@bongos/core 1.19.184 → 1.19.185

package/clients/bongos-client/index.mjs

@@ -334,25 +334,25 @@ export function createClient(opts = {}) {
       // POST /goals/reorder — rank: metic+archon — POST /goals/reorder
       postGoalsReorder: (args) => request("POST", "/goals/reorder", { hasBody: true }, args),
     },
-    "governance": {
-      // GET /governance/assignments — rank: archon — GET /governance/assignments
-      getGovernanceAssignments: (args) => request("GET", "/governance/assignments", { hasBody: false }, args),
-      // POST /governance/assignments — rank: archon — POST /governance/assignments
-      postGovernanceAssignments: (args) => request("POST", "/governance/assignments", { hasBody: true }, args),
-      // DELETE /governance/assignments/{builderId}/{roleKey} — rank: archon — DELETE /governance/assignments/:builderId/:roleKey
-      deleteGovernanceAssignmentsBuilderIdRoleKey: (args) => request("DELETE", "/governance/assignments/{builderId}/{roleKey}", { hasBody: false }, args),
-      // GET /governance/permissions — rank: archon — GET /governance/permissions
-      getGovernancePermissions: (args) => request("GET", "/governance/permissions", { hasBody: false }, args),
-      // GET /governance/roles — rank: archon — GET /governance/roles
-      getGovernanceRoles: (args) => request("GET", "/governance/roles", { hasBody: false }, args),
-      // POST /governance/roles — rank: archon — POST /governance/roles
-      postGovernanceRoles: (args) => request("POST", "/governance/roles", { hasBody: true }, args),
-      // DELETE /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — DELETE /governance/roles/:roleKey/permissions/:permissionKey
-      deleteGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("DELETE", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: false }, args),
-      // PUT /governance/roles/{roleKey}/permissions/{permissionKey} — rank: archon — PUT /governance/roles/:roleKey/permissions/:permissionKey
-      putGovernanceRolesRoleKeyPermissionsPermissionKey: (args) => request("PUT", "/governance/roles/{roleKey}/permissions/{permissionKey}", { hasBody: true }, args),
-      // POST /governance/roles/{roleKey}/reset — rank: archon — POST /governance/roles/:roleKey/reset
-      postGovernanceRolesRoleKeyReset: (args) => request("POST", "/governance/roles/{roleKey}/reset", { hasBody: true }, args),
+    "government": {
+      // GET /government/assignments — rank: archon — GET /government/assignments
+      getGovernmentAssignments: (args) => request("GET", "/government/assignments", { hasBody: false }, args),
+      // POST /government/assignments — rank: archon — POST /government/assignments
+      postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
+      // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
+      deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/permissions — rank: archon — GET /government/permissions
+      getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
+      // GET /government/ranks — rank: archon — GET /government/ranks
+      getGovernmentRanks: (args) => request("GET", "/government/ranks", { hasBody: false }, args),
+      // POST /government/ranks — rank: archon — POST /government/ranks
+      postGovernmentRanks: (args) => request("POST", "/government/ranks", { hasBody: true }, args),
+      // DELETE /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — DELETE /government/ranks/:rankKey/permissions/:permissionKey
+      deleteGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("DELETE", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: false }, args),
+      // PUT /government/ranks/{rankKey}/permissions/{permissionKey} — rank: archon — PUT /government/ranks/:rankKey/permissions/:permissionKey
+      putGovernmentRanksRankKeyPermissionsPermissionKey: (args) => request("PUT", "/government/ranks/{rankKey}/permissions/{permissionKey}", { hasBody: true }, args),
+      // POST /government/ranks/{rankKey}/reset — rank: archon — POST /government/ranks/:rankKey/reset
+      postGovernmentRanksRankKeyReset: (args) => request("POST", "/government/ranks/{rankKey}/reset", { hasBody: true }, args),
     },
     "grades": {
       // GET /grades/by-builder — rank: metic+archon — GET /grades/by-builder

package/docs/adr/0157-archon-is-rank-and-identity-only.md

@@ -22,7 +22,7 @@ Lars's directive (2026-08-05): **"Move all of these to metic, and make archon ju
 
 The literal reading of that directive — edit 41 `requireRank('archon')` call sites — was the wrong shape, and briefly the plan. BV1.R104/R105 (jaxri, tasks [1001846](https://cloudbongos.com/builders#/task/1001846)/[1001847](https://cloudbongos.com/builders#/task/1001847)) had migrated the route gates to `requirePermission(...)` and were sitting at `confirmed` — graded, verified, unmerged — for five days. They landed mid-session.
 
