audit: harvest 2026-07-26 cycle close — intake enumeration completed, ledger notes, stale comments

Architect drift review (scope 77ad046..HEAD): What holds — the #343
reference-semantics hash is code-backed on both output surfaces
(record line + trace index), the RiskRegime::Fixed stamp/re-derive
lockstep is complete both ways, and both new guide examples build
against the binary. Drift resolved in this commit: C24's
root-name-gated intake enumeration gains the introspect --taps FILE
branch plus its missing per-site pin (byte-identical refusal to the
register sibling — the #331 class-enumeration lesson applied); C27
gains the #337 realization note (positive discovery view closes the
recovery-only gap); C12's inline-hash sentence updated to the topo
parameter; five stale dispatch_run comments reworded to name
exec_blueprint_leg as the surviving owner.

Remaining drift routed: the unpinned guide op-scripts are a durable
debt class, filed as #344 (idea) rather than swept here.

Regression gate: aura-bench all five fingerprints OK (report-only
deltas within noise on a loaded box; no baseline move, nothing to
ratify).

refs #337
refs #343

crates/aura-cli/tests/graph_construct.rs

@@ -1201,6 +1201,32 @@ fn graph_build_and_register_refuse_a_hand_crafted_envelope_with_a_bad_root_name(
     assert_eq!(err2, err, "both file-consuming envelope intakes share the identical fault prose");
 }
 
+/// (#331 spec test 10's missing sibling, harvest audit item 1): `introspect
+/// --taps <FILE>` (#337) reads its FILE branch through the same
+/// `composite_from_authored_text` choke point as `register` and `introspect
+/// --content-id <FILE>` (C24's name-op clause), so a hand-crafted envelope
+/// with a shape-violating root name refuses there too, with the identical
+/// `name_gate_fault_prose` text — the per-site pin the C24 enumeration's
+/// addition of `--taps` to its gated-intake list otherwise leaves unpinned.
+#[test]
+fn graph_introspect_taps_refuses_a_hand_crafted_envelope_with_a_bad_root_name() {
+    let dir = temp_cwd("taps-bad-root-name");
+    let (envelope_bytes, _e, built) = run(&["graph", "build"], SIGNAL_DOC_DESCRIBED);
+    assert!(built, "graph build produces the envelope");
+    let bad = envelope_bytes.replacen("\"name\":\"graph\"", "\"name\":\"../x\"", 1);
+    assert!(bad.contains("\"name\":\"../x\""), "the root-name replace landed: {bad}");
+    let file = dir.join("bad-root-name.json");
+    std::fs::write(&file, &bad).expect("write envelope fixture");
+
+    let (out, err, code) = run_in(&dir, &["graph", "register", file.to_str().unwrap()]);
+    assert_eq!(code, Some(1), "a shape-violating root name refuses (not a panic): {out} {err}");
+
+    let (out2, err2, code2) =
+        run_in(&dir, &["graph", "introspect", "--taps", file.to_str().unwrap()]);
+    assert_eq!(code2, Some(1), "--taps <FILE> refuses too: {out2} {err2}");
+    assert_eq!(err2, err, "--taps shares the identical fault prose with register/--content-id");
+}
+
 /// Property (#202, the same on-ramp seam at the sibling verb): `aura graph
 /// introspect --params` accepts an op-script exactly as it accepts a blueprint
 /// envelope — the raw axis namespace it prints for the op-script equals the one it