Development record

itd-180 fourth-round residue, all Low: a symlinked item directory or disposition file is reported as outstanding rather than unsafe; a sole standing record that is not well-formed has an empty state and matches no case so the item vanishes from the board; every disposition and reading file read is Lstat then ReadFile rather than fsutil.ReadGuarded, leaving a stat-then-read window a racing local writer could use to swap a symlink under the read that licenses a stamp; pre-existing and not this branch's: record_schema skips a status bucket that is itself a symlink without a finding.