@bongos/core 1.19.1045 → 1.19.1046

package/modules/platform-identity/tests/platform-identity.mjs

@@ -680,7 +680,7 @@ await ta('listScoutingRollup scalar aggregation is fan-out-free (task 1002911)',
 });
 
 await ta('listScoutingRollup enforces consent IN the query (ADR 0171 D2/D3)', async () => {
-  // /people and /scouting must honor hide BY CONSTRUCTION: the predicate lives
+  // /scouting must honor hide BY CONSTRUCTION: the predicate lives
   // in the scalar-aggregation CTE, not in any caller. Semantics proven against
   // real SQL by tests/profile_rollup_consent.mjs.
   const pool = mockPool([{ rows: [] }]);

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1045",
+  "version": "1.19.1046",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.1045",
+      "version": "1.19.1046",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1045",
+  "version": "1.19.1046",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -7571,5 +7571,11 @@
       "id": "1003458",
       "text": "The Tasks board and the Goals page now claim and release work through one shared piece of code instead of two copies that had already drifted apart — the same refusal was worded differently on each page, and one had lost its \""
     }
+  ],
+  "1.19.1046": [
+    {
+      "id": "1003444",
+      "text": "The hall's People page is gone, as you asked. An old People link now opens the Builders page instead, and People is no longer in the side menu. Searching for builders across projects comes back when the hub's community page is"
+    }
   ]
 }

package/src/bongos/auth.js

@@ -425,17 +425,14 @@ function signInWithReturn(req) {
 const PAGE_GATES = Object.freeze({
   requireBuilderPage: Object.freeze({ permission: 'page.view.public', deniedTo: '/builders' }),
   requireGovernmentPage: Object.freeze({ permission: 'page.view.government', deniedTo: '/builders' }),
-  // `alsoAdmits` — a SECOND, non-rank audience this page's DATA ROUTE admits, so
-  // the page can follow it (ADR 0210, task 1002290). /people fronts GET /scouting,
-  // which since R14 admits a `project.curate` holder OR a PROJECT OWNER; a page
-  // gate that could only ever ask about a permission would leave the widened
-  // audience staring at a redirect. The value names a function on the
-  // `platform-identity.hub` port — the module that owns the ownership fact — and
-  // is consulted ONLY after the permission check has already refused, so it can
-  // widen and never narrow. Absent port, absent function, or a throw: no admit.
-  requireProjectCuratePage: Object.freeze({
-    permission: 'project.curate', deniedTo: '/builders', alsoAdmits: 'isProjectOwner',
-  }),
+  // `alsoAdmits` (on requireCorePinPage below) — a SECOND, non-rank audience a
+  // page's DATA ROUTE admits, so the page can follow it (ADR 0210). A page gate that
+  // could only ever ask about a permission would leave the widened audience staring
+  // at a redirect. The value names a function on the `platform-identity.hub` port —
+  // the module that owns the ownership fact — and is consulted ONLY after the
+  // permission check has already refused, so it can widen and never narrow. Absent
+  // port, absent function, or a throw: no admit. Its first user, the hall's /people
+  // page, was deleted by task 1003444 (ADR 0337 D5).
   // The /board-room page (ADR 0266) — gated on `board.vote.cast`, the SAME atom
   // the vote route checks, so the surface's reach equals the right to vote.
   //
@@ -464,7 +461,7 @@ const PAGE_GATES = Object.freeze({
   //
   // SINCE ADR 0339 (task 1004174) its routes admit a SECOND audience — a hosted
   // project's own owner, for that project only — so the shell follows through the same
-  // `alsoAdmits` door /people uses (ADR 0210). It admits the SHELL for an owner of any
+  // `alsoAdmits` door (ADR 0210). It admits the SHELL for an owner of any
   // live project; which project they may read or move is still the routes' question,
   // asked per request against that project's row.
   requireCorePinPage: Object.freeze({ permission: 'core.pin.move', deniedTo: '/builders', alsoAdmits: 'isProjectOwner' }),
@@ -619,17 +616,6 @@ async function requireGovernmentPage(req, res, next) {
   return runPageGate('requireGovernmentPage', req, res, next);
 }
 
