Night 2026-10-28 (part): R-1338 — the memory mark reads the live anon (decision 22 refined; bench 27.7 %, 9202 25.1 %, catalog patch prepared, not pushed); claim fault.already-paired walked on Tester 1's console (33 -> 32 not walked); evidence

documentation/architecture/09-update-architecture.md

@@ -370,6 +370,17 @@ builds them (`audits/update-rulings-2026-09-23/`).
     both options. **Why (b):** decision 13's mark exists for "does not fit the memory" (RomM, R-635), and
     only the app's own memory decides that. The cgroup peak stays in every record (`memory_cgroup_peak_pct`
     in the ladder entry). R-652.
+    **Refined 2026-10-28 night (R-1338, the night brief's „fix the measurement — the gate reads the right figure"):** the
+    mark reads the LIVE anon — `anon` without the pages the app already gave back. An allocator that frees with
+    MADV_FREE leaves the pages mapped (`anon` keeps counting them) on the INACTIVE FILE list, and the kernel takes them
+    back first. Measured: Wanderer's Meilisearch read `anon` 83–96 % of its 384 MiB limit on the bench AND on 9202 (with
+    or without swap, with or without `MEILI_MAX_INDEXING_MEMORY`), 0 kills, while `file` was ~1 MB and `inactive_file`
+    ~290 MB; it used ~100 MB. Figure (one home: catalog `scripts/memfigure.py`): the larger of `anon − max(0,
+    active_file + inactive_file − file)` and `active_anon + inactive_anon − shmem`, capped at `anon` — it errs high.
+    Wanderer v0.20.0 → v0.21.2 re-run on the bench: `proven`, no marks (search 83.3 % anon, **27.7 % live**); 9202:
+    95.2 % anon, **25.1 % live**. The evening's „17.7 % with the cap" was a different container (the one after the
+    swap, started over existing data), not the cap's effect. The catalog change (and Wanderer's entry without
+    `memory_tight`) is prepared, not pushed — the morning list. `audits/night-2026-10-28/r1338-meili/`.
 
 23. **The push-time test-record gate asks the registry — for moved refs only** — *decided by CC
     unattended 2026-09-23 night — operator may reverse.* *One sentence:* may a `--fast` (hook) gate use