srv3_host_effect_apply: import the ten names it uses bare (witness outside the gate closure stopped resolving)

dag/gunbc/recurring_failure_mode/witness_outside_gate_closure_falsified_by_other_file.dag

@@ -41,6 +41,7 @@ data witness_outside_gate_closure_falsified_by_other_file: RecurringFailureMode
     "RECEIPT, 2026-09-26, AND IT IS THE CLASS AT POPULATION SCALE RATHER THAN ONE SPECIMEN. Twelve claims across six out-of-closure witness modules under test.claim.fabric, test.claim.runner, test.claim.fleet and test.claim.executor_privileged_operation_witness were red on main f17c19a8fb, found only because gunbc#12339 touched a path that enrolled them as changed witnesses. Six unrelated, correct changes to modules those witnesses IMPORT falsified them, none touching a witness file: #10568 (sudo elevation quoting), #11204 (retirement inhibition text), #11625 (a second fabric host), #11751 (microVM readback grants), #11762 (width derived-or-unresolved), #12011 (the srv1 microVM shakedown slot). The oldest had been silently red for about three weeks. In every case re-derivation found the CLAIM, not the fold, to be the earliest unjustified link -- transcribed counts, a one-member roster, an over-broad prohibition -- repaired in gunbc#12343, #12344, #12346, #12347 and #12348. This row's specimen witness_population_tracks_the_slot_roster reddened AGAIN, by a different term (#11751) than the one its earlier repair derived, which is the recurrence the next-rung trigger above exists to catch: transitive-dependency changed-witness selection would have run each of these on the PR that falsified it.",
     "RECEIPT, 2026-10-01 (calm-hawk-793), A DELIBERATE CHANGE IN ONE STAGE REDDENING A CONTROL IN ANOTHER, AND THE CONTROL WAS AN ACCEPTING CONTROL, NOT A WALL. gunbc#12290 (std.kind, 2026-09-26) made a declared-inhabitant roster member's derived type its KIND, an Atom; v2.compiler.infer algebra_ref_is_grounded refused every Atom, so canonical_grounding_for_node refused every roster member before coercion and v2.test.manual.ingest_bridge ingest_identity_coercion_accepts_source_present_in_authored_roster went red (bisected on BuildBuddy, path-restricted: first bad 21f4d0c390). At that commit required_gate_prefixes held no v2.test. prefix, so the control was declined outside the gate closure and #12290 landed green; it stayed red about five days, found only by executing the #12860 population. Re-derivation found the earliest unjustified link in the GROUNDING PREDICATE, under-specified for the case #12290 introduced, not in the kind derivation: the predicate now admits an Atom only when std.kind kind_denoted_by_node recognises it as that authority's mint. Three more specimens in the same population had the same shape, a correct change elsewhere and an out-of-gate claim that never ran: #12625 (a metadata edge entered the roster index), #12566 (an undeclared formal became a counted advisory) and #12048 (imports became chain bindings).",
     "RECEIPT, 2026-10-03 (silent-stag-886), AND ITS FIRST READING WAS THAT TWO ROUTES DISAGREED. On gunbc#13090 (feb95f8ed3 and 03b96ed790) `gunbc run --claim-run` over test.claim.seed_growth_admission_witness failed 3 of 7 claims while the required floor was green, and the report framed it as claim_batch and the floor giving different verdicts for one witness. They did not: the floor gave NO verdict. The module matches neither required_gate_prefixes nor required_gate_authored_modules, and the floor run on 03b96ed790 (37110271994) lists its one cost-debt identity as outside this run's universe, preparation never offered it. A green run that declined a claim is not a pass of it, and reading it as one is this class's harm at the reader. The claim route was right: all three reds reduce to seed_growth_roster_mechanical_checks_holds, whose duplicate-key conjunct was false on main ca79f2c660 because gunbc#12846 (Nat de-fork) listed v1_interpreter eval_match and match_pattern in kernel_grounding_interpreter_seed_growth_justification while gunbc#12903 already rostered them (match_arm_guard and value_depth rows), and the roster cites each declaration once. #12846 touched neither the witness nor seed_growth_admission.dag, only a module it imports, which is this row's shape exactly. The earliest unjustified link was the #12846 row, repaired by naming the two items as already justified, the convention the value_drop_binding_adaptation row states. The witness is its own discriminating control: red on ca79f2c660, green after. Gate admission of the module is the class's trigger applied to one module and is left to an operator ruling, because a gate row is a standing claim on every required run.",
+    "RECEIPT, 2026-10-04 (quiet-gull-508), AND THE FALSIFIER WAS A ONE-LINE IMPORT REPAIR TO A FILE THE WITNESS REACHES. test.claim.srv3_seeded_install_media, outside the gate closure and untouched, did not resolve on main 296061a898: claim_batch over its five claims exited 1 with two effect-summary-incomplete refusals in gunbc.srv3_host_effect_apply srv3_nbd_proxy_serve_apply, one per callee (gunbc.srv3_nbd_proxy_serve_intent srv3_nbd_proxy_serve_host_effect and gunbc.nbd_proxy_virtual_media_install actuator_image_unresolved_reason), and ran zero claims, while every required lane was green. EARLIEST UNJUSTIFIED BOUNDARY: gunbc#12114 (2026-09-23) gave the previously import-free gunbc.srv3_host_effect_apply ONE import line. That turns the bare-reference channel off for the file (the mechanism is the row bare_reference_channel_declines_a_pull_in_silence), so the two callee modules, which nothing else in the closure pulled, were no longer realized. gunbc#12205 then enrolled the ten unimported names of that file as ActiveDebt in v2.workflow.floor_unimported_bare_provider_debt_roster: the break was recorded as debt the day it could have been repaired, and a rostered pair outside the gate closure is a witness that does not run. REPAIR AT THE OWNING LINK, not at the effect join, whose refusal was correct: the module imports all ten names from their six declaring modules and the ten rows retire as ImportsFixed. EXECUTED, BuildBuddy, claim_batch built from the same tree in each dispatch, GUNBC_MEMORY_BUDGET_BYTES forwarded by name: with the repair the entry resolves and all five claims PASS, exit 0; with both files restored to the bytes of 296061a898 (checked by digest against git) the two refusals return and exit is 1; with only the module restored and the rows left retired, the gate refuses all ten pairs as RetiredImportsFixedButCarried, so each retirement is individually discriminated. THE BREAK WAS FOUR WITNESS MODULES WIDE AND WHICH CALLEE REFUSED DEPENDED ON THE ENTRY. Run the same way over the witnesses of the other importers: test.claim.srv3_install_media_fetch (6 claims), test.claim.srv3_os_install_actuate (7) and test.claim.srv3_host_effect_apply_witness (22) each failed to resolve on the bytes of 296061a898 and ran zero claims, refusing at five, two and two call sites that between them name six of the ten rostered callees; with the repair all 35 claims PASS. The refused callee set differs per entry because it is whatever that entry closure did not happen to realize, which is why the symptom reads as several unrelated effect-modelling gaps. The witness over gunbc.host_convergence_census passes 12 of 12 on both trees and is the control that the instrument can report green on main. REVIEW TELL: an ActiveDebt row whose file sits outside required_gate_prefixes is not deferred work, it is a module nobody can run; adding one import to an import-free file owes the whole list in the same change.",
   ],
 
