@@ -1,5 +1,5 @@
 ### Refactor routine (`refactor`, hourly, highest leverage first)
-_Last updated 2026-10-03T17:00Z · main @ 045d7ec_
+_Last updated 2026-10-03T17:56Z · main @ 045d7ec_
 
 **In flight:**
 - [#574](https://github.com/SocketDev/socket-patch/pull/574): one vlt `registry_base` following vlt's DepID hydration. Issues #562 (E02, E03). State: ready (Ready for review). It awaits human approval.
@@ -20,7 +20,7 @@ _Last updated 2026-10-03T17:00Z · main @ 045d7ec_
 | 4 | #663 (E07): one addressed package-lock entry walk for inventory, vendored, hosted and restore | 0 | 1 | 4.5 | M | 4.5 | skipped: `npm_lock.rs`/`lock_inventory/npm.rs` changed by open PRs #589, #660 and #689, `redirect/mod.rs`/`upstream/npm.rs` by #657 and #597 |
 | 5 | #568 (C03): takeover honors `kept_artifact` via `vendored_backend`'s revert step | 1 | 0 | 1 | L | 4 | skipped: `scan/hosted.rs` changed by open PRs #598, #646, #657, #684 and #690 |
 
-At capacity (3 open, all ready, all reviewed "ready to merge") on 2026-10-03T01:05Z; re-ranked with the new issues #628–#631, no new work started (blockers #597, #598, #602, #607, #610 still open). Next: #631 (E52, go.sum oracle delete + move to `formats/golang`), score 3.5 (D3.5 R L), skipped while #597 changes `redirect/mod.rs`. Dropped C07 from the queue: needs an owner decision on the fallback route. Taken: #571 (C37) in #607, score 2 (B1 D1 R M). Re-ranked 2026-10-03T04:00Z with #647 (C09/C39) and #649 (C08, hygiene, score ≈1); still at capacity, no new work. #614 (C38, score 4) drops to sixth. #648 is a decision. Re-ranked hourly 2026-10-03T05:58Z–11:58Z: no change except #662 (E53) and #663 (E07) entering; #628/#629 left the queue (fixer PR #657 references them); #675 (C16), #676/#677 (C15) and #678 (C40) score ≤2.5 and stay outside the top five (`api/client.rs` held by #607 and #610). Bughunt #685 may share #593's XML-walker root cause. Re-ranked 2026-10-03T13:05Z with #693 (E15), #694 (E13) and #695 (E54, Poetry/PDM line-ending drift; B1 D0.5 R L, score 3.5, simpler after #694): still at capacity, nothing merged, no steering. #694 narrows E13 to the shared engine (format walkers stay per format), so it replaces the earlier set-aside. #630 and #662 drop to sixth and seventh. Re-ranked 2026-10-03T13:56Z: no new `arch-audit`/`refactor` issues (#696 and #697 are bughunt bugs outside the queue), nothing merged, no steering, blockers #597, #598 and #602 still open; queue unchanged. Re-ranked 2026-10-03T15:00Z: still at capacity (#574, #602, #607 ready, awaiting human merge), no new `arch-audit`/`refactor` issues (#699, #701 are bughunt bugs), nothing merged, no steering; queue unchanged. #694 stays next when capacity frees. Re-ranked 2026-10-03T16:05Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering. #694 and #695 left the queue: fixer PR #703 claims both. New #706 (C17) ranks first, #707 (C41) third; #705 (C18, B0 U0 D4 R M, score 2) sits outside the top five (`api/client.rs` held by #607/#610, `apply.rs` by #634/#646/#690). #704 is a decision. #593 (score 4) drops to sixth. Re-ranked 2026-10-03T17:00Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering, no new `arch-audit`/`refactor` issues (#709 is a bughunt bug); every queue blocker still open, queue unchanged.
+At capacity (3 open, all ready, all reviewed "ready to merge") on 2026-10-03T01:05Z; re-ranked with the new issues #628–#631, no new work started (blockers #597, #598, #602, #607, #610 still open). Next: #631 (E52, go.sum oracle delete + move to `formats/golang`), score 3.5 (D3.5 R L), skipped while #597 changes `redirect/mod.rs`. Dropped C07 from the queue: needs an owner decision on the fallback route. Taken: #571 (C37) in #607, score 2 (B1 D1 R M). Re-ranked 2026-10-03T04:00Z with #647 (C09/C39) and #649 (C08, hygiene, score ≈1); still at capacity, no new work. #614 (C38, score 4) drops to sixth. #648 is a decision. Re-ranked hourly 2026-10-03T05:58Z–17:56Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering. Entered: #662 (E53), #663 (E07), #693 (E15), #706 (C17, first), #707 (C41, third). Left: #628/#629 (fixer PR #657), #694/#695 (fixer PR #703). Outside the top five: #593 and #614 (score 4), #630, #662, #705 (C18, score 2), #675–#678 (≤2.5). Decisions: #648, #704. Bughunt #685 may share #593's XML-walker root cause. Every queue blocker (#589, #597, #598, #602, #634, #646, #657, #660, #689, #690) still open.
 
 **Notes:**
 - The sandbox runs as root, so 4 core lib tests fail on main and on branches alike: `copy_tree::relax_loop_must_not_traverse_symlinked_root`, `vlt_heal::an_unremovable_hidden_lock_keeps_every_store_entry`, `pypi_poetry::wire_write_failure_maps_error_and_leaves_lock_untouched`, `pypi_requirements::wire_failure_rolls_back_already_written_files`.