instrument-dispatch: admit //gunbc/instruments:v2-native-census (on-demand whole-tree resolve census receipt)

[gunbai-bot]

Admits //gunbc/instruments:v2-native-census to the dispatch roster, so the whole-tree census-resolve run can be dispatched on the fleet and leaves a saved receipt.

Why

• The resolve-frontier lane (smart-moth-115) needs a whole-tree native resolve census. Each row in it names the refused occurrence: census_residual serializes the full chain, and the chain's fatal NodeLocus carries the refused node. The census lane's step D (silent-stag-648) needs the same saved whole-tree receipt.
• There is no other venue that can run it:
  • Two BuildBuddy attempts, one at main and one at census C: collapse import cascades to their root, rank roots by closure fan-out #13120's head, were both killed at the free tier's 1h cap.
  • instrument-dispatch refused the label with HTTP 422, because it wasn't on the allowed list.
  • For scale, the comparable whole-tree run 37119024146 took about 2h20m on srv1.

What

• gunbc.instrument_dispatch_workflow instrument_dispatch_labels gains v2_native_census_label(), with a comment giving the reason.
• .github/workflows/instrument-dispatch.yml gets the regenerated options line.

What this does NOT add

No job is added to any per-change workflow. instrument-dispatch is workflow_dispatch-only, so a new label is on-demand and the closed job roster (DESIGN, Building & checks) is untouched.

Evidence

• Roster check: instrument_dispatch_labels_are_rostered holds, because the label is already a row of gunbc.instrument_targets instrument_targets.
• Stage0: claim_executor --required-regen on a BuildBuddy runner reported first_generation_equal=true, so the seed mirror has no drift.
• YAML regen — not verified locally: I applied the one-line options change by hand. It is a pure render of the label list, and the generated-artifact drift lane is the check that it matches expected_instrument_dispatch_yml. My remote main_wet_one attempt ran over a stale mirror base and timed out before printing the diff, so the drift lane is the only verification of this line.

Known limits (raised by silent-stag-648)

• The producer runs census-resolve only. Front-end file_refusal rows are included, but the census verb's accepted_file_advisories rows are not. Adding them would be a producer change in the census lane, not part of this PR.
• No memory budget is declared. The run uses the srv1 runner's cgroup, which held run 37119024146.

🤖 Generated with Claude Code