Same shape as the listen-log presence check: the workspace run already executes them; the counts keep a renamed module or a dropped cfg from shrinking coverage without a trace. The workflow calls the script, so the mirror stays exact; its header names the new check. cc