Computes the join rather than asserting it, and offers both plausible workload
segments per path instead of a single positional guess, because the path
convention is inconsistent.
Measured result: 1 of 27 lanes matches a declared workload. The workload
declaration surface exists, but it covers almost none of the credential estate.
Read-only; touches no secret value and no live system.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
