row 155 F25 REHOME (kernel): auth at the served door gate, egress, config, telemetry and plane-driver rows, 35 legacy tests

[MattJackson]

F25 REHOME (status row 155, kernel lane): the legacy crates/busbar-llm tests whose coverage-map home is a busbar-kernel test file outside the walk/probe/breaker group, ported at equal strength (literal statuses, cents, labels, hosts; the whole legacy matrix). Test-only: no product code changes.

How the auth rows reach a 200 without the LLM plane: the served data plane installs each plane path as a door route behind the kernel's auth gate (RouteAuth::Key); the rig in auth/tests/tests.rs mounts exactly that through build_split_routers_serving with a door that answers 200 and echoes the governance context, resolved key and principal the gate attached. A 200 is the gate's admission, a 401 its refusal, and the echo pins who the caller was made into.

Rows (coverage-map-v2.tsv line numbers; legacy paths under crates/busbar-llm/src/engine/ unless noted), 35 rows:

• auth (auth/tests/tests.rs, same names): 49, 50, 51, 52, 53, 54, 55, 56, 58, 59, 60, 61 (tests/auth_dispatch_tests.rs), 65, 71 (tests/auth_native_envelope_tests.rs; 65 also adds a live-stack sweep over all 7 legacy paths)
• tests/members/egress/trust_unit_tests.rs: 425 (tests/ingress_integration_tests.rs::test_governance_guard_passes_when_allowed), 696 (unit/tests/chain.rs::the_verify_refusal_carries_the_wire_triple_the_guards_named)
• ingress/tests/terminal_tests.rs: 702 (unit/tests/chain.rs::the_refused_terminal_labels_a_configured_pool_with_its_name)
• tests/tests.rs: 634 (tests/wire_tests.rs::unknown_ingress_error_envelope_is_core_s_own_and_names_no_dialect)
• config/tests/tests.rs: 36 (engine_tests/stream_deadline_tests.rs::the_total_deadline_the_stream_rides_defaults_to_five_minutes), 518 (tests/on_exhausted_tests.rs::test_config_parsing_queue_unknown_inner_key_fails)
• ir/tests/lane_caps_tests.rs (provider_entry module, over the kernel's served merge_provider_fallback): 485, 486, 487 (tests/lane_caps_config_tests.rs, bodies verbatim)
• tests/telemetry_tests.rs: 379 (tests/ingress_integration_tests.rs::test_finish_outcome_mapping_503_is_exhausted, on the served model_request_finished)
• plane_driver/tests/far_end_tests.rs: 83 (tests/client_header_forwarding_tests.rs::hop_by_hop_host_and_length_are_re_derived), 124 (tests/forward_once_pool_cell_tests.rs::test_metric_pool_label_resolves_model_for_default_cell; the served label is the walk's, so the home moved here from telemetry_tests.rs)
• plane_driver/tests/gated_tests.rs: 218 (tests/gate_policy_503_literals_tests.rs::the_refusal_literal_is_the_shared_constant)
• plane_driver/tests/route_tests.rs: 628 (tests/usage_tap_tests.rs::test_stable_hash_is_deterministic, on sticky_hash)
• egress/engine/tests/dial_judge_tests.rs: 104; egress/tests/pinned_pool_tests.rs: 106 (tests/egress_differential_tests.rs, on the engine's pinned posture)
• busbar-kernel-egress/src/trust/tests/net_tests.rs: 75, dialled half (tests/auth_style_tests.rs::test_host_from_base_backslash_authority_matches_wire_host); the signed half and its fix are row 155 F25 REHOME (kernel): route-policy gate matrix and the signed host under a backslash base URL, 5 legacy tests #896

Not here (BLOCKED in the kernel, behaviour lives in another lane's crate): 57, 62, 139 (403 pool check = crates/busbar/src/root/door_steps.rs verify step), 102, 103 (Bedrock __type envelope and x-amzn-* headers = the real Bedrock dialect).

Files also held by open PRs, additions placed clear of their hunks: tests/tests.rs (#805), config/tests/tests.rs (#571 draft), far_end_tests.rs (#840/#778/#561), route_tests.rs (#840), net_tests.rs (#876, #800).

[MattJackson]

Rule 20 note from #1030 (row 155): one disjoint test added mid-file in crates/busbar-kernel/src/plane_driver/tests/route_tests.rs. A test merge is clean.