[bug] derived-freshness flags three stores that no install can satisfy #2809

What happened

derived-freshness flags three stores that no install can satisfy

Summary

LifeOS 8.761.0, integrity lane derived-freshness. Each of these is a blocking "surface read absent from derived-artifacts.json" finding on an install where the folder does not exist:

1. MEMORY/STATE/agent-jobs: PULSE/modules/workflows.ts names the store without a trailing slash. The lane's list of short-lived stores has agent-jobs/ with a slash, and the captured name cannot hold a slash, so the exemption never matches. The folder appears only after a first agent job has run.
2. MEMORY/STATE/progress: hooks/LoadContext.hook.ts names it only in a comment that says the store is deliberately not read. The lane scans comments as code.
3. MEMORY/STATE/taint: hooks/lib/taint.ts and hooks/lib/texting-guard-core.ts still name the store. Security/README.md says taint tracking was retired on 2026-10-24, and no hook writes the store any more.

Suggested fix: match the short-lived names with or without the slash, skip comment lines in the scan, and remove or exempt the retired store.

Details

• Kind: bug
• LifeOS version: 8.761.0

Filed with the LifeOS /feedback command. The reporter approved this exact text before it was sent; paths, secrets and personal details were stripped locally.