-// The /people builder-directory page (task 1002577) — gated on the
-// `project.curate` ATOM, the same key its one data route (GET /scouting,
-// modules/platform-identity) checks, so the page layer can never drift wider
-// than the API it fronts. R14 (goal 1000045, ADR 0210) widened that route to a
-// SECOND audience that is not a rank at all — a project owner — so this gate
-// carries the same OR through `alsoAdmits` above: the two doors of the page are
-// exactly the two doors of the route, and neither layer can drift from it.
-async function requireProjectCuratePage(req, res, next) {
-  return runPageGate('requireProjectCuratePage', req, res, next);
-}
-
 // The /board-room page (ADR 0266) — gated on the `board.vote.cast` ATOM, the
 // same key the vote route checks, so the page layer can never drift NARROWER
 // than the API it fronts. That is the direction that matters here: the Board
@@ -940,7 +926,6 @@ module.exports = {
   requireBuilder,
   requireBuilderPage,
   requireGovernmentPage,
-  requireProjectCuratePage,
   requireBoardVotePage,
   requireCorePinPage,
   requireFleetPage,

package/src/bongos/serve-internal.js

@@ -936,17 +936,13 @@ function mountInternalSurfaces(app) {
   // statically, and a comment in that gap drops the regex out of the map, which
   // makes the page test as UNGATED while looking gated here. Prose goes above.
   const BOARD_ROOM_PAGE_RE = /^\/builders\/board-room(?:\.html)?\/?$/;
-  // The /people builder directory (task 1002577): gated on `project.curate`, the
-  // exact permission its data route (GET /scouting) checks — same posture as the
-  // /government tab above (the page can never drift wider than the API it fronts).
-  const PEOPLE_PAGE_RE = /^\/builders\/people(?:\.html)?\/?$/;
   // /deploy — the owner's deploy door (task 1003159, ADR 0293). Gated on the
   // `core.pin.move` atom, the same key its preview and its move both check, so the
   // shell's reach equals the right to press the button. Archon-floor and system:true,
   // which makes this the narrowest page gate here — correct for the one surface whose
   // button restarts the live service and changes what code the platform runs.
   //
-  // DECLARED HERE, WITH THE OTHER GATES, AND NOT BELOW: the SCOUTING_LEGACY_RE block
+  // DECLARED HERE, WITH THE OTHER GATES, AND NOT BELOW: the RETIRED_DIRECTORY_RE block
   // that follows is a matcher immediately followed by the redirect it feeds, and
   // tests/hall_roster_world.mjs reads them as one span. Wedging a declaration between
   // the two separates a matcher from its handler for a reader as well as for that test.
@@ -959,23 +955,24 @@ function mountInternalSurfaces(app) {
   const DEPLOY_PAGE_RE = /^\/builders\/deploy(?:\.html)?\/?$/;
   // The fleet cost page (task 1001949), on the atom its one read checks.
   const FLEET_PAGE_RE = /^\/builders\/fleet(?:\.html)?\/?$/;
-  // /scouting WAS the legacy twin of /people — the same /api/gds/scouting
-  // directory, left behind when task 1002577 graduated it into the hall. Task
-  // 1003470 had already made the two one page (scouting.html rendered people's
-  // body byte-for-byte and scouting.js was deleted); task 1003440 removes the
-  // door itself, because a second URL onto one directory is a surface to keep in
-  // sync for no reader. The URL survives as a 301 so an old bookmark lands on the
-  // directory instead of a 404. It carries no page gate: the redirect discloses
-  // nothing, and /people's wall applies the instant the browser follows it.
-  const SCOUTING_LEGACY_RE = /^\/builders\/scouting(?:\.html)?\/?$/;
+  // /people and its legacy twin /scouting were the hall's cross-project builder
+  // directory. Task 1003440 deleted the /scouting door; task 1003444 deleted
+  // /people itself (owner call, 2026-09-25 — ADR 0337 D5): cross-project
+  // discovery belongs to the hub, and /roster is the hall's directory. Both URLs
+  // survive as redirects to /roster so a bookmark lands somewhere instead of a
+  // 404. 302, not 301: /roster is interim until the hub community page (task
+  // 1003363) ships, and a browser caches a 301 past any re-point. No page gate:
+  // the redirect discloses nothing, and /roster is deliberately public.
+  // GET /scouting's own gate (platform-identity) is untouched by this.
+  const RETIRED_DIRECTORY_RE = /^\/builders\/(?:people|scouting)(?:\.html)?\/?$/;
   app.use((req, res, next) => {
     if (isModuleSurfaceHost(req)) return next();
     if (req.method !== 'GET' && req.method !== 'HEAD') return next();
-    if (!SCOUTING_LEGACY_RE.test(path.posix.normalize(req.path))) return next();
+    if (!RETIRED_DIRECTORY_RE.test(path.posix.normalize(req.path))) return next();
     const qs = req.url.includes('?') ? req.url.slice(req.url.indexOf('?')) : '';
     // On the builders subdomain the /builders prefix is redundant (the canonical
     // redirect above strips it), so emit the clean path and save a second hop.
-    return res.redirect(301, `${isBuildersHost(req) ? '' : '/builders'}/people${qs}`);
+    return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/roster${qs}`);
   });
 
   // /deploy EXISTS ONLY WHERE THE DOOR DOES (task 1004296). The owner, 2026-09-25: /deploy is
@@ -1019,9 +1016,6 @@ function mountInternalSurfaces(app) {
     if (BOARD_ROOM_PAGE_RE.test(norm)) {
       return gdsAuth.requireBoardVotePage(req, res, next);
     }
-    if (PEOPLE_PAGE_RE.test(norm)) {
-      return gdsAuth.requireProjectCuratePage(req, res, next);
-    }
     // ADR 0293: the deploy door, on the same atom its two routes check.
     if (DEPLOY_PAGE_RE.test(norm)) {
       return gdsAuth.requireCorePinPage(req, res, next);

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.1045'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.1046'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/account_privacy_flags.mjs

@@ -418,7 +418,7 @@ test('the recruiting surface really is exactly two reads, and each one joins REA
   const av = readFileSync(join(ROOT, 'modules/platform-identity/account-visibility.js'), 'utf8');
   // The directory reads TWO tiers since task 1002291 — ranked, and the hidden
   // builders it lists by name — and the opt-out must empty both, or "removes you
-  // from the People directory" is false for a builder who also hid their record.
+  // from the recruiting directory" is false for a builder who also hid their record.
   for (const composed of ['scoutingListableSql', 'scoutingNameOnlySql', 'recruiterSliverVisibleSql']) {
     const body = av.slice(av.indexOf(`function ${composed}(`));
     assert.match(body.slice(0, body.indexOf('\n}')), /recruiterReachSql\(alias\)/,

