declaring-invariants

# declaring-invariants Two scripts over one idea: **a test that enumerates a domain must loop the registry rather than a copy of it.** Someone also has to say which domains matter in the first place. ```bash python3 scripts/totality_lint.py <repo> # tests that copy a domain python3 scripts/claims.py <repo> # what the repo declares, and what backs it ``` Python only, stdlib `ast` only: no install, no config file, no network. ## The failure it catches A test that loops a hand-written list passes its runner and proves nothing about completeness. When the same members also exist as a registry in the source, the list is a copy, and the copy drifts the moment someone adds a member to the registry and not to the test. Nothing goes red. Measured on `oaustegard/remex`, 2026-08-24: adding a fourth member to `ROTATION_CODES` with no construction behind it left the **entire 267-test suite green**. Four separate tests looked total; each parametrized `["haar", "rht"]` against a three-member registry. Only a test that looped the registry itself caught it. Adapted from the meta-oracle in [`daniloc/coherence`](https://github.com/daniloc/coherence) (`src/oracle-domain.ts`), which classifies an oracle's iteration root as LIVE or LITERAL by parsing the oracle's own AST. That harness needs spec files, a claim grammar, a ledger and Node; the check does not. ## `totality_lint.py` — tests that copy a domain | finding | meaning | |---|---| | `sampled-domain` | a `parametrize` or `...