# Diagnosis — 2026-09-21

1. The catalogue was read again for mounts no resource declares: twenty-four remained, in two
   kinds only. Nine media modules mount the operator's library, and every one of those paths is
   already in the module's `accesses` — the vocabulary [ADR 0051](../../02-DECISIONS/0051-shared-data-is-the-operators.md)
   gave exactly this. Four modules mount the container runtime's socket, and every one of them
   declares the `container-runtime` capability.
2. So the field the report said would have to be invented already exists twice over, and the
   check that was withdrawn needed only to read both: an access is a declared path, and a
   capability declares the facility it grants.

**Located in:** the catalogue's parser. The check is back, refuses an undeclared mount naming the
path and the three remedies, and a test parses the whole catalogue. Decided in
[ADR 0091](../../02-DECISIONS/0091-a-mount-is-declared-three-ways.md).