# Census overlay design-fleet-internal-engines (amadan #335 plan 1: the fleet-internal engines model, a test-only simulation package), loaded LAST, after claim-merge-main-4. RULED as census-ruling-design-fleet-internal-engines (Paul, as census owner, 2026-10-21), accepted as proposed (docs/superpowers/notes/census-proposal-design-fleet-internal-engines.md).
2
# No production code changes. internal/sim/engines is new and every Go file in it is a _test.go file, which the census does not scan; its one scanned file is the bash mutation harness mutate.sh, which the scanner pins whole as an external file:external@0 read. It is classified as internal/sim/hostlife/mutate.sh is (plan14-root-reads.tsv, re-pinned in plan14-root-reads-merge.tsv under merge-ruling-2): legacy, accepted-legacy, a test harness pinned by the conservative external envelope, not production root authority. Executing identity: none at runtime; a developer or CI running go test or the harness, as their own user; no root and no production binary.
3
# Pinned at branch commit bb1bf408 (main merged in). One frozen declaration is added, so the seal moves; claim-merge-main-4 leaves the securelisten-337 seal standing, and that seal is checked first. The new internal/sim/engines envelope (mutate.sh alone) is pinned.
4
@legacy 4f5ed448b20df36eb514bcf2ddfbd74dc0c516b327f5f4c5e7dabed700b98df4 internal/sim/engines/mutate.sh external legacy accepted-legacy accepted-legacy;rev3=census-ruling-design-fleet-internal-engines;identity=none at runtime: a developer or CI running go test or this harness by hand, as their own user; no root, no production binary;basis=engines mutation harness (test-only, internal/sim/engines; amadan #335 plan 1), adapted from internal/sim/hostlife/mutate.sh: it runs a prebuilt engines test binary once per rule with ENGINESIM_MUTATE set and writes logs only under $TMPDIR/enginesim; it never copies or edits source; pinned by the conservative external envelope, not production root authority file:external@0 e13dc977dabeaefddbdb3dfca68c04d531b282f6ea1b256d72c13a1caa365c46
5
internal/sim/engines/mutate.sh external legacy accepted-legacy accepted-legacy;rev3=census-ruling-design-fleet-internal-engines;identity=none at runtime: a developer or CI running go test or this harness by hand, as their own user; no root, no production binary;basis=engines mutation harness (test-only, internal/sim/engines; amadan #335 plan 1), adapted from internal/sim/hostlife/mutate.sh: it runs a prebuilt engines test binary once per rule with ENGINESIM_MUTATE set and writes logs only under $TMPDIR/enginesim; it never copies or edits source; pinned by the conservative external envelope, not production root authority file:external@0 e13dc977dabeaefddbdb3dfca68c04d531b282f6ea1b256d72c13a1caa365c46