package/tests/auth_resolve_failure.mjs

@@ -93,22 +93,22 @@ test('AUDIT: every async middleware mounted directly on a router owns its reject
   // rot: a NEW bare `async function require*` added later fails this test.
   //   requireBuilder            — the API gate. Guarded here (BV1.R109-follow-up).
   //   requireBuilderPage        \
-  //   requireGovernmentPage      \ all FOUR delegate to runPageGate, guarded by
-  //   requireProjectCuratePage   /  BV1.R107 (the /people curate gate; the
-  //   requireBoardVotePage      /   ADR 0266 /board-room vote gate)
+  //   requireGovernmentPage      \ all delegate to runPageGate, guarded by
+  //   requireBoardVotePage       /  BV1.R107 (and the ADR 0266 /board-room vote gate)
   //   requireCorePinPage        /   ADR 0293's /deploy door — the narrowest of them,
   //                                 on the archon-floor `core.pin.move` atom.
   //   requireFleetPage            — task 1001949's /fleet cost page, same delegation.
   // Task 1003450 removed two more — requireNonXenosPage and the R113
   // requireGovernmentManagePage — which had both ended up dispatched from no
-  // route at all; tests/hall_page_gate_map.mjs now fails if that recurs.
+  // route at all; tests/hall_page_gate_map.mjs now fails if that recurs. Task
+  // 1003444 removed requireProjectCuratePage with the /people page it fronted.
   // Anything else async and router-mounted must be added with its own try/catch.
   const src = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'auth.js'), 'utf8');
   const asyncMw = [...src.matchAll(/^async function (require\w+|allow\w+)\s*\(req, res, next\)/gm)].map((m) => m[1]);
-  assert.deepEqual(asyncMw.sort(), ['requireBoardVotePage', 'requireBuilder', 'requireBuilderPage', 'requireCorePinPage', 'requireFleetPage', 'requireGovernmentPage', 'requireProjectCuratePage'],
+  assert.deepEqual(asyncMw.sort(), ['requireBoardVotePage', 'requireBuilder', 'requireBuilderPage', 'requireCorePinPage', 'requireFleetPage', 'requireGovernmentPage'],
     'a new async router middleware appeared — give it a try/catch and add it here');
   // The page gates must actually delegate (that is WHY they are safe).
-  for (const name of ['requireBuilderPage', 'requireGovernmentPage', 'requireProjectCuratePage', 'requireBoardVotePage', 'requireCorePinPage', 'requireFleetPage']) {
+  for (const name of ['requireBuilderPage', 'requireGovernmentPage', 'requireBoardVotePage', 'requireCorePinPage', 'requireFleetPage']) {
     const fn = src.slice(src.indexOf(`async function ${name}`));
     assert.match(sliceFn(fn), /runPageGate\(/, `${name} must delegate to the guarded runPageGate`);
   }

package/tests/core_upgrade_owner_door.mjs

@@ -28,7 +28,7 @@ const require = createRequire(import.meta.url);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 
 // The session double must be installed BEFORE auth.js loads: auth.js destructures
-// lookupSession at require time (the tests/scouting_page_gate.mjs precedent).
+// lookupSession at require time (the tests/page_gate_second_door.mjs precedent).
 const dbKernel = require('../src/bongos/db-kernel.js');
 let nextSession = null;
 dbKernel.lookupSession = async () => nextSession;

package/tests/edit_hints.mjs

@@ -21,7 +21,7 @@ const hints = require(HOOK);
 
 test('each generator input maps to its generator; unrelated paths map to nothing', () => {
   const cases = [
-    ['modules/hall-ui/public/people.js', 'copy-inventory.js'],
+    ['modules/hall-ui/public/roster.js', 'copy-inventory.js'],
     ['modules/status-ui/public/index.html', 'copy-inventory.js'],
     ['src/bongos/auth.js', 'gen-repo-map.js'],
     ['modules/lifecycle/routes/claims.js', 'gen-api-docs.js'],
@@ -39,12 +39,12 @@ test('each generator input maps to its generator; unrelated paths map to nothing
 });
 
