nx_janitor_sprawl.nx

nx_janitor_sprawl.nx -- the JANITOR's SPRAWL/JUNK-CLEANUP half (X-JAN-002, the getdents-walk TODO noted in nx_janitor.nx). Finds ORPHANED registry .tsv files -- ones referenced by ZERO .nx organs anywhere under the scan root -- and QUARANTINES them (reversible MOVE, never delete). NO-FALSE-POSITIVE LAW (cardinal): a registry .tsv is "orphaned" ONLY IF its basename appears in ZERO .nx files under the scan root. ANY mention counts as PROTECTED -- a real read, a path const, or even a bare mention inside a // comment. When in doubt, protect. The detector therefore uses SUBSTRING matching of the literal basename "<name>.tsv" (so it catches bare names, full paths, and "\x00"-terminated path literals alike), gated by a LEFT word-boundary so that "census.tsv" is not spuriously matched as a substring of "math_census.tsv" -- the boundary only ever REJECTS a match that is genuinely part of a LONGER different filename, so it can never cause a false orphan. REVERSIBLE: the action is QUARANTINE = sys_renameat (atomic move) into the quarantine dir, preserving the filename. We NEVER unlink/delete registry data (CLAUDE.md #13: additive / soft-delete; history is sacred). Re-running is idempotent: a file already moved out of the registry is simply gone from the registry scan, so it is neither re-detected nor re-moved. PARAMETERIZED for testability (the gate points it at /tmp fixtures, never the real tree): nx_janitor_sprawl [scan_root] [registry_dir] [quarantine_dir] [logpath] Defaults (no argv) operate on the REAL tree: scan_root = runtime registry_dir = knowledge/registry quarantine_dir = knowledge/_quarantine/registry logpath = knowledge/status/janitor_sprawl.log Durable: a JANITOR-SPRAWL row -> the logpath. Exit 0. Slow forward is fine. license_tier: ORIGINAL