@bongos/core 1.19.183 → 1.19.185

package/clients/bongos-client/bongos-client.global.js

@@ -338,25 +338,25 @@ function createClient(opts = {}) {
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
     },
-    "governance": {
-      // GET /governance/assignments — rank: archon — GET /governance/assignments
-      getGovernanceAssignments: (args) => request("GET", "/governance/assignments", { hasBody: false }, args),
-      // POST /governance/assignments — rank: archon — POST /governance/assignments
-      postGovernanceAssignments: (args) => request("POST", "/governance/assignments", { hasBody: true }, args),
-      // DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon — DELETE /governance/assignments/:builderId/:roleKey
-      deleteGovernanceAssignmentsBuilderIdRoleKey: (args) => request("DELETE", "/governance/assignments/{builderId}/{roleKey}", { hasBody: false }, args),
-      // GET /governance/permissions — rank: archon — GET /governance/permissions
-      getGovernancePermissions: (args) => request("GET", "/governance/permissions", { hasBody: false }, args),
-      // GET /governance/roles — rank: archon — GET /governance/roles
-      getGovernanceRoles: (args) => request("GET", "/governance/roles", { hasBody: false }, args),
-      // POST /governance/roles — rank: archon — POST /governance/roles
-      postGovernanceRoles: (args) => request("POST", "/governance/roles", { hasBody: true }, args),
-      // DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — DELETE /governance/roles/:roleKey/permissions/:permissionKey
-      deleteGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("DELETE", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: false }, args),
-      // PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — PUT /governance/roles/:roleKey/permissions/:permissionKey
-      putGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("PUT", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: true }, args),
-      // POST /governance/roles/{roleKey}/reset — rank: archon — POST /governance/roles/:roleKey/reset
-      postGovernanceRolesRoleKeyReset: (args) => request("POST", "/governance/roles/{roleKey}/reset", { hasBody: true }, args),
+    "government": {
+      // GET /government/assignments — rank: archon — GET /government/assignments
+      getGovernmentAssignments: (args) => request("GET", "/government/assignments", { hasBody: false }, args),
+      // POST /government/assignments — rank: archon — POST /government/assignments
+      postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
+      // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
+      deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/permissions — rank: archon — GET /government/permissions
+      getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
+      // GET /government/ranks — rank: archon — GET /government/ranks
+      getGovernmentRanks: (args) => request("GET", "/government/ranks", { hasBody: false }, args),
+      // POST /government/ranks — rank: archon — POST /government/ranks
+      postGovernmentRanks: (args) => request("POST", "/government/ranks", { hasBody: true }, args),
+      // DELETE /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — DELETE /government/ranks/:rankKey/permissions/:permissionKey
+      deleteGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("DELETE", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: false }, args),
+      // PUT /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — PUT /government/ranks/:rankKey/permissions/:permissionKey
+      putGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("PUT", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: true }, args),
+      // POST /government/ranks/{rankKey}/reset — rank: archon — POST /government/ranks/:rankKey/reset
+      postGovernmentRanksRankKeyReset: (args) => request("POST", "/government/ranks/{rankKey}/reset", { hasBody: true }, args),
     },
     "grades": {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder

package/clients/bongos-client/index.cjs

@@ -337,25 +337,25 @@ function createClient(opts = {}) {
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
     },
-    "governance": {
-      // GET /governance/assignments — rank: archon — GET /governance/assignments
-      getGovernanceAssignments: (args) => request("GET", "/governance/assignments", { hasBody: false }, args),
-      // POST /governance/assignments — rank: archon — POST /governance/assignments
-      postGovernanceAssignments: (args) => request("POST", "/governance/assignments", { hasBody: true }, args),
-      // DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon — DELETE /governance/assignments/:builderId/:roleKey
-      deleteGovernanceAssignmentsBuilderIdRoleKey: (args) => request("DELETE", "/governance/assignments/{builderId}/{roleKey}", { hasBody: false }, args),
-      // GET /governance/permissions — rank: archon — GET /governance/permissions
-      getGovernancePermissions: (args) => request("GET", "/governance/permissions", { hasBody: false }, args),
-      // GET /governance/roles — rank: archon — GET /governance/roles
-      getGovernanceRoles: (args) => request("GET", "/governance/roles", { hasBody: false }, args),
-      // POST /governance/roles — rank: archon — POST /governance/roles
-      postGovernanceRoles: (args) => request("POST", "/governance/roles", { hasBody: true }, args),
-      // DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — DELETE /governance/roles/:roleKey/permissions/:permissionKey
-      deleteGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("DELETE", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: false }, args),
-      // PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — PUT /governance/roles/:roleKey/permissions/:permissionKey
-      putGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("PUT", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: true }, args),
-      // POST /governance/roles/{roleKey}/reset — rank: archon — POST /governance/roles/:roleKey/reset
-      postGovernanceRolesRoleKeyReset: (args) => request("POST", "/governance/roles/{roleKey}/reset", { hasBody: true }, args),
+    "government": {
+      // GET /government/assignments — rank: archon — GET /government/assignments
+      getGovernmentAssignments: (args) => request("GET", "/government/assignments", { hasBody: false }, args),
+      // POST /government/assignments — rank: archon — POST /government/assignments
+      postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
+      // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
+      deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/permissions — rank: archon — GET /government/permissions
+      getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
+      // GET /government/ranks — rank: archon — GET /government/ranks
+      getGovernmentRanks: (args) => request("GET", "/government/ranks", { hasBody: false }, args),
+      // POST /government/ranks — rank: archon — POST /government/ranks
+      postGovernmentRanks: (args) => request("POST", "/government/ranks", { hasBody: true }, args),
+      // DELETE /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — DELETE /government/ranks/:rankKey/permissions/:permissionKey
+      deleteGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("DELETE", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: false }, args),
+      // PUT /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — PUT /government/ranks/:rankKey/permissions/:permissionKey
+      putGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("PUT", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: true }, args),
+      // POST /government/ranks/{rankKey}/reset — rank: archon — POST /government/ranks/:rankKey/reset
+      postGovernmentRanksRankKeyReset: (args) => request("POST", "/government/ranks/{rankKey}/reset", { hasBody: true }, args),
     },
     "grades": {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder

