bolt/rules/laws/law.bend fails

rule law (project-wide): in a project that states laws (a directory with a LAWS.bend), every pure def is named by some law. A def a law never mentions has no stated property: it is the coverage gap. A type is covered once any law reaches its module (a law about an instance names the accessors, never the service type). Out of scope: helpers (dotted names), main, tests, the law files themselves, and a module that touches IO (a law cannot state it). The rule reads each file's digest (bolt/rules/digest.bend), never the parsed source: its phases use the list three times, and a + reuse copies it.