R5-1: **Fixed** — Plan 3 Task 6 now hooks both forwarding paths and adds unit and two-edge coverage for the local-wildcard/exact-remote case.

1. **P2 — The root-read census update omits a changed package.** Plan 1 Tasks 5 and 11. Task 5 explicitly modifies `internal/hostops/record.go` ([plan 1:193](/home/paulca/amadan.net/carlos/platform-edge-asset-cache/docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-1-declare-publish.md:193)), but `internal/hostops` is absent from the envelope inventory ([plan 1:48](/home/paulca/amadan.net/carlos/platform-edge-asset-cache/docs/superpowers/plans/2026-10-24-edge-asset-cache-plan-1-declare-publish.md:48)). The census hashes every production source file and rejects a changed package envelope ([plan14_root_reads_test.go:275](/home/paulca/amadan.net/carlos/platform-edge-asset-cache/internal/provision/plan14_root_reads_test.go:275), [:571](/home/paulca/amadan.net/carlos/platform-edge-asset-cache/internal/provision/plan14_root_reads_test.go:571)). Updating the separate record-write inventory does not satisfy this check. **Smallest fix:** add `internal/hostops` to the root-read envelope inventory and require Task 11 to re-pin it in the overlay.

reject