The loader collects every fail-fast defect and honors per-open skips

Phase 1 of the decision surface (01 ▸ Malformed input, settled
2026-07-31): BoardLoadFailure aggregates the walk's defects in walk
order — stop-at-first retires. Environmental failures (unreadable root,
not-a-directory) stay immediate single-defect throws: there is no walk
to collect from. A defective root index is recorded and the walk
continues into the children (nothing in the walk consults the parsed
root document — verified); a defective lane, card, or trash-entry index
records and skips its subtree, Re-check's whole-walk re-aggregation
being the designed loop for what hides beneath. load(skipping:) is the
per-open skip channel: a skipped path's item is omitted from the model
and surfaces as LoadWarning.userSkipped; root paths are unskippable by
construction. The reload-breakage banner carries the aggregate ("…and
N more"), single-defect sentences byte-identical to before. Two new
multi-defect fixture boards; suite 2591 green.

Claude-Session: https://claude.ai/code/session_01CqjXB7ASoWtbyoGod68k97

Fixtures/Malformed/skippable-defects.kanban/30000000-0000-4000-8000-000000000002/40000000-0000-4000-8000-000000000009/index.md

@@ -0,0 +1,8 @@
+---
+schema: 1
+kind: card
+order: 1024
+title: Perfectly Fine, Behind A Broken Lane
+---
+Nothing at all is wrong with this card. It is never in the snapshot regardless: its lane is either
+a defect or a skip, and both take the subtree.

Fixtures/Malformed/skippable-defects.kanban/30000000-0000-4000-8000-000000000002/index.md

@@ -0,0 +1,9 @@
+---
+schema: 1
+kind: lane
+order: 2048
+title: A Lane That Will Not Parse
+labels: [red, green
+---
+Unparseable YAML. Skipping it takes the whole lane out of the board — the intact card below
+included, which is the honest cost of the tolerance and why the notice names what left.