refactor(composition): eliminate local_trigger_access; trigger-fire access is config + identity (§4.4)

crates/ironclaw_architecture/tests/reborn_deployment_mode_typename_ratchet.rs

@@ -22,9 +22,9 @@
 //!   `LocalDev*`-prefixed names, owned by the sibling ratchet; localization
 //!   words like `Locale`/`Localization` are excluded structurally — they
 //!   continue lowercase, so the word is not `Local`). The `LocalTriggerAccess*`
-//!   family (incl. its `Reborn*LocalTriggerAccess*` backends) is genuine
-//!   Bucket-1 debt: §4.4 folds the `local_trigger_access` module into "seed the
-//!   owner grant from config at boot," a policy value. The `RebornLocal*`
+//!   family is gone: §4.4 folded the `local_trigger_access` module into a
+//!   config value (the `TriggerFireAccessPolicy` on `RebornRuntimeInput`,
+//!   backed by config + the identity directory). The `RebornLocal*`
 //!   composition family is Slice-B mode-as-type debt. Shrinks as those land.
 //!   `LocalInvocationServicesResolver` awaits a rename (a design call — it
 //!   wires host OR sandbox ports).
@@ -97,17 +97,11 @@ const FROZEN_OTHER_MODE_TYPES: &[&str] = &[
     "HostedMcpDiscoveryEgress",
     "HostedMcpDiscoveryError",
     "HostedMcpEndpoint",
-    // --- Local* (non-LocalDev): Bucket-1 DEBT — the `local_trigger_access` module
-    //     folds to "seed owner grant from config at boot" (§4.4). Shrinks as that
-    //     lands.
-    "LocalTriggerAccessBootstrap",
-    "LocalTriggerAccessBootstrapConfig",
-    "LocalTriggerAccessReconciliation",
-    "LocalTriggerAccessRole",
-    "LocalTriggerAccessSeed",
-    "LocalTriggerAccessSource",
-    "LocalTriggerAccessStatus",
-    "LocalTriggerAccessStore",
+    // --- Local* (non-LocalDev): the `local_trigger_access` module has been
+    //     folded to a config value — fire-time trigger access is now the
+    //     `TriggerFireAccessPolicy` on `RebornRuntimeInput`, backed by config
+    //     (static owner) and the identity directory (SSO membership), with no
+    //     persisted store type (§4.4). The `LocalTriggerAccess*` family is gone.
     // --- Local*: pending rename — its correct name is a design call (wires host
     //     OR sandbox process ports, so "Local…" understates it).
     "LocalInvocationServicesResolver",
@@ -116,11 +110,6 @@ const FROZEN_OTHER_MODE_TYPES: &[&str] = &[
     //   JUSTIFIED (Bucket-3 by meaning): "hook-local id" — an identifier local to
     //     one hook, a genuine domain concept, not a deployment tier.
     "HookLocalId",
-    //   local_trigger_access family (same Bucket-1 debt as the LocalTriggerAccess*
-    //     prefix group above — folds into config-seeded owner grants):
-    "RebornFilesystemLocalTriggerAccessStore",
-    "RebornLibSqlLocalTriggerAccessStore",
-    "RebornLocalTriggerAccessStoreError",
     //   RebornLocal* composition family — local-dev-as-type mode names in the
     //     composition surface; shrinks with Slice B (deployment mode becomes a
     //     `DeploymentConfig` value):

crates/ironclaw_filesystem/CLAUDE.md

@@ -110,9 +110,8 @@ codified in `docs/reborn/2026-05-14-universal-fs-dispatch.md` (the new ADR).
      so they are not the convoy hazard `cas_update` was introduced to fix;
      migration to `cas_update`'s fail-closed semantics is a deferred
      follow-up tracked as a sibling to #5274.
-   - `ironclaw_conversations::filesystem_store::save_state`,
-     `ironclaw_runner::local_trigger_access::filesystem::deactivate_stale_record`
-     (via `put_record`), and `ironclaw_product_workflow::filesystem_ledger`
+   - `ironclaw_conversations::filesystem_store::save_state` and
+     `ironclaw_product_workflow::filesystem_ledger`
      (`begin_or_replay` / `settle` / `release` / `try_acquire_prune_lease`)
      are further pre-existing examples of the same lock-free retry-loop
      pattern, pending the same migration.