 test('rel() reconciles C:\\, C:/ and /c/ shapes between CLAUDE_PROJECT_DIR and file_path', () => {
-  const want = 'modules/hall-ui/public/people.js';
-  assert.equal(hints.rel('C:\\r\\repo\\modules\\hall-ui\\public\\people.js', 'C:\\r\\repo'), want);
-  assert.equal(hints.rel('C:\\r\\repo\\modules\\hall-ui\\public\\people.js', 'C:/r/repo'), want);
-  assert.equal(hints.rel('/c/r/repo/modules/hall-ui/public/people.js', 'C:\\r\\repo'), want);
-  assert.equal(hints.rel('c:/r/repo/modules/hall-ui/public/people.js', 'C:/r/repo/'), want);
-  assert.equal(hints.rel('/home/u/repo/modules/hall-ui/public/people.js', '/home/u/repo'), want);
+  const want = 'modules/hall-ui/public/roster.js';
+  assert.equal(hints.rel('C:\\r\\repo\\modules\\hall-ui\\public\\roster.js', 'C:\\r\\repo'), want);
+  assert.equal(hints.rel('C:\\r\\repo\\modules\\hall-ui\\public\\roster.js', 'C:/r/repo'), want);
+  assert.equal(hints.rel('/c/r/repo/modules/hall-ui/public/roster.js', 'C:\\r\\repo'), want);
+  assert.equal(hints.rel('c:/r/repo/modules/hall-ui/public/roster.js', 'C:/r/repo/'), want);
+  assert.equal(hints.rel('/home/u/repo/modules/hall-ui/public/roster.js', '/home/u/repo'), want);
 });
 
 test('run as a hook: prints one hint for a generator input, nothing for an unrelated file, exit 0 both times', () => {
@@ -53,7 +53,7 @@ test('run as a hook: prints one hint for a generator input, nothing for an unrel
     input: JSON.stringify({ tool_input: { file_path: path.join(projectDir, ...relPath.split('/')) } }),
     encoding: 'utf8', timeout: 15000, env: { ...process.env, CLAUDE_PROJECT_DIR: projectDir },
   });
-  const a = run('modules/hall-ui/public/people.js');
+  const a = run('modules/hall-ui/public/roster.js');
   assert.equal(a.status, 0, a.stderr);
   assert.match(a.stdout, /copy-registry\.json is now stale/);
   assert.match(a.stdout, /copy-inventory\.js/);

package/tests/effective_visibility_predicate.mjs

@@ -1122,7 +1122,7 @@ await ta('private accounts are absent from the leaderboard/directory rollup', as
   const rows = await pi.listScoutingRollup({ limit: 50, pool });
   const shown = rows.map((r) => r.github_login).sort();
   assert.deepEqual(shown, ['octo', 'shifted'],
-    'only active, publicly-visible, unhidden accounts reach /people and /scouting — '
+    'only active, publicly-visible, unhidden accounts reach /scouting — '
     + `got ${JSON.stringify(shown)}; ghost/scout are private, shy is hidden, newbie is provisional, moved is private, legacy never accepted the terms (ADR 0213)`);
 });
 

package/tests/government_parity.mjs

@@ -280,7 +280,7 @@ function parsePageGates(src) {
   // Each entry's own object literal is bounded by [^}]* so the scan cannot run past a
   // gate that lacks a `permission` key and silently adopt the NEXT gate's. `permission`
   // is then found ANYWHERE inside that literal rather than assumed to come first —
-  // requireProjectCuratePage already carries a second key, and key order in an object
+  // every gate carries a `deniedTo` beside it, and key order in an object
   // literal is not a contract anyone maintains.
   for (const m of block[1].matchAll(/(require[A-Za-z]*Page):\s*Object\.freeze\(\{([^}]*)\}\)/g)) {
     const perm = m[2].match(/permission:\s*'([^']+)'/);

package/tests/hall_builders_page_pass.mjs

@@ -223,9 +223,9 @@ test('B: a payload with no id degrades to the place alone', async () => {
 });
 
 test('B: the id wears the same mono/faint voice as the login', () => {
-  const css = read('people.css');
+  const css = read('roster.css');
   const i = css.indexOf('.ledger__place .ledger__id {');
-  assert.ok(i > 0, 'people.css styles the roster id');
+  assert.ok(i > 0, 'roster.css styles the roster id');
   const block = css.slice(i, css.indexOf('}', i));
   for (const token of ['var(--font-mono)', 'var(--ink-faint)']) {
     assert.ok(block.includes(token), `the id spends ${token}, the voice .dir-login already uses`);

