kind-isolation :control-path: the cancelled control kind's upstream word list is struck; data-path-step stays (ARCHITECT 2026-10-07)

[MattJackson]

GATE-BURN (/status row 88, spec exit point 3: cargo xtask gate --all green on predev).

What

kind-isolation:control-path (ship twin) keeps data-path-step and drops its upstream word list (ARCHITECT ruling 2026-10-07, recorded in the spec's dated ruling log, Appendix B).

• The six words (egress, pool, routing, failover, breaker, provider) were the cancelled control kind's list (65542ca). Part 2 deps: bump bytes from 1.11.1 to 1.12.0 #5 (BUSBAR-1.6.0.md:2178) says "There is no "control" plugin kind".
• THE DESIGN §8 (:1131-1137) states the cleanliness crates' rule: they depend one way on the kernel, name no plugin, and get their listeners through the connector. None of the six words names a plugin. Route and pools belong to the KERNEL (:637). The 1.5.5 pools/providers/routing admin API is the operator surface (:1137).
• The connector's in-role carve-out is deleted with the list. data-path-step (no fn route/fn meter in a cleanliness crate) stays.
• "Names no plugin" is held by :matrix's armed law0-neutral-instance class at zero on the ship twin. It gets a new red plant: a plane instance noun in core-admin.
• The old red plant (route vocabulary in core-oauth2) is now a green proof.

Effect (measured on Latchkey, cli-11deab51, base predev d07eaf7)

• kind-isolation-ship :control-path: 73 findings -> row PASS. That's core-admin 64, core-oauth2 2, and the connector's ICE tie_breaker 7. The ICE special case from the earlier ruling isn't needed (ARCHITECT accepted).
• gate --all: no row worse. The remaining FAIL rows are the standing set minus :control-path.
• Self-tests: gate kind-isolation-ship --selftest 142 cases, exit 0. gate kind-isolation --selftest 238 cases, exit 0.
• fmt clean. clippy found one empty_line_after_doc_comments on the struck-list note; it's fixed in 17b9a40 by turning the note into a plain comment. That fix isn't re-run, because the Latchkey run cap is reached, so the hop's clippy is the proof.
• cargo test -p xtask is the hop's (the selftest_runs_every_registered_gates_red_proof budget is xtask at opt-level 2; self-test budgets re-measured; over-budget batteries re-taken serially #520).

[github-actions]

promote into predev: BOARD @8bb51216e: 1 failing test row(s), 11 DENY row(s)

Failing tests (1)

crate	test	step	first panic
``	nextest xtask::cli::selftest_runs_every_registered_gates_red_proof	test:workspace

DENY rows (11)

gate	row	detail
construction	one-pick-site	3 production call site(s) of 'pick_among(' (ceiling 2): crates/busbar-kernel-egress/src/walk.rs:298; crates/busbar-llm/src/engine/exhaustion/fallback.rs:120; crates/busbar-llm/src/engine/pipeline.rs:8
kind-isolation	kind-isolation:deps	3 finding(s), 76 shipped edge instance(s) over 27 class(es), 76 declaration(s); 61 '[[dep]]' row(s), 0 question(s): unlisted-dep-edge legacy -> plane busbar-llm -> busbar-plane-llm is a shipped edge w
kind-isolation	kind-isolation:test-deps	5 finding(s), 36 test edge instance(s) over 19 class(es), 36 declaration(s); 22 '[[dep]]' row(s), 0 question(s): unlisted-dep-edge cleanliness -> legacy busbar-core-admin -> busbar-a2a is a test edge
kind-isolation-ship	kind-isolation:deps	15 finding(s) over 76 shipped edge(s): ship-edge kernel -> hooks busbar-kernel -> busbar-hooks-ranking is 'not-allowed': the architecture grants no kernel -> hooks edge, and the ship criterion is the
kind-isolation-ship	kind-isolation:test-deps	13 finding(s) over 36 test edge(s): ship-edge cleanliness -> legacy busbar-core-admin -> busbar-a2a is 'not-allowed': the architecture grants no cleanliness -> legacy edge, and the ship criterion is t
kind-isolation-ship	kind-isolation:faces	4 finding(s) over 31 crate(s): foreign-entry crates/busbar busbar is kind 'root' and implements 'Store' 2 time(s) in shipped source — the entry face of kind 'store'. A trait implementation is a claim
kind-isolation-ship	kind-isolation:testkit	2 finding(s) over 12 crate(s): battery-ignored crates/busbar-plane-decisions busbar-plane-decisions carries a tests/conformance.rs whose every entry is '#[ignore]'d (or which has none). 'cargo test'
kind-isolation-ship	kind-isolation:legacy-drain	5 finding(s): transitional-live qa/kind-isolation.toml 'busbar-a2a -> busbar-core-admin' (legacy drain: the retiring A2A engine's tests drive the admin surface that drained into the cleanliness tier)
ship-ready	ship-ready:ship-twin	'kind-isolation-ship' is not green: kind-isolation:deps (a dependency the architecture does not grant is still in the graph); kind-isolation:test-deps (a dependency the architecture does not grant is
instance-noun-neutrality	instance-noun-neutrality:voice	tracked known-debt census — 8: crates/busbar-plane-llm/src/codec/gemini/handler.rs×7 [cross-plugin] | crates/busbar-plane-llm/src/codec/gemini/tests/handler_tests.rs×2 [cross-plugin] | crates/busbar
structure-lint	structure-lint:plane-dup:unledgered	23 finding(s): PLANE-DUPLICATE (module): 'config.rs' — a2a:crates/busbar-a2a/src/a2a/config.rs mcp:crates/busbar-mcp/src/mcp/config.rs voice:crates/busbar-voice/src/config.rs (the ledger row signs for

Judged against base 70776f1d3: 0 new red, 0 worse, 7 standing (excused).

Reused PASS by input key (3, 5 min not re-run)

step	key	produced by
build:clippy	cdcb69e641029e1f	8bb51216e
test:timing	4ba484e8d35cdf18	8bb51216e
test:admin-test-support	be2b74cde1adf9cc	8bb51216e

tests passed: 18477, failed: 0. Run: https://github.com/GetBusbar/busbar/actions/runs/37602258893 . Artifact verdict-8bb51216e7fb20b4dd14b7a3fcf8d16fe2e0a8d8 (failures.json, junit.xml, raw.log; 90 days).