fix: round 5 of the release review of 6.3.0, the structural fix

Round 5 (v6.2.0..d37e538, WARN: 11 MAJOR, 2 MINOR). The patching did not
converge (the same two places every round), so the operator chose a
structural fix on 2026-10-11. Each change behind a test that failed first.

- A check runs with no shell. criteria-runner's runCommand starts the runner
  with the very words the screen checked (spawnSync(words[0], words.slice(1)),
  without NODE_TEST_CONTEXT); Phase 7 criteria, Regression: (its exec copy is
  gone, MINOR 0e98d5c7), proof of red, the done line and the test lock all
  run through it. No quote, glob, tilde or variable can rewrite a checked
  word any more. The screen stays and says why: a word that means something
  else in a shell (quote, backslash, $, brace, leading ~) is refused; a glob
  reaches only node --test, which expands its own patterns (sh read
  `tests/.?/` as `tests/../`); no path climbs out with .. or starts at /;
  a word starting with @ is refused (pytest reads @file as more arguments).
- The K6 plan-file sweep has v6.2.0's own Files: reader again (516dffa):
  backticked paths, and plain words only in a field without them. The
  shared reader from round 3 planned directories a description named and
  dropped paths v6.2.0 planned. fieldPaths stays for the tests-only check,
  with a path test on spans (`parse()`, `p.parse()` are no paths), plain
  descriptions ignored when the field has backticked paths, dotfiles,
  backslash paths and glued spans read.
- Skill frontmatter reads a value as YAML does: trailing space is nothing,
  and a comment ends a plain value, a flow list or a block indicator
  (`model: opus # pinned`). A comment that cuts a plain description, or is
  the whole value, is still a hazard.
- release-check reads the diff with --no-renames: a test moved into an
  allowed place after the review shows as removed.
- The example plan's step 2 heading no longer says "must FAIL initially";
  steps 1-2 keep the tests-only warning (operator 2026-10-09, 73262b6).

Open: MINOR c1fef1ad (one shared isMain helper) is not in this round.
Measured: 0 of 463 Files: fields with backticked paths (520 fields in 182
plans across the marketplace repos) carry another path-like word.

Suite 2185 (2183/0/2).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

lib/verification/plan-scope-sweep.mjs

@@ -33,7 +33,7 @@ import { readFileSync, existsSync, realpathSync } from 'node:fs';
 import { spawnSync } from 'node:child_process';
 import { resolve, relative, dirname, isAbsolute, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { sliceSteps, parseStepFields, fieldPaths } from '../parsers/plan-schema.mjs';
+import { sliceSteps, parseStepFields } from '../parsers/plan-schema.mjs';
 import { parseManifest } from '../parsers/manifest-yaml.mjs';
 
 // Files Voyage's own process writes while planning and executing.
@@ -44,8 +44,9 @@ export const PROCESS_FILES = Object.freeze([
 ]);
 
 const BACKTICK_SPAN = /`([^`\n]+)`/g;
-// A backticked path in `Test first:` (spaces allowed: `docs/my file.md`).
+// Backticked: spaces allowed (`docs/my file.md`); bare: no whitespace.
 const looksLikeTickedPath = s => /[./]/.test(s) && !/^https?:/.test(s) && !s.startsWith('-') && s.trim() === s;
+const looksLikePath = s => !/\s/.test(s) && looksLikeTickedPath(s);
 
 function pathsIn(text) {
   const out = [];
@@ -61,9 +62,20 @@ export function plannedPaths(planText) {
   for (const s of sliceSteps(planText)) {
     const f = parseStepFields(s.body);
     const files = f.get('Files');
-    // One reader with the tests-only check (plan-schema.mjs fieldPaths):
-    // backticked spans as written, else every path-like word.
-    if (files) for (const p of fieldPaths(files.text)) out.add(norm(p));
+    // v6.2.0's own reading, kept as it was (operator 2026-10-11): every
+    // backticked span that looks like a path, and plain words only when the
+    // field has none. A field that names its paths in backticks plans those,
+    // never a path its description mentions. Release review of 6.3.0, rounds
+    // 3-5: reading Files: through the tests-only check's reader
+    // (plan-schema.mjs fieldPaths) dropped paths v6.2.0 planned and planned
+    // directories a description named, so K6 has its own reader again; the
+    // two answer different questions (what may change; is every named file a test).
+    if (files) {
+      const ticked = pathsIn(files.text);
+      // Older plans write bare paths: `- Files: a.ts, b.ts`.
+      const bare = ticked.length ? [] : files.text.split(/[,\s]+/).filter(looksLikePath);
+      for (const p of [...ticked, ...bare]) out.add(norm(p));
+    }
     const tf = f.get('Test first');
     if (tf) {
       for (const line of tf.text.split('\n')) {