GeezerVison

diff --git a/crates/socket-patch-core/src/vendor/jvm/apply.rs b/crates/socket-patch-core/src/vendor/jvm/apply.rs
--- a/crates/socket-patch-core/src/vendor/jvm/apply.rs
+++ b/crates/socket-patch-core/src/vendor/jvm/apply.rs
@@ -619,13 +619,17 @@
         uuid: &entry.uuid,
     };
     let reader = ProjectReader::new(root);
+    // Fail-closed: a path escaping the checkout is not proof the entry is
+    // unwired; treat it as still live (same as revert's refusal).
+    if reader.escaped().is_some() {
+        return true;
+    }
     let read = |rel: &str| reader.read(rel);
-    let wired = if is_gradle(&entry.wiring) {
+    if is_gradle(&entry.wiring) {
         gradle::wired(&read, &c)
     } else {
         maven_reactor::wired(&read, &c)
-    };
-    wired && reader.escaped().is_none()
+    }
 }
 
 /// The vendored jar of the JVM `entry` for `uuid`, project-relative: the

diff --git a/crates/socket-patch-core/src/vendor/jvm/maven_reactor.rs b/crates/socket-patch-core/src/vendor/jvm/maven_reactor.rs
--- a/crates/socket-patch-core/src/vendor/jvm/maven_reactor.rs
+++ b/crates/socket-patch-core/src/vendor/jvm/maven_reactor.rs
@@ -352,12 +352,17 @@
 /// (outside comments): the liveness proof `vex` needs for this layout.
 pub fn wired(read: ReadFn<'_>, c: &Coords<'_>) -> bool {
     let sv = c.suffixed_version();
-    Reactor::discover(read).is_ok_and(|reactor| {
-        reactor
+    match Reactor::discover(read) {
+        Ok(reactor) => reactor
             .scope
             .iter()
-            .any(|rel| reactor.poms[rel].doc.masked.contains(&sv))
-    })
+            .any(|rel| reactor.poms[rel].doc.masked.contains(&sv)),
+        Err(_) => {
+            // Fail-closed: discovery failure (broken pom, nested .mvn, etc.)
+            // is not proof the entry is unwired; treat it as still live.
+            true
+        }
+    }
 }
 
 /// `<!-- socket-patch <uuid>:` — the start of `c`'s pin comment.

diff --git a/crates/socket-patch-core/src/vendor/maven_repo.rs b/crates/socket-patch-core/src/vendor/maven_repo.rs
--- a/crates/socket-patch-core/src/vendor/maven_repo.rs
+++ b/crates/socket-patch-core/src/vendor/maven_repo.rs
@@ -716,9 +716,17 @@
 /// flag), and only for a reactor or a Gradle build.
 async fn jvm_shape(project_root: &Path) -> Option<super::jvm::Shape> {
     if !super::jvm::experimental_enabled() {
-        let state = super::state::load_state(project_root).await.ok()?;
-        if !state.entries.values().any(super::jvm::apply::is_jvm_entry) {
-            return None;
+        match super::state::load_state(project_root).await {
+            Ok(state) => {
+                if !state.entries.values().any(super::jvm::apply::is_jvm_entry) {
+                    return None;
+                }
+            }
+            Err(_) => {
+                // Fail-closed: unreadable or corrupt ledger is never empty.
+                // Continue to detect shape so a corrupt ledger with JVM entries
+                // still routes to the JVM backend.
+            }
         }
     }
     let reader = super::jvm::apply::ProjectReader::new(project_root);
@@ -914,8 +922,19 @@
     };
     // Shared fragments another JVM entry wrote, and the pristine originals
     // of a patch update, come from the ledger (§7.3).
-    if let Ok(state) = super::state::load_state(project_root).await {
-        super::jvm::apply::inherit_peer_records(&mut wiring, state.entries.values());
+    match super::state::load_state(project_root).await {
+        Ok(state) => {
+            super::jvm::apply::inherit_peer_records(&mut wiring, state.entries.values());
+        }
+        Err(e) => {
+            // Fail-closed: unreadable or corrupt ledger is never empty. Without
+            // peer records, a later revert cannot restore shared fragments.
+            return done(
+                failed_result(purl, &jar_path, format!("vendor_ledger_corrupt: {e}")),
+                None,
+                warnings,
+            );
+        }
     }
     let entry = maven_entry(
         build_maven_purl(&group_id, &artifact_id, &version),