feat: admit signed dynamic world surface module

product-source/hololake-native-desktop/scripts/module-donor-admission.test.mjs

@@ -6,7 +6,7 @@ const catalog = JSON.parse(readFileSync(new URL('../contracts/module-donor-admis
 const numbered = JSON.parse(readFileSync(new URL('../contracts/numbered-ipc-registry.json', import.meta.url), 'utf8'))
 
 test('chaotic donors are read-only candidates and never a bulk merge source', () => {
-  assert.match(catalog.state, /^[A-Z]+_CANDIDATES_ADMITTED_REMAINING_DONORS_QUARANTINED$/)
+  assert.equal(catalog.state, 'SEVEN_CANDIDATES_ADMITTED_DONOR_SOURCES_REMAIN_READ_ONLY')
   assert.equal(catalog.root_rule.repair_old_application_in_place, false)
   assert.equal(catalog.root_rule.bulk_merge_or_wholesale_copy_allowed, false)
   assert.equal(catalog.root_rule.one_candidate_per_admission_cycle, true)
@@ -19,7 +19,7 @@ test('candidate coordinates are unique but are not permanent runtime module numb
   const pending = catalog.candidates.filter((candidate) => candidate.state.startsWith('QUARANTINED'))
   assert.equal(new Set(coordinates).size, coordinates.length)
   assert.ok(admitted.length > 0)
-  assert.ok(pending.length > 0)
+  assert.equal(pending.length, 0)
   assert.deepEqual(catalog.candidates.slice(0, admitted.length), admitted)
   assert.deepEqual(catalog.candidates.slice(admitted.length), pending)
   assert.equal(catalog.root_rule.candidate_number_is_runtime_module_number, false)