fix: batching-stack review round — re-resolve rewired, guards symmetric, hardening pinned

[leeovery]

The end-of-stack review round as its own PR (design log: #504; base: #510) — six slices (harvest, spec-entry, task-map + commit-plan, engine code, test adequacy, conventions), every finding adversarially verified before fixing.

Majors

• resolve-dependencies: the stale-reference re-resolve was orphaned by the working-list swap — its corrected internal_id had no persistence path and silently never landed. Now feeds the working list like its sibling cases.
• write-tasks: the batched set told the model to write storage_paths without deriving it anywhere (the sibling initialize-plan had the derivation) — a guaranteed loud failure at the next --plan commit. Prelude now names the authoring.md section and the [] convention.

Minors

• Empty-batch guards made symmetric: brief-synthesis cleanup and summary-backfill skip the apply when nothing collected (an empty payload is a loud error by design); Write-tool instructions moved before their fences.
• display-groupings unify gets its own unify-ops.json — no stale reuse of analysis-flow's reconcile-ops.json — plus an explicit write instruction.
• process-review-findings's file-level raw-git commit rule (missed by both earlier sweeps) swaps to commit --plan; stale per-ID wording updated.
• Restart cleanups gain {storage_paths} expansion guidance ([".tick/"] → .tick/; [] → nothing extra).
• confirm-and-persist's stale "no separate name field" note corrected; authoring-log (D7) markers stripped from commands.md product prose.
• Engine hardening: dangling --plan is a usage error; present-but-malformed storage_paths gets its own message (never the misleading pre-upgrade hint); add-batch refuses non-string names.

Tests

validateStoragePaths was untested on both write paths (deletable with everything green) — now pinned via set and via apply; plus same-item set-then-delete op ordering, the --plan misuse matrix, multi-path staging, the repair-hint text, and non-string batch names. Gates: 1568/1568 node · shell suites · lint 27/27 · typecheck.

🤖 Generated with Claude Code

Stack

1. feat(engine): discovery-map add-batch — the harvest persists in one call (D7) #505
2. feat(engine): manifest apply — batched set/delete across one work unit (D7) #506
3. refactor(prose): task-map family folds onto existing batch forms (D7, stage 3) #507
4. feat(engine): manifest set — two grammars, never mixed #508
5. refactor(prose): dump/read folds — subtree gets replace per-topic loops (D7, stage 5) #509
6. feat(engine): commit --plan — plan storage stages from recorded state (D7, stage 6) #510
7. fix: batching-stack review round — re-resolve rewired, guards symmetric, hardening pinned #512 👈 current
8. fix: deep-dive round 2 — backbone rule flipped, pre-upgrade paths routed, flow bugs closed #513
9. fix(review-r3): engine hardening + crash-resume seams #514
10. feat(scoping): promotion routes through first-phase choice + bridge #515
11. fix(spec): pin the bugfix source name to the topic #516
12. fix(skills): gate-skip sentence accurate in gate-less phases #517
13. fix(review-entry): name the real upstream — specification and plan #518
14. fix(shared): strip triage-landing's unreachable superseded-research arm #519
15. feat(engine): refuse work-unit-level fields that shadow the phases tree #520
16. fix(discovery): first-written briefs join the full brief lifecycle #521
17. test(sim): pipeline simulation — engine driven end-to-end as a black box #522
18. fix(round-4): review findings — backfill keying, ratchet evasion, pull guard #523