package/clients/bongos-client/index.d.ts

@@ -7,8 +7,8 @@ export declare const DEFAULT_BASE_URL: string;
 export interface ApiErrorObject { code: string; message: string; details?: unknown }
 export interface DeleteBoxSshKeyIdResponse { ok: boolean; deleted: unknown }
 export interface DeleteDependenciesResponse { ok: boolean }
-export interface DeleteGovernanceAssignmentsBuilderIdRoleKeyResponse { ok: boolean; builder_id: unknown; role_key: unknown; removed: unknown }
-export interface DeleteGovernanceRolesRoleKeyPermissionsPermissionKeyResponse { ok: boolean; role_key: unknown; permission_key: unknown; removed: unknown }
+export interface DeleteGovernmentAssignmentsBuilderIdRankKeyResponse { ok: boolean; builder_id: unknown; rank_key: unknown; removed: unknown }
+export interface DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; removed: unknown }
 export interface DeleteMemoryFileResponse { deleted: boolean; builder_id: unknown; path: unknown }
 export interface DeleteTasksIdCriteriaCriterionIdResponse { ok: boolean; removed: unknown }
 export interface DeleteTasksIdDependenciesDepIdResponse { ok: boolean; removed: unknown }
@@ -41,9 +41,9 @@ export interface GetGoalsIdRequestsResponse { requests: unknown }
 export interface GetGoalsIdResponse { goal: unknown; members: unknown; criteria: unknown; dependencies: unknown }
 export interface GetGoalsIdSuggestCriteriaResponse { goal_id: unknown; suggestions: unknown }
 export interface GetGoalsResponse { goals: unknown }
-export interface GetGovernanceAssignmentsResponse { assignments: unknown }
-export interface GetGovernancePermissionsResponse { permissions: unknown; principals: unknown }
-export interface GetGovernanceRolesResponse { roles: unknown }
+export interface GetGovernmentAssignmentsResponse { assignments: unknown }
+export interface GetGovernmentPermissionsResponse { permissions: unknown; principals: unknown }
+export interface GetGovernmentRanksResponse { roles: unknown }
 export interface GetGradesByBuilderResponse { window_days: unknown; builders: unknown }
 export interface GetHealthzResponse { ok: boolean; auth_configured: unknown }
 export interface GetInboxIdResponse { idea: unknown }
@@ -225,10 +225,10 @@ export interface PostGoalsReorderRequest { version_id: string; ordered_ids: numb
 export interface PostGoalsReorderResponse { ok: boolean; goals: unknown }
 export interface PostGoalsRequest { version_id: string; title: string; description?: string; scope_modules?: string[]; succeeds_goal_id?: number }
 export interface PostGoalsResponse { ok: boolean; goal: unknown; succeeds_goal_id: unknown }
-export interface PostGovernanceAssignmentsRequest { builder_id: number; role_key: string }
-export interface PostGovernanceRolesRequest { role_key: string; label: string; description?: string }
-export interface PostGovernanceRolesResponse { role: unknown }
-export interface PostGovernanceRolesRoleKeyResetResponse { ok: boolean; role_key: unknown; seeded_rank: unknown; permission_count: unknown }
+export interface PostGovernmentAssignmentsRequest { builder_id: number; rank_key: string }
+export interface PostGovernmentRanksRankKeyResetResponse { ok: boolean; rank_key: unknown; seeded_rank: unknown; permission_count: unknown }
+export interface PostGovernmentRanksRequest { rank_key: string; label: string; description?: string }
+export interface PostGovernmentRanksResponse { role: unknown }
 export interface PostInboxIdRatifyRequest { notes_md?: string }
 export interface PostInboxRequest { title: string; body_md?: string; kind?: string; suggested_version?: string; suggested_priority?: number; grade?: string; template_key?: string; field_values?: Record<string, unknown> }
 export interface PostLearningsRequest { title: string; body_md: string; tags?: string[]; related_files?: string[]; source?: string; source_ref?: string; task_id?: number }
@@ -311,7 +311,7 @@ export interface PostVersionsIdDoneWhenRequest { criterion_id: string; criterion
 export interface PostVersionsIdDoneWhenResponse { ok: boolean; criterion: unknown }
 export interface PostVersionsRequest { id: string; name: string; status?: string; track?: string; done_when?: string; scope_doc_path?: string; criteria?: unknown[] }
 export interface PostVersionsResponse { version: unknown; criteria: unknown }
-export interface PutGovernanceRolesRoleKeyPermissionsPermissionKeyResponse { ok: boolean; role_key: unknown; permission_key: unknown; granted: unknown }
+export interface PutGovernmentRanksRankKeyPermissionsPermissionKeyResponse { ok: boolean; rank_key: unknown; permission_key: unknown; granted: unknown }
 export interface PutTasksIdDependenciesRequest { depends_on_task_ids: unknown[] }
 export interface PutTasksIdDependenciesResponse { ok: boolean; written: unknown; dependencies: unknown }
 export type StringifiableId = number | string;
@@ -582,25 +582,25 @@ export interface BongosClient {
     /** POST /goals/reorder — rank: metic+archon */
     postGoalsReorder(args: RequestArgs & { body: PostGoalsReorderRequest }): Promise<PostGoalsReorderResponse>;
   };
-  "governance": {
-    /** GET /governance/assignments — rank: archon */
-    getGovernanceAssignments(args?: RequestArgs): Promise<GetGovernanceAssignmentsResponse>;
-    /** POST /governance/assignments — rank: archon */
-    postGovernanceAssignments(args: RequestArgs & { body: PostGovernanceAssignmentsRequest }): Promise<ApiResponse>;
-    /** DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon */
-    deleteGovernanceAssignmentsBuilderIdRoleKey(args?: RequestArgs): Promise<DeleteGovernanceAssignmentsBuilderIdRoleKeyResponse>;
-    /** GET /governance/permissions — rank: archon */
-    getGovernancePermissions(args?: RequestArgs): Promise<GetGovernancePermissionsResponse>;
-    /** GET /governance/roles — rank: archon */
-    getGovernanceRoles(args?: RequestArgs): Promise<GetGovernanceRolesResponse>;
-    /** POST /governance/roles — rank: archon */
-    postGovernanceRoles(args: RequestArgs & { body: PostGovernanceRolesRequest }): Promise<PostGovernanceRolesResponse>;
-    /** DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon */
-    deleteGovernanceRolesRoleKeyPermissionsPermissionKey(args?: RequestArgs): Promise<DeleteGovernanceRolesRoleKeyPermissionsPermissionKeyResponse>;
-    /** PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon */
-    putGovernanceRolesRoleKeyPermissionsPermissionKey(args?: RequestArgs): Promise<PutGovernanceRolesRoleKeyPermissionsPermissionKeyResponse>;
-    /** POST /governance/roles/{roleKey}/reset — rank: archon */
-    postGovernanceRolesRoleKeyReset(args?: RequestArgs): Promise<PostGovernanceRolesRoleKeyResetResponse>;
+  "government": {
+    /** GET /government/assignments — rank: archon */
+    getGovernmentAssignments(args?: RequestArgs): Promise<GetGovernmentAssignmentsResponse>;
+    /** POST /government/assignments — rank: archon */
+    postGovernmentAssignments(args: RequestArgs & { body: PostGovernmentAssignmentsRequest }): Promise<ApiResponse>;
+    /** DELETE /government/assignments/{builderId}/{rankKey} — rank: archon */
+    deleteGovernmentAssignmentsBuilderIdRankKey(args?: RequestArgs): Promise<DeleteGovernmentAssignmentsBuilderIdRankKeyResponse>;
+    /** GET /government/permissions — rank: archon */
+    getGovernmentPermissions(args?: RequestArgs): Promise<GetGovernmentPermissionsResponse>;
+    /** GET /government/ranks — rank: archon */
+    getGovernmentRanks(args?: RequestArgs): Promise<GetGovernmentRanksResponse>;
+    /** POST /government/ranks — rank: archon */
+    postGovernmentRanks(args: RequestArgs & { body: PostGovernmentRanksRequest }): Promise<PostGovernmentRanksResponse>;
+    /** DELETE /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon */
+    deleteGovernmentRanksRankKeyPermissionsPermissionKey(args?: RequestArgs): Promise<DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse>;
+    /** PUT /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon */
+    putGovernmentRanksRankKeyPermissionsPermissionKey(args?: RequestArgs): Promise<PutGovernmentRanksRankKeyPermissionsPermissionKeyResponse>;
+    /** POST /government/ranks/{rankKey}/reset — rank: archon */
+    postGovernmentRanksRankKeyReset(args?: RequestArgs): Promise<PostGovernmentRanksRankKeyResetResponse>;
   };
   "grades": {
     /** GET /grades/by-builder — rank: metic+archon */

