2026-08-26 — Bug-hunt round 9 (bughunt-b): baseline green on the unshallowed

2026-08-26 — Bug-hunt round 9 (bughunt-b): baseline green on the unshallowed clone. Five parallel hunters, per-finding adversarial refutation: 12 substantive and 5 nitpick findings confirmed and fixed, 4 refuted or prior art — the renderReviewMD provenance gap (open GitHub #325), the receipt sha-width split (two different jobs, machine-derived 40-hex everywhere), the principles-README universal claim (iss-390's scope), and the DECISIONS ordering inversions (order-independent by declared union-merge design). Fixed with provenance: capture --blocked-by existence probe, intent verbs resolving spec_id by number, ScanSpecLinks failing closed, cleanLessonProse delegating to CleanProse, firstRootSHA bounded, RD002's one-pass DMRT history scan with a cases harness, record_schema's required-frontmatter invariant with the issueschema leaf plus the repaired live record, the RS001 terminal-folder wording at three sites, the plugin-command count, the derived-changelog Breaking clause with adr-37 amended, the data-theme claim, CI-account rosters, the disciplines intent-auditor sweep with spc-28's late-sweep amendment, itd-5's task_classes source of truth, itd-43's glossary reconcile, itd-24's core/epic entry, and the install-template eol pin. Recorded open: the unknown-property half of the ledger-visibility gap and itd-5's struck-tiebreak residue.