test: contract tests with the current violations as baseline #328

Why

Each phase must shrink the list of user-level writes (design: Making it stick).

In scope

Run setup, sync, sync --upgrade and uninstall under sandboxHome() and record every HOME change as a named baseline exception; serve every dashboard GET and SSE route from a folder that has not opted in and assert nothing outside the cache changed.

Out of scope

The places fixture test (#366).

Acceptance criteria

• The baseline lists every current user-level write
• A new user-level write fails the test

Dependencies

Blocked by: #327

Blocks: #385

Plan

• Release: 4.0.0-beta.1
• Size: size:M · Workstream: ws:project-scope
• Epic: feat: project-scope P0, removals and the enforcement baseline (epic) #295
• Card: P0-08 in the card inventory
• Sources: Design (docs(plans): project-scoped management design and its prerequisites #289) Making it stick

Verification

• pnpm test