refactor: re-rank queue, #717 enters first

Still at capacity (#574, #602, #607 ready). No new work.

Assisted-by: Claude Code:claude-opus-5-5

Author: claude

register/90-refactor.md

@@ -1,5 +1,5 @@
 ### Refactor routine (`refactor`, hourly, highest leverage first)
-_Last updated 2026-10-03T17:56Z · main @ 045d7ec_
+_Last updated 2026-10-03T19:05Z · main @ 045d7ec_
 
 **In flight:**
 - [#574](https://github.com/SocketDev/socket-patch/pull/574): one vlt `registry_base` following vlt's DepID hydration. Issues #562 (E02, E03). State: ready (Ready for review). It awaits human approval.
@@ -14,13 +14,13 @@ _Last updated 2026-10-03T17:56Z · main @ 045d7ec_
 
 | # | Candidate | B | U | D | R | Score | Note |
 |---|---|:-:|:-:|:-:|:-:|:-:|---|
-| 1 | #706 (C17): one `utils::digest` compute API (`sha256_hex`, `sha1_hex`, `sha512_sri`); delete the jvm, ledger_snapshots, group_commit, maven_repo, npm_pack and bun_lock copies | 0 | 1 | 5 | L | 7 | skipped: `jvm/mod.rs`, `maven_repo.rs`, `group_commit.rs` changed by open PRs #690 and #646, `bun_lock.rs` by #689; unblocks #707 being fixed in one place |
-| 2 | #693 (E15): one `toml_edit` `Cargo.toml` package reader for crawler, VEX, `cargo_tag` and `path_crate_version`; delete the crawler's line scanner | 1 | 0 | 3 | L | 6 | skipped: `cargo_crawler.rs` changed by open PR #602, `vendor/cargo.rs` by #598 |
-| 3 | #707 (C41): one case-insensitive hash comparison for agent-mode apply/rollback and vendored verify | 1 | 0 | 2 | L | 5 | skipped: `patch/apply.rs`/`patch/rollback.rs` changed by open PRs #634, #646 and #690; simpler after #706 |
-| 4 | #663 (E07): one addressed package-lock entry walk for inventory, vendored, hosted and restore | 0 | 1 | 4.5 | M | 4.5 | skipped: `npm_lock.rs`/`lock_inventory/npm.rs` changed by open PRs #589, #660 and #689, `redirect/mod.rs`/`upstream/npm.rs` by #657 and #597 |
-| 5 | #568 (C03): takeover honors `kept_artifact` via `vendored_backend`'s revert step | 1 | 0 | 1 | L | 4 | skipped: `scan/hosted.rs` changed by open PRs #598, #646, #657, #684 and #690 |
+| 1 | #717 (E10 slice of #715): hosted Maven rewrite and upstream restore locate edits through `formats::maven` element queries; delete `MAVEN_DEPENDENCY_BLOCK_RE`, `maven_tag_inner_range` and restore's regexes | 3 | 1 | 4 | M | 13 | skipped: `redirect/mod.rs` changed by open PRs #597, #637, #646, #657, #669, #690, #708 and #710; fixes #259, #342 (hosted rows), #683 (exclusions half) |
+| 2 | #706 (C17): one `utils::digest` compute API (`sha256_hex`, `sha1_hex`, `sha512_sri`); delete the jvm, ledger_snapshots, group_commit, maven_repo, npm_pack and bun_lock copies | 0 | 1 | 5 | L | 7 | skipped: `jvm/mod.rs`, `maven_repo.rs`, `group_commit.rs` changed by open PRs #690 and #646, `bun_lock.rs` by #689; unblocks #707 being fixed in one place |
+| 3 | #693 (E15): one `toml_edit` `Cargo.toml` package reader for crawler, VEX, `cargo_tag` and `path_crate_version`; delete the crawler's line scanner | 1 | 0 | 3 | L | 6 | skipped: `cargo_crawler.rs` changed by open PR #602, `vendor/cargo.rs` by #598 |
+| 4 | #707 (C41): one case-insensitive hash comparison for agent-mode apply/rollback and vendored verify | 1 | 0 | 2 | L | 5 | skipped: `patch/apply.rs`/`patch/rollback.rs` changed by open PRs #634, #646 and #690; simpler after #706 |
+| 5 | #663 (E07): one addressed package-lock entry walk for inventory, vendored, hosted and restore | 0 | 1 | 4.5 | M | 4.5 | skipped: `npm_lock.rs`/`lock_inventory/npm.rs` changed by open PRs #589, #660 and #689, `redirect/mod.rs`/`upstream/npm.rs` by #657 and #597 |
 
