land: honest-walk-partials

.alfonso/release-notes/next-notes.md

@@ -26,3 +26,4 @@
 - macOS relaxed shells allow ordinary caches, sockets, browsers, toolchains and shared compile servers while protecting credentials, CortexKit private data, known sibling checkouts, shell/Git configuration and hook governance. Strict keeps the existing jail and sccache block. Short worker temp paths, GitHub CLI access checks, commit co-author attribution and child-environment stripping remain in place.
 - Linux relaxed reports every deny as unenforced because Landlock cannot subtract paths from default-allow grants. Windows relaxed runs with an unenforced warning and a stripped child environment that preserves the process PATH and standard user variables; Windows strict refuses those launches. Seatbelt still cannot execute setuid `ps`/`top`; use `pgrep`/`pkill`, or select `off` when `ps` is required.
 - Retire `sandbox.enabled` through the existing in-memory and `doctor --fix` JSONC migration: `true` maps to strict for both roles, `false` maps to relaxed worker/off head, and explicit canonical role values win. An absent setting uses the same new defaults; heads that explicitly enabled the old jail remain confined.
+- `glob`, `grep` and `outline` on a large directory outside the project (such as `~/.cargo/registry/src`) now return the files found so far, marked as a partial walk, instead of a `read_blocked` error that told agents to change macOS Privacy & Security settings. `read_blocked` is now reserved for one filesystem call that stops responding; it names that path, and a walk that stalls keeps what it had already found. A walk the request stops waiting for now exits and frees its helper slot.

benchmarks/aft-search/slice-descriptors/land-honest-walk-partials.json

@@ -0,0 +1,12 @@
+{
+  "slice_class": "engine_unwired",
+  "targeted_mechanism": "none",
+  "kind": "harness",
+  "fixtures": [
+    "crates/aft/tests/integration/tool_call_parity_test.rs"
+  ],
+  "fenced_files": [
+    "crates/aft/src/search_index.rs"
+  ],
+  "note": "Fallback directory walks run under the request budget and snapshot each match's mtime and the resolved filter root before returning, so partial-result ordering needs no filesystem access after the walk. Complete walks keep mtime-descending order with the same display-path tie-break; indexed search ranking and routing are unchanged. Real-query rows must remain byte-identical."
+}