Deduplicate parsed sensitivity paths correctly

docs/roadmap/remediation.md

@@ -308,7 +308,13 @@ coarsen semantic identity.
 
 ## 6. Sensitivity Candidate Deduplication Cannot Match Parsed Paths
 
-Priority: P3. Status: open.
+Priority: P3. Status: complete.
+
+Completion: candidate and dependency deduplication uses structural segment
+equality, including parsed tokens, without conflating explicit keys and indexes.
+`TestSensitivityCandidatesMergeRepeatedParsedPaths` failed before the fix and
+now verifies unique semantic/dependency candidates and merged sensitivity facts.
+The full ordinary suite and `git diff --check` passed.
 
 Relevant code: `sensitivityCandidates` and `appendDistinctHistoryPath` in
 [history_select.go](../../internal/engine/history_select.go), especially