burn-down: R-423 site page walk (exemption dropped); STATUS Part C list (45 rows for the operator); REPORT; register 336 -> 291 (0 opened, 45 closed)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -4,6 +4,8 @@
   pulls it. `test_no_latest_push.py` walks `hub/` and `scripts/` build files (red-proofs: the old Makefile, the old
   build script).
 - **R-418:** `repo_gates.py`'s docstring lists all 17 gates; `test_repo_gates_docstring.py` keeps list == `GATES`.
+- **R-423:** `site_gates.py` fails on a website page that `PAGES` does not list (a walk); decoy added, the gate's
+  decoy-coverage exemption removed.
 - **R-416:** `closed_register_gate.py` RULE 4 — an id twice in `CLOSED-ITEMS.md`; decoy in `test_gate_decoys.py`.
 
 ## gates — `script-tests`: every Python test suite under scripts/ runs on every push (R-885) (2026-10-05)

scripts/decoy_coverage_gate.py

@@ -33,9 +33,6 @@ import sys
 # Dated 2026-09-01. This list is DEBT, not a settled state: R-426 owns it and names every entry.
 EXEMPT = {
     # felhom.eu
-    ("felhom.eu", "site"):
-        "R-423 — PAGES is a hardcoded list of 7 files; a new page is unscanned. The decoy passes "
-        "TODAY, so a test asserting rejection would be a lie. Fix is to glob website/*.html.",
     ("felhom.eu", "one-register"):
         "R-424 — a real defect parked under state `idea` is invisible. Declared in the gate's own "
         "docstring as residual hole 1; the decoy passes today.",

scripts/site_gates.py

@@ -65,6 +65,18 @@ def norm_block(b):
     return b
 
 
+# R-423 (2026-10-05): PAGES is still the list the checks run on, but it may no longer be SHORTER than the site. Every
+# *.html under website/ (a walk, any depth) must be in it — a page added without being added here used to go
+# unscanned, which is how a gate checks seven files of nine and prints OK.
+_on_disk = set()
+for _dp, _dns, _fns in os.walk(W):
+    _dns[:] = [d for d in _dns if not d.startswith(".")]
+    for _f in _fns:
+        if _f.endswith(".html"):
+            _on_disk.add(os.path.relpath(os.path.join(_dp, _f), W))
+for _missing in sorted(_on_disk - set(PAGES)):
+    fail("%s: an HTML page the site gates do not scan — add it to PAGES in scripts/site_gates.py (R-423)" % _missing)
+
 pages = {}
 for p in PAGES:
     path = os.path.join(W, p)

scripts/test_gate_decoys.py

@@ -53,6 +53,7 @@ COVERS = {
                         "(2026-10-03) an old-shape row under the new header, a near-miss category, an "
                         "old rank tag as Sev, an undefined state word, and a pipe outside backticks"),
     "decoy-coverage":  "a gate registered in a runner with no decoy and no exemption (its red-proof)",
+    "site":            "R-423: a NEW page under website/ that PAGES does not list (the gate used to scan 7 of 9)",
     "script-tests":    ("R-885: FIVE cases in scripts/test_script_tests_gate.py, run from here: a suite that PRINTS "
                         "OK and exits 1 (label without fact), a failing suite three levels deep (scope is a walk), "
                         "an empty scripts/ tree (checked nothing), the genuine article (must pass), the nested mark"),
@@ -371,6 +372,12 @@ else:
     _n = _gq.stdout.strip().splitlines()[-1] if _gq.stdout.strip() else "?"
     print("  ok  %-20s %s" % ("guide-quote", _n))
 
+# ── site (R-423) ─────────────────────────────────────────────────────────────────────────────────
+# A page that exists but is not in PAGES. The content is a perfectly valid page, so only the scope rule can convict.
+decoy("site/unlisted-page", "site_gates.py",
+      plant_file(os.path.join(ROOT, "website", "zz-r423-decoy.html"),
+                 u"\ufeff<!DOCTYPE html><html><body><nav></nav><footer></footer></body></html>\n"))
+
 # ── script-tests (R-885) ─────────────────────────────────────────────────────────────────────────
 #
 # Its decoys are whole fake repos, so they live in their own file and are RUN from here (guide-quote's shape).