9d6934604e
Review finding on this PR, and it is the commit's own lesson applied to the commit. The replacement invariant ended with "what is genuinely unrun: Safari/WebKit and any non-Chromium engine for the shell spec" — a CLOSED list, and an incomplete one. Verified: `WorkerServer::documents()` and `WorkerServer::refresh()` are `#[wasm_bindgen]` exports with no caller in `web/*.js` or `harness/`, so they are run by nothing. (The ten `.refresh(` hits under `harness/opfs-contract` are `OpfsFs::refresh`, a different method — I checked rather than counting greps.) So the old invariant understated coverage and my replacement overstated it. The direction flipped; the defect did not. The claim is now scoped BY ENGINE and says why: a coverage claim in prose is unfalsifiable by anything in this repo — the KB-consistency job checks the KB is consistent, not that it is true — so state what IS covered and scope what is not, rather than enumerating an absence. kb_consistent exits 0; 55 doctrines / 47 decisions / 51 invariants, unchanged. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>