test(learning-harness): apply the group 1 review suggestions

A mechanism claimed by two families now fails as loudly as a weakness claimed
twice, with a named offender. Two behaviours that were correct but unasserted
are pinned: the obligations tool refuses a path outside the repository, and a
provider that refuses to build degrades to no endpoint instead of raising into
a scan. The TypeScript parse assertion is now exact rather than a quarter-of-
the-slice allowance, which surfaces one real corpus defect: a TSX excerpt
harvested as a truncated destructuring parameter list is not valid TypeScript
on its own, and belongs to the re-harvest rather than to the grammar.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG

tests/test_hunter_curated_tools.py

@@ -65,6 +65,8 @@ def test_obligations_lists_what_a_function_owes_without_dumping_code(repo: Path)
     assert "identity_constraint" in {str(row["missing"]) for row in rows}
     assert all("text" not in row and "content" not in row for row in rows)
     assert obligations(repo, path="app.py", function="helper") == []
+    with pytest.raises(PathEscapesRepo):
+        obligations(repo, path="../outside.py", function="leaky")
 
 
 def test_flows_lists_adjudicated_source_to_sink_records_for_one_function(repo: Path) -> None: