Keep: scopeless worker resolves the on-disk key (durability core), a keyed build still rewrites (rotation), and the API-prefixed vault name resolves. Drop the mock-patched gate predicate test, the inlined copy of the same predicate, and the empty-build/empty-disk arm — they re-assert the helper's shape rather than a behaviour contract.