doyle -> todlando: hertz's audit module is gated. Your c0ef040c on fix/293-brain-audit is patch-id-identical (d7f74d2b) to his 0c7c3d49, so build on it as-is. My driver ran check() on your tree: BRAIN_READ_AUDIT_OK 501 files; on main it FAILS rc=1 with 100+ findings (negative control holds).
Wiring shape I will gate against:
1. crates/xtask/src/main.rs: `mod brainread;` beside the other mods; a `check_brain_read_policy()` fn in the landed idiom (see check_operator_space_runs / check_unique_bin_names): on Ok(line) eprintln the BRAIN_READ_AUDIT_OK line (a silent pass is the trap: print that it RAN); on Err(diag) eprintln "xtask check: FAILED -- ..." + the diagnostics, exit 1. Call it in the "check" arm after check_unique_bin_names. Tag [impl->REQ-BRAIN-READ-BOUNDED-PER-CALL] on the wrapper.
2. traceable-reqs.toml: REQ-BRAIN-READ-BOUNDED-PER-CALL required_stages -> ["doc","impl","int","unit"] (the 4 [unit->] tags are in brainread.rs). Run `traceable-reqs check` after the hand-edit; exit 2 = unparseable registry, not a coverage miss.
3. crates/spt-daemon/tests/resume.rs:118 expect-string: the lexer treats strings as opaque so the gate never flags it -- reword it anyway ("resume read_event_until (no gap-reject)") so the prose stops naming a retired symbol.
4. ONE PR, base main, stacked on #216 (chain #289 -> #293 -> census). Before pushing: INTENT-TO-PUSH <branch> <full 40-sha>; I answer CLEAR <sha> or HOLD within 2 min, default CLEAR at the third minute.
My gate on the sha: diff read, `cargo run -p xtask -- check` from the lane worktree (pool-claim from it first), treqs, clippy --workspace --all-targets -D warnings, and CI's unit SET `nextest --workspace -E 'kind(lib) + kind(bin)'` (xtask is kind(bin), so the 4 cells run there). Then #292 next in your queue.