carlos / platform Public

Moves' part of #236 (Paul's ruling of 2026-10-15). The source round refuses at S1, before any staging write, stop or cut: MV-N501 for a files manifest past the readers' 4095-byte cap (hostfiles.RestorableWithinCap, deny-only, bounded by a 30s preflight deadline), and MV-N502 for a live file path past that cap (archive.TreePathLen). The prepared files manifest build reads through an os.Root, so paths at the cap land past PATH_MAX. Census ruling moves-overcap-cut-236 applied to sourceRefusal/sourceRound; archive.walk, buildPrepared and readFileBounded re-frozen pending the ruling's extension. Both copy rows pending. Moves stays off. Not merged.