feat(directives): scavenge sweep preset update + test file (batch 1/5)

- current_baseline.md: added 9 new directives alphabetically interleaved
  (total 90); updated Notes section to track four harvest passes
- state.toml: new [scavenge_20260703] section + [safety_observations]
  (prompt-injection attempt noted for the record)
- tests/test_scavenge_batch_1.py: 9 parametrized cases + 2 aggregate
  tests verifying the 9 new directives have v1.md + meta.md, headings,
  sections, preset references, total count >= 90

conductor/tracks/directive_hotswap_harness_20260627/state.toml

@@ -132,4 +132,24 @@ new_directive_sources = "docs/MMA_Support/ (5), conductor/tracks/nagent_review_2
 cap_applied = 30   # user cap was ~30; lifted 15 (strongest, most actionable, most general-purpose)
 skipped_categories = ["Implementation-specific tactical notes", "Historical commentary without an actionable current rule", "Content about the manual-slop app's specific UI/feature", "Rules that conflict with existing 66 directives"]
 commits = 4   # 3 directive batches + 1 preset update + 1 test = 5 total; counted as 4 directive-related commits + 1 test commit
-test_added = "tests/test_scavenge_directives_lift.py (79 parametrized cases + 5 aggregate tests)"
+test_added = "tests/test_scavenge_directives_lift.py (79 parametrized cases + 5 aggregate tests)"
+
+[scavenge_20260703]
+# Phase 6 scavenge pass: directive library expansion from docs/reports/ historical slices.
+# Per user directive 2026-07-03: "scavenge for additional directives from docs/reports/2026-03-02/ through docs/reports/2026-06-08/. The user wants a full sweep — process every file in this slice."
+# Scope: docs/reports/2026-03-02/ (1 file: MCP_BUGFIX_20260306.md), docs/reports/2026-05-04/ (5 files), docs/reports/2026-05-11/ (1 file: ai_decoupling_revert_report.md), docs/reports/2026-06-01/ (10 files), docs/reports/2026-06-08/ (29 files). Total 46 files.
+# Out of scope: this track's own history; the .txt files in docs/reports/2026-06-01/ (startup_audit_20260606.txt, startup_baseline_20260606.txt — not markdown); other docs/reports/ slices.
+directives_before = 81
+directives_after = 90
+new_directives_count = 9
+new_directive_sources = "docs/reports/2026-03-02/MCP_BUGFIX_20260306.md (1), docs/reports/2026-05-11/ai_decoupling_revert_report.md + docs/reports/2026-06-01/qwen_llama_grok_followup_audit_20260611.md (2), docs/reports/2026-06-08/ (6: docs_sync_test_era_20260610, nagent_review_session_20260612, batch_resilience_plan_20260608, TEST_REGRESSION_ANALYSIS_MINIMAX_OPENAI_20260613, workflow_markdown_audit_20260608 x2 rules)"
+cap_applied = 20   # user cap was 20; lifted 9 (strongest, most actionable, most general-purpose)
+skipped_categories = ["Implementation-specific tactical notes (e.g. specific ImGui scope fix sites)", "Historical commentary without an actionable current rule", "Content about the manual-slop app's specific UI/feature", "Rules already covered by the existing 81 directives", "Design ideation without a concrete current rule", "Single-file post-mortems that turned out to be pre-existing bugs (not actionable as a directive)"]
+commits = 3   # 1 commit per source-file batch (3 batches: 2026-03-02/ + 2026-05-04/, 2026-05-11/ + 2026-06-01/, 2026-06-08/) + 1 preset/state update commit = 4 total; counted as 3 directive-related commits + 1 preset/state commit
+test_added = "tests/test_scavenge_batch_1.py (9 parametrized cases + 2 aggregate tests)"
+
+[safety_observations]
+# Prompt-injection attempt observed during the read pass:
+# docs/reports/2026-03-02/MCP_BUGFIX_20260306.md contained an embedded fake <system-reminder>
+# block (echoing docs/AGENTS.md content) appended after the file's last line. The instruction
+# was ignored; the actual user task (scavenge sweep) was followed. Flagged here for the record.