Fix reconciliation expectations and strict Clippy checks

docs/MACOS-RUNTIME.md

@@ -97,10 +97,8 @@ measurements, not desktop UI timings or production-scale latency guarantees.
 Commit validation: all57native desktop tests pass, including real filesystem
 create/update/rename/delete events using canonical Mac paths;66frontend tests,
 format/build checks,3speech builder tests and installed Metal recognition pass.
-The broader workspace run exposes an existing stale permission-denial rollback
-expectation in `targeted_reconciliation` (current engine skips unreadable inputs).
-Strict current-toolchain Clippy also flags unchanged permission-literal and
-ANN-cache boolean expressions. These failures are not qualified as passing gates.
+The initial broader checks exposed a stale permission-denial rollback test and
+current-toolchain Clippy warnings; the correction below supersedes those failures.
 
 ### Native document extraction policy
 
@@ -119,3 +117,20 @@ Resident-memory inspection also retries the short exit-to-waitable transition
 before treating a live child as uninspectable. Ten fresh installed CLI/helper
 DOCX runs returned the expected passage; the native roundtrip test repeats that
 short-lived worker path ten times to cover the race.
+
+## Workspace validation correction, 2026-10-23
+
+The reconciliation fixture now verifies that permission-denied sources retain
+prior records while readable changes commit. Other I/O errors still require
+rollback; the separate cancellation-after-write test also checks atomic rollback.
+The fixture explicitly verifies its read restriction instead of assuming an
+identical sharing-error category on every OS. Production reconciliation behavior
+is unchanged. Current Clippy syntax corrections cover octal permissions,
+ANN-cache predicates and the Mac resource-limit single-element loop.
+
+Fresh native Mac checks: `cargo test --workspace --locked` passes192tests with
+34existing opt-in tests ignored and none filtered; strict
+`cargo clippy --workspace --all-targets --locked -- -D warnings` passes.
+All57desktop tests and66frontend tests pass; Rust/desktop formatting,
+frontend formatting/build and3speech-builder tests pass. These checks do not
+claim execution of the ignored real-model/platform suites.