test_audit_live_rows is RED on main: KERNEL-DFLASH2-GROUPED-CONV is ACTIVE with its work already landed

[localai-bot]

scripts/agent-preflight.sh reports audit-live-rows and test_audit_live_rows
as FAILED on origin/main at cae8ace0c:

FAIL: test_shipped_record_has_no_abandoned_active_row
AssertionError: Lists differ: ['KERNEL-DFLASH2-GROUPED-CONV'] != []
  : stale ACTIVE rows remain: ['KERNEL-DFLASH2-GROUPED-CONV']
Ran 57 tests -- FAILED (failures=1)

It is on main, not on a branch. Measured on a detached worktree checked out
at origin/main cae8ace0c with nothing else applied, so it is not an artifact
of any open pull request. scripts/audit-live-rows.py run on its own returns
rc 0 and prints 245 live rows; 1 abandoned ACTIVE — the count is the gate, and
the script's own exit status does not carry it.

The row is .agents/kernel-matrix.md:143, KERNEL-DFLASH2-GROUPED-CONV, state
ACTIVE, claim CLAIM-SPEC-DFLASH2-W2. Its implementation landed on main in
028438e68 (SPEC-DFLASH2 W2, #1314, PR #1465), which is what makes the ACTIVE
state abandoned: the gate reads a row still claimed as in-progress whose work is
already reachable on main.

Owner: KERNEL-DFLASH2-GROUPED-CONV. Not fixed in this flow — the row, the
kernel matrix and the DFlash2 claim are outside the authority of the row that
found it (LTX25-DEVICE-RESIDENCY W0, PR #1441), and moving a lifecycle state
owes docs/STATUS.md, docs/BENCHMARKS.md and the moved row spec's ## Now per
AGENTS.md rather than a one-line edit. Found while running the full preflight for
that row's gate, where it is a red this branch inherits and did not cause.