The literal caller-home backstop (SweepCallerHome and SurvivingCallerHome, internal/adapter/scanner/residual.go) reads the home only as written, so an escaped spelling of it is invisible to the one stage the store-before-commit redactors keep independent of the detector: the solidus escape (\/ between segments), its \u002f form, and a separator written as an escape run. Stage one and the stage-two rescan read those spellings through the scanner's JSON-escape views since fix/drain-scanner-identity, so a leak needs both detector passes to miss before the backstop matters; but the backstop exists for exactly that case, and against an escaped home it is not a backstop. Detector: with HOME under the /Users root, SweepCallerHome collapses the solidus-escaped and the \u002f spelling of the home to the tilde, as it does the literal one.

The literal caller-home backstop (SweepCallerHome and SurvivingCallerHome, internal/adapter/scanner/residual.go) reads the home only as written, so an escaped spelling of it is invisible to the one stage the store-before-commit redactors keep independent of the detector: the solidus escape (\/ between segments), its \u002f form, and a separator written as an escape run. Stage one and the stage-two rescan read those spellings through the scanner's JSON-escape views since fix/drain-scanner-identity, so a leak needs both detector passes to miss before the backstop matters; but the backstop exists for exactly that case, and against an escaped home it is not a backstop. Detector: with HOME under the /Users root, SweepCallerHome collapses the solidus-escaped and the \u002f spelling of the home to the tilde, as it does the literal one.

Grounds

• pursued: every escaped spelling the detector reads through its views is also swept by the literal backstop; a home spelling that ScanText finds through a view but SweepCallerHome leaves verbatim would show it wrong