package/clients/bongos-client/index.mjs

@@ -334,25 +334,25 @@ export function createClient(opts = {}) {
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
     },
-    "governance": {
-      // GET /governance/assignments — rank: archon — GET /governance/assignments
-      getGovernanceAssignments: (args) => request("GET", "/governance/assignments", { hasBody: false }, args),
-      // POST /governance/assignments — rank: archon — POST /governance/assignments
-      postGovernanceAssignments: (args) => request("POST", "/governance/assignments", { hasBody: true }, args),
-      // DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon — DELETE /governance/assignments/:builderId/:roleKey
-      deleteGovernanceAssignmentsBuilderIdRoleKey: (args) => request("DELETE", "/governance/assignments/{builderId}/{roleKey}", { hasBody: false }, args),
-      // GET /governance/permissions — rank: archon — GET /governance/permissions
-      getGovernancePermissions: (args) => request("GET", "/governance/permissions", { hasBody: false }, args),
-      // GET /governance/roles — rank: archon — GET /governance/roles
-      getGovernanceRoles: (args) => request("GET", "/governance/roles", { hasBody: false }, args),
-      // POST /governance/roles — rank: archon — POST /governance/roles
-      postGovernanceRoles: (args) => request("POST", "/governance/roles", { hasBody: true }, args),
-      // DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — DELETE /governance/roles/:roleKey/permissions/:permissionKey
-      deleteGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("DELETE", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: false }, args),
-      // PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — PUT /governance/roles/:roleKey/permissions/:permissionKey
-      putGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("PUT", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: true }, args),
-      // POST /governance/roles/{roleKey}/reset — rank: archon — POST /governance/roles/:roleKey/reset
-      postGovernanceRolesRoleKeyReset: (args) => request("POST", "/governance/roles/{roleKey}/reset", { hasBody: true }, args),
+    "government": {
+      // GET /government/assignments — rank: archon — GET /government/assignments
+      getGovernmentAssignments: (args) => request("GET", "/government/assignments", { hasBody: false }, args),
+      // POST /government/assignments — rank: archon — POST /government/assignments
+      postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
+      // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
+      deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/permissions — rank: archon — GET /government/permissions
+      getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
+      // GET /government/ranks — rank: archon — GET /government/ranks
+      getGovernmentRanks: (args) => request("GET", "/government/ranks", { hasBody: false }, args),
+      // POST /government/ranks — rank: archon — POST /government/ranks
+      postGovernmentRanks: (args) => request("POST", "/government/ranks", { hasBody: true }, args),
+      // DELETE /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — DELETE /government/ranks/:rankKey/permissions/:permissionKey
+      deleteGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("DELETE", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: false }, args),
+      // PUT /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — PUT /government/ranks/:rankKey/permissions/:permissionKey
+      putGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("PUT", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: true }, args),
+      // POST /government/ranks/{rankKey}/reset — rank: archon — POST /government/ranks/:rankKey/reset
+      postGovernmentRanksRankKeyReset: (args) => request("POST", "/government/ranks/{rankKey}/reset", { hasBody: true }, args),
     },
     "grades": {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder

