The Desktop roster hid @sessions/@logs infra dirs and tombstones after the
identity predicate landed, but the Bot Mode surface still enumerated
profiles/ with a bare is_dir(): the teammate roster injected into every
Bot's system prompt (tools/bot_mode_probe._roster) and the
bot_relay.deliver target check listed them as teammates (the probe even
offered `@.deleted`). Route both through named_profile_is_live; the relay's
known set is now derived from _roster so there is one enumerator.
Same class, same one-line predicate: `sudo hermes -p <bare-dir>` in
hermes_cli/main.py::_resolve_sudo_user_profile_env resolved a marker-less
dir the plain -p path refuses; change_watcher._pairing_sig and
active_sessions.release_orphaned_leases now skip non-profile dirs.
gateway/platforms/base.py::_profile_dirs is left lax on purpose — it feeds
the media DENY side (credential homes), which must over-cover.
85d0288737