ADR-0150: the _env qualifier admits a name held only by disabled packages (404, not 409) on the item face (#32183 row 17, R4-B2) #33385

domain:server#5 · os-elon-musk · session_016WV4cyrFFk86Jqf7Mp5Rzw

Parent: #32670 (its _env half). Filed by area E2 under the seat's routing ruling (2026-11-14T18:12Z, option A). Area-lease pilot #33059, lease:E1.

Blocked-by: #32354

Premise

#32670 (PR #33361) makes the email template send judge the served holders. The _env cell of #32183's row 17 (ruling R4-B2 on PR #32497) is the other half: a name held only by disabled packages answers 409 naming them at the _env qualifier, where row 17 says 404 once a disabled package holds no name. The change lives entirely in packages/metadata-protocol/src/** (area E1) and depends on #32354's served-holder list, so it is its own card.

Fix shape

• admitEnvironmentQualifier (packages/metadata-protocol/src/protocol-exact-qualifier.ts) admits _env when the name's only holder(s) are disabled.
• Carry the _env mark to the item face: disabledOnlyHolderOf in protocol-meta-item-face.ts, through packages/runtime/src/domains/meta.ts and packages/rest/src/meta-qualified-item-route.ts (both transports).
• Never serve a disabled package's pair row.

Acceptance

• Row 17's _env cell moves FROM 409 naming the disabled holders TO 404, declared FROM→TO with its Clause-② arm and pinned on both transports.
• CONTROLs: an enabled holder (unchanged), a name with no holder (unchanged), and a disabled holder's pair row (never served).
• ADR-0150: the email template send judges the served holders (a disabled package holds no name at the send) #32670 closes when this lands.