-At capacity (3 open, all ready, all reviewed "ready to merge") on 2026-10-03T01:05Z; re-ranked with the new issues #628–#631, no new work started (blockers #597, #598, #602, #607, #610 still open). Next: #631 (E52, go.sum oracle delete + move to `formats/golang`), score 3.5 (D3.5 R L), skipped while #597 changes `redirect/mod.rs`. Dropped C07 from the queue: needs an owner decision on the fallback route. Taken: #571 (C37) in #607, score 2 (B1 D1 R M). Re-ranked 2026-10-03T04:00Z with #647 (C09/C39) and #649 (C08, hygiene, score ≈1); still at capacity, no new work. #614 (C38, score 4) drops to sixth. #648 is a decision. Re-ranked hourly 2026-10-03T05:58Z–17:56Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering. Entered: #662 (E53), #663 (E07), #693 (E15), #706 (C17, first), #707 (C41, third). Left: #628/#629 (fixer PR #657), #694/#695 (fixer PR #703). Outside the top five: #593 and #614 (score 4), #630, #662, #705 (C18, score 2), #675–#678 (≤2.5). Decisions: #648, #704. Bughunt #685 may share #593's XML-walker root cause. Every queue blocker (#589, #597, #598, #602, #634, #646, #657, #660, #689, #690) still open.
+At capacity (3 open, all ready, all reviewed "ready to merge") on 2026-10-03T01:05Z; re-ranked with the new issues #628–#631, no new work started (blockers #597, #598, #602, #607, #610 still open). Next: #631 (E52, go.sum oracle delete + move to `formats/golang`), score 3.5 (D3.5 R L), skipped while #597 changes `redirect/mod.rs`. Dropped C07 from the queue: needs an owner decision on the fallback route. Taken: #571 (C37) in #607, score 2 (B1 D1 R M). Re-ranked 2026-10-03T04:00Z with #647 (C09/C39) and #649 (C08, hygiene, score ≈1); still at capacity, no new work. #614 (C38, score 4) drops to sixth. #648 is a decision. Re-ranked hourly 2026-10-03T05:58Z–17:56Z: still at capacity (#574, #602, #607 ready, awaiting human merge), nothing merged, no steering. Entered: #662 (E53), #663 (E07), #693 (E15), #706 (C17, first), #707 (C41, third). Left: #628/#629 (fixer PR #657), #694/#695 (fixer PR #703). Outside the top five: #593 and #614 (score 4), #630, #662, #705 (C18, score 2), #675–#678 (≤2.5). Decisions: #648, #704. Bughunt #685 may share #593's XML-walker root cause. Every queue blocker (#589, #597, #598, #602, #634, #646, #657, #660, #689, #690) still open. 2026-10-03T19:05Z: still at capacity; entered #717 (E10 Maven slice, first); #568 (C03) drops to sixth. #716 (E55, score 4) skipped: `maven_repo.rs`/`jvm/` changed by #646, #690.
 
 **Notes:**
 - The sandbox runs as root, so 4 core lib tests fail on main and on branches alike: `copy_tree::relax_loop_must_not_traverse_symlinked_root`, `vlt_heal::an_unremovable_hidden_lock_keeps_every_store_entry`, `pypi_poetry::wire_write_failure_maps_error_and_leaves_lock_untouched`, `pypi_requirements::wire_failure_rolls_back_already_written_files`.