   evidence: [],

dag/gunbc/srv3/srv3_host_effect_apply.dag

@@ -1,6 +1,17 @@
 module gunbc.srv3_host_effect_apply
 
 import gunbc.ci_deploy_access { ci_deploy_srv1_access }
+import gunbc.host_effect_realize { host_effect_apply, host_effect_apply_gated }
+import gunbc.nbd_proxy_virtual_media_install { actuator_image_unresolved_reason }
+import gunbc.os_install_actuator_selection {
+  ActuatorSelected,
+  ActuatorUnsatisfiable,
+  OsInstallActuatorSelection,
+  srv3_os_install_actuator_selection,
+}
+import gunbc.seeded_install_media_publish { SeededImageResolved }
+import gunbc.srv3_nbd_proxy_serve_intent { srv3_nbd_proxy_serve_host_effect }
+import gunbc.srv3_seeded_install_media_artifact { srv3_seeded_install_media_resolve }
 
 type Srv3TypedReceipt {
   lines: List<String>

src/v2/workflow/floor_unimported_bare_provider_debt_roster.dag

@@ -834,16 +834,16 @@ data unimported_bare_provider_dispositions: List<UnimportedBareProviderDispositi
   UnimportedBareProviderDisposition { file: "dag/gunbc/spark/vllm_rank_population.dag", name: "any", standing: Retired { cause: BindsWithoutDeclaration } },
   UnimportedBareProviderDisposition { file: "dag/gunbc/spark/vllm_rank_population.dag", name: "filter", standing: Retired { cause: BindsWithoutDeclaration } },
   UnimportedBareProviderDisposition { file: "dag/gunbc/spark/vllm_rank_population.dag", name: "length", standing: Retired { cause: BindsWithoutDeclaration } },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "ActuatorSelected", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "ActuatorUnsatisfiable", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "OsInstallActuatorSelection", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "SeededImageResolved", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "actuator_image_unresolved_reason", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "host_effect_apply", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "host_effect_apply_gated", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "srv3_nbd_proxy_serve_host_effect", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "srv3_os_install_actuator_selection", standing: ActiveDebt },
-  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "srv3_seeded_install_media_resolve", standing: ActiveDebt },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "ActuatorSelected", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "ActuatorUnsatisfiable", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "OsInstallActuatorSelection", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "SeededImageResolved", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "actuator_image_unresolved_reason", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "host_effect_apply", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "host_effect_apply_gated", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "srv3_nbd_proxy_serve_host_effect", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "srv3_os_install_actuator_selection", standing: Retired { cause: ImportsFixed } },
+  UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_host_effect_apply.dag", name: "srv3_seeded_install_media_resolve", standing: Retired { cause: ImportsFixed } },
   UnimportedBareProviderDisposition { file: "dag/gunbc/srv3/srv3_os_install_diagnostic.dag", name: "get", standing: Retired { cause: BindsWithoutDeclaration } },
   UnimportedBareProviderDisposition { file: "dag/gunbc/stage0/stage0_emitted_edge_admission.dag", name: "any", standing: Retired { cause: NotAReference } },
   UnimportedBareProviderDisposition { file: "dag/gunbc/stage0/stage0_emitted_edge_admission.dag", name: "filter", standing: Retired { cause: NotAReference } },