@bongos/core 1.19.170 → 1.19.172

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.170",
-  "core_contract": "1.19.170",
-  "source_commit": "2fd8009b960bd910fe95b3169d504adc7fe309d1",
+  "core_version": "1.19.172",
+  "core_contract": "1.19.172",
+  "source_commit": "d488f4a69b30ec2fe81f95cc1ec652c25af8fc68",
   "source_ref": "HEAD",
-  "built_at": "2026-08-16T18:45:10.150Z",
+  "built_at": "2026-08-16T19:39:18.102Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 305,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1268,
+    "functional_verbatim": 1271,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1594,
-  "tree_sha256": "938326e2e51b3c2bf0a7ab516c8444005ec95028f247df10cc55bedae67b099f",
+  "file_count": 1597,
+  "tree_sha256": "c7aad1a023cefa6bce6c0403ed5d0bf9c1e5a28b4e38e14a85f1cfc697d5edb3",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "d6d6163164f98c96a8e25dfe84825669bf8324f1f1b98adb0674781ad235ad10"
+      "sha256": "a13c27a7d671408579dedf417b7f28486bebc52b7a685ba3900cd4eca843957c"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "386706d0ef3d09c5e074bdc45bfc0de869d732eb1cb2a2280472f02f797f2b74"
+      "sha256": "7b6abb75150b8fdc9fba1e0d765c049979da7cdd1d6a20eeeb6f3d5e3886ebc7"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "7d462b5b80c9db9159981406398fc62c5ba71043c6a3b9433852d06d612bf2b0"
+      "sha256": "a4a864366450b849bafc096807f37cd16c8ed624470473aaf4907b24ab104778"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "4acb1dde6f894ba37cff7e27e0110f12ae30c7cb6e4d972d6e85d2877489b6d0"
+      "sha256": "c032e9796a9feeee86929323992511d5ed1cb448975481f98f86cee1b3790d50"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "4c7679ef258644ab12db1b8fe412b388f96f4296c6aae45d6ab637a8f3b9a037"
+      "sha256": "cc177720f5f3b0971edac3f03464e3dd5930b48d12811cd9ab39a7b6ceaaeb9c"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1347,12 +1347,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "ccf59372e0456f36d83154d6dff4dbf5382e8d69023bee82b318b8e9cfb2c50b"
+      "sha256": "d1595faad24aafba420199b3115b11ee5387de7c97c7f4fe7fe4f138f43dd79a"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "4deac83a1d7c12e1a24109e856d9a6fef6b539afafdca55a525ab6786fe4e235"
+      "sha256": "1435287ef26983d7088555abc9f18df97ceb4a8676be091ff49076e54a4366ab"
     },
     {
       "path": "docs/architecture.md",
@@ -2662,7 +2662,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "7d462b5b80c9db9159981406398fc62c5ba71043c6a3b9433852d06d612bf2b0"
+      "sha256": "a4a864366450b849bafc096807f37cd16c8ed624470473aaf4907b24ab104778"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -3317,12 +3317,12 @@
     {
       "path": "modules/hall-ui/public/profile.html",
       "mode": "0000644",
-      "sha256": "cd3148ae6a22d7e7fff8e0b4a07aed2fe6d27b4e0b6e5b450bd2a63b3f078713"
+      "sha256": "b8d5fb31d92f6d65e8f257d10c77f4ee0aa0ebec50d977d4c7d918ff2253da1e"
     },
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "be57f192368280ac1ae2b0b820f89daf59512f9f89d9ad23414c42cbf09a462e"
+      "sha256": "a4cf0c4c2d088fd1fb84c41c93cc28e2acd2b656b0bc995cd46043881b3611fa"
     },
     {
       "path": "modules/hall-ui/public/ranks.html",
@@ -3789,6 +3789,11 @@
       "mode": "0000644",
       "sha256": "cce2f971f030aa628f9d7855f2e421595ea71cb314e90965206dbe970b7beded"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_008_handle.sql",
+      "mode": "0000644",
+      "sha256": "f78eb8f7b6ee1ea3ddd789d6019b9715ae193ff0cb7890aeb24d8473033a911a"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -3797,7 +3802,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "96907af1af78c472118ecf5ed9f269d6d2ce940b09535aae3b3df4de4d2337c1"
+      "sha256": "115be49e667716d760610f8a9b167eeea4e0e6b61c40c7b9a439703847b61dcd"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -3817,7 +3822,7 @@
     {
       "path": "modules/platform-identity/routes/profile.js",
       "mode": "0000644",
-      "sha256": "6ea29b4f07417fa925b7987dd7fbe8a0262b7fec83ceffade9fccbc220289bba"
+      "sha256": "29e7f6304b4215fd79c35662c48370a04a5a9ffa2c3c4ae3d1fabf277d407eb2"
     },
     {
       "path": "modules/platform-identity/routes/projects.js",
@@ -3837,7 +3842,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "18bf8d0cb42d76bc5413c760b13837fe439a6e719b88a84db96f143b829e67d5"
+      "sha256": "4b7f13effc33d5d16a5f87d0915ed31e107f138ef135822745774f90192ad327"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -4212,12 +4217,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "0b596f97bbd28b6ddfda4a9265effcb0ea8711a4bb57948c35b80d7cf79c23d9"
+      "sha256": "3da96cec73d1af6c4f1470d29cc26187cc949eba5b6fb7291b89da3da4c7eae7"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ae9625129bd03cb29845f65e1be3abd91c48259d85a9c23095370e43a0a0e8aa"
+      "sha256": "dbf95e145339c9e8d52b1e532e452eb2d344c0c0f06a28f58c6e19366e256dd6"
     },
     {
       "path": "public-docs/index.html",
@@ -5477,7 +5482,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "b6550cee568d8e8082c30512979256872d71d0d7f1810d061f5dbffad8a76979"
+      "sha256": "1cd66475d610b107b0f3b7f19688133e7c482b41b034e2cef6009d552df31cb2"
     },
     {
       "path": "scripts/migrate.sh",
@@ -5822,7 +5827,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "28605499539ca63e000ac2fc52af1a3d75dbb2fd947846426619a189a2afd92b"
+      "sha256": "bc1f9966a0040b5239664c1a5d993c302b1fa9c56d2080c97b168115a4da847a"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6904,6 +6909,11 @@
       "mode": "0000644",
       "sha256": "82bf1cc68150c247c108308d360d6408511f31a7af11d5e7a4721e7ea282f2bb"
     },
+    {
+      "path": "tests/handle_machinery.mjs",
+      "mode": "0000644",
+      "sha256": "755f49404e97c60c8c264f5f4c9d563a7c4ee4f51b43afe96fd10acce52ebe7b"
+    },
     {
       "path": "tests/helpers.mjs",
       "mode": "0000644",
@@ -7389,6 +7399,11 @@
       "mode": "0000644",
       "sha256": "3b3045a6143d67c963516ed5703b5dabb9b8945a392118721e6a0a56258f1732"
     },
+    {
+      "path": "tests/profile_ui_cross_project.mjs",
+      "mode": "0000644",
+      "sha256": "6a7a223a678b56333befaed017429e5b9d8a81e4405efae72a23355902517d9d"
+    },
     {
       "path": "tests/project_stats.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 273 operations across 45 resource groups
+- 274 operations across 45 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -423,6 +423,8 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // PATCH /me/handle — rank: any-builder — PATCH /me/handle
+      patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/clients/bongos-client/index.cjs

