Simulation gate: keyed actors, the bee dispatcher and the adaptive reviewer pool, run nightly on queen #1868

Part of #1729. Plan: #1763, section A, row 4.

The published actors post says: "The simulation gate does not yet simulate keyed actors or the adaptive reviewer pool, and nothing runs it nightly." This lane closes that gap.

What

1. Extend the simulation gate (tests/sim, bun run test:sim, the "Actor simulation" job) with the spec spec(queen): the simulation gate simulates keyed actors, the bee dispatcher and the adaptive reviewer pool (simulation.t27) t27#8987, vendored byte-identical:

   • (a) keyed actors and the bee dispatcher:
     • two dispatchers of one deployment over one lease table;
     • the claim holder, the supervised admission and the call-cycle check;
     • redeploys, admission and issue-actor crashes, stalled policy answers;
     • silent runner deaths (lapsed leases) and hangs;
     • a host whose timers fire early.
   • (b) the adaptive reviewer pool, with and without the lane queue.

   Every case is a seeded run of fixed length, run twice. The invariants:

   • no duplicate claim;
   • at most N running per lane bound;
   • every issue done or given up;
   • no lane leak;
   • the call cycle refused;
   • every stop within its bound.

2. Show the teeth. Re-introduce, one at a time, the defects feat(queen): keyed actors hardened - the claim holder is the actor in its process boot, a supervised admission on a lane board, a call cycle caught at any slot - keyed_guard.t27 (Closes #1745) #1749 fixed (pid-only holder, unsupervised admission, slot-limited cycle check) and the fix(queen): a grace timer that comes back early asks the card again, so a deaf turn still loses its group (Closes #1766) #1809/fix(queen): an orderly stop whose timer fires early still kills at its timeout; the turn-stop bench waits for its kills, not a fixed 11 s #1811 early-timer defect. The gate must fail on each.

3. Nightly on queen. On failure the job fails and comments on, or opens, an issue labelled sim-nightly with the seed and the first broken invariant.

Acceptance

• The gate is green on the PR, with its runtime reported.
• The re-created defects fail it.
• One workflow_dispatch run is green.
• The nightly path is wired.

🤖 Generated with Claude Code