refactor: re-rank at capacity (13:56Z)

Assisted-by: Claude Code:claude-opus-5-5

Author: claude

register/90-refactor.md

@@ -1,5 +1,5 @@
 ### Refactor routine (`refactor`, hourly, highest leverage first)
-_Last updated 2026-10-04T12:58Z · main @ 045d7ec_
+_Last updated 2026-10-04T13:58Z · main @ 045d7ec_
 
 **In flight:**
 - [#574](https://github.com/SocketDev/socket-patch/pull/574): one vlt `registry_base` following vlt's DepID hydration. Issues #562 (E02, E03). State: ready (Ready for review). It awaits human approval.
@@ -20,7 +20,7 @@ _Last updated 2026-10-04T12:58Z · main @ 045d7ec_
 | 4 | #728 (C21): one `utils::fs` stage-and-rename core with policy flags; delete the six-writer spread and the blocking `atomic_write_sync` copy | 0 | 1 | 3.5 | L | 5.5 | eligible once capacity frees (`utils/fs.rs` touched by no open PR); leave `write_cache_entry_atomic` for after #607; makes #726's writer fix one call |
 | 5 | #707 (C41): one case-insensitive hash comparison for agent-mode apply/rollback and vendored verify | 1 | 0 | 2 | L | 5 | skipped: `patch/apply.rs`/`patch/rollback.rs` changed by open PRs #634, #646 and #690; simpler after #706 |
 
