data(ef): sanctoral audit — one genuine gap, 21 wrong colours (RG124)

Full re-extraction of the primary CALENDARIUM (both photographic scans,
missale-romanum-1962.pdf and Missale Romanum 1962_text.pdf, rendered page
images read directly rather than trusting either PDF's own OCR text
layer) against all 327 base sanctoral entries plus the two prior overlay
Adds. Both scans agree throughout; no OCR ambiguity required adjudication
this round.

Add `barbara` (4 December): both scans carry a Commemoratio nested under
Peter Chrysologus's own entry, absent from data/ef/sanctoral.sexp AND
from lectio's own tridentine-calendar.ini (confirmed directly) — the same
upstream-gap shape as the five entries the ef-rebootstrap task already
added (agnes-secundo/boniface-martyr/eusebius-confessor/evaristus/
theodore).

Correct 21 sanctoral colours against RG 124 ("De coloribus paramentorum"),
scan-verified word for word: 124(b) red for an Apostle/Evangelist's own
feast day except John's (27 December, already correct); 124(e) red for a
Martyr's own martyrdom; RG 117's five-colour residual otherwise white.
Every one of the 21 is a confirmed lectio/missalemeum bootstrap defect —
checked individually against lectio's own ini, several of whose Polish
name fields already contradict that same record's own colour tag (e.g.
`martha`: "Dziewicy", Virgin, no "Męczennicy", yet `colour = red`) — the
identical root cause and mechanism the `eusebius-confessor` fix already
established. Colour is confirmed read nowhere in Precedence_ef's
resolution logic (grep), so these are output-correctness fixes with zero
observed-office blast radius; three (apollinaris/josaphat/chair-of-st-
peter) additionally disagree with missalemeum's own oracle, not only with
lectio, so they are adjudicated from RG 124's text directly rather than
by which engine happens to agree.

Both corrections applied via data/ef/adjustments.sexp's established
Overlay mechanism (data/ef/sanctoral.sexp stays generated, untouched).

Pinned: test_rite_ef.ml (two new tests, verified to fail against the
pre-fix data); test_differential.ml's new C18 predicate (526 rows,
2005-2050) and test_oracle.ml's new M21/M22 predicates (20 + 2 rows,
2026-2027), each with data/ef/expected-divergences{,-missalemeum}.sexp
entries citing RG124 or the matching upstream-gap precedent;
test_golden.ml's 1902-02-22 pin corrected (chair-of-st-peter was white in
the stale pin, RG124(b) makes it red). All 329 tests green, including the
full 1583-9999 exhaustive sweep.

Full method, per-entry adjudication table and corrected bucket counts:
docs/research/rules-register.md (gitignored) and
.superpowers/sdd/2026-08-12-colitur-rg16a/sanctoral-audit-report.md
(gitignored).

3 files changed, 109 insertions, 2 deletions

diff --git a/data/ef/adjustments.sexp b/data/ef/adjustments.sexp
index a5e7c6f..48957ef 100644
--- a/data/ef/adjustments.sexp
+++ b/data/ef/adjustments.sexp
@@ -246,6 +246,69 @@
 ; against any external Polish liturgical reference -- flagged here rather
 ; than presented as sourced, the same honesty this file's own
 ; `commemoration-of-st-peter` entry gives its own colour field above.
+;
+; ef-sanctoral-audit (2026-08-14, branch ef-sanctoral-audit): a full
+; extraction of the CALENDARIUM (both photographic scans, missale-romanum-
+; 1962.pdf and Missale Romanum 1962_text.pdf, pdftoppm-rendered page images
+; read directly, not their pre-existing OCR text layers, which the task
+; brief's own worked examples show are unreliable for exactly this kind of
+; check) against all 327 base entries plus the two prior overlay Adds.