package/tests/hall_nav.mjs

@@ -266,10 +266,9 @@ test('sidebar groups read by audience, in order', () => {
   assert.deepEqual(nav[0].items.map((i) => i.id), ['home', 'roadmap', 'goals', 'goal-map', 'work', 'blockers', 'board-room', 'ideas', 'thinking', 'copy-desk', 'studio'],
     'the unlabeled group is the project itself (task 1002425 order)');
   assert.deepEqual(nav[1].items.map((i) => i.id), ['standing', 'profile'], 'You = your own numbers');
-  // People (task 1002577): the /scouting directory graduated into the hall.
-  // Gated cosmetically to match its data endpoint — `project.curate`, floor METIC,
-  // so the nav entry reads 'government' since ADR 0174 (it said 'archon', then
-  // was stricter than the wall). requireProjectCuratePage is the wall server-side.
+  // task 1003444: 'people' LEFT the group — the owner deleted the hall's
+  // cross-project directory (ADR 0337 D5); its home is the hub, and /people
+  // redirects to /roster. Builders is the hall's directory now.
   // task 1003172 (C02 of goal 1000075): 'collab' joins Community, FIRST. The
   // group is picked by whose data it is, and a help request is another builder
   // reaching you — not your own numbers (that is You), and not reference (Docs).
@@ -280,7 +279,8 @@ test('sidebar groups read by audience, in order', () => {
   // changed: it was a hash view on index.html (href /#leaderboard, view:
   // 'leaderboard') and is now a real page at /roster labelled Builders. That is
   // what made this group read as one real page plus a link into the home page.
-  assert.deepEqual(nav[2].items.map((i) => i.id), ['collab', 'roster', 'people'], 'Community = everyone else');
+  assert.deepEqual(nav[2].items.map((i) => i.id), ['collab', 'roster'], 'Community = everyone else, in this project');
+  assert.ok(!nav.flatMap((g) => g.items).some((i) => /^\/people\b/.test(i.href)), 'no nav item points at the deleted /people');
   assert.deepEqual(nav[3].items.map((i) => i.id),
     ['primer', 'ranks', 'economy', 'diagrams', 'atlas', 'modules', 'apidocs'], 'Docs = reference material');
   // 'government' (the Permissions tab, BV1.R113) is the group's one archon-gated item.
@@ -343,11 +343,11 @@ test('THE CORRECTION: Community shows a xenos two items, Collab and Builders', (
 test('neither Community page hides behind a rank the page itself does not enforce', () => {
   // The invariant this task exists to restore: a nav flag may be narrower than
   // the wall for cosmetic reasons (/profile does it), but it must never assert a
-  // RANK the page gate does not. /people keeps its rank flag legitimately — it
-  // fronts project.curate, which requireProjectCuratePage really does enforce.
+  // RANK the page gate does not. /people was the one item with a legitimate rank
+  // flag; it left the hall in task 1003444, so the group now carries none.
   const community = parseNav(boot().sidebarHtml).find((g) => g.label === 'Community');
   const ranked = community.items.filter((i) => RANK_GATES.has(i.gate)).map((i) => i.id);
-  assert.deepEqual(ranked, ['people'], 'only /people carries a rank flag, and its API enforces one');
+  assert.deepEqual(ranked, [], 'no Community item carries a rank flag');
 });
 
