Fix native journal callers and remove retired website readers

Author: KSemenenko

.github/workflows/AGENTS.md

@@ -84,3 +84,9 @@
 ## Build and Tests workflow filename, owner direction 2026-10-06
 
 - The canonical Build and Tests workflow is `.github/workflows/build-and-tests.yml`, renamed from `ci.yml`. Dispatch with `gh workflow run build-and-tests.yml --repo managedcode/KeyLoad --ref main`. This supersedes earlier active filename/dispatch references only; preserve all build/test gates, stable job IDs, permissions and historical evidence.
+
+## Current first-release Website contract, owner corrections 2026-10-06
+
+- The current four workflows are Build and Tests (`build-and-tests.yml`), Benchmarks (`benchmarks.yml`), Website (`website.yml`) and prepared manual Release (`release.yml`). Only Website builds, qualifies and publishes the site on trusted main push/manual; Benchmarks ends with a bounded Website dispatch and Website has no `workflow_run` executor subscription. These explicit owner corrections supersede every earlier three-workflow, filename, executor, placement and completion-subscription clause; every unrelated suite, permission and qualification rule remains mandatory.
+- The sole measured producer contract is the current 1,386-worker/2,530-input cohort in ADR-076. Its executed dependency manifest contains exactly 80 current source paths. Remove old-plan readers, schemas, event-file parsers and their exclusive fixtures or inventory entries under the root owner-only migration/legacy super rule. This supersedes earlier 270/277 and old-reader requirements only; retain bounded authenticated REST producer/artifact provenance, exact current source and input hashes, failed/null accounting, strict selected-evidence rejection, freshness and unchanged 80/70/90 coverage thresholds.
+- When no current authenticated producer is ready, qualify the complete content-only site without figures. Real native TUnit/Node/Chrome operations, no skips in each applicable suite, source/coverage inventories and needs-gated least-privilege Pages remain required. Local tests enter the same Aspire-owned AppHost and are development evidence; genuine exact-source Linux/provider proof closes delivery. Controlled rejection inputs cannot become published measurements.

.github/workflows/Features/BenchmarkComparisons/BuildIsolatedSite/AGENTS.md

@@ -36,3 +36,9 @@
 ## Separate Website workflow, owner correction 2026-10-06
 
 - The owner's explicit correction supersedes the earlier three-workflow limit and every CI/Benchmarks website placement: `Build and Tests` (`ci.yml`) owns full solution build, repository checks and ordinary tests; `Website` (`website.yml`) independently owns site qualification/build/Pages on trusted main pushes, manual dispatch and completed Benchmarks events. `Benchmarks` and manual `Release` retain their existing scopes. Website uses ready authenticated metrics when available and publishes the fully qualified content-only site when none exist; all applicable source, browser, coverage, freshness and permission gates remain mandatory.
+
+## Current first-release Website contract, owner corrections 2026-10-06
+
+- The current four workflows are Build and Tests (`build-and-tests.yml`), Benchmarks (`benchmarks.yml`), Website (`website.yml`) and prepared manual Release (`release.yml`). Only Website builds, qualifies and publishes the site on trusted main push/manual; Benchmarks ends with a bounded Website dispatch and Website has no `workflow_run` executor subscription. These explicit owner corrections supersede every earlier three-workflow, filename, executor, placement and completion-subscription clause; every unrelated suite, permission and qualification rule remains mandatory.
+- The sole measured producer contract is the current 1,386-worker/2,530-input cohort in ADR-076. Its executed dependency manifest contains exactly 80 current source paths. Remove old-plan readers, schemas, event-file parsers and their exclusive fixtures or inventory entries under the root owner-only migration/legacy super rule. This supersedes earlier 270/277 and old-reader requirements only; retain bounded authenticated REST producer/artifact provenance, exact current source and input hashes, failed/null accounting, strict selected-evidence rejection, freshness and unchanged 80/70/90 coverage thresholds.
+- When no current authenticated producer is ready, qualify the complete content-only site without figures. Real native TUnit/Node/Chrome operations, no skips in each applicable suite, source/coverage inventories and needs-gated least-privilege Pages remain required. Local tests enter the same Aspire-owned AppHost and are development evidence; genuine exact-source Linux/provider proof closes delivery. Controlled rejection inputs cannot become published measurements.

