@bongos/core 1.19.181 → 1.19.183

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.181",
-  "core_contract": "1.19.181",
-  "source_commit": "3335e6696cc6d8b3c0a4d800860f76287c1fcc03",
+  "core_version": "1.19.183",
+  "core_contract": "1.19.183",
+  "source_commit": "37af85f9638cba28604263e9e629479bcd665d8b",
   "source_ref": "HEAD",
-  "built_at": "2026-08-16T21:10:51.840Z",
+  "built_at": "2026-08-16T21:31:50.598Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 308,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1277,
+    "functional_verbatim": 1279,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1606,
-  "tree_sha256": "411dfd39dd80ffce17841372dfaf756045f842fb17380c1caca33aa10251bc42",
+  "file_count": 1608,
+  "tree_sha256": "38eea74a9e17746ec68a481e09daf00c98e4ae5c8ca74897cf299c09b09a70b1",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6b865314ad2d5e2e3e0e017a6bed7ae435ecfbca3859bdf763b59411a1d3d9f8"
+      "sha256": "4801db32c6f4ba6220bce8e664be063f8d8483bc22a57df08205b0fc36788b8b"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "c137a0e79a5e9065b071f87150639bff98cbda8f0d50a27027b42fa48ae200f6"
+      "sha256": "0d3fc054ed48e1e9398366c75e526e52c3b9ecf96b70888d98607e8aa0e68949"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "2fef3ad1be5b853de1d6df155bb5717b581cf8b6afa3851add9ea81032c159a6"
+      "sha256": "53dc2ac9322bdc1827fae124789e0cd8b09751c5359e1ae0266b65951a90126a"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "52dbea93e7039796ebf579e816bd3ed54727077e5383d27a348d36572a85b90d"
+      "sha256": "a775432136dc7ba0093a989991adf3f639793a287919dccc002eeaf026dacf6b"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "b2d21163a9fb149a98051dfde08e1cee81969194e74d3e272bb7779da9461c1b"
+      "sha256": "3588010536522ef306ab7e822bdb68dcc40ef42754d5b298384dac443f9ae0c6"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1362,12 +1362,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "74ee845dae6f2757b564c1a760042391f3eb3af21dd3abe4a8590b3c3f88c4b3"
+      "sha256": "b311208b348d4e94ca20536ae095098007f855ef1861169a15e534dbb2cf6ab4"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "1c8b42344fa248bd6e38d370cc117c5017fdd58071ba9cb2ca6e55a1678c5e56"
+      "sha256": "c414eadf025db00d4e87b2cadd5a7c6b18a55780ac2af6bfe0cafc9897ae4512"
     },
     {
       "path": "docs/architecture.md",
@@ -2677,7 +2677,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "2fef3ad1be5b853de1d6df155bb5717b581cf8b6afa3851add9ea81032c159a6"
+      "sha256": "53dc2ac9322bdc1827fae124789e0cd8b09751c5359e1ae0266b65951a90126a"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -2947,7 +2947,7 @@
     {
       "path": "modules/governance/protected-surfaces.json",
       "mode": "0000644",
-      "sha256": "4c7b1737c3f30d6c6f7916a2539f8b768d5a1a52357e361cde2618643a46e53e"
+      "sha256": "461e27529acfc69373354ec6fdf7dfeb2f8619af456d9be2470bb3653eeb4a37"
     },
     {
       "path": "modules/governance/rank-roles.js",
@@ -3337,7 +3337,7 @@
     {
       "path": "modules/hall-ui/public/profile.js",
       "mode": "0000644",
-      "sha256": "a4cf0c4c2d088fd1fb84c41c93cc28e2acd2b656b0bc995cd46043881b3611fa"
+      "sha256": "ddd95350fa5c3696452996d4c79bb7e9c5d4d2b1034ed31a082dd568195b6543"
     },
     {
       "path": "modules/hall-ui/public/ranks.html",
@@ -3814,6 +3814,11 @@
       "mode": "0000644",
       "sha256": "f78eb8f7b6ee1ea3ddd789d6019b9715ae193ff0cb7890aeb24d8473033a911a"
     },
+    {
+      "path": "modules/platform-identity/migrations/platform_identity_009_profile_fields.sql",
+      "mode": "0000644",
+      "sha256": "00e2e9feccc56bdb30a5e4f0c6abbe610382fe425222419963a04ae022d3c58a"
+    },
     {
       "path": "modules/platform-identity/module.json",
       "mode": "0000644",
@@ -3822,7 +3827,7 @@
     {
       "path": "modules/platform-identity/platform-identity.js",
       "mode": "0000644",
-      "sha256": "59d9ef7d052890fdf09fd0a9f04432ab1baddc7c8dfe49950893b9dd67b89d66"
+      "sha256": "423afc175f0e1024d39fc20b561e24b423e2d9b6e5c16ddcd8e4a3329bcfa97b"
     },
     {
       "path": "modules/platform-identity/pollers/code-sweep.js",
