[Chemaclass]

🤔 Background

The nightly coverage run has failed every night since 2026-08-02.

ls: cannot access 'tests/unit/*_test.sh': No such file or directory
##[error]Process completed with exit code 1

Its file list came from ls tests/unit/*_test.sh, and #960 moved every unit test into a per-module subdirectory. The glob matched nothing, ls exited non-zero, the step died under bash -e. Nobody noticed because this workflow is deliberately non-blocking — it never runs on push or pull_request, so a red nightly isn't a status check on anything.

🐛 Two stale paths — the second is the one that mattered

The exclusion grep -v '/coverage_' was written for flat filenames; the coverage engine's meta-tests are now tests/unit/coverage/. Fixing only the glob would have restored the run while silently pulling those meta-tests back in — and the workflow's own comment explains why they're excluded: measuring them under --coverage double-instruments src/coverage/ and corrupts their assertions.

Both are now one find with explicit exclusions for coverage/ and fixtures/. That also picks up two files a two-level glob would still have missed.

65 files selected — 76 total, minus 9 meta-tests, minus 2 fixtures. Smoke-tested against a real --coverage run that writes lcov.

🧪 The contract test is the point

It existed already and didn't catch this, because it only looked at tests.yml. #972 fixed the instance; I didn't go looking for the class. It now checks every workflow, for any shape: a tests/ path or glob a workflow names must resolve to something. Mutation-tested against both files.

Two bugs in that test, worth recording:

• It documented stripping comments and didn't, so the broken globs the workflows describe in prose read as live references
• An unanchored tests/ matched the tail of sample_tests/pass_test.sh — a file test-action.yml writes at runtime — and reported it missing

✅ Verification

make sa · make lint · bash build.sh bin -v → ✅ Build verified ✅ · 1658 sequential / 1617 parallel-simple-strict.