 test('no group head is gated wider than its own items', () => {

package/tests/hall_page_gate_map.mjs

@@ -36,7 +36,6 @@ const SRC = fs.readFileSync(path.join(ROOT, 'src/bongos/serve-internal.js'), 'ut
 // functions in src/bongos/auth.js):
 //   requireBuilderPage          page.view.public      any signed-in builder (xenos+)
 //   requireGovernmentPage       page.view.government  metic+   (ADR 0157)
-//   requireProjectCuratePage    project.curate        metic+
 //   requireBoardVotePage        board.vote.cast       xenos+   (ADR 0266)
 // That list is now CHECKED, not just written: "every page gate is dispatched"
 // below reads the gate table out of auth.js and fails if a gate here guards no
@@ -107,12 +106,13 @@ const ORACLE = {
   // The fleet cost page (task 1001949), on the atom its one read checks.
   '/builders/fleet': 'requireFleetPage',
 
-  // Metic+ via the `project.curate` atom — the exact permission GET /scouting
-  // checks, so the page can never drift wider than the API it fronts. Its
-  // legacy twin /builders/scouting is gone (task 1003440): the URL now 301s to
-  // /people before this dispatch runs, so it holds no gate and has no row —
-  // tests/hall_roster_world.mjs owns the proof that the redirect is there.
-  '/builders/people': 'requireProjectCuratePage',
+  // Gone (task 1003444, owner call 2026-09-25 — ADR 0337 D5): the cross-project
+  // directory left the hall, and /people now redirects to /roster before this
+  // dispatch runs, like its legacy twin /scouting (task 1003440).
+  // tests/hall_roster_world.mjs owns the proof that the redirect is there. The
+  // page gate that fronted it (requireProjectCuratePage) went with it; what
+  // still holds is GET /scouting's own gate, in the platform-identity module.
+  '/builders/people': null,
 
   // Metic+ since R16 (goal 1000069): the Government page is three rooms —
   // Permissions · Board Room · Constitution (reordered, task 1003269) — and only
@@ -138,8 +138,8 @@ const ORACLE = {
   // /roster joins them (task 1003441): it is this project’s own ledger, and its
   // one data source — GET /leaderboard — is deliberately unauthenticated,
   // mirroring the public status surface. The page must not be gated tighter than
-  // the API it fronts, which is the same rule that puts /people at
-  // project.curate. It was reachable to a stranger as the #leaderboard view on
+  // the API it fronts, which is the same rule that puts /deploy at
+  // core.pin.move. It was reachable to a stranger as the #leaderboard view on
   // the ungated index, so this preserves the audience rather than widening it.
   '/builders/roster': null,
   '/builders/': null,
@@ -310,6 +310,9 @@ const GONE_PAGES = {
   // Task 1004231 — the ideator's sky replaced both the room and the old sky with
   // one page at /thinking; /sky is a 301 to it, not a page.
   '/builders/sky': 'task 1004231 — the sky lives at /thinking now; /sky redirects there',
+  // Task 1003444 — the owner deleted the hall's cross-project directory; the hub
+  // community page (task 1003363) is its home, and /people redirects to /roster.
+  '/builders/people': 'task 1003444 — the hall has no cross-project directory; /people redirects to /roster',
 };
 
 test('a row that is null because the page left the hall serves no page', () => {
@@ -344,8 +347,8 @@ const AUTH_SRC = fs.readFileSync(path.join(ROOT, 'src/bongos/auth.js'), 'utf8');
 function readPageGateNames(src) {
   const table = /const PAGE_GATES = Object\.freeze\(\{([\s\S]*?)\n\}\);/.exec(src);
   assert.ok(table, 'PAGE_GATES is still a `const PAGE_GATES = Object.freeze({…});` literal');
-  // Entry keys sit at exactly one indent level; `permission:` / `deniedTo:` /
-  // `alsoAdmits:` are nested deeper, so the two-space anchor keeps them out.
+  // Entry keys sit at exactly one indent level; `permission:` / `deniedTo:`
+  // are nested deeper, so the two-space anchor keeps them out.
   return [...table[1].matchAll(/^ {2}(require\w+):/gm)].map((m) => m[1]);
 }