@@ -3842,7 +3847,7 @@
     {
       "path": "modules/platform-identity/routes/profile.js",
       "mode": "0000644",
-      "sha256": "29e7f6304b4215fd79c35662c48370a04a5a9ffa2c3c4ae3d1fabf277d407eb2"
+      "sha256": "2e158331e7cae0535ae81d63b6b7e8d471330c0f3d732f7e3092e45ad8255916"
     },
     {
       "path": "modules/platform-identity/routes/projects.js",
@@ -3852,7 +3857,7 @@
     {
       "path": "modules/platform-identity/routes/public-profile.js",
       "mode": "0000644",
-      "sha256": "9032ff152e6440187f0f9bd2b1a3bb9ea24167c9f6d79ae3345a26a0e2fdc356"
+      "sha256": "e59f99d6f323e70611a08fa2c8299af815e350dbb81bd7cc79e9d96bd93cdbba"
     },
     {
       "path": "modules/platform-identity/routes/scouting.js",
@@ -3867,7 +3872,7 @@
     {
       "path": "modules/platform-identity/tests/platform-identity.mjs",
       "mode": "0000644",
-      "sha256": "53b5bdd5c9eb4a14695289dd1396231d29e0f53c8709bd591dc328362da88072"
+      "sha256": "514adcaae952190d418888ffb778d541a632e3040664ce53f7a55ba9a297292b"
     },
     {
       "path": "modules/platform-identity/ui/.gitkeep",
@@ -4242,12 +4247,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "eb81d3478ad0a0cf69bc7595c726032d4e815e3a63c4c3c4a62ff56c5a8e5e0f"
+      "sha256": "944c48f52c7c17f20ddf4de7d00b2ae145ed7f2b427339dcd61045d0ab664135"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c1255deacb68b9b3ea77218a7d5a9072b8203d1b0c4549d25f62eda4a12626a6"
+      "sha256": "39ac6bb8918f513dca0cdf3139dcb6369ec0d727ec0fb0d471e9b2e0dbda06b2"
     },
     {
       "path": "public-docs/index.html",
@@ -5172,7 +5177,7 @@
     {
       "path": "scripts/gds/publish-manifest.js",
       "mode": "0000644",
-      "sha256": "46c017b3c133b02c1b22a83ee34e6132ca2d471a7afef2a9de056cbb6b4725a9"
+      "sha256": "93e1d1cf68ceb30c6fc188f8d53094c7498ba9f1e4eb95a64f8ba883ba3897cc"
     },
     {
       "path": "scripts/gds/pulse.js",
@@ -5682,7 +5687,7 @@
     {
       "path": "src/bongos/module-scope-map.js",
       "mode": "0000644",
-      "sha256": "dde61de24af4bdb3ed0d00267873ee700c959166a4f86ab3a3283e8813f65bc6"
+      "sha256": "162c15a20ee4ec9bfa0227b674efac51c7a11da65f9e8f612558fb023e2fe666"
     },
     {
       "path": "src/bongos/module-submissions.js",
@@ -5717,7 +5722,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "1802c2589279319abafbda1c3519dff39a43cb52d160b4c4610c6d6f3d79affd"
+      "sha256": "89cdc73dd76e6b296a7d6a43ea3946eb83d180eb4e14961991dd3d8352b76738"
     },
     {
       "path": "src/bongos/routes.js",
@@ -5852,7 +5857,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "4d1b546ca70ac1b708cab0aec7a1933bf2e877e3d4ce6f170fdb9c5702df5ce9"
+      "sha256": "4acf151f0537e8948a570c7cf97a39964de64496c0e70d5b4000a47df85b23f5"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6812,7 +6817,7 @@
     {
       "path": "tests/governance_protected_surfaces.mjs",
       "mode": "0000644",
-      "sha256": "d230c59b809cefd1a7502763a594f700ba723d8509faf9cb165b1b4ab49c6c16"
+      "sha256": "8e7cb6db6c08b16d79bd6567bcb8d6724817ce65460e5574bcaf7cb6432ee049"
     },
     {
       "path": "tests/governance_require_permission.mjs",
@@ -6967,7 +6972,7 @@
     {
       "path": "tests/hub_profile_leak.mjs",
       "mode": "0000644",
-      "sha256": "f0934fad2cd869a0955b9b087cab449932e921032ca94fc356a952e88f528d82"
+      "sha256": "ea992d1ab2ddedc27aaa5348a397356bef91a4c1ad9b295eb1a0ed1c4fc707e9"
     },
     {
       "path": "tests/idea_completeness.mjs",
@@ -7434,6 +7439,11 @@
       "mode": "0000644",
       "sha256": "3c85d28ecc55e375988f3e55aee993c8c84220889678262d8207146c2772f3f5"
     },
+    {
+      "path": "tests/profile_fields.mjs",
+      "mode": "0000644",
+      "sha256": "ff73579dd2416a81648d85dcd5d1a77cb776c32047bd0cc7897dff132cbae5b7"
+    },
     {
       "path": "tests/profile_rollup_consent.mjs",
       "mode": "0000644",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 275 operations across 46 resource groups
+- 276 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -433,6 +433,8 @@ function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/clients/bongos-client/index.cjs