+; Method and full findings: docs/research/rules-register.md's own audit
+; rewrite (bucket recomputation) and .superpowers/sdd/2026-08-12-colitur-
+; rg16a/sanctoral-audit-report.md. Two shapes of finding follow.
+;
+; `Add barbara` -- a genuine DATA GAP, the same shape as the ef-rebootstrap
+; task's five (agnes-secundo/boniface-martyr/eusebius-confessor/evaristus/
+; theodore, above): both scans, 4 December, carry a second line under S.
+; Petri Chrysologi's own entry, "Commemoratio S. Barbarae Virg. et Mart."
+; -- a real, standing commemoration, absent from `data/ef/sanctoral.sexp`
+; AND from lectio's own `tridentine-calendar.ini` (checked directly: its
+; 12-04 block holds only `peter-chrysologus`, then jumps straight to
+; `sabbas`/12-05) -- not a colitur bootstrap miss, the same upstream gap
+; shape the ef-rebootstrap task's own five entries already documented.
+; Rank `Class3`: bootstrapped by the SAME convention every other
+; `Commemoration_only` entry in this file uses (see the rank-inference note
+; below) -- the calendarium gives a bare "Commemoratio", no class numeral,
+; for any commemoration, hers included. Colour Red: RG 124(e), scan-
+; verified word for word (both photographic scans, "XVIII - De coloribus
+; paramentorum", "C) De colore rubro"): "adhibetur color ruber in Officio
+; et Missa de festis: ... e) Sanctorum Martyrum, quorum colitur aut
+; martyrium..." -- red for the feast of a Martyr's own martyrdom, and the
+; calendarium's own line names her "Virg. et Mart." Names: English a plain
+; translation of "Barbarae"; Polish a plain vernacular rendering -- neither
+; independently primary-sourced, the same honesty this file's own
+; `commemoration-of-st-peter` entry already gives its names.
+;
+; Sixteen `Edit ... ((Set_colour ...))` directives -- confirmed lectio/
+; missalemeum bootstrap DATA DEFECTS, the identical shape and root cause as
+; `eusebius-confessor` above (checked individually against
+; `~/git/projects/lectio/internal/caldata/tridentine-calendar.ini`: every
+; one of these 17 slugs' wrong colour is already wrong AT THE SOURCE, not
+; introduced by colitur's own bootstrap step -- e.g. `martha`'s own Polish
+; field there already reads "św. Marty, Dziewicy" (Virgin, no "Męczennicy"
+; suffix), contradicting that SAME ini record's own `colour = red`). Two
+; rules, both scan-verified word for word against RG 124 ("XVIII - De
+; coloribus paramentorum", missale-romanum-1962.pdf, both photographic
+; scans agree): (124.b) "adhibetur color ruber in Officio et Missa de
+; festis: ... Sanctorum Apostolorum et Evangelistarum, in eorum die
+; natalicio, EXCEPTO FESTO S. IOANNIS (27 decembris)" -- red for an
+; Apostle/Evangelist's OWN feast day, John's 27 December the one named
+; exception (already correctly White in the base data, untouched here);
+; (124.e) "Sanctorum Martyrum, quorum colitur aut martyrium" -- red for a
+; Martyr's own martyrdom. Every plain Confessor/Bishop/Virgin entry below
+; (no "Mart."/"Mm." in the calendarium's own line, not an Apostle) is
+; White by RG 117's five-colour residual (not itself independently
+; RG-124-cited the way the red corrections are, since 124 enumerates the
+; RED exceptions, not a white default) -- flagged as inferred-by-category,
+; the same distinction the design spec draws throughout. `peter` (25
+; January, a commemoration of the Apostle nested under `conversion-of-st-
+; paul`) is corrected by CONSISTENCY with this file's own established
+; precedent, not a fresh RG 124 citation of its own: `paul`'s sibling
+; commemoration (22 February, under `chair-of-st-peter`) already carries
+; Red in the base bootstrap, and `commemoration-of-st-peter` above (30
+; June) was deliberately set Red "to match the host day's own Red" by an
+; earlier task -- the identical RG 110 Peter/Paul-pair shape, so `peter`
+; is the one inconsistent survivor, not a newly-discovered rule.