@@ -422,6 +422,8 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // PATCH /me/handle — rank: any-builder — PATCH /me/handle
+      patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/clients/bongos-client/index.d.ts

@@ -51,7 +51,7 @@ export interface GetInboxResponse { ideas: unknown; open_count: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
 export interface GetLearningsResponse { learnings: unknown }
 export interface GetMeAchievementsResponse { unlocked: unknown }
-export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; cross_project: unknown }
+export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; cross_project: unknown }
 export interface GetMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface GetMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
 export interface GetMeRecentShipsResponse { ships: unknown }
@@ -131,6 +131,8 @@ export interface PatchMeDisciplinesRequest { preferred_disciplines: string[] }
 export interface PatchMeDisciplinesResponse { builder: unknown; onboarding: unknown }
 export interface PatchMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface PatchMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
+export interface PatchMeHandleRequest { handle: string }
+export interface PatchMeHandleResponse { handle: unknown; previous_handle: unknown }
 export interface PatchMeSkillPrefsResponse { prefs: unknown; effective: unknown; defaults: unknown; known_skills: unknown; allowed_models: unknown }
 export interface PatchMeSoundPrefsResponse { prefs: unknown; effective: unknown; effective_map: unknown; volume: unknown; defaults: unknown; known_sounds: unknown }
 export interface PatchProjectsIdFeaturedRequest { featured: boolean }
@@ -662,6 +664,8 @@ export interface BongosClient {
     getMeEventSoundPrefs(args?: RequestArgs): Promise<GetMeEventSoundPrefsResponse>;
     /** PATCH /me/event-sound-prefs — rank: any-builder */
     patchMeEventSoundPrefs(args?: RequestArgs): Promise<PatchMeEventSoundPrefsResponse>;
+    /** PATCH /me/handle — rank: any-builder */
+    patchMeHandle(args: RequestArgs & { body: PatchMeHandleRequest }): Promise<PatchMeHandleResponse>;
     /** GET /me/interaction — rank: any-builder */
     getMeInteraction(args?: RequestArgs): Promise<ApiResponse>;
     /** PATCH /me/interaction — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -419,6 +419,8 @@ export function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // PATCH /me/handle — rank: any-builder — PATCH /me/handle
+      patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/docs/api/openapi.json

