Add the entries that landed on next to TODO.md

Catches `TODO.md` up with `next`. The `README.md` entry takes the text
that landed, word for word. The entry of this rewrite takes the date
2026-11-02. The entries of #146
and #147 are added in their
place, newest first, in short sentences, with every fact, date and link
kept. Nothing else changes.

Model: fable-5-1

README.md

@@ -407,9 +407,9 @@ operands:
   is what makes a daily rescan cheap.
 - When such a file's size on disk differs from its recorded `disk_size`, `scan`
   updates `disk_size` alone. It still does not read the file, and counts it as
-  unchanged. ZFS, for example, counts a new file's blocks up to seconds after
+  unchanged. ZFS, for example, counts a new file's blocks only seconds after the
-  the write. A block is the unit in which a filesystem allocates disk space. A
+  write. A block is the unit in which a filesystem allocates disk space. A file
-  file scanned within those seconds gets its real `disk_size` at the next scan.
+  scanned within those seconds gets its real `disk_size` at the next scan.
 - `scan` hashes a file again when its size differs or its mtime is newer. The
   mtime is compared to the nanosecond, as finely as the filesystem records it. A
   same-size rewrite counts as a change whenever the filesystem gives it a later

TODO.md

@@ -29,19 +29,6 @@
 Newest first. An entry ends with its date and its issue or branch, where those
 are known.
 
-- `README.md` and a comment in `scan.go` no longer say ZFS counts a new file's
-  blocks only seconds after the write. The count can land in under a second.
-  Both now say up to seconds after the write, as the comment on `diskSizeOf` in
-  `scan_test.go` does (2026-11-03, https://git.eeqj.de/sneak/sfdupes/issues/152)
-
-- The three disk size tests in `scan_test.go` no longer fail at random on ZFS.
-  `unix.Sync` can return before ZFS has counted a file's blocks, and one ZFS
-  commit can take a file through several sizes. The test that needs the size to
-  change waits for it, for at most 30 seconds. Each test reads the size before
-  and after its scan. The rewrite test rescans until the two reads match, then
-  compares exactly. The other two fail only on a `disk_size` outside the two
-  reads (2026-11-02, https://git.eeqj.de/sneak/sfdupes/issues/150)
-
 - `TODO.md` rewritten from scratch by the same rules as `README.md`, sentence by
   sentence. Every completed step is kept, with its date and its issue or branch.
   The policy-compliance checklist of 2026-07-22 is folded into its step

scan.go

@@ -554,7 +554,7 @@ func (s *scanState) walkPhase(events <-chan walkEvent, roots []string) {
 
 		// The space a file takes on disk can change while its size and
 		// mtime stay the same. ZFS, for one, counts a new file's blocks
-		// up to seconds after the write.
+		// only seconds after the write.
 		if old.diskSize != ev.rec.diskSize {
 			s.diskSizes = append(s.diskSizes, ev.rec)
 		}

scan_test.go

@@ -43,16 +43,10 @@ func writeFile(t *testing.T, dir, name string, data []byte) string {
 }
 
 // diskSizeOf returns the bytes the file at path takes on disk, from its
-// own lstat: st_blocks counts 512-byte units. ZFS counts a write's
+// own lstat: st_blocks counts 512-byte units. ZFS counts a new file's
-// blocks only when it commits the write, up to seconds later, and one
+// blocks only seconds after the write, and fsync does not hasten that.
-// commit can take the file through several growing sizes. So this value
+// A test therefore calls unix.Sync, which waits for it, before the scan
-// can change at any moment. Neither fsync nor unix.Sync hastens that,
+// whose disk_size it compares with this.
-// but a unix.Sync call often takes long enough that the blocks are
-// counted when it returns. A test that needs the value to change waits
-// for the change. A test that compares it with a scan's disk_size reads
-// it before and after the scan. The rewrite test rescans until the two
-// reads match, then compares exactly. The other two tests fail only on
-// a disk_size outside the two reads.
 func diskSizeOf(t *testing.T, path string) int64 {
 	t.Helper()
 