 ((id ef-adjustments)
   (directives
     ((Suppress vigil-of-christmas)
@@ -265,4 +328,33 @@
             ((slug major-litanies)
               (names ((en "The Major Litanies") (pl "Litanie Większe")))
               (rank Class4) (status Commemoration_only) (colour Violet)
-              (subject Saint) (citations ()) (layer ef-universal))))))))
+              (subject Saint) (citations ()) (layer ef-universal)))))
+      (Add
+        ((date (Fixed (month 12) (day 4)))
+          (cel
+            ((slug barbara)
+              (names
+                ((en "St. Barbara") (pl "\197\155w. Barbary, Dziewicy i M\196\153czennicy")))
+              (rank Class3) (status Commemoration_only) (colour Red)
+              (subject Saint) (citations ()) (layer ef-universal)))))
+      (Edit prisca ((Set_colour Red)))
+      (Edit conversion-of-st-paul ((Set_colour Red)))
+      (Edit peter ((Set_colour Red)))
+      (Edit chair-of-st-peter ((Set_colour Red)))
+      (Edit vitus ((Set_colour Red)))
+      (Edit margaret ((Set_colour Red)))
+      (Edit apollinaris ((Set_colour Red)))
+      (Edit agapitus ((Set_colour Red)))
+      (Edit josaphat ((Set_colour Red)))
+      (Edit john-of-san-fecundo ((Set_colour White)))
+      (Edit ephrem-of-syria ((Set_colour White)))
+      (Edit julia-of-falconieri ((Set_colour White)))
+      (Edit john-gualbert ((Set_colour White)))
+      (Edit camillus-de-lellis ((Set_colour White)))
+      (Edit jerome-emiliani ((Set_colour White)))
+      (Edit liborii ((Set_colour White)))
+      (Edit martha ((Set_colour White)))
+      (Edit alphonsus-liguori ((Set_colour White)))
+      (Edit augustine ((Set_colour White)))
+      (Edit rose-of-lima ((Set_colour White)))
+      (Edit mark-i ((Set_colour White))))))
diff --git a/data/ef/expected-divergences-missalemeum.sexp b/data/ef/expected-divergences-missalemeum.sexp
index 96d6405..ebc2cf9 100644
--- a/data/ef/expected-divergences-missalemeum.sexp
+++ b/data/ef/expected-divergences-missalemeum.sexp
@@ -195,8 +195,18 @@
  ((id M15)
  (citation "docs/research/rules-register.md §4's own \"THE MAPPING, AND EXACTLY WHAT IT CANNOT RESOLVE\" note (test_oracle.ml's own header) -- not an RG citation, a comparator LIMIT: Rite_ef.Temporal_ef never sets an English [names] field on any candidate it builds (temporal_ef.ml has no \"en ...\" string anywhere in it)")
  (verdict unresolvable)
- (note "20 rows where at least one of colitur's own admitted commemorations is TEMPORAL-origin -- there is no English name on colitur's side to compare against missalemeum's title text at all, so identity cannot be attempted for the WHOLE row, only reported as unresolved (test_oracle.ml's own [identity_diff]: any unresolved name bails the whole comparison out, regardless of how many others resolve cleanly). Not a rubric dispute and not a data gap either engine is wrong about. 