@@ -432,6 +432,8 @@ function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/clients/bongos-client/index.d.ts

@@ -51,7 +51,7 @@ export interface GetInboxResponse { ideas: unknown; open_count: unknown }
 export interface GetLeaderboardResponse { leaderboard: unknown; page: unknown }
 export interface GetLearningsResponse { learnings: unknown }
 export interface GetMeAchievementsResponse { unlocked: unknown }
-export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; cross_project: unknown }
+export interface GetMeCrossProjectResponse { hide_stats: boolean; profile_state: unknown; handle: unknown; display_name: unknown; bio: unknown; links: unknown; cross_project: unknown }
 export interface GetMeDisplayNameResponse { display_name: unknown; max_length: unknown }
 export interface GetMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
 export interface GetMeRecentShipsResponse { ships: unknown }
@@ -134,6 +134,8 @@ export interface PatchMeDisplayNameResponse { display_name: unknown; max_length:
 export interface PatchMeEventSoundPrefsResponse { prefs: unknown; effective: unknown; effective_wav: unknown; events: unknown }
 export interface PatchMeHandleRequest { handle: string }
 export interface PatchMeHandleResponse { handle: unknown; previous_handle: unknown }
+export interface PatchMeProfileRequest { display_name?: unknown; bio?: unknown; links?: unknown }
+export interface PatchMeProfileResponse { display_name: unknown; bio: unknown; links: unknown }
 export interface PatchMeSkillPrefsResponse { prefs: unknown; effective: unknown; defaults: unknown; known_skills: unknown; allowed_models: unknown }
 export interface PatchMeSoundPrefsResponse { prefs: unknown; effective: unknown; effective_map: unknown; volume: unknown; defaults: unknown; known_sounds: unknown }
 export interface PatchProjectsIdFeaturedRequest { featured: boolean }
@@ -675,6 +677,8 @@ export interface BongosClient {
     getMeModelAllocation(args?: RequestArgs): Promise<ApiResponse>;
     /** PATCH /me/model-allocation — rank: any-builder */
     patchMeModelAllocation(args?: RequestArgs): Promise<ApiResponse>;
+    /** PATCH /me/profile — rank: any-builder */
+    patchMeProfile(args?: RequestArgs & { body?: PatchMeProfileRequest }): Promise<PatchMeProfileResponse>;
     /** GET /me/recent-ships — rank: any-builder */
     getMeRecentShips(args?: RequestArgs): Promise<GetMeRecentShipsResponse>;
     /** GET /me/render — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -429,6 +429,8 @@ export function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/docs/api/openapi.json