-At capacity (3 open, all ready, all reviewed "ready to merge") on 2026-10-03T01:05Z; re-ranked with the new issues #628–#631, no new work started (blockers #597, #598, #602, #607, #610 still open). Next: #631 (E52, go.sum oracle delete + move to `formats/golang`), score 3.5 (D3.5 R L), skipped while #597 changes `redirect/mod.rs`. Dropped C07 from the queue: needs an owner decision on the fallback route. Taken: #571 (C37) in #607, score 2 (B1 D1 R M). Re-ranked 2026-10-03T04:00Z with #647 (C09/C39) and #649 (C08, hygiene, score ≈1); still at capacity, no new work. #614 (C38, score 4) drops to sixth. #648 is a decision. Re-ranked hourly 2026-10-03T05:58Z–17:56Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering. Entered: #662 (E53), #663 (E07), #693 (E15), #706 (C17, first), #707 (C41, third). Left: #628/#629 (fixer PR #657), #694/#695 (fixer PR #703). Outside the top five: #593 and #614 (score 4), #630, #662, #705 (C18, score 2), #675–#678 (≤2.5). Decisions: #648, #704. Bughunt #685 may share #593's XML-walker root cause. Every queue blocker (#589, #597, #598, #602, #634, #646, #657, #660, #689, #690) still open. 2026-10-03T19:05Z: still at capacity; entered #717 (E10 Maven slice, first); #568 (C03) drops to sixth. #716 (E55, score 4) skipped: `maven_repo.rs`/`jvm/` changed by #646, #690. 19:58Z–20:57Z: no change. 21:56Z: still at capacity, nothing merged, no steering. Entered: #728 (C21, fourth). Left: #663 (E07, 4.5, sixth). Outside the top five: #727 (C19, env helpers, D≈4 R M, score ≈2–4, eligible), #726 (C42 bug, B1 D1 R L, score 4; skipped: `get.rs` changed by #646). 22:56Z–02:56Z: still at capacity, nothing merged, no steering; new `arch-audit` bugs #735 and #736 score 3 (B1 R L), outside the top five; queue unchanged. 03:56Z: still at capacity, nothing merged, no steering. New: #747 (C20 child 1 of tracking #748, purl type checks via `Ecosystem::from_purl`, B0 U1 D3 R L, score 5, sixth: ties #707, older issue wins; skipped: touches `patch/apply.rs`, `rollback.rs`, `get.rs`, `hosted/engine.rs`, `vendor.rs` changed by open PRs), #746 (C23 dead-code delete, D≈4.5 R L, score ≈4.5; skipped: `patch/apply.rs`, `group_commit.rs` changed by #634, #646, #690), #745 (C43 bug, ledger root ignores `--manifest-path`, B1 D2 R M, score 3; skipped: `get.rs` changed by #646). Queue unchanged. 04:56Z–12:56Z: still at capacity, nothing merged, no steering. New: #773 (C44 bug, `--ecosystems` parser written three times; B1 D2 R L, score 5, sixth: ties #707, older issue wins), #757 (E15 hosted half, B1 D≈3 R M, score ≈4; skipped: `redirect/mod.rs`), #770 (C22 telemetry handle, score ≈2). Left: #772 (C24, claimed by fixer PR #774). Bughunt issues #749–#778 and bench issues #760–#762 are not candidates; fixer PRs #752, #776, #777 touch no queue file. Queue unchanged.
+At capacity (3 open, all ready, all reviewed "ready to merge") on 2026-10-03T01:05Z; re-ranked with the new issues #628–#631, no new work started (blockers #597, #598, #602, #607, #610 still open). Next: #631 (E52, go.sum oracle delete + move to `formats/golang`), score 3.5 (D3.5 R L), skipped while #597 changes `redirect/mod.rs`. Dropped C07 from the queue: needs an owner decision on the fallback route. Taken: #571 (C37) in #607, score 2 (B1 D1 R M). Re-ranked 2026-10-03T04:00Z with #647 (C09/C39) and #649 (C08, hygiene, score ≈1); still at capacity, no new work. #614 (C38, score 4) drops to sixth. #648 is a decision. Re-ranked hourly 2026-10-03T05:58Z–17:56Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering. Entered: #662 (E53), #663 (E07), #693 (E15), #706 (C17, first), #707 (C41, third). Left: #628/#629 (fixer PR #657), #694/#695 (fixer PR #703). Outside the top five: #593 and #614 (score 4), #630, #662, #705 (C18, score 2), #675–#678 (≤2.5). Decisions: #648, #704. Bughunt #685 may share #593's XML-walker root cause. Every queue blocker (#589, #597, #598, #602, #634, #646, #657, #660, #689, #690) still open. 2026-10-03T19:05Z: still at capacity; entered #717 (E10 Maven slice, first); #568 (C03) drops to sixth. #716 (E55, score 4) skipped: `maven_repo.rs`/`jvm/` changed by #646, #690. 19:58Z–20:57Z: no change. 21:56Z: still at capacity, nothing merged, no steering. Entered: #728 (C21, fourth). Left: #663 (E07, 4.5, sixth). Outside the top five: #727 (C19, env helpers, D≈4 R M, score ≈2–4, eligible), #726 (C42 bug, B1 D1 R L, score 4; skipped: `get.rs` changed by #646). 22:56Z–02:56Z: still at capacity, nothing merged, no steering; new `arch-audit` bugs #735 and #736 score 3 (B1 R L), outside the top five; queue unchanged. 03:56Z: still at capacity, nothing merged, no steering. New: #747 (C20 child 1 of tracking #748, purl type checks via `Ecosystem::from_purl`, B0 U1 D3 R L, score 5, sixth: ties #707, older issue wins; skipped: touches `patch/apply.rs`, `rollback.rs`, `get.rs`, `hosted/engine.rs`, `vendor.rs` changed by open PRs), #746 (C23 dead-code delete, D≈4.5 R L, score ≈4.5; skipped: `patch/apply.rs`, `group_commit.rs` changed by #634, #646, #690), #745 (C43 bug, ledger root ignores `--manifest-path`, B1 D2 R M, score 3; skipped: `get.rs` changed by #646). Queue unchanged. 04:56Z–12:56Z: still at capacity, nothing merged, no steering. New: #773 (C44 bug, `--ecosystems` parser written three times; B1 D2 R L, score 5, sixth: ties #707, older issue wins), #757 (E15 hosted half, B1 D≈3 R M, score ≈4; skipped: `redirect/mod.rs`), #770 (C22 telemetry handle, score ≈2). Left: #772 (C24, claimed by fixer PR #774). Bughunt issues #749–#778 and bench issues #760–#762 are not candidates; fixer PRs #752, #776, #777 touch no queue file. Queue unchanged. 13:56Z: still at capacity, nothing merged, no steering. New: #780 (E19 gem half, one `Gemfile.lock` section model; fixes #779; B1 D3 R M, score 4), #781 (E19 Go half, `module` directive via `go_mod_edit`, deletes the dead crawler reader; D≈2 R L, score ≈2), #782 (E58 dead-helper delete, D≈1.5 R L, score ≈1.5; skipped: `redirect/vlt.rs` changed by #574). #779 (bug) is the fixer's unless #780 is taken. Queue unchanged.
 
 **Notes:**
 - The sandbox runs as root, so 4 core lib tests fail on main and on branches alike: `copy_tree::relax_loop_must_not_traverse_symlinked_root`, `vlt_heal::an_unremovable_hidden_lock_keeps_every_store_entry`, `pypi_poetry::wire_write_failure_maps_error_and_leaves_lock_untouched`, `pypi_requirements::wire_failure_rolls_back_already_written_files`.