@@ -6575,6 +6575,55 @@
         ]
       }
     },
+    "/me/handle": {
+      "patch": {
+        "operationId": "patch_me_handle",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/handle",
+        "description": "rename the caller's OWN handle (own data, keyed on the authenticated github_id). Rules live in setAccountHandle: canonical form, reserved words refused, one rename per window, previous handle kept for the 301 window. Upsert-first (the setAccountHideStats precedent) so a hub builder who never federated can still claim a handle — never demotes consent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/profile.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeHandleRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeHandleResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/me/interaction": {
       "get": {
         "operationId": "get_me_interaction",
@@ -12942,11 +12991,13 @@
             "type": "boolean"
           },
           "profile_state": {},
+          "handle": {},
           "cross_project": {}
         },
         "required": [
           "hide_stats",
           "profile_state",
+          "handle",
           "cross_project"
         ]
       },
@@ -13984,6 +14035,31 @@
           "events"
         ]
       },
+      "PatchMeHandleRequest": {
+        "type": "object",
+        "properties": {
+          "handle": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 39
+          }
+        },
+        "required": [
+          "handle"
+        ],
+        "additionalProperties": false
+      },
+      "PatchMeHandleResponse": {
+        "type": "object",
+        "properties": {
+          "handle": {},
+          "previous_handle": {}
+        },
+        "required": [
+          "handle",
+          "previous_handle"
+        ]
+      },
       "PatchMeSkillPrefsResponse": {
         "type": "object",
         "properties": {
@@ -17222,9 +17298,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 273,
-  "x-schema-count": 306,
+  "x-endpoint-count": 274,
+  "x-schema-count": 308,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 207,
+  "x-response-schemas": 208,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 273 endpoints across 45 route files.
+> **Generated from the live route files** — the route file is authoritative. 274 endpoints across 45 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -282,7 +282,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/llm-cache/lookup` | `metic+archon` | `cache_key`, `tokens_saved_est` | POST /llm-cache/lookup — hit/miss + atomic hit_count bump. |
 | POST | `/api/bongos/llm-cache/store` | `metic+archon` | `spec`, `result_stdout`, `result_cost_usd` | POST /llm-cache/store — upsert a freshly-produced result. |
 
-## `me` (23)
+## `me` (24)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -296,6 +296,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/me/display-name` | `any-builder` | _undocumented_ | PATCH the display name. |
 | GET | `/api/bongos/me/event-sound-prefs` | `any-builder` | — | Per-builder per-event sound variant selection (task 582, migration 164). |
 | PATCH | `/api/bongos/me/event-sound-prefs` | `any-builder` | _undocumented_ | PATCH a partial set of event sound overrides. |
+| PATCH | `/api/bongos/me/handle` | `any-builder` | `handle` | rename the caller's OWN handle (own data, keyed on the authenticated github_id). |
 | GET | `/api/bongos/me/interaction` | `any-builder` | — | Per-builder INTERACTION PROFILE (task 2010, shares the behavior_prefs jsonb / migration 119). |
 | PATCH | `/api/bongos/me/interaction` | `any-builder` | _undocumented_ | PATCH the interaction profile. |
 | GET | `/api/bongos/me/model-allocation` | `any-builder` | — |  |