@@ -6774,6 +6774,55 @@
         ]
       }
     },
+    "/me/profile": {
+      "patch": {
+        "operationId": "patch_me_profile",
+        "tags": [
+          "me"
+        ],
+        "summary": "PATCH /me/profile",
+        "description": "the caller's OWN profile fields (P02, task 1002798; spec Decision 4): bio, typed links, account display name. Own data, keyed on the authenticated github_id. The schema declares the keys for strict mode; the REAL validation (bio length/charset, https-only + host-pinned links, name length) lives in the domain, next to the data, and each field is nullable (null clears), which validateOrRespond's typed rules can't express.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/platform-identity/routes/profile.js",
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchMeProfileRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PatchMeProfileResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/me/recent-ships": {
       "get": {
         "operationId": "get_me_recent_ships",
@@ -8174,7 +8223,7 @@
           "profiles"
         ],
         "summary": "GET /profiles/:handle",
-        "description": "a handle-addressed public profile. Every field is already world-readable on the numeric profile route + the leaderboard; the handle is just the rename-proof address (spec Decision 3). Whitelisting happens inside the module (getPublicProfileByHandle); no-store because the payload embeds cross_project and hide must beat the cache (ADR 0171 D5).\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "a handle-addressed public profile. Every field is already world-readable on the numeric profile route + the leaderboard; the handle is just the rename-proof address (spec Decision 3). Whitelisting happens inside the module (getPublicProfileByHandle); no-store because the payload embeds cross_project and hide must beat the cache (ADR 0171 D5). Rate-limited like /public/* (per-IP read limiter) so the handle→identity mapping can't be scripted-enumerated at line rate (R05 grade advisory, task 1002798).\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "modules/platform-identity/routes/public-profile.js",
         "parameters": [
@@ -13038,12 +13087,18 @@
           },
           "profile_state": {},
           "handle": {},
+          "display_name": {},
+          "bio": {},
+          "links": {},
           "cross_project": {}
         },
         "required": [
           "hide_stats",
           "profile_state",
           "handle",
+          "display_name",
+          "bio",
+          "links",
           "cross_project"
         ]
       },
@@ -14117,6 +14172,28 @@
           "previous_handle"
         ]
       },
+      "PatchMeProfileRequest": {
+        "type": "object",
+        "properties": {
+          "display_name": {},
+          "bio": {},
+          "links": {}
+        },
+        "additionalProperties": false
+      },
+      "PatchMeProfileResponse": {
+        "type": "object",
+        "properties": {
+          "display_name": {},
+          "bio": {},
+          "links": {}
+        },
+        "required": [
+          "display_name",
+          "bio",
+          "links"
+        ]
+      },
       "PatchMeSkillPrefsResponse": {
         "type": "object",
         "properties": {
@@ -17355,9 +17432,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 275,
-  "x-schema-count": 309,
+  "x-endpoint-count": 276,
+  "x-schema-count": 311,
   "x-undocumented-bodies": 8,
-  "x-response-schemas": 209,
+  "x-response-schemas": 210,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 275 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 276 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -282,7 +282,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | POST | `/api/bongos/llm-cache/lookup` | `metic+archon` | `cache_key`, `tokens_saved_est` | POST /llm-cache/lookup — hit/miss + atomic hit_count bump. |
 | POST | `/api/bongos/llm-cache/store` | `metic+archon` | `spec`, `result_stdout`, `result_cost_usd` | POST /llm-cache/store — upsert a freshly-produced result. |
 
-## `me` (24)
+## `me` (25)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -301,6 +301,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | PATCH | `/api/bongos/me/interaction` | `any-builder` | _undocumented_ | PATCH the interaction profile. |
 | GET | `/api/bongos/me/model-allocation` | `any-builder` | — |  |
 | PATCH | `/api/bongos/me/model-allocation` | `any-builder` | _undocumented_ | PATCH the model allocation. |
+| PATCH | `/api/bongos/me/profile` | `any-builder` | `display_name`, `bio`, `links` | the caller's OWN profile fields (P02, task 1002798; spec Decision 4): bio, typed links, account display name. |
 | GET | `/api/bongos/me/recent-ships` | `any-builder` | — | Tasks this builder has shipped, most recent first. |
 | GET | `/api/bongos/me/render` | `any-builder` | — | Per-builder "render widgets" knob (task 1279, shares the behavior_prefs jsonb / migration 119). |
 | PATCH | `/api/bongos/me/render` | `any-builder` | _undocumented_ | PATCH the render knob. |

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -432,6 +432,8 @@ function createClient(opts = {}) {
       getMeModelAllocation: (args) => request("GET", "/me/model-allocation", { hasBody: false }, args),
       // PATCH /me/model-allocation — rank: any-builder — PATCH /me/model-allocation
       patchMeModelAllocation: (args) => request("PATCH", "/me/model-allocation", { hasBody: true }, args),
+      // PATCH /me/profile — rank: any-builder — PATCH /me/profile
+      patchMeProfile: (args) => request("PATCH", "/me/profile", { hasBody: true }, args),
       // GET /me/recent-ships — rank: any-builder — GET /me/recent-ships
       getMeRecentShips: (args) => request("GET", "/me/recent-ships", { hasBody: false }, args),
       // GET /me/render — rank: any-builder — GET /me/render

