semantic: module-member access has two authorities — private module variables (from lib import __w refused, lib.__w runs), escaped module variables lose their escape, aliased escaped types keep it

[antonsynd]

Found while fixing #2033's import residue:

1. from lib import __w → SPY0283, but lib.__w runs (module variables are emitted public regardless of spelling). Needs a ruling on module-variable privacy (functions are now consistent: SPY0283 both ways).
2. An escaped module variable (\__v`: int = 6) loses its escape on the exported symbol: from lib import `__v`reads it private (SPY0283);lib.`__v`is SPY0908 CS0117__V`.
3. from lib import \Qux` as K; K()` → SPY0200 (the alias clone keeps the declaration's escape); clearing it semantically turns it into CS0234 because the emitter spells type references from the clone's escape flag.
4. Root: NameResolver records every module-level function (and several module symbols) AccessLevel = Public while ModuleLoader/the emitter use AccessLevelConventions.FromName — two access authorities; the lane routed around it with AccessLevelConventions.OfModuleMember. One authority (the declaration's access level, escape included) read by NameResolver, ModuleLoader, the emitter and every import position.

---

Found by /verify-implementation plan-0ca7b7 semantic fix lane (pre-existing at acd1d40 unless stated).

[antonsynd]

Batching 2026-09-30 @ db8e05b — charter .claude/plans/remediation-round-2026-09-20-batching.md §3.24, P29 — access authority (order N18, after P26).

Ruling R-CW (owner, 2026-09-30): _x/__x module variables are module-private exactly like module functions — SPY0283 on BOTH from lib import __w and lib.__w; the escape is carried on the exported symbol (cells 2–3 read P26's spelling authority); ONE access authority (the declaration's access level, escape included) read by NameResolver, ModuleLoader, the emitter and every import position. Rejected: public module variables (two rules for one convention). Refusal, relaxable. Contract: the access verdict reads the DECLARATION's classified access (decorator, backtick escape, underscore convention) for every symbol kind {method, field, property, event, nested type, module function, module variable} × receiver {declaring type, derived type, interface, union case from the union body, module} × caller {outside, subclass, same type, union body}, and NameResolver, ModuleLoader, the emitter and every import position read that ONE authority. After P26 (the escape cells read its spelling authority). Lane / reach: silent-wrong · probe. Class tracker: #2074. No seam hypothesis — the plan measures the seam.