@@ -1,5 +1,5 @@
 ### Refactor routine (`refactor`, hourly, highest leverage first)
-_Last updated 2026-10-06T14:58Z · main @ 9c43dfc_
+_Last updated 2026-10-06T16:00Z · main @ 9c43dfc_
 
 **In flight:**
 - [#876](https://github.com/SocketDev/socket-patch/pull/876): registry clients (`build_registry_client`, Maven `fetch_registry_bytes`) built through one `registry_client_builder` under `ApiTimeouts`; `registry_fetch::download` onto `read_capped`. Also ports the base-red digest-ratchet fix for #646's JVM files. Issue #872 (C49). `ready`.
@@ -23,7 +23,7 @@ _Last updated 2026-10-06T14:58Z · main @ 9c43dfc_
 | 4 | #856 (E62, child 1 of #855): VEX npm aliases through the core resolver | 1 | 1 | ≈1.8 | M | ≈5 | skipped: `vex_consumed.rs` changed by #690 |
 | 5 | #883 (E39): `canonicalize_pypi_name` + `pep508_name` into one PyPI name module | 0 | 1 | ≈3 | L | ≈5 | skipped: 13 files changed by open PRs |
 
-Re-ranked 2026-10-06T14:58Z: main, discussion steering and the refactor/arch-audit issue list unchanged since 13:58Z (new #944, #945 are uv/Poetry bughunt bugs, not refactors). #936 (E66, ≈4) and #937 (E23; #936 is its first slice) rank below the top five. #893 (≈4, `cleanup_blobs.rs`) is still the best eligible; then #871 after #889, then #705. 3 of 3 slots used (#876, #886, #889 `ready`, no review questions). Decisions: #648, #704, #792, #808, #615; C07.
+Re-ranked 2026-10-06T16:00Z: main, discussion steering and the open refactor PRs unchanged since 14:58Z. New #948 (tracking, C33) and its child #949 (contract arg/env tables pinned to `Cli::command()`, B 0, U 1, D 0, L, ≈2) rank below the top five; new #947 is a Pipenv bughunt bug. #936 (E66, ≈4) and #937 (E23) also rank below. #893 (≈4, `cleanup_blobs.rs`) is still the best eligible; then #871 after #889, then #705. 3 of 3 slots used (#876, #886, #889 `ready`, no review questions). Decisions: #648, #704, #792, #808, #615; C07.
 
 **Notes:**
 - The sandbox runs as root, so 4 core lib tests fail on main and on branches alike: `copy_tree::relax_loop_must_not_traverse_symlinked_root`, `vlt_heal::an_unremovable_hidden_lock_keeps_every_store_entry`, `pypi_poetry::wire_write_failure_maps_error_and_leaves_lock_untouched`, `pypi_requirements::wire_failure_rolls_back_already_written_files`.