test/transcripts/f3b/door-inventory.txt

1# F3b review-fix door inventory -- every coordinator path that writes/renames/deletes

2# a path NOT from a freshly-validated request, with its containment status.

3# Full table: tasks/f3b-structural-ops-and-crash-recovery (Session Log 2026-08-25).

4#

# recover-complete! rename temp->target : MANIFEST fields (untrusted) -> NOW real-path contained or refuse-to-human [was the HIGH]

6# recover-complete! delete backup : MANIFEST field -> same check

# sweep-debris! delete                  : dir walk of root         -> NOW full-depth + realpath-under-root defense [was MEDIUM 1]

8# clear-transaction-manifest! : fixed root/<name> -> safe (constant)

9# publish-file-set! write/rename/delete : root-population + require-contained-path on request -> validated forward

10# F3a publish! : require-contained-path -> validated forward

11# population-guard (delete/rename/move) : discovery census + NOW dot-intruder scan -> [was MEDIUM 2]