audit: #328 cycle close — manifests record raw on every route, walkforward intake refuses wrapped

Architect drift review (cycle a3785a6..b3b7115) found the cycle's raw
switch incomplete on two high items; both fixed forward here rather
than minuted as residue, since #319 builds on this namespace:

- The real/campaign executor still minted WRAPPED manifest.params and
  manifest.defaults (AC2 overclaim in the feat commit body). The mint
  seams now reshape to raw on every route (member.rs raw_bound_defaults,
  runner.rs manifest_space mirror of the family.rs pattern); the fix
  surfaced a latent regression in persist_campaign_traces, which keyed
  point_from_params by exact wrapped name and is now translation-aware
  (same recipe as reproduce_family_in). Old on-disk families stay
  replayable (C29; reproduce reads both shapes).
- The walkforward --axis intake silently accepted wrapped names — the
  silent alias fork 2 rejected. It now runs the same
  refuse_wrapped_synthetic_axes preflight as the plain synthetic sweep
  (new e2e: aura_walkforward_synthetic_blueprint_refuses_a_wrapped_form
  _axis_name); family builders translate raw names onto wrapped
  SweepBinder slots on all three entry points. C24's "retired from the
  surface" claim is thereby made true instead of softened.
- Low items: stale graph_construct docstring updated; new
  graph_params_and_sweep_list_axes_are_line_identical pins the two
  discovery surfaces against format drift.
- Bench infra: aura-bench's campaign_sweep surface seeded wrapped axis
  literals and was correctly refused by the new intake — seeds converted
  to raw; full bench rerun: all 5 surfaces fingerprint OK, deltas within
  load noise (report-only, no baseline update needed).

Library-unit tests calling family builders directly keep wrapped input
(valid: translation is idempotent on exact wrapped names; intake-level
refusal is the user contract). Suite + clippy verified green post-fix.

refs #328

crates/aura-cli/src/main.rs

@@ -2523,10 +2523,11 @@ fn dispatch_walkforward(a: WalkforwardCmd, env: &aura_runner::project::Env) {
                 exit_on_campaign_result(result);
                 return;
             }
-            // Synthetic in-process family path — unchanged (#220 non-goal); it
-            // persists no per-window taps, so `--trace` stays refused here (#224
-            // delivered only the `--real` campaign path above), mirroring
-            // `dispatch_sweep`'s synthetic-arm refusal with its own named pointer.
+            // Synthetic in-process family path (#220 non-goal, unchanged beyond
+            // the #328 tidy below); it persists no per-window taps, so
+            // `--trace` stays refused here (#224 delivered only the `--real`
+            // campaign path above), mirroring `dispatch_sweep`'s synthetic-arm
+            // refusal with its own named pointer.
             if a.trace.is_some() {
                 eprintln!(
                     "aura: --trace is not yet available on a synthetic walkforward (no --real); see #224"
@@ -2545,6 +2546,10 @@ fn dispatch_walkforward(a: WalkforwardCmd, env: &aura_runner::project::Env) {
                 None => Selection::Argmax,
             };
             let name = a.name.clone().unwrap_or_else(|| "walkforward".to_string());
+            // #328: this route bypasses `validate_and_register_axes` (no
+            // project/registry involved, same gap the plain synthetic sweep
+            // arm had) — the same WRAPPED-name preflight closes it here too.
+            refuse_wrapped_synthetic_axes(&doc, env, &axes);
             run_blueprint_walkforward(&doc, &axes, &name, DataSource::Synthetic, select, env);
         }
         None => {
@@ -3627,9 +3632,8 @@ mod tests {
     /// two are disjoint by construction. Sweeping `fast.length` (RAW, #328) on
     /// the fully bound r_sma example leaves `slow.length`/`bias.scale`
     /// untouched (they stay in `defaults`), while `fast.length` moves to
-    /// `params` and drops out of `defaults` entirely. `manifest.params` keys
-    /// are RAW (#328); `manifest.defaults` (a different field, `run`'s own
-    /// stamp of untouched bound params — untouched this cycle) stays WRAPPED.
+    /// `params` and drops out of `defaults` entirely. Both `manifest.params`
+    /// and `manifest.defaults` keys are RAW (#328, batch 2 flips defaults too).
     #[test]
     fn sweep_override_excludes_the_reopened_default_from_the_manifest() {
         let env = aura_runner::project::Env::std();
@@ -3646,13 +3650,13 @@ mod tests {
 
         let default_names: Vec<&str> = manifest.defaults.iter().map(|(n, _)| n.as_str()).collect();
         assert!(
-            !default_names.contains(&"sma_signal.fast.length"),
+            !default_names.contains(&"fast.length"),
             "the reopened default must not also appear in defaults: {default_names:?}"
         );
         assert_eq!(
             default_names,
-            ["sma_signal.slow.length", "sma_signal.bias.scale"],
-            "the untouched bound params stay in defaults: {default_names:?}"
+            ["slow.length", "bias.scale"],
+            "the untouched bound params stay in defaults, RAW: {default_names:?}"
         );
     }