I read this as a test-first root-cause fix in the isolated profile source - I’ll trace the cleanup and journal contracts, add focused RED regressions, implement strict filename/schema routing, then run the requested verification without invoking the Golden Path.


I’ve confirmed the defect is a format mismatch, not a filesystem issue: the cleanup reader treats all three authorities as JSONL, while `customer_admin` atomically writes an indented singleton journal. I’m moving to RED tests that pin the native journal shape, global corruption behavior, and terminal-state accounting before changing the parser.


The RED regression failed at the exact production call path with `CleanupIntegrityError`; after strict routing and native-object validation, the new matrix is GREEN (9 passed). I’m now checking compatibility against cleanup/shared/admin behavior and will tighten only issues exposed by those suites.


Focused compatibility is clean: cleanup/shared/admin passed 157 tests, and changed-file Ruff, ty, and compileall are clean. A whole-tree run of the latest Ruff also exposed 271 unrelated pre-existing findings in untouched modules; I’m preserving those changes and proceeding with the full profile suite plus the manual multiline driver.


I read this as completed implementation and verification - I’ll report the source-ready result without running the Golden Path.

Implemented strict authority parsing in:

- `checkin_cli/customer_cleanup_inventory.py`
- `tests/test_customer_cleanup.py`

Behavior now:

- Routes strictly by supported filename.
- Parses activation journal as one native JSON object.
- Keeps audit and delivery authorities strict JSONL.
- Validates journal version, transaction, state, customer bindings, recovery flag, paths, digests, rollback data, and version-specific fields.
- Rejects malformed, trailing, multiple-object, scalar, list, ambiguous-binding, and unsupported formats.
- Treats committed history as retained and non-unknown.
- Counts prepared, recovery-required, and unrecognized states as unknown blockers.
- Preserves existing private-file, symlink, and hardlink checks.
- Globally corrupt foreign JSONL records fail cleanup.

Test-first evidence:

- RED: `7 failed, 2 passed`
- GREEN regression matrix: `10 passed`
- Cleanup/shared/admin: `157 passed`
- Full profile: `749 passed in 49.45s`
- Changed-file Ruff: passed
- Changed-file ty: passed
- `compileall`: passed
- Manual 27-line journal driver:
  - phase `committed`
  - activation history `2`
  - unknown count `0`
  - terminal `true`

A whole-tree latest-Ruff invocation found 271 pre-existing findings in untouched modules; none are in the changed files.

The Golden Path was not run.