@@ -1454,26 +1448,20 @@ func TestScanStoresDiskSize(t *testing.T) {
 
 	unix.Sync() // see diskSizeOf
 
-	size := diskSizeOf(t, p)
+	want := diskSizeOf(t, p)
-	if size == 0 || size >= length {
+	if want == 0 || want >= length {
 		t.Fatalf("the file takes %d bytes on disk, want more than none "+
-			"and fewer than its length %d", size, length)
+			"and fewer than its length %d", want, length)
 	}
 
 	for _, operand := range []string{filepath.Dir(p), p} {
 		db := openTestDB(t)
-
-		// ZFS may count the blocks during the scan; see diskSizeOf.
-		before := diskSizeOf(t, p)
-
 		syncTree(t, db, operand)
 
-		after := diskSizeOf(t, p)
-
 		got := recordByPath(t, dbRecords(t, db), p).diskSize
-		if got < before || got > after {
+		if got != want {
-			t.Errorf("scan of %s: disk_size = %d, want %d to %d",
+			t.Errorf("scan of %s: disk_size = %d, want %d",
-				operand, got, before, after)
+				operand, got, want)
 		}
 	}
 }
@@ -1491,7 +1479,7 @@ func TestSyncScanRewriteUpdatesDiskSize(t *testing.T) {
 
 	syncTree(t, db, dir)
 
-	recorded := recordByPath(t, dbRecords(t, db), p).diskSize
+	before := recordByPath(t, dbRecords(t, db), p).diskSize
 
 	pokeAt(t, p, 512*1024, pattern(7, 64*1024))
 
@@ -1504,53 +1492,22 @@ func TestSyncScanRewriteUpdatesDiskSize(t *testing.T) {
 		t.Fatal(err)
 	}
 
-	// Wait for ZFS to count the write; see diskSizeOf.
+	unix.Sync() // see diskSizeOf
-	deadline := time.Now().Add(30 * time.Second)
-	for diskSizeOf(t, p) == recorded {
-		if time.Now().After(deadline) {
-			t.Fatalf("the file still takes %d bytes on disk 30 seconds "+
-				"after the write into its hole", recorded)
-		}
 
-		unix.Sync()
+	want := diskSizeOf(t, p)
+	if want == before {
+		t.Fatalf("the file still takes %d bytes on disk after the write "+
+			"into its hole", want)
 	}
 
-	// ZFS may still be counting, so the size may change during a rescan.
+	st := syncTree(t, db, dir)
-	// Only a rescan with the same size on both sides of it can be compared
+	if st != (scanStats{walked: 1, updated: 1}) {
-	// exactly. A rescan that keeps the old size still fails, because the
+		t.Fatalf("rescan stats = %+v, want 1 updated", st)
-	// wait made before differ from it.
+	}
-	for {
-		before := diskSizeOf(t, p)
 
-		st := syncTree(t, db, dir)
+	got := recordByPath(t, dbRecords(t, db), p).diskSize
-
+	if got != want {
-		after := diskSizeOf(t, p)
+		t.Errorf("disk_size = %d, want %d", got, want)
-
-		if st != (scanStats{walked: 1, updated: 1}) {
-			t.Fatalf("rescan stats = %+v, want 1 updated", st)
-		}
-
-		if before == after {
-			got := recordByPath(t, dbRecords(t, db), p).diskSize
-			if got != after {
-				t.Errorf("disk_size = %d, want %d", got, after)
-			}
-
-			return
-		}
-
-		if time.Now().After(deadline) {
-			t.Fatalf("the size on disk was still changing 30 seconds after "+
-				"the write into its hole: %d, then %d", before, after)
-		}
-
-		// A later mtime makes the next rescan read the file again.
-		later = later.Add(time.Second)
-
-		err = os.Chtimes(p, later, later)
-		if err != nil {
-			t.Fatal(err)
-		}
 	}
 }
 
@@ -1576,21 +1533,15 @@ func TestSyncScanUnchangedUpdatesDiskSize(t *testing.T) {
 
 	unix.Sync() // see diskSizeOf
 
-	// ZFS may count the blocks during the rescan; see diskSizeOf.
-	before := diskSizeOf(t, p)
-
 	// A file read again would count as updated.
 	st := syncTree(t, db, dir)
-
-	after := diskSizeOf(t, p)
-
 	if st != (scanStats{walked: 1, unchanged: 1}) {
 		t.Fatalf("rescan stats = %+v, want 1 unchanged", st)
 	}
 
 	got := recordByPath(t, dbRecords(t, db), p).diskSize
-	if got < before || got > after {
+	if want := diskSizeOf(t, p); got != want {
-		t.Errorf("disk_size = %d, want %d to %d", got, before, after)
+		t.Errorf("disk_size = %d, want %d", got, want)
 	}
 }