nx_store_janitor.nx

nx_store_janitor.nx -- reclaim SUPERSEDED seg-store segment files. The janitor pass that seq724/RK013 named as reclaimable and nobody had built. MEASURED 2026-07-30 BEFORE WRITING THIS: knowledge/store holds 63,669 MB across 14,585 segment .docs files, while all 1,088 manifests TOGETHER reference only 3,031 live segments. debt-manifest.txt lists exactly TWO segments while 2,055 debt-seg-*.docs exist on disk, ~2.4 GB for one plane. So roughly 79 percent of the information plane's bytes are segments no reader can ever reach: the seg-store is append-only and every commit writes a NEW segment, so superseded generations simply accumulate forever. WHY THIS IS SAFE BY CONSTRUCTION: the manifest IS the definition of live. ss_manifest/ss_scan_seglist read ONLY segments listed there, so a file whose segid is absent from its own plane's manifest is unreachable BY DEFINITION, not by inference. That is the whole safety argument and it is why this tool refuses to run when it cannot read the manifest -- an unknown live set means an unknown safe set. RULE 13 -- MOVE ASIDE, NEVER DELETE. Superseded files are RENAMED into knowledge/store/retired/ (the convention already present on the box). Nothing is unlinked, so a mistake is reversible by renaming back. DRY RUN IS THE DEFAULT: it reports what it WOULD move and touches nothing. Pass 'apply' to actually move. EXIT: 0 clean/reported - 2 usage - 3 REFUSED (manifest unreadable or empty live set) - 4 nothing superseded license_tier: ORIGINAL No hw writes (Rule 26).