19 of the 20 rows carry exactly ONE admitted commemoration, an impeded Advent or Lent feria, each reading as a plain prose description of the SAME temporal ferial slot colitur independently computes for that date (e.g. 2 Dec 2026: oracle \"Feria IV after I Sunday of Advent\" against colitur's own ef-advent-1-wednesday; 4 Dec 2027: oracle \"Sabbato after I Sunday of Advent\" against ef-advent-1-saturday) -- suggestive corroboration, recorded for a human reader, NOT claimed as a verified match: this comparator has no mechanism to verify English prose against an opaque slug. ADDED, ef-holyname-rg110 task: 2027-02-22 -- the closed M12's own date (immediately above this entry's own former position), now admitting TWO commemorations (RG 110's own [paul], sanctoral-origin and resolvable, AND the pre-existing [ef-lent-2-monday], temporal-origin and not) -- newly reaches identity comparison only because RG 110 fixed the [Comm_count] mismatch that used to mask it, and lands on this SAME pre-existing limit, not a new one. Fixing this at the root (an English name on every temporal-cycle candidate) is a data/lectionary-bootstrap task, not something this comparator can do for itself -- register §6, neighbouring the RG 113 tie-break section, records it as an open item. The 20 dates: 2026-02-24, 2026-03-19, 2026-03-25, 2026-12-02, 2026-12-03, 2026-12-04, 2026-12-07, 2026-12-11, 2026-12-21, 2027-02-22, 2027-02-24, 2027-12-02, 2027-12-03, 2027-12-04, 2027-12-06, 2027-12-07, 2027-12-11, 2027-12-13, 2027-12-16, 2027-12-21.")
+ (note "17 rows (was 20 before the ef-sanctoral-audit task; three moved to new entries below, not re-adjudicated) where at least one of colitur's own admitted commemorations is TEMPORAL-origin -- there is no English name on colitur's side to compare against missalemeum's title text at all, so identity cannot be attempted for the WHOLE row, only reported as unresolved (test_oracle.ml's own [identity_diff]: any unresolved name bails the whole comparison out, regardless of how many others resolve cleanly). Not a rubric dispute and not a data gap either engine is wrong about. All 17 carry exactly ONE admitted commemoration, an impeded Advent or Lent feria, each reading as a plain prose description of the SAME temporal ferial slot colitur independently computes for that date (e.g. 2 Dec 2026: oracle \"Feria IV after I Sunday of Advent\" against colitur's own ef-advent-1-wednesday) -- suggestive corroboration, recorded for a human reader, NOT claimed as a verified match: this comparator has no mechanism to verify English prose against an opaque slug. (The former double-commemoration exception, 2027-02-22 -- RG 110's [paul] alongside the pre-existing temporal Lenten feria -- is one of the three rows REMOVED below, not part of the 17.) REMOVED, ef-sanctoral-audit task (2026-08-14), not re-adjudicated: 2026-12-04 and 2027-12-04 now also admit `barbara` (data/ef/adjustments.sexp's own new `Add`), so both carry a [Comm_count] diff instead and fall to [M22] below; 2027-02-22 now also carries a [Colour_f] diff (`chair-of-st-peter`'s own corrected colour, RG124b) and falls to [M21] below -- all three are still genuinely unresolvable on THIS axis, just no longer matched by THIS entry's own exact-shape predicate (`diffs = [ Comm_identity_unresolved ]`, [test_oracle.ml]'s own [layer_m_reason]), which never re-fires once a second diff joins it. Fixing this at the root (an English name on every temporal-cycle candidate) is a data/lectionary-bootstrap task, not something this comparator can do for itself -- register §6, neighbouring the RG 113 tie-break section, records it as an open item. The 17 dates: 2026-02-24, 2026-03-19, 2026-03-25, 2026-12-02, 2026-12-03, 2026-12-07, 2026-12-11, 2026-12-21, 2027-02-24, 2027-12-02, 2027-12-03, 2027-12-06, 2027-12-07, 2027-12-11, 2027-12-13, 2027-12-16, 2027-12-21.")
