test(runtime): reshape the expected-refusal noise pins to the engine's refusal

An unregistered organization object (and a view's unregistered probe
object) is no longer read through the driver: the engine refuses the name
first, so the declared refusal no longer occurs. The capture stays declared
and each pin now asserts nothing was withheld, so a returning read turns it
red. The channel-asymmetry pin registers its probe object (unprovisioned) so
it still measures a real driver refusal.

Claude-Session: https://claude.ai/code/session_01DDZNkDVwPQnevTFcYE47H3
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/runtime/src/app-plugin.job-data-reach.test.ts

@@ -108,8 +108,6 @@ const live: Array<{
     driver?: SqlDriver;
     dir?: string;
     noise?: ExpectedReadRefusalCapture;
-    /** The channels this test's path MUST have provoked — see `harness()`. */
-    requiredChannels?: readonly string[];
 }> = [];
 
 /**
@@ -119,6 +117,8 @@ const live: Array<{
  * construction, but the driver and the engine each log the fault on the way out.
  * Withheld and ASSERTED rather than muted — see `expected-read-refusal-noise.ts`.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 afterEach(async () => {
@@ -127,13 +127,14 @@ afterEach(async () => {
         try { await entry.engine?.destroy(); } catch { /* noop */ }
         try { await entry.driver?.disconnect(); } catch { /* noop */ }
         if (entry.dir) rmSync(entry.dir, { recursive: true, force: true });
-        // A capture nobody asserts is a mute. The probe is memoised behind the
-        // FIRST data operation, so only the paths that actually touch the store
-        // provoke it — `silentChannels(required)` is the API's own answer to a
-        // table read on some of a file's paths and not others. The withholding
-        // is unconditional either way; only the must-have-fired set narrows.
+        // A capture nobody asserts is a mute. [#21516] Quiet by construction
+        // now, on every path: the engine refuses a name its registry does not
+        // hold before any driver, so the probe asks the registry and never reads
+        // the unregistered organization object. The capture stays declared (a
+        // returning read is still withheld and counted) and this asserts that
+        // nothing was.
         if (entry.noise) {
-            expect(entry.noise.silentChannels(entry.requiredChannels ?? [ABSENT_TENANCY_TABLE])).toEqual([]);
+            expect(entry.noise.tablesSeen()).toEqual([]);
         }
     }
 });
@@ -161,19 +162,10 @@ async function bootEngine(): Promise<{ engine: ObjectQL; driver: SqlDriver; nois
     return { engine, driver, noise };
 }
 
-/**
- * @param opts.touchesStore whether this test's path performs a data operation.
- *   `true` (the default) requires the tenancy probe to have fired and been
- *   withheld; a context-shape test that never reads or writes passes `false`,
- *   which keeps the withholding and drops only the must-have-fired requirement.
- */
-async function harness(opts: { touchesStore?: boolean } = {}): Promise<Harness> {
+async function harness(): Promise<Harness> {
     const { engine, driver, noise } = await bootEngine();
     const adapter = new CronJobAdapter();
-    live.push({
-        engine, adapter, driver, noise,
-        requiredChannels: opts.touchesStore === false ? [] : [ABSENT_TENANCY_TABLE],
-    });
+    live.push({ engine, adapter, driver, noise });
 
     const readyHooks: Array<() => Promise<void>> = [];
     const ctx = {
@@ -254,7 +246,7 @@ describe('#14094 — a declarative job handler has data reach (TS-config path)',
 
     it('the context is the pre-#14094 set PLUS exactly `ql` and `logger`', async () => {
         // Reads nothing and writes nothing — this one is about the shape.
-        const h = await harness({ touchesStore: false });
+        const h = await harness();
         const seen: Array<Record<string, unknown>> = [];
 
         const plugin = new AppPlugin({
@@ -282,7 +274,7 @@ describe('#14094 — a declarative job handler has data reach (TS-config path)',
     });
 
     it('`data` from a manual trigger still reaches the handler beside the new members', async () => {
-        const h = await harness({ touchesStore: false });
+        const h = await harness();
         const seen: Array<Record<string, unknown>> = [];
         const plugin = new AppPlugin({
             id: 'com.test.job-reach',
@@ -391,7 +383,7 @@ export const meta = { builtAt: '2026-09-01T00:00:00.000Z' };
 
 describe('#14094 — additivity (Zone 1.1)', () => {
     it('a handler written against the PRE-#14094 context runs unchanged, byte for byte', async () => {
-        const h = await harness({ touchesStore: false });
+        const h = await harness();
         const calls: Array<{ jobId: string; data?: unknown }> = [];
 
