feat: revision-qualified annotations root for pinned runtimes (P5)

backend/test/workspace-runtime-config-lease.test.ts

@@ -170,6 +170,27 @@ test("active workspace rendering is byte-identical to direct snapshot rendering"
   expect(active.catalogBlob).toMatch(/^sha256:[0-9a-f]{64}$/);
 });
 
+test("renders a revision-qualified annotations root for the active revision", async () => {
+  const f = await fixture();
+  const active = await renderActiveWorkspaceRuntime({
+    workspaceId: "psd-clinical",
+    registry: f.registry,
+    registryConfig: f.registryConfig,
+    harnessDir: f.harnessDir,
+    configPath: "config/tht.yaml",
+    dataRoot: f.dataRoot,
+    secretRoots: f.registryConfig.secretRoots,
+    semanticRuntime,
+  });
+  const rendered = parse(active.renderedConfig) as Record<string, any>;
+
+  expect(rendered.paths.annotations_root).toBe(
+    join(f.dataRoot, "sessions", "psd-clinical", "revisions", f.revision.commit, "artifacts"),
+  );
+  expect(rendered.roots.annotations_root).toBe(rendered.paths.annotations_root);
+  expect(rendered.paths.artifacts).toBe(join(f.dataRoot, "sessions", "psd-clinical", "artifacts"));
+});
+
 test("deterministic operator leases are keyed by logical identity and stable across calls", async () => {
   const f = await fixture();
   const first = await publishDeterministicRuntimeConfigLease({