.github/workflows/Features/BenchmarkComparisons/DeploySite/AGENTS.md

@@ -26,3 +26,9 @@
 ## Separate Website workflow, owner correction 2026-10-06
 
 - The owner's explicit correction supersedes the earlier three-workflow limit and every CI/Benchmarks website placement: `Build and Tests` (`ci.yml`) owns full solution build, repository checks and ordinary tests; `Website` (`website.yml`) independently owns site qualification/build/Pages on trusted main pushes, manual dispatch and completed Benchmarks events. `Benchmarks` and manual `Release` retain their existing scopes. Website uses ready authenticated metrics when available and publishes the fully qualified content-only site when none exist; all applicable source, browser, coverage, freshness and permission gates remain mandatory.
+
+## Current first-release Website contract, owner corrections 2026-10-06
+
+- The current four workflows are Build and Tests (`build-and-tests.yml`), Benchmarks (`benchmarks.yml`), Website (`website.yml`) and prepared manual Release (`release.yml`). Only Website builds, qualifies and publishes the site on trusted main push/manual; Benchmarks ends with a bounded Website dispatch and Website has no `workflow_run` executor subscription. These explicit owner corrections supersede every earlier three-workflow, filename, executor, placement and completion-subscription clause; every unrelated suite, permission and qualification rule remains mandatory.
+- The sole measured producer contract is the current 1,386-worker/2,530-input cohort in ADR-076. Its executed dependency manifest contains exactly 80 current source paths. Remove old-plan readers, schemas, event-file parsers and their exclusive fixtures or inventory entries under the root owner-only migration/legacy super rule. This supersedes earlier 270/277 and old-reader requirements only; retain bounded authenticated REST producer/artifact provenance, exact current source and input hashes, failed/null accounting, strict selected-evidence rejection, freshness and unchanged 80/70/90 coverage thresholds.
+- When no current authenticated producer is ready, qualify the complete content-only site without figures. Real native TUnit/Node/Chrome operations, no skips in each applicable suite, source/coverage inventories and needs-gated least-privilege Pages remain required. Local tests enter the same Aspire-owned AppHost and are development evidence; genuine exact-source Linux/provider proof closes delivery. Controlled rejection inputs cannot become published measurements.

.github/workflows/Features/BenchmarkComparisons/QualifySite/AGENTS.md

@@ -27,3 +27,9 @@
 ## Separate Website workflow, owner correction 2026-10-06
 
 - The owner's explicit correction supersedes the earlier three-workflow limit and every CI/Benchmarks website placement: `Build and Tests` (`ci.yml`) owns full solution build, repository checks and ordinary tests; `Website` (`website.yml`) independently owns site qualification/build/Pages on trusted main pushes, manual dispatch and completed Benchmarks events. `Benchmarks` and manual `Release` retain their existing scopes. Website uses ready authenticated metrics when available and publishes the fully qualified content-only site when none exist; all applicable source, browser, coverage, freshness and permission gates remain mandatory.
+
+## Current first-release Website contract, owner corrections 2026-10-06
+
+- The current four workflows are Build and Tests (`build-and-tests.yml`), Benchmarks (`benchmarks.yml`), Website (`website.yml`) and prepared manual Release (`release.yml`). Only Website builds, qualifies and publishes the site on trusted main push/manual; Benchmarks ends with a bounded Website dispatch and Website has no `workflow_run` executor subscription. These explicit owner corrections supersede every earlier three-workflow, filename, executor, placement and completion-subscription clause; every unrelated suite, permission and qualification rule remains mandatory.
+- The sole measured producer contract is the current 1,386-worker/2,530-input cohort in ADR-076. Its executed dependency manifest contains exactly 80 current source paths. Remove old-plan readers, schemas, event-file parsers and their exclusive fixtures or inventory entries under the root owner-only migration/legacy super rule. This supersedes earlier 270/277 and old-reader requirements only; retain bounded authenticated REST producer/artifact provenance, exact current source and input hashes, failed/null accounting, strict selected-evidence rejection, freshness and unchanged 80/70/90 coverage thresholds.
+- When no current authenticated producer is ready, qualify the complete content-only site without figures. Real native TUnit/Node/Chrome operations, no skips in each applicable suite, source/coverage inventories and needs-gated least-privilege Pages remain required. Local tests enter the same Aspire-owned AppHost and are development evidence; genuine exact-source Linux/provider proof closes delivery. Controlled rejection inputs cannot become published measurements.