         // Verbatim the shape `IJobService`'s `JobHandler` declares — the type an

packages/runtime/src/batch-row-driver-text-real-driver.integration.test.ts

@@ -85,6 +85,8 @@ const NOTE = {
  * Withheld and asserted rather than muted; `expected-read-refusal-noise.ts`
  * says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 /**
@@ -115,7 +117,10 @@ describe('[#8502] a REAL driver fault is withheld from every batch row', () => {
         // a failure here can never leave the engine running. Every test in this
         // file rigs and writes, so the probe fires for each of them: this holds
         // for a single `-t` run as well as for the whole file.
-        expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+        // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+        // hold before any driver, so the declared refusal no longer occurs. The capture stays
+        // declared (a returning read is still withheld and counted) and this asserts nothing was.
+        expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
         noise = null;
     });
 

packages/runtime/src/batch-row-http-status-real-driver.integration.test.ts

@@ -86,11 +86,16 @@ const CHILD = {
  * make that test red for a reason that has nothing to do with it.
  * `expected-read-refusal-noise.ts` says why this withholds instead of muting.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 /** [commit 13a6cb4ad] The capture is a PIN, not a mute — this is the assertion half. */
 const expectExpectedNoiseWithheld = (noise: ExpectedReadRefusalCapture | null): void => {
-    expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+    // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+    // hold before any driver, so the declared refusal no longer occurs. The capture stays
+    // declared (a returning read is still withheld and counted) and this asserts nothing was.
+    expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
 };
 
 describe('[#8570] a batch row carries the status its producer DECLARED — real driver', () => {

packages/runtime/src/bulk-write-real-driver.integration.test.ts

@@ -106,6 +106,8 @@ function metadataFor(objects: any[]) {
  * Withheld and asserted rather than muted; `expected-read-refusal-noise.ts`
  * says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 describe('bulk-write hardening on a REAL SqlDriver (framework#3147–#3152, #3172, #3173)', () => {
@@ -122,7 +124,10 @@ describe('bulk-write hardening on a REAL SqlDriver (framework#3147–#3152, #317
     // failure here can never leave the engine running. Every test in this file
     // boots and writes, so the probe fires for each of them: this holds for a
     // single `-t` run as well as for the whole file.
-    expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+    // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+    // hold before any driver, so the declared refusal no longer occurs. The capture stays
+    // declared (a returning read is still withheld and counted) and this asserts nothing was.
+    expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
     noise = null;
   });
 

packages/runtime/src/cascade-delete-multivalue-lookup-real-driver.integration.test.ts

@@ -172,6 +172,8 @@ const OWNER_PACKAGE = 'com.objectstack.test.9362';
  * Withheld and asserted rather than muted; `expected-read-refusal-noise.ts`
  * says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 // ── [#18617] The driver axis (ADR-0053 D-A3: "Postgres at minimum") ──────────
@@ -382,7 +384,10 @@ function declareCascadeDeleteCell(cell: DialectCell): void {
         // a failure here can never leave the engine running. Every test in this
         // file rigs and writes, so the probe fires for each of them: this holds
         // for a single `-t` run as well as for the whole file.
-        expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+        // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+        // hold before any driver, so the declared refusal no longer occurs. The capture stays
+        // declared (a returning read is still withheld and counted) and this asserts nothing was.
+        expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
         noise = null;
     });
 

packages/runtime/src/default-datasource-plugin.test.ts

@@ -34,6 +34,8 @@ const ENV = 'OS_ALLOW_DRIVER_CONNECT_FAILURE';
  * each log the fault on the way out. Withheld and asserted in that one case
  * rather than muted; `expected-read-refusal-noise.ts` says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 async function assemble(opts: {
@@ -197,7 +199,10 @@ describe('DefaultDatasourcePlugin — the default datasource as a declaration (#
       // [commit 13a6cb4ad] The capture is a PIN, not a mute: the probe's two log lines
       // are withheld from the shared shard log and asserted here instead, so
       // a probe that stopped running goes red rather than merely quiet.
-      expect(noise.silentChannels()).toEqual([]);
+      // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+      // hold before any driver, so the declared refusal no longer occurs. The capture stays
+      // declared (a returning read is still withheld and counted) and this asserts nothing was.
+      expect(noise.tablesSeen()).toEqual([]);
     } finally {
       try { await (kernel as any)?.stop?.(); } catch { /* noop */ }
     }

