Census true-up: the stale RawLine claim that cost an audit a wrong prerequisite

ROADMAP.md

@@ -251,11 +251,11 @@ Receipts + adjacent levers: [fractal Gantt](docs/plans/ci-floor-fractal-gantt.md
 - [ ] **G1 placement** — job→host is GitHub-native, demand-blind, first-idle → heavy runs co-reside while the other host idles. LIVE again since #6111 put required CI back on the fleet; the admission model is its demand side. [plan](docs/plans/compute-envelope-model.md)
 - [x] ~~**shell emission policy umbrella** — the model is established; full dissolution is NOT done. Concrete acceptance and dispatch now live on the product-intent construction arc, the While/BoundedPoll/Retry fidelity slice, and closed-loop host converge. Zero concat across the repository is explicitly not the finish line.~~ **superseded →** 2-emit-partition + 6-shell-intent-phase1 + 2-converge-reland [plan](docs/plans/shell-emission-model.md)
   - [x] ~~**registry-dispatch foundation** — #6106 merged. It established the agnostic registry exit but did not remove the remaining compiler-stage bridge; the construction arc below owns that residue with current acceptance.~~ **superseded →** 2-emit-partition [plan](docs/plans/shell-intent-emit-realization-design.md)
-    - [ ] **shell construction arc close — product intent onto typed targets** — Move every product/foreign-executor shell builder through typed orchestration and the canonical Bash target, then delete the raw producer. Runtime-present paths use typed effects; foreign executors/bootstrap may emit bounded shell. #7293 landed ToFile, Comment, ExitStatus, IntNe, and Exit, including the two #7265 residues. FileExists, ambient Run.command, remaining CaptureSpec fidelity, and batch-A product composers remain later slices. [plan](docs/plans/shell-to-dag-residual-census-and-arc-completion.md)
+    - [ ] **shell construction arc close — product intent onto typed targets** — Move every product/foreign-executor shell builder through typed orchestration and the canonical Bash target, then delete the raw producer. Runtime-present paths use typed effects; foreign executors/bootstrap may emit bounded shell. #7293 landed ToFile, Comment, ExitStatus, IntNe, and Exit. Merged #7298 wrapped deploy-access operations back into raw Run.command strings at a runtime-present edge; correct that regression first. FileExists, ambient Run.command, remaining fidelity gaps, and the foreign-executor composer roster remain later slices. [plan](docs/plans/shell-to-dag-residual-census-and-arc-completion.md)
   - [x] **slice 0 — CI EAGAIN-retry** ✓ (#6467) — `ci_cargo_eagain_retry_core` → `emit(Retry, Bash)`; byte-oracle = committed `ci.yml` [plan](docs/plans/shell-emission-model.md) — ✓ signed off: operator
     - [x] **slice 1 — control-flow emit (census-scoped)** ✓ (#6475; tier-2 Procedure/Let band #6566) — the `If` band only (`orch_emit_step::If` + else + condition forms + pipes/cmdsubst/`$?`/AndOr/redirect/env words, byte goldens); `For`/`While` NOT in scope — the pre-runtime census (2026-07-03) found zero pre-runtime sites needing them [plan](docs/plans/shell-emission-model.md) — ✓ signed off: operator
       - [x] ~~**converge thin-run precursor** — #6572/#6585/#6598 landed, then #7121 deleted the unconsumed 21-line fleet_converge artifact as paper transport. Current host convergence is not complete: `2-live-read-seam`, `2-converge-reland`, and `2-periodic-actuation` own typed observation, apply, and live receipts.~~ **superseded →** 2-converge-reland [plan](docs/plans/shell-emission-model.md)
-  - [ ] **While / BoundedPoll / Retry fidelity and production adoption** — #6832 landed grammar and emit machinery, not this arc's acceptance. While has one production consumer but retains raw Run.command leaves. BoundedPoll and N-level Retry are test-only; production Retry is one-level. Retry currently reads only the first body step and specializes log paths while discarding source Run env/redirect/capture. Complete production adoption or narrow the modeled claim. [plan](docs/plans/shell-intent-emit-realization-design.md)
+  - [ ] **While / BoundedPoll / Retry fidelity and production adoption** — #6832 landed grammar and emit machinery, not this arc's acceptance. While has one production consumer but retains raw Run.command leaves; BoundedPoll has no production consumer. #7303 made Retry refuse multi-step bodies, present redirect/capture, changed template log sources, and three-or-more escalation levels instead of silently dropping them. Accepted one/two-level Retry still drops the source Run.env. Complete production adoption or narrow the modeled claim. [plan](docs/plans/shell-intent-emit-realization-design.md)
 - [x] ~~**apply() Phases B-F umbrella** — the phase snapshot predates the current reconcile spine and no longer defines executable acceptance. The live-read, closed-loop converge, and periodic-actuation tickets below own the remaining host-effect milestones.~~ **superseded →** 2-live-read-seam + 2-converge-reland + 2-periodic-actuation [plan](docs/plans/host-effect-orchestration.md)
   - [ ] **temporal-effect-spine-a — temporal realization spine (T1 vocabulary)** — std.temporal_effect: durable facts + plan_next_step_from_prior_receipt_and_lease (single prior+lease; list fold is consumer-side); 🟡 markers on stringly receipt labels + derived step id. Not a workflow engine. — ⏳ awaiting sign-off
     - [x] ~~**srv3 install dry-run precursor** — its `srv3_os_install_reconcile*` implementation was intentionally deleted with the dead, unconsumed install/reconcile subgraph. It is a historical receipt, not work awaiting sign-off.~~ **superseded →** srv3 install/reconcile retirement (#7233/#7237)