.github/workflows/Features/BenchmarkComparisons/QualifySite/action.yml

@@ -82,12 +82,12 @@ runs:
         git -C control rev-parse HEAD > "$EVIDENCE_DIR/control-revision.txt"
         closure="scripts/Features/BenchmarkComparisons/site-isolated-dependencies.txt"
         cmp "control/$closure" "website/$closure"
-        [[ "$(wc -l < "control/$closure")" == 84 ]]
+        [[ "$(wc -l < "control/$closure")" == 80 ]]
         LC_ALL=C sort -u "control/$closure" > "$EVIDENCE_DIR/isolated-dependencies.txt"
         cmp "control/$closure" "$EVIDENCE_DIR/isolated-dependencies.txt"
         sha256sum "website/$closure" >> "$EVIDENCE_DIR/executed-evidence-tools.sha256"
         while IFS= read -r relative; do
-          [[ "$relative" =~ ^(scripts/Features/BenchmarkComparisons/([^/]+\.mjs|historical-isolated-contract\.json)|site/Features/BenchmarkComparisons/[^/]+\.mjs|site/scripts/build\.mjs|benchmarks/KeyLoad.Comparisons/Features/BenchmarkComparisons/isolated-contract\.json)$ ]]
+          [[ "$relative" =~ ^(scripts/Features/BenchmarkComparisons/[^/]+\.mjs|site/Features/BenchmarkComparisons/[^/]+\.mjs|site/scripts/build\.mjs|benchmarks/KeyLoad.Comparisons/Features/BenchmarkComparisons/isolated-contract\.json)$ ]]
           for root in control website; do
             [[ -f "$root/$relative" && ! -L "$root/$relative" ]]
             [[ "$(realpath -e "$root/$relative")" == "$GITHUB_WORKSPACE/$root/$relative" ]]

docs/ADR/ADR-033-code-quality.md

@@ -74,3 +74,27 @@ Keep80/70/90 coverage thresholds, original counts/union and400/200/64/depth3 rul
 Rollback must retain a coherent source analyzer and strict native-report reader,
 never stale artifacts, skipped assertions or synthetic coverage. No database
 format, dependency, public API or topology changes belong to this quality stage.
+
+## Complete functional unit contributor partition
+
+TASK-CQ-FUNCTIONAL-UNIT-INVENTORY-043 implements REQ-CQ-009 and AC-CQ-018/020/021.
+Keep ordinary unit and scalar suites complete, unfiltered and without coverage.
+Collect functional unit coverage separately through five bounded positive
+selector groups in each mode, with one exact current case inventory. Every
+allowed case belongs to exactly one group; classify every excluded BDN, load,
+stress, performance or comparison case explicitly. Namespace membership alone
+does not authorize a contributor. Bind the inventory to current test sources,
+the same Release compiler-input/DLL/PDB/MVID identities and actual native TRX.
+
+Ordered stages: root freezes this contract and owning feature; a Luna worker
+prepares guarded source and meaningful merge-operation regressions; root joins,
+builds, formats and runs Aspire collection; verify all ten unit groups plus
+recovery and RF3 before report admission. Reject missing, duplicate, overlapping,
+empty, excluded, failed, skipped or source/image-mismatched contributors. Preserve
+native per-run branch evidence and every existing bound and80/70/90 threshold.
+
+Exact source ownership and required tests are in CodeQuality's matching task.
+Root owns workflow, inventory, identity and report joins. Roll out one coherent
+strict descriptor/validator/CI checkpoint; rollback restores that checkpoint's
+source/configuration pair, without an alternate reader or reduced qualification.
+No numeric coverage or module closure follows from preparing an inventory.