seals: the first frontier --reseal run on master (41 specs resealed) #8551

The first run of t27c frontier --reseal (#8392) on master, 2026-10-10 19:30 +07. It is the end-to-end test of the command and the seals it produced.

• 194 stale specs (spec 86, closure 105, toolchain 2, verdict 1): 41 resealed, 153 kept the old seal, 878 s.
• 67 seal files change, counting twins. Each is seal_schema 2, tests.failed 0, and has tests or invariants. No collisions, no deletions.
• frontier: 1144 -> 1171 of 1777.

After rebasing onto master, tri seals drift --fix refreshes seals that drifted since, and the PR records what it did.

Acceptance criteria

• Every changed seal is v2 with failed == 0 and at least one check; no changed file names a different spec_path than on master.
• t27c frontier on the branch reuses more specs than master.
• tri seals drift reports no drift on the specs this PR reseals.

Boundary

.trinity/seals/

User Scenarios

• Given the t27c frontier --reseal command is run on master branch with 194 stale specs, when the command completes, then 41 specs are resealed, 153 keep their old seal, and 67 seal files change with schema version 2, zero failed tests, and at least one check each.
• Given the branch is rebased onto master and tri seals drift --fix is run, when it completes, then seals that drifted since the reseal run are refreshed and the PR records the changes.
• Given t27c frontier is run on the resealed branch, when it completes, then the frontier reuses more specs than master (1171 vs 1144 of 1777).

Requirements

FR-001: Every changed seal file MUST be schema version 2 with tests.failed == 0 and MUST contain at least one test or invariant.
FR-002: No changed seal file MUST name a different spec_path than the corresponding seal on master.
FR-003: The t27c frontier command on the resealed branch MUST reuse more specs than on master (frontier count increases from 1144 to at least 1171 of 1777).
FR-004: The tri seals drift command MUST report no drift on the 41 specs that were resealed in this PR.
FR-005: The reseal operation MUST produce exactly 67 changed seal files (counting twins) with no collisions and no deletions.