The version-constrained carried packages are named in three places: the voculinux depends, the stock pre-install line and the pkgver loop of the install smoke. Nothing required them to agree, so a third gap package could be added to one place and missed in the others. The new test requires all three to name the same set. Also corrects the README "Version floors" wording: the offline stock-version test only records the versions verified on 2026-11-06, and the install smoke's pkgver check is the live signal. Refs #16