+ (expected_rows 17))
+ ((id M21)
+ (citation "RG 124 (\"XVIII - De coloribus paramentorum\", \"C) De colore rubro\"), both photographic scans word for word: 124(b) \"adhibetur color ruber in Officio et Missa de festis: ... Sanctorum Apostolorum et Evangelistarum, in eorum die natalicio, excepto festo S. Ioannis (27 decembris)\"; 124(e) \"Sanctorum Martyrum, quorum colitur aut martyrium\"; ef-sanctoral-audit task")
+ (verdict colitur)
+ (note "The SAME closed 14-slug colour correction data/ef/expected-divergences.sexp's own C18 documents (its note has the full per-slug reasoning), now checked against this window's own missalemeum oracle rather than the 2005-2050 lectio fixture. 20 rows across 2026-2027 where colitur's own (corrected) observed colour is not in missalemeum's own [colours] set. Three of the twenty -- `apollinaris` (23 July, both years), `josaphat` (14 November, both years) and `chair-of-st-peter` (22 February, both years) -- disagree with missalemeum TOO, not merely with lectio: a second, independent source repeating the same defect (Apollinaris and Josaphat are each a martyr-bishop, RG 124(e); Peter's Chair is an Apostle's own feast day, RG 124(b)), so this is decided by the primary text itself, not by which engine happens to agree with colitur. [Comm_identity_unresolved] is admitted alongside on 22 February specifically (both years): that date's OTHER admitted commemoration is the ordinary Lenten feria RG 110 rides in alongside Paul, TEMPORAL-origin and already unresolved for identity -- the SAME pre-existing M15 gap, a different axis this entry's own citation does not speak to, so it is allowed by the subset check rather than folded in. Derived directly from the OCaml comparator's own failure output (test_layer_m_counts_match_citations), not hand-counted first and cross-checked after: 20.")
  (expected_rows 20))
+ ((id M22)
+ (citation "The same lectio/missalemeum upstream-gap shape M1/M3/M8/M10/M19 above already document (\"missalemeum does not implement X\"); data/ef/adjustments.sexp's own `Add barbara` comment has the full RG 124(e)/calendarium citation for the entry itself")
+ (verdict colitur)
+ (note "`barbara` (4 December, data/ef/adjustments.sexp's own new `Add`, ef-sanctoral-audit task) is a genuine DATA GAP in missalemeum too: both years' own 4 December row shows only the Advent feria's own temporal commemoration, Barbara absent entirely, not even listed as displaced -- missalemeum never constructed a candidate for her either, the identical absence lectio's own tridentine-calendar.ini has. Identity-gated the same way [M19] is (coordinator finding F2, that entry's own note): the predicate requires colitur's own admitted set to be exactly the temporal feria plus `barbara`, not merely that some [Comm_count] diff exists on this date. Derived directly from the OCaml comparator's own failure output: 2 (both years in the window).")
+ (expected_rows 2))
  ((id M16)
  (citation "1962 calendarium's March table (same primary text as M13's own citation): \"Feria VI post dominicam I Passionis: Commemoratio septem Dolorum B. Mariae Virg.\" -- a fixed commemoration of Our Lady's Seven Sorrows for the Friday of Passion Week, every year, confirmed real")
  (verdict missalemeum)
diff --git a/data/ef/expected-divergences.sexp b/data/ef/expected-divergences.sexp
index f5d5381..75639fc 100644
--- a/data/ef/expected-divergences.sexp
+++ b/data/ef/expected-divergences.sexp
@@ -77,3 +77,8 @@
  (verdict colitur)