package/docs/adr/0157-archon-is-rank-and-identity-only.md

@@ -22,7 +22,7 @@ Lars's directive (2026-08-05): **"Move all of these to metic, and make archon ju
 
 The literal reading of that directive — edit 41 `requireRank('archon')` call sites — was the wrong shape, and briefly the plan. BV1.R104/R105 (jaxri, tasks [1001846](https://cloudbongos.com/builders#/task/1001846)/[1001847](https://cloudbongos.com/builders#/task/1001847)) had migrated the route gates to `requirePermission(...)` and were sitting at `confirmed` — graded, verified, unmerged — for five days. They landed mid-session.
 
-Once every gate reads `requirePermission('<atom>')`, the rank floor is declared in exactly one place: `floor:` in [`modules/governance/catalog.js`](../../modules/governance/catalog.js). The delegation collapses from 41 call-site edits to **20 one-word floor changes in one table**. That is the ADR 0151 payoff arriving in practice, and it is worth recording as the concrete return on that refactor: the same owner decision was a 41-file diff on Monday and a 1-file diff on Tuesday.
+Once every gate reads `requirePermission('<atom>')`, the rank floor is declared in exactly one place: `floor:` in [`modules/governance/catalog.js`](../../modules/government/catalog.js). The delegation collapses from 41 call-site edits to **20 one-word floor changes in one table**. That is the ADR 0151 payoff arriving in practice, and it is worth recording as the concrete return on that refactor: the same owner decision was a 41-file diff on Monday and a 1-file diff on Tuesday.
 
 ## Decision
 
@@ -82,7 +82,7 @@ Left alone, a Metic would open `/gate` and get a page rendering nothing but a 40
 1. **The exploit cookbook widened.** `security.report.adjudicate` guards `/security/docs` — the engagement-report store holding attacker-usable exploit detail — so that is now Metic-readable. Every other delegated atom widens who may *act*; this one widens who may *read*. If unwanted, the fix mirrors §4: split a `security.docs.read` at archon and let adjudication delegate. Recorded in `tests/security_docs.mjs` at the assertion that used to guard it.
 2. **The backward ratchet delegated.** [ADR 0154](<redacted>.md) made "unsatisfy stays Archon" the explicit safety argument for delegating criterion *create* — the forward ratchet moved, the backward one did not. `criterion.unsatisfy` is neither rank/identity nor an escalation key, so under this directive it moved, superseding that carve-out. What still holds is the part that never depended on rank: satisfy and unsatisfy remain **separate atoms**, so confirming a criterion never confers the power to un-confirm one.
 
-**A floor change needs a migration.** `governance_002`'s compat seed is run-once, so an edited `floor:` never reaches an already-migrated database. [`<redacted>.sql`](../../modules/governance/migrations/<redacted>.sql) grants the 20 to `metic` (+ `gate_approval.read` to both, since it is new). Lowering a floor is additive, so `tests/governance_seed.mjs`'s union model handles it and revokes nothing.
+**A floor change needs a migration.** `governance_002`'s compat seed is run-once, so an edited `floor:` never reaches an already-migrated database. [`<redacted>.sql`](../../modules/government/migrations/<redacted>.sql) grants the 20 to `metic` (+ `gate_approval.read` to both, since it is new). Lowering a floor is additive, so `tests/governance_seed.mjs`'s union model handles it and revokes nothing.
 
 **`requireArchonPage` is now a misnomer** — it resolves `page.view.governance`, floor metic. Renaming it touches serve-internal, auth, and several test files; left deliberately to keep this diff small in authz code, and filed separately. The hall nav group was relabelled **Archon → Governance**, because a header reading "Archon" over items a Metic can open misdescribes the ladder to exactly the builders still learning it.