noteWithheld compares a rules.json override of a guardrail domain against defaultRuleSet rather than the base Load built, so a SHELL override that omits a lesson taught from the repository's own .abcd/guard.json never names it (the note says WITHHOLDS 17 of its 17 and leaves the repository entry out), and the note calls every withheld entry one 'abcd ships'.

noteWithheld compares a rules.json override of a guardrail domain against defaultRuleSet rather than the base Load built, so a SHELL override that omits a lesson taught from the repository's own .abcd/guard.json never names it (the note says WITHHOLDS 17 of its 17 and leaves the repository entry out), and the note calls every withheld entry one 'abcd ships'.

Grounds

• pursued: a SHELL rules override over a guard.json entry names '(deploy-prod) (repo)' among 18 of 18 withheld (TestWithheldNoteNamesTheRepositorysOwnLessons); a note counting 17 would show it wrong