  (note "ef-bvm-saturday task: colitur now builds RG 91 entry 27's votive Office of the BVM on every otherwise-unoccupied IV-class Saturday (Rite_ef.Temporal_ef's own [bvm_saturday_names] citation has the full argument) -- white (RG 431(e) -> RG 121(a) -> RG 120(b); RG 120(b) alone reads \"de festis\" and this Office is not a festum), unconditionally, overriding the season's own colour (violet in Septuagesima, green in Time after Epiphany/Time after Pentecost; Christmastide and ordinary Paschaltide already happened to be white). lectio builds no equivalent office at all -- checked directly against its own tridentine-calendar.ini/generator, no comparable rule exists there, the same genuine upstream gap C15/C16 above document for their own gaps, not a colitur bootstrap miss -- so it keeps showing the plain season colour on every one of these Saturdays. Season, slug and rank all still agree: temporal_ef.ml's own [bvm_saturday_names] citation (\"Slug\" paragraph) deliberately REUSES the ordinary <season>-<week>-saturday ferial slug rather than minting a new one (partly BECAUSE a bespoke uniform slug would itself have broken Colitur_kernel.Validate's own slug-uniqueness invariant, sighted on every otherwise-unoccupied Saturday in a year), so [Colour_f] alone is the complete diff set every one of these rows carries -- never [Slug_f] too. Gated on colitur's own [rank]=class-4, [weekday]=saturday and [colour]=white (test_differential.ml's own [is_bvm_saturday_row]) rather than a date list, unlike C14/C15/C16 above: RG 78's own condition (\"otherwise unoccupied IV-class Saturday\") reduces exactly to this triple, and the population is large (a substantial fraction of all Saturdays in the 2005-2050 window) and entirely formulaic, not a short, individually-interesting list. Derived directly from the OCaml comparator's own failure output (test_layer_c_counts_match_citations), not hand-counted first and cross-checked after.")
  (expected_rows 416))
+ ((id C18)
+ (citation "RG 124 (\"XVIII - De coloribus paramentorum\", \"C) De colore rubro\"), both photographic scans word for word: 124(b) \"adhibetur color ruber in Officio et Missa de festis: ... Sanctorum Apostolorum et Evangelistarum, in eorum die natalicio, excepto festo S. Ioannis (27 decembris)\"; 124(e) \"Sanctorum Martyrum, quorum colitur aut martyrium\"; register's own audit rewrite, ef-sanctoral-audit task")
+ (verdict colitur)
+ (note "ef-sanctoral-audit task (2026-08-14): 14 [status = Feast] sanctoral entries bootstrapped from lectio's own tridentine-calendar.ini carry a colour lectio's data gets wrong at the source (checked individually: e.g. `martha`'s own Polish field there already reads \"Dziewicy\" -- Virgin, no \"Męczennicy\" -- yet that SAME record's colour is red) -- corrected via data/ef/adjustments.sexp's own `Edit <slug> ((Set_colour ...))` directives, the same mechanism and root-cause shape `eusebius-confessor` (ef-rebootstrap fix round 1, F3) already used. Two rules: an Apostle/Evangelist's own feast day is red except John's (27 December, already correctly white, untouched); a plain Confessor/Bishop/Virgin (no \"Mart.\"/\"Mm.\" in the calendarium's own line, not an Apostle) is white by RG 117's five-colour residual; a Martyr's own martyrdom is red. `audit_colour_corrected_slugs` in test_differential.ml is the literal 14-slug list (conversion-of-st-paul, chair-of-st-peter, john-of-san-fecundo, ephrem-of-syria, julia-of-falconieri, john-gualbert, camillus-de-lellis, jerome-emiliani, apollinaris, martha, alphonsus-liguori, augustine, rose-of-lima, josaphat) -- every one of these [status = Feast], so it wins its own day most years (rarely impeded) and diffs on [Colour_f] alone against lectio's still-wrong value. A further eight corrections (prisca/peter/vitus/margaret/agapitus/liborii/mark-i, all [Commemoration_only], plus the new `barbara` Add) are NOT in this count: a [Commemoration_only] candidate can never be the OBSERVED day (Precedence.resolve's own design), so this row-level comparator (which reads only the observed day's own record) never has a row to diff for them -- inert to this fixture, not unaffected in truth. Derived directly from the OCaml comparator's own failure output (test_layer_c_counts_match_citations's own `Received`), not hand-counted first and cross-checked after: 526.")
+ (expected_rows 526))