The storage server refuses the report-data bucket its own consumers write to

projects/ores.http/core/src/routes/storage_routes.cpp:36-39 accepts exactly two buckets, compute and ore-imports. Every other bucket answers 404, from all three verbs. Two components write to a third:

• projects/ores.reporting/core/src/messaging/report_execution_handler.cpp:76 — report_data_bucket = "report-data", with keys {instance_id}/trades.msgpack (:78) and {instance_id}/market_data.msgpack (:82).
• projects/ores.ore/service/src/messaging/report_package_handler.cpp:39 — the same bucket name again, with tarball_storage_key = {instance_id}/ore_package.tar.gz (:41).

The name is duplicated in two anonymous namespaces, and the server has never heard of it. Corroboration on disk: build/output/linux-clang-debug-make/publish/storage/ holds compute/ and ore-imports/ only, because the server creates one directory per known bucket at construction (storage_routes.cpp:44-48).

This is the unowned literal failing in the way either candidate answer in Object Storage prevents. Commit 1e4f37564c introduced ores.storage/net/buckets.hpp holding the bucket names; 00b358951c deleted it and replaced it with two literals inside the server; 34cb517514 then added report-data in ores.reporting and did not update the list. The bucket list is domain knowledge living in the storage facility, which is exactly what Object Storage says must move out of it: a bucket is an allocation the facility should be told about, not a name it hardcodes.

Nothing caught it. There is no test that exercises a real consumer against the real server, and the failure is a 404 deep inside a NATS handler.

The fix belongs with the target state's bucket registry: either the server accepts registered buckets, or the allowlist is generated from the consumers that declare them. A quick patch that adds a third literal would reproduce the defect a fourth time.

• projects/ores.http/core/src/routes/storage_routes.cpp:36-39, :83-98, :130, :149, :173
• projects/ores.reporting/core/src/messaging/report_execution_handler.cpp:76, :78, :82
• projects/ores.ore/service/src/messaging/report_package_handler.cpp:39, :41, :88, :98, :106
• build/output/linux-clang-debug-make/publish/storage/ — the buckets that exist
• git 1e4f37564c (created the bucket header), 00b358951c (deleted it), 34cb517514 (added the bucket)

• Object Storage — the target state, and the bucket registry that resolves this.