feat(drift): cgis_drift has no --exclude/--scope, so the hygiene gate measures test volume and logging density #552

cgis_metrics gained --exclude in #234 and --scope in #239. cgis_drift got neither, and on a repo with tests beside the code that turns the hygiene gate into a measurement of something other than architecture.

Measured on Ownima owner-api (2026-10-02)

Ingest root ownima-backend, 19 303 nodes / 96 805 edges, graph healthy (unresolved_ratio 0.1297 against a 0.3 threshold). Ontology: the repo's own docs/ontology/patterns.yaml, 17 domains.

Result: any_critical: true, 13 of 17 domains gate_failed. But only 4 exceed their own drift_tolerance:

The other nine fail only on hygiene unresolved_ratio > 0.2. Here is what those unresolved edges actually are, from cgis_validate's top_unresolved on the same graph:

response.json       497
self.client.post    493
self.client.get     349
logger.info         279
logger.exception    212
logger.warning      181
resp.json           143
r.json              113

Two populations, neither architectural:

1. logger.* — logger = structlog.get_logger(__name__), a bound logger. Unresolvable by construction, and a domain's share of these is a function of how much it logs.
2. self.client.post / response.json — the test HTTP client. These exist only because tests are in the graph.

So the per-domain unresolved_ratio ranks domains by test volume and logging density. The node counts show the contamination directly: reservation 1130 nodes, finance 599, vehicle 485, notifications 476, chat 463 — these are mostly test files. app.vocabulary reports unresolved_ratio 0.50 on 39 nodes; app.worker 0.40.

Second symptom: the fit band goes to pure_utility for layered domains

Six domains declared layered_dag or dispatcher come back with pure_utility as fit.nearest_template:

Test modules are flat and leafy — each test function calls into the app and is called by nobody — so they pull the motif distribution toward pure_utility. When six clearly-layered service domains all land nearest to "pure utility", the basis is describing the test suite, not the design.

Ask

exclude: list[str] and scope: list[str] on cgis_drift, with the same dot-segment / dot-prefix semantics as cgis_metrics so one ontology can be scored the same way twice.

Two notes on semantics, since drift differs from metrics here:

• Exclusion must happen before the motif census and before unresolved_ratio, not as a row filter on the output — both are aggregates over the domain's subgraph, so filtering afterwards changes nothing.
• Node counts should be reported post-exclusion in actual, so a reader can see what was scored. Right now node_count: 1130 for reservation reads as a domain of 1130 production symbols.

Why it matters beyond cosmetics

A gate whose failures are dominated by an artifact teaches people to ignore it. We cannot put cgis_drift in CI in this state: 13 red domains, 9 of them red for reasons no code change would fix. With exclusion we would gate on the 4 that are real.

Related: #234 (exclude in metrics), #239 (scope in metrics), #178 (a mis-targeted ontology reading clean — the inverse failure), #170 (status semantics / hygiene gate).