packages/runtime/src/expand-nested-fields-join-key.integration.test.ts

@@ -85,6 +85,8 @@ const TASK = {
  * but the driver and the engine each log the fault on the way out. Withheld and
  * asserted rather than muted; `expected-read-refusal-noise.ts` says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const ABSENT_TENANCY_TABLE = 'sys_organization';
 
 describe('#7537 expand with a nested `fields` that omits the join key (REAL SqlDriver)', () => {
@@ -101,7 +103,10 @@ describe('#7537 expand with a nested `fields` that omits the join key (REAL SqlD
     // failure here can never leave the engine running. Every test in this file
     // boots and writes, so the probe fires for each of them: this holds for a
     // single `-t` run as well as for the whole file.
-    expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+    // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+    // hold before any driver, so the declared refusal no longer occurs. The capture stays
+    // declared (a returning read is still withheld and counted) and this asserts nothing was.
+    expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
     noise = null;
   });
 

packages/runtime/src/expected-read-refusal-noise.channel-asymmetry.test.ts

@@ -158,6 +158,15 @@ async function probeRead(
     await kernel.use(new ObjectQLPlugin());
     await kernel.bootstrap();
     capture.captureEngine(kernel.getService<unknown>('objectql'));
+    // [#21516] The engine refuses a name its registry does not hold before any
+    // driver, so the probe object is REGISTERED — after boot, so no schema sync
+    // provisions it. The read then reaches the driver and the table is absent:
+    // the real refusal whose two channels this file measures.
+    kernel.getService<{ registry: { registerObject(o: unknown): void } }>('objectql').registry.registerObject({
+      name: table,
+      label: table,
+      fields: { title: { name: 'title', type: 'text' } },
+    });
 
     const data = kernel.getService<{ find(o: string): Promise<unknown[]> }>('data');
     try {

packages/runtime/src/package-list-commits-org-scope.integration.test.ts

@@ -106,6 +106,8 @@ const OTHER_ORG = 'org_other';
  * each log the read on the way out. Withheld and asserted rather than muted;
  * `expected-read-refusal-noise.ts` says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const UNBOUND_PROBE_OBJECT = 'anything';
 
 let cleanup: Array<() => void> = [];
@@ -119,7 +121,10 @@ afterEach(() => {
   // failure here can never leave an engine running. Every test in this file publishes at
   // least once, so the probe fires for each of them: this holds for a single
   // `-t` run as well as for the whole file.
-  expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+  // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+  // hold before any driver, so the declared refusal no longer occurs. The capture stays
+  // declared (a returning read is still withheld and counted) and this asserts nothing was.
+  expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
   noise = null;
 });
 

packages/runtime/src/package-revert-commit-attribution-org-scope.integration.test.ts

@@ -97,6 +97,8 @@ const OTHER_ORG = 'org_other';
  * each log the read on the way out. Withheld and asserted rather than muted;
  * `expected-read-refusal-noise.ts` says why.
  */
+// [#21516] The engine now refuses a name its registry does not hold before any driver, so
+// this read no longer reaches the driver and nothing above is logged; the pin asserts that.
 const UNBOUND_PROBE_OBJECT = 'anything';
 
 let cleanup: Array<() => void> = [];
@@ -110,7 +112,10 @@ afterEach(() => {
   // failure here can never leave an engine running. Every test in this file publishes at
   // least once, so the probe fires for each of them: this holds for a single
   // `-t` run as well as for the whole file.
-  expect(noise?.silentChannels() ?? ['no capture was installed']).toEqual([]);
+  // [#21516] Quiet by construction now: the engine refuses a name its registry does not
+  // hold before any driver, so the declared refusal no longer occurs. The capture stays
+  // declared (a returning read is still withheld and counted) and this asserts nothing was.
+  expect(noise?.tablesSeen() ?? ['no capture was installed']).toEqual([]);
   noise = null;
 });