# Plan 14 census overlay moves-overcap-cut-236 (#236, moves' part of Paul's ruling of 2026-10-15; loaded after hostfiles-cap-236): the moves source round refuses, at S1, a source whose files manifest a recovery could not restore because an entry path is past the readers' cap (hostfiles.RestorableWithinCap), and (fix round 1) a source whose files directory holds a path past that cap.
# Census ruling moves-overcap-cut-236 (platform-1e, 2026-10-15), #236: movesWorker.sourceRefusal and movesWorker.sourceRound stay accepted-legacy with main's dispositions. sourceRound passes the claim holder it read under the staging lease to sourceRefusal, which ends in sourceFilesRefusal: a read of the holder's files manifest from this box's own data bucket by exact version through cfg.Versioned, bounded by movesFilesPreflightTimeout. CONDITION (binding): that check is deny-only. It never allows anything, and never skips or short-circuits the establishment's own check on the claim's identity-bound store. If it ever authorizes something, it needs a new ruling.
# Extension of census ruling moves-overcap-cut-236 (platform-1e, 2026-10-15), #236 fix round 1: archive.walk (Build refuses a path past the files tree's cap, archive.TreePathLen = hostfiles.MaxPathBytes), buildPrepared (the prepared files manifest build reads the extracted tree through an os.Root over the files directory, names relative to it, so a path within the cap is not past PATH_MAX; the new site is that OpenRoot) and var readFileBounded (it opens through that root) stay accepted-legacy with main's dispositions and the ruling's suffix. CONDITION (binding): no read falls back to a path-based open when a root open fails; it refuses instead.
@legacy	98a854a936ae2bf5be2f8c07f401caadb37731407d67b73fabf2015826c8bfc1	internal/host/movesphase1.go	movesWorker.sourceRefusal	legacy	accepted-legacy	accepted-legacy;rev3=J1;basis=root-route;census-ruling-moves-overcap-cut-236	whole:Route@364,whole:Route@476	690fda4d0209035cffc5b2d066a93e04e7a9a584f55e1fd629395187f1c56484
internal/host/movesphase1.go	movesWorker.sourceRefusal	legacy	accepted-legacy	accepted-legacy;rev3=J1;basis=root-route;census-ruling-moves-overcap-cut-236	whole:Route@364,whole:Route@476	690fda4d0209035cffc5b2d066a93e04e7a9a584f55e1fd629395187f1c56484
@legacy	973f36144cc7c6bcda570a12c6d8bb2b35a69392db98413a93c0633fe15e4ace	internal/host/movesphase1.go	movesWorker.sourceRound	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Exec@1981,file:Exec@2099,file:Read@1427	aacb3d17ad302c969e05ccfc0e091c4c6a2b0d6cc3791fa5f717ee7ad905a9e7
internal/host/movesphase1.go	movesWorker.sourceRound	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Exec@1981,file:Exec@2099,file:Read@1427	aacb3d17ad302c969e05ccfc0e091c4c6a2b0d6cc3791fa5f717ee7ad905a9e7
@legacy	826af0218f3ea5b1cf04fa64f3546303ab5a7c261f1f5462264f994134c9b998	internal/moves/archive/archive.go	walk	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Lstat@1168,file:Lstat@747,file:WalkDir@242	6ee298c79079c2bb5a1dfb15f0af4c0ca41b9ef7b4cd349894deec47d21d5e54
internal/moves/archive/archive.go	walk	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Lstat@1168,file:Lstat@747,file:WalkDir@242	6ee298c79079c2bb5a1dfb15f0af4c0ca41b9ef7b4cd349894deec47d21d5e54
@legacy	825ac4c6b6df65127e2334d47521cc5d302246f376dad2ae26a6bc6d599d17b0	internal/host/movesfiles.go	buildPrepared	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Lstat@613,file:OpenRoot@2066,file:ReadFile@808,file:WalkDir@2252	16939eca2043b765376bcf44653902d46f51af192ff36d8ef0fbb2b5b098b59e
internal/host/movesfiles.go	buildPrepared	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Lstat@613,file:OpenRoot@2066,file:ReadFile@808,file:WalkDir@2252	16939eca2043b765376bcf44653902d46f51af192ff36d8ef0fbb2b5b098b59e
@legacy	68bb7ee7e82af29cc8438c3fc3f575f11c86a71e53806af37bef1a5c76082832	internal/host/movesfiles.go	var readFileBounded	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Open@236,file:ReadAll@327	9a6274fadde8c8905c83791f982e195eb894209d2dfed4ba7ce2929ee0f66cc9
internal/host/movesfiles.go	var readFileBounded	legacy	accepted-legacy	accepted-legacy;rev3=J4;basis=root-input;census-ruling-moves-overcap-cut-236	file:Open@236,file:ReadAll@327	9a6274fadde8c8905c83791f982e195eb894209d2dfed4ba7ce2929ee0f66cc9
@coverage	internal/host	590dd6508e927969a8e54ea4ae074abd1772e106c1a2cedcc37b5c2f5ae3e962
@coverage	internal/moves/archive	4d329d65e065ce06cd6108529a9d58bac7aad481289d8b4e18c23ddcd2ed8cac