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -422,6 +422,8 @@ function createClient(opts = {}) {
       getMeEventSoundPrefs: (args) => request("GET", "/me/event-sound-prefs", { hasBody: false }, args),
       // PATCH /me/event-sound-prefs — rank: any-builder — PATCH /me/event-sound-prefs
       patchMeEventSoundPrefs: (args) => request("PATCH", "/me/event-sound-prefs", { hasBody: true }, args),
+      // PATCH /me/handle — rank: any-builder — PATCH /me/handle
+      patchMeHandle: (args) => request("PATCH", "/me/handle", { hasBody: true }, args),
       // GET /me/interaction — rank: any-builder — GET /me/interaction
       getMeInteraction: (args) => request("GET", "/me/interaction", { hasBody: false }, args),
       // PATCH /me/interaction — rank: any-builder — PATCH /me/interaction

package/modules/hall-ui/public/profile.html

@@ -40,6 +40,14 @@
           </div>
         </section>
 
+        <!-- Cross-project record — hub-only (ADR 0171). profile.js reveals this
+             only when the profile response carries a cross_project key; on a
+             vanilla instance the key is absent and the section never renders. -->
+        <section class="scroll" id="xp-scroll" aria-labelledby="xp-h" hidden>
+          <h2 id="xp-h" class="scroll__h">Cross-project record</h2>
+          <div id="xp-body"></div>
+        </section>
+
         <!-- Achievements — the builder's earned shelf. -->
         <section class="scroll scroll--bare" id="ach-scroll" aria-labelledby="ach-h">
           <h2 id="ach-h" class="scroll__h">Achievements</h2>
@@ -66,6 +74,10 @@
             </tbody>
           </table>
         </section>
+
+        <!-- Reserved slots — connections, guilds, and actions (profile-page
+             spec sections 6–8) mount here in later phases; keeping the order
+             fixed now means the page is not re-laid-out twice (Decision 5). -->
       </main>
 
       <footer class="app-foot" id="app-foot"></footer>
@@ -83,6 +95,6 @@
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>
 <script src="/builders/brand-apply.js?v=2026-06-27-r75"></script>
-<script src="/builders/profile.js?v=2026-08-04-reward1"></script>
+<script src="/builders/profile.js?v=2026-08-16-r04"></script>
 </body>
 </html>

package/modules/hall-ui/public/profile.js

@@ -160,6 +160,82 @@
     }).join('');
   }
 
+  // ---- render: cross-project record (hub-only, ADR 0171 / task 1002280) ----
+  //
+  // The section reveals only when the response carries a cross_project KEY —
+  // present iff the hub port resolved; on a vanilla instance the key is absent
+  // and the section stays hidden (degrade, don't 500). A null value means "no
+  // public cross-project record" — hidden, provisional, or none, deliberately
+  // indistinguishable — so all three render the same private line and NOTHING
+  // derived from the rollup (no partial numbers; a count plus a hidden total is
+  // a leak by subtraction). The response is viewer-independent (ADR 0171 D4):
+  // self is detected client-side by comparing the /me id, and the self "toggle"
+  // is a link to the real control in Settings (R03). No caching assumptions —
+  // hub profile responses are no-store (ADR 0171 D5).
+
+  function xpProjectRow(p) {
+    const name = escapeHtml(p.name || 'Project');
+    // origin is third-party-reported; link only a well-formed https URL.
+    const origin = typeof p.origin === 'string' && /^https:\/\//.test(p.origin) ? p.origin : null;
+    const nameCell = origin ? `<a href="${escapeHtml(origin)}" rel="noopener">${name}</a>` : name;
+    // rank_held is THAT project's standing as it reported it — plain text, never
+    // the local rank badge or the instance's own rank labels (spec Decision 1).
+    const held = typeof p.rank_held === 'string' && p.rank_held
+      ? escapeHtml(p.rank_held.charAt(0).toUpperCase() + p.rank_held.slice(1))
+      : '—';
+    return `<tr><td>${nameCell}</td><td>${held}</td></tr>`;
+  }
+
+  function renderCrossProject(data, selfId) {
+    const section = $('#xp-scroll');
+    const body = $('#xp-body');
+    if (!section || !body) return;
+    if (!data || !('cross_project' in data)) {
+      section.hidden = true;
+      return;
+    }
+    // ids may serialize as strings (pg bigint) — compare canonicalized.
+    const isSelf = selfId != null && data.builder && String(data.builder.id) === String(selfId);
+    const manage = isSelf
+      ? `<p class="scroll__lede">This is you — <a href="/settings#cross-project">manage its visibility in Settings → Cross-project record</a>.</p>`
+      : '';
+    const cp = data.cross_project;
+    if (!cp) {
+      body.innerHTML = `<p class="scroll__lede">This builder keeps their track record private.</p>${manage}`;
+      section.hidden = false;
+      return;
+    }
+    const t = cp.totals || {};
+    const tiles =
+      `<div class="stat-row">` +
+      tile('Projects', fmtNum(t.projects)) +
+      tile('Works shipped', fmtNum(t.works_shipped)) +
+      tile('Credits', fmtNum(t.credits)) +
+      tile('Karma', fmtNum(t.karma)) +
+      `</div>`;
+    const discs = Array.isArray(cp.disciplines) ? cp.disciplines.filter((d) => typeof d === 'string') : [];
+    const metaBits = [];
+    if (discs.length) metaBits.push(`Disciplines: ${discs.join(', ')}`);
+    if (cp.last_active) metaBits.push(`Last active ${fmtDate(cp.last_active)}`);
+    const meta = metaBits.length ? `<p class="scroll__lede">${escapeHtml(metaBits.join(' · '))}</p>` : '';
+    const named = Array.isArray(cp.projects) ? cp.projects : [];
+    const moreCount = Number(cp.more_projects) || 0;
+    const projectsTable = named.length
+      ? `<table class="ledger">
+           <thead><tr><th>Project</th><th title="That project's own standing, as reported by that project.">Standing there</th></tr></thead>
+           <tbody>${named.map(xpProjectRow).join('')}</tbody>
+         </table>`
+      : '';
+    const more = moreCount > 0
+      ? `<p class="scroll__lede">+ ${fmtNum(moreCount)} more project${moreCount === 1 ? '' : 's'} not publicly listed.</p>`
+      : '';
+    const none = !named.length && !moreCount
+      ? `<p class="scroll__lede">No cross-project activity reported yet.</p>`
+      : '';
+    body.innerHTML = tiles + meta + projectsTable + more + none + manage;
+    section.hidden = false;
+  }
+
   // ---- states -------------------------------------------------------------
 
