feat(frozen-bundles): the measurements read a pinned copy, not another repo's build dir

Measured 2026-09-17 17:43: vegnormal-okf rebuilt build/ferdig/r761-2025 while this
repository's v1 gate, the stress judge and four corpus tests pointed straight at it.
Rows 6-7 went IKKE MAALT and five tests fell, for a change no one here made. The failure
mode was never falsehood - the gate says IKKE MAALT and exits non-zero, never green - it
was instability: two projects shared a directory neither owns, so what this repository
MEASURES could move without a commit here.

A copy alone would push that directory one move away, so the copy comes with a pin.
frozen_bundles.json (tracked) carries path + sha256 + file count per base; the bundles
themselves are NEVER committed here. Three states, separated by construction: match ->
resolves; gone -> FrozenBundleMissing (an OSError, so the gate's existing except OSError
gives IKKE MAALT + exit 1 unchanged and the corpus tests SKIP, MAJOR-3's ceiling); drift
-> FrozenBundleDrift (a ValueError), loud, named, and never a skip. The two classes are
deliberately unrelated: a caller that catches "missing" to skip must not swallow "drift".

The NAME is hashed alongside the bytes, and the directory name carries the first 12 chars
of the digest so a stale copy is visible in ls. Renewal is a decision: new copy + new pin
in the SAME commit (README). --bundle-root / PORTFOLIO_VEGNORMAL_ROOT stays as the
operator's explicit, UNPINNED live mount.

Iron Law: the tests were written and run RED first (collection error, then two arms of my
own making). Load-bearing MEASURED, eight mutations all red against the WHOLE suite with a
green control of 1984 passed / 5 skipped / 5 xfailed and a strict node-id superset
(1977 -> 1994, 0 removed): M1 the pin is never verified (7) - M2 drift collapsed into
missing (5) - M3 the name is not hashed (40) - M4 the gate seam reverted to root/name (1) -
M5 the corpus helpers skip on drift too (4, one per file) - M6a the slash spelling back in
src (1) - M6b the quoted path segment back in a test (1) - M7 the directory name drops the
short digest (1, and 45 skipped, which proves absence is a SKIP and not a false green) -
M8 the explicit override ignored (3, two of them in test_stress_judge_loadbearing.py,
independent witnesses older than this work).

M2 FALSIFIED THE TEST FIRST: the four parametrised arms did not go red, they went to SKIP
(5 -> 9 skipped) and stayed green - pytest.skip inside a pytest.raises is not a failure.
The arm now catches pytest.skip.Exception explicitly and turns it into an AssertionError.

grep -rnE 'vegnormal-okf/build|["'"'"']vegnormal-okf["'"'"']' src tests contexts -> 0
(3 + 4 hits before; the three remaining prose mentions document history and are allowed).
Gate re-run against the frozen copy: identical to the live mount (rows 0/3 - 0/3 - 3/8 -
no report - 3/8 - IKKE MAALT - 1/20, exit 1).

Order 20260917T223645Z-1296211942-from-.claude.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/portfolio_optimiser/evals/v1_gate.py

@@ -760,11 +760,11 @@ def _own_proposals(
 
 
 def measure_stress(
-    evidence: Mapping[str, Any], repo_root: Path, stress_root: Path, bundle_root: Path
+    evidence: Mapping[str, Any], repo_root: Path, stress_root: Path, bundle_root: Path | None
 ) -> StressMeasure:
     """Re-judge every listed outbox with the current judge. Any run that cannot be judged makes the
     whole measurement absent — a partial one would carry the wrong denominator."""
-    from portfolio_optimiser import stress
+    from portfolio_optimiser import frozen_bundles, stress
     from portfolio_optimiser.mandate import load_mandate
 
     verdicts = []
@@ -779,8 +779,11 @@ def measure_stress(
         chosen = [d for d in declared if wanted in (None, d["name"], d["bundle_id"])]
         if len(chosen) != 1:
             return StressMeasure(where=str(stress_root), missing=f"{context}: base ikke entydig")
-        base = bundle_root / chosen[0]["name"]
         try:
+            # The frozen copy this repository pins, unless the operator named a live mount.
+            # Drift is a ValueError and absence an OSError: both land in ``missing`` below, so a
+            # corpus that moved is IKKE MÅLT with the reason said, never a silently wrong number.
+            base = frozen_bundles.bundle_dir(chosen[0]["name"], override=bundle_root)
             verdicts.append(
                 stress.score_context_set(
                     context,
@@ -933,10 +936,7 @@ def evaluate(
             evidence,
             repo_root,
             stress_root or repo_root / evidence["root"],
-            bundle_root
-            or Path(
-                os.environ.get("PORTFOLIO_VEGNORMAL_ROOT", "~/repos/vegnormal-okf/build/ferdig")
-            ).expanduser(),
+            bundle_root,
         )
     return [
         score_rounds(rounds_dir, required, ai),
@@ -999,7 +999,10 @@ def main(argv: Sequence[str] | None = None) -> int:
         "--stress-root", default=None, help="utboks-roten for stressrunden rad 6-7 dømmer"
     )
     parser.add_argument(
-        "--bundle-root", default=None, help="der stressrundens kunnskapsbaser er montert"
+        "--bundle-root",
+        default=None,
+        help="en EKSPLISITT, UPINNET levende montering; uten den svarer den frosne kopien og "
+        "sha256-pinnen verifiseres",
     )
     parser.add_argument("--json", action="store_true", help="maskinlesbar output")
     args = parser.parse_args(argv)