Preserve ignored path identity on POSIX

CHANGELOG.md

@@ -6,6 +6,7 @@ All notable changes are documented here. This project follows Semantic Versionin
 
 ### Fixed
 
+- Preserved ignored-file path identity across platforms when enforcing immutable workspace alignment. POSIX filenames containing literal backslashes are no longer rewritten as directory separators, so a distinct ignored runtime input such as `coverage\proof.lcov` cannot alias an explicitly allowed `coverage/proof.lcov` data artifact and bypass the pre-execution fail-closed gate.
 - Failed closed on unattributed targeted-runner process failures even when another qualified batch target is unavailable. An unavailable target can no longer act as a sink that lets unrelated observed passes survive an ambiguous process-level failure; only explicitly failed targets retain localized failure attribution.
 - Failed closed on deletion-only zero-context hunks when attributing current changed symbols and call references. Git represents a deletion-only hunk with a zero-length new-side range anchored to a neighboring current line; ProofDiff now reconciles reconstructed current-line spans with Git numstat additions before treating those anchors as changed current code.
 - Preserved precise changed-line hunks across renames by scoping per-file Git diffs to both the previous and current path. This prevents a rename with content edits from being reinterpreted as a whole-file addition and overstating changed-line or call-reference evidence.

src/selection-workspace.ts

@@ -2,6 +2,7 @@ import path from "node:path";
 import { diffTargetCommit, GitError, gitNullDevice, listUntrackedFiles, resolveRevisionCommit } from "./git.js";
 import { runProcess, safeExecutablePath, type ProcessResult } from "./process.js";
 import type { DiffSelection } from "./types.js";
+import { normalizeRepoPath } from "./util.js";
 
 const ROOT_DISCOVERY_METADATA = new Set([
   "package.json",
@@ -112,7 +113,7 @@ async function ignoredFiles(root: string, pathspecs: string[], exclusions: strin
     const message = result.stderr.trim() || result.error || `git ls-files exited with ${String(result.exitCode)}`;
     throw new GitError(`Could not inspect ignored immutable-workspace inputs: ${message}`);
   }
-  return [...new Set(result.stdout.split("\0").filter(Boolean).map((file) => file.replaceAll("\\", "/")))].sort();
+  return [...new Set(result.stdout.split("\0").filter(Boolean).map(normalizeRepoPath))].sort();
 }
 
 function isPythonDiscoveryPath(repoPath: string): boolean {
@@ -130,7 +131,7 @@ function repoLocalDataArtifact(root: string, artifact: string): string | null {
   const absolute = path.isAbsolute(artifact) ? path.normalize(artifact) : path.resolve(root, artifact);
   const relative = path.relative(root, absolute);
   if (!relative || relative.startsWith("..") || path.isAbsolute(relative)) return null;
-  const normalized = relative.replaceAll("\\", "/");
+  const normalized = normalizeRepoPath(relative);
   return isDiscoverySensitivePath(normalized) ? null : normalized;
 }