The +10 bytes is exactly those five targets growing by 2 bytes each ('Step 6' -> 'Step 5.5' / 'Step 5.6'); it is the literal fix, not incidental prose growth, and cannot be avoided without leaving a probe unreachable. Verified: 31987 -> 31997 bytes, DEFAULT tier, cap 40960. #3132: realigned retired covered/backstop-as-status vocab to resolved+verification. #3102: Step 5.5 now RENDERS the edge-probe coverage report into the model's context (a raw printf of $COVERAGE after the well-formedness guard) and binds those rows in the resolution loop and --auto as a deterministic FLOOR, plus the corrected block comment; load-bearing workflow instruction that makes ADR-550 D7b (deterministic propose + LLM resolve) real at runtime and honors ADR-857 sec98's recall gap (floor, not ceiling). 32238 -> 34056 bytes (+1818), DEFAULT tier, cap 40960."
     }
   }
 }