Description
The AC2 default-unchanged guard (loop58 L11) masks three map-order engine-draw orders that make shipped output vary run to run: k8scluster cadvisor.go/kubelet.go (13 container + 3 prober families), webservice/metrics.go activeRoutes (multi-route spanmetrics latency and OTLP http.server.request.duration), nettopo/health.go dominantVendor ties (walker label). Sort those iterations, drop the guard masks and regenerate.
Acceptance Criteria
- #1 Two runs of just dump on any shipped blueprint are byte-identical and the guard masks are removed
Definition of Done
- #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
- #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
- #3 just dump — inventory diffed against signals/
Implementation Notes
Historical evidence reconciliation: implementation c27b3c19 plus unmasked guard fcb23aed; retained delivery report records three identical shipped-set dumps, original dump files not retained. Full gate e029aa8e, tree95c7c95ac5fc662e6f74ad419090d45cf7b2b964, run20261025T121935Z-synthkit-bb72a72a exit0. This is historical acceptance, not current-HEAD proof. Generation conditional not applicable; no qualifying retained signals-inventory comparison, so remaining verification boxes stay unchecked.
Mask qualification: the three nondeterministic numerical/order masks were removed; identity and host-fact masking intentionally remains. The historical acceptance is not a claim that every duMask entry was removed.