carlos / platform Public

Fail-closed fix for apps/bab// in the dev bucket. The apps/<sqid>/<app>/{logs,errors,analytics}/ key builders now return (key, error) and refuse an empty or invalid account or app (applog.ErrBadKeySegment), so nothing can write an empty app segment. The box shippers (logship, errship, prune, analytics flush) skip a refused app and log once. Root cause: app-less Addr routes on leo-climbing (proof.dev.carlosframework.com and two oncarlos siblings; account bab, app "", 127.0.0.1:8099 with nothing listening) had their refused 502s filed under (bab, ""). hostops.Apps stays fail-closed. Census: B8 re-digests three rows and a new Plan 14 envelope-only overlay is loaded last; both RULING OWED for platform-1e. A dry-run-by-default cleanup for apps/bab// is drafted in docs/superpowers/notes and has not been run. Not merged.