package/modules/governance/protected-surfaces.json

@@ -34,7 +34,8 @@
     { "glob": "modules/lifecycle/routes/", "group": "authz", "why": "BV1.R86: the lifecycle routes carved out of src/bongos/routes/ — the gates follow the routes" },
     { "glob": "src/bongos/routes.js", "group": "authz", "why": "the route MOUNT table (a new ungated route lands here)" },
     { "glob": "server.js", "group": "authz", "why": "the Express entrypoint — wires every router + host routing" },
-    { "glob": "modules/governance/", "group": "authz", "why": "the governance module (ADR 0151) — its resolver, catalog, gates AND this registry ARE the authz core; the glob is the prospective carve so CREATION is gated as strictly as edits (ADR 0086 §4)" },
+    { "glob": "modules/governance/", "group": "authz", "why": "the governance module (ADR 0151) — its resolver, catalog, gates AND this registry ARE the authz core; the glob is the prospective carve so CREATION is gated as strictly as edits (ADR 0086 §4). Renamed to modules/government/ by goal 1000068 (ADR 0174); BOTH globs are listed for the transition and this one is dropped with the folder in R04." },
+    { "glob": "modules/government/", "group": "authz", "why": "the same authz core under its post-ADR-0174 name (goal 1000068, task 1003003). Listed BEFORE the folder moves, deliberately: `protected` is DERIVED from this registry, so a module key whose globs are absent here computes protected:false — which would silently drop the Archon gate on goal creation AND the pre-push block on these files for the whole window between the key landing and the folder arriving. The prospective-carve precedent is the modules/governance/ entry directly above (ADR 0086 §4)." },
     { "glob": "modules/dev-box/boxes.js", "group": "box-access", "why": "boxScopeForRank / provision floor — decides who gets a full source clone" },
     { "glob": "modules/dev-box/box-access.js", "group": "box-access", "why": "decideSourceAccess (rank → starter|full source)" },
     { "glob": "modules/dev-box/box-credential.js", "group": "box-access", "why": "mints the box source credential" },

package/modules/hall-ui/public/profile.js

@@ -177,7 +177,7 @@
     const name = escapeHtml(p.name || 'Project');
     // origin is third-party-reported; link only a well-formed https URL.
     const origin = typeof p.origin === 'string' && /^https:\/\//.test(p.origin) ? p.origin : null;
-    const nameCell = origin ? `<a href="${escapeHtml(origin)}" rel="noopener">${name}</a>` : name;
+    const nameCell = origin ? `<a href="${escapeHtml(origin)}" rel="noopener noreferrer">${name}</a>` : name;
     // rank_held is THAT project's standing as it reported it — plain text, never
     // the local rank badge or the instance's own rank labels (spec Decision 1).
     const held = typeof p.rank_held === 'string' && p.rank_held

package/modules/platform-identity/migrations/platform_identity_009_profile_fields.sql

@@ -0,0 +1,38 @@
+-- platform_identity_009_profile_fields.sql — bio + typed links + the
+-- display-name source bit (P02, task 1002798 / goal 1000045; profile-page spec
+-- Decision 4, ADR 0171 amendments R01).
+--
+--   bio   — plain text, ~280 chars, NO markdown and no auto-linking. The length
+--           cap + charset live in the domain validator (validateProfileBio in
+--           platform-identity.js — the only writer); nullable = never set.
+--   links — a TYPED, capped set as a jsonb object whose only keys are
+--           website | x | linkedin | discord, each an https URL (max 4 by
+--           construction — one per type). Typed-and-capped rather than a
+--           free-form list because a public, indexable page with
+--           user-controlled links is an SEO-spam magnet (spec Decision 4).
+--           Validation (https-only, no userinfo, per-type host pinning) lives
+--           in validateProfileLinks — the single write path; nullable = never set.
+--   display_name_source — the ADR 0156 mirror for the HUB account: 'github'
+--           (default; upsertAccount keeps re-syncing the name on every
+--           check-in/authorize) or 'user' (set by setAccountProfileFields; the
+--           upsertAccount conflict branch then never overwrites the name).
+--           Module-owned here — unlike core_197 the guard reads it inside this
+--           module's own upsertAccount, so it belongs on the module's table
+--           (ADR 0083 §5).
+--
+-- Additive + platform_identity_-namespaced (ADR 0083 §5). Idempotent: the
+-- inline CHECK rides the ADD COLUMN IF NOT EXISTS, so a re-run is a no-op.
+
+BEGIN;
+
+ALTER TABLE platform_identity_accounts
+  ADD COLUMN IF NOT EXISTS bio text,
+  ADD COLUMN IF NOT EXISTS links jsonb,
+  ADD COLUMN IF NOT EXISTS display_name_source text NOT NULL DEFAULT 'github'
+    CHECK (display_name_source IN ('github', 'user'));
+
+-- 'github' is correct for every pre-existing row: before this change there was
+-- no user-set account display name, so whatever is stored IS GitHub-derived
+-- (the ADR 0156 backfill argument, unchanged).
+
+COMMIT;