   function showMessage(text) {
@@ -167,13 +243,14 @@
     if (sub) sub.textContent = text;
   }
 
-  function renderProfile(data) {
+  function renderProfile(data, selfId) {
     const builder = data.builder || {};
     const name = builder.display_name || builder.github_login || 'Builder';
     const shipped = Number(data.shipped_count) || 0;
     showMessage(`${name} — ${rankLabel(normalizeRank(builder.rank))} · ${fmtNum(shipped)} work${shipped === 1 ? '' : 's'} shipped`);
     renderHead(builder);
     renderNumbers(data.shipped_count, data.achievements);
+    renderCrossProject(data, selfId);
     renderAchievements(data.achievements);
     renderWorks(data.recent_ships);
   }
@@ -197,23 +274,39 @@
     const ach = $('#ach-grid'); if (ach) ach.innerHTML = '';
     const works = $('#works-table tbody'); if (works) works.innerHTML = '';
     const worksLede = $('#works-lede'); if (worksLede) worksLede.hidden = true;
+    const xp = $('#xp-scroll'); if (xp) xp.hidden = true;
   }
 
-  async function fetchProfile(id) {
+  async function fetchProfile(id, selfId) {
     const res = await api.request('GET', `${API}/builders/${encodeURIComponent(id)}/profile`);
     if (res.status === 404) {
       showMessage('No builder found with that id.');
       return;
     }
     if (!res.ok) throw new Error(`profile → ${res.status}`);
-    renderProfile(res.data || {});
+    renderProfile(res.data || {}, selfId);
+  }
+
+  // The viewer's own builder id, or null when signed out / unresolvable. Used
+  // ONLY for client-side self-detection (ADR 0171 D4 — the profile response is
+  // viewer-independent); a failure here just means no self link renders.
+  async function resolveSelfId() {
+    try {
+      const me = await api.request('GET', `${API}/me`);
+      if (!me.ok) return null;
+      const builder = (me.data && me.data.builder) ? me.data.builder : me.data;
+      return (builder && builder.id) || null;
+    } catch (err) {
+      console.error('[profile] /me self-detect failed', err);
+      return null;
+    }
   }
 
   async function load() {
     const idParam = new URLSearchParams(location.search).get('id');
     try {
       if (idParam) {
-        await fetchProfile(idParam);
+        await fetchProfile(idParam, await resolveSelfId());
         return;
       }
       // No id — soft-resolve the viewer's OWN id from /me (no hard redirect; a
@@ -230,7 +323,7 @@
         renderEmpty();
         return;
       }
-      await fetchProfile(selfId);
+      await fetchProfile(selfId, selfId);
     } catch (err) {
       console.error('[profile] failed to load', err);
       showMessage('Could not load this profile. Return to the hall and try again.');