fix(housekeeping): restore people partial compatibility

.superpowers/sdd/2026-08-26-housekeeping-completion/task-12-report.md

@@ -307,4 +307,98 @@ git diff --check
 Exit 0
 ```
 
-The approved Node engine warning remains: the repository requests Node `>=26.8.1 <27`, while the host runs Node `v26.7.0` with pnpm `11.24.0`. No database operation, deployment, push, or pull-request update was performed.
+The approved Node engine warning remains: the repository requests Node `>=26.8.1 <27`, while the host runs Node `v26.7.0` with pnpm `11.24.0`. No database operation, deployment, push, or pull-request update was performed.
+
+## Official review fix round 4
+
+The round-3 re-review reported 0 Critical, 2 Important, and 0 Minor findings. This round restores the pre-cutover legacy bulk result contract at the wrapper boundary and makes committed-database/emulator-sync debt explicit in the successful partial operator result. Canonical Housekeeping accounting, audit evidence, routes, commands, and ACLs remain unchanged.
+
+### Pre-Task12 parity evidence
+
+`git show e1b31ff7^:src/actions/bulk-users.ts` confirms that currency and badge wrappers awaited RCON inside the same `try`: an RCON exception entered the catch, did not increment `given`, and appended `{ userId, reason: "Database error" }`; an RCON `false` return did not throw and therefore remained a legacy success. Positive bulk adjustment delegated to the same currency wrapper and had the same result semantics.
+
+### RED evidence
+
+```text
+pnpm exec vitest run --coverage.enabled=false src/actions/bulk-users.test.ts src/actions/bulk-adjust-wrapper.test.ts
+Test Files 2 failed (2)
+Tests 3 failed | 3 passed (6)
+Currency, badge, and positive-adjust wrappers returned given/adjusted=1 with no failedIds for the canonical external-sync debt produced by a thrown RCON call; historical results require 0 plus Database error.
+
+pnpm exec vitest run --coverage.enabled=false src/features/housekeeping/domains/people/pages/people-primary-pages.test.tsx
+Test Files 1 failed (1)
+Tests 2 failed | 12 passed (14)
+The operator result rendered only Partially completed and exposed neither an alert/do-not-retry instruction nor the typed user sync debt returned by the real form adapter.
+```
+
+### GREEN implementation
+
+- `src/actions/bulk-users.ts` translates only `externalSyncFailures` at the legacy wrapper boundary into historical `Database error` failures and subtracts those entries from `given`/positive `adjusted`. Canonical completed counts and sync-debt evidence are untouched; the existing legacy `false` path still produces no external-sync entry and remains successful. Failure entries are restored in input order, including duplicate IDs.
+- `src/features/housekeeping/domains/people/pages/people-command-form.tsx` reads only a successful typed partial result with failed external completion and a bounded `after.externalSyncFailures` array. It renders an alert, explicit do-not-retry instruction, and safe user/reason debt entries. Unknown payload fields and malformed entries are never rendered, and the generated reset password path remains one-time and unchanged.
+
+Focused GREEN:
+
+```text
+pnpm exec vitest run --coverage.enabled=false src/actions/bulk-users.test.ts src/actions/bulk-adjust-wrapper.test.ts
+Test Files 2 passed (2)
+Tests 6 passed (6)
+
+pnpm exec vitest run --coverage.enabled=false src/features/housekeeping/domains/people/pages/people-primary-pages.test.tsx
+Test Files 1 passed (1)
+Tests 14 passed (14)
+
+pnpm exec vitest run --coverage.enabled=false src/actions/bulk-users.test.ts src/actions/bulk-adjust-wrapper.test.ts src/features/housekeeping/domains/people/pages/people-primary-pages.test.tsx src/features/housekeeping/domains/people/services/mutations-production-workflows.test.ts
+Test Files 4 passed (4)
+Tests 48 passed (48)
+```
+
+### Cumulative verification
+
+```text
+People + foundation + Task12 legacy wrappers + route/audit/staff-smoke matrix
+Test Files 52 passed (52)
+Tests 491 passed (491)
+
+pnpm test:housekeeping
+Test Files 58 passed (58)
+Tests 518 passed (518)
+
+pnpm test
+Test Files 206 passed | 3 skipped (209)
+Tests 1364 passed | 5 skipped (1369)
+
+pnpm typecheck
+tsc --noEmit
+Exit 0
+
+pnpm exec biome check --formatter-enabled=false src/actions/bulk-users.ts src/actions/bulk-users.test.ts src/actions/bulk-adjust-wrapper.test.ts src/features/housekeeping/domains/people/pages/people-command-form.tsx src/features/housekeeping/domains/people/pages/people-primary-pages.test.tsx
+Checked 5 files. No fixes applied.
+
+git diff --check
+Exit 0
+```
+
+The only warning is the approved Node engine mismatch: the repository requests Node `>=26.8.1 <27`, while the host runs Node `v26.7.0` with pnpm `11.24.0`.
+
+### Exact tracked paths
+
+- `.superpowers/sdd/2026-08-26-housekeeping-completion/task-12-report.md`
+- `src/actions/bulk-adjust-wrapper.test.ts`
+- `src/actions/bulk-users.test.ts`
+- `src/actions/bulk-users.ts`
+- `src/features/housekeeping/domains/people/pages/people-command-form.tsx`
+- `src/features/housekeeping/domains/people/pages/people-primary-pages.test.tsx`
+
+The required controller lines were appended to the git-ignored `.superpowers/sdd/2026-08-26-housekeeping-completion/progress.md`; it is excluded from the commit. `.remember/` remains untouched.
+
+### Self-review
+
+- Scope and compatibility: the production mutation service, canonical audit/accounting, manifest, route, command, ACL, database, redirect, and cutover behavior are unchanged. The adapter applies only to legacy currency/badge results and their historical positive-adjust delegate.
+- Security: the operator surface requires an `ok: true` partial/external-failed envelope, accepts at most 100 positive safe-integer user IDs, renders only the canonical safe reason, and does not inspect or serialize arbitrary result payloads. Reset-password display and audit redaction tests remain green.
+- Test quality: legacy tests exercise the real exported wrappers against a complete canonical partial response and fail on either wrong count or missing historical failure; UI tests render the real component, invoke the real form adapter, and prove malformed/extra payload is not displayed.
+
+### Commit
+
+Single local commit message: `fix(housekeeping): restore people partial compatibility`. The final SHA of the commit containing this report is returned to the controller after creation.
+
+No database operation, deployment, push, pull, or pull-request update was performed.