-Once every gate reads `requirePermission('<atom>')`, the rank floor is declared in exactly one place: `floor:` in [`modules/governance/catalog.js`](../../modules/governance/catalog.js). The delegation collapses from 41 call-site edits to **20 one-word floor changes in one table**. That is the ADR 0151 payoff arriving in practice, and it is worth recording as the concrete return on that refactor: the same owner decision was a 41-file diff on Monday and a 1-file diff on Tuesday.
+Once every gate reads `requirePermission('<atom>')`, the rank floor is declared in exactly one place: `floor:` in [`modules/governance/catalog.js`](../../modules/government/catalog.js). The delegation collapses from 41 call-site edits to **20 one-word floor changes in one table**. That is the ADR 0151 payoff arriving in practice, and it is worth recording as the concrete return on that refactor: the same owner decision was a 41-file diff on Monday and a 1-file diff on Tuesday.
 
 ## Decision
 
@@ -82,7 +82,7 @@ Left alone, a Metic would open `/gate` and get a page rendering nothing but a 40
 1. **The exploit cookbook widened.** `security.report.adjudicate` guards `/security/docs` — the engagement-report store holding attacker-usable exploit detail — so that is now Metic-readable. Every other delegated atom widens who may *act*; this one widens who may *read*. If unwanted, the fix mirrors §4: split a `security.docs.read` at archon and let adjudication delegate. Recorded in `tests/security_docs.mjs` at the assertion that used to guard it.
 2. **The backward ratchet delegated.** [ADR 0154](<redacted>.md) made "unsatisfy stays Archon" the explicit safety argument for delegating criterion *create* — the forward ratchet moved, the backward one did not. `criterion.unsatisfy` is neither rank/identity nor an escalation key, so under this directive it moved, superseding that carve-out. What still holds is the part that never depended on rank: satisfy and unsatisfy remain **separate atoms**, so confirming a criterion never confers the power to un-confirm one.
 
-**A floor change needs a migration.** `governance_002`'s compat seed is run-once, so an edited `floor:` never reaches an already-migrated database. [`<redacted>.sql`](../../modules/governance/migrations/<redacted>.sql) grants the 20 to `metic` (+ `gate_approval.read` to both, since it is new). Lowering a floor is additive, so `tests/governance_seed.mjs`'s union model handles it and revokes nothing.
+**A floor change needs a migration.** `governance_002`'s compat seed is run-once, so an edited `floor:` never reaches an already-migrated database. [`<redacted>.sql`](../../modules/government/migrations/<redacted>.sql) grants the 20 to `metic` (+ `gate_approval.read` to both, since it is new). Lowering a floor is additive, so `tests/governance_seed.mjs`'s union model handles it and revokes nothing.
 
 **`requireArchonPage` is now a misnomer** — it resolves `page.view.governance`, floor metic. Renaming it touches serve-internal, auth, and several test files; left deliberately to keep this diff small in authz code, and filed separately. The hall nav group was relabelled **Archon → Governance**, because a header reading "Archon" over items a Metic can open misdescribes the ladder to exactly the builders still learning it.
 

package/docs/api/openapi.json

@@ -102,8 +102,8 @@
       "description": "Endpoints under `/api/bongos/goals`."
     },
     {
-      "name": "governance",
-      "description": "Endpoints under `/api/bongos/governance`."
+      "name": "government",
+      "description": "Endpoints under `/api/bongos/government`."
     },
     {
       "name": "grades",
@@ -3559,7 +3559,7 @@
           "gate-approvals"
         ],
         "summary": "GET /gate-approvals",
-        "description": "GET /gate-approvals — open PRs awaiting owner approval (gate-review red), with the verdict + per-file reasons + changed files + diff link. rank: metic+archon. BV1.R105 left this on requireRank because `gate_approval.decide` was declared over the /approve WRITE only and no atom named the read. ADR 0157 extends the catalog with exactly that atom — `gate_approval.read`, floor metic — so the mapping is now one the catalog makes. The split is load-bearing, not cosmetic: `page.view.governance` opens /gate to Metic, and without a Metic-readable data endpoint that page would render nothing but a 403. Approving a held PR stays archon (`.decide`, system).\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `gate_approval.read` (all required).",
+        "description": "GET /gate-approvals — open PRs awaiting owner approval (gate-review red), with the verdict + per-file reasons + changed files + diff link. rank: metic+archon. BV1.R105 left this on requireRank because `gate_approval.decide` was declared over the /approve WRITE only and no atom named the read. ADR 0157 extends the catalog with exactly that atom — `gate_approval.read`, floor metic — so the mapping is now one the catalog makes. The split is load-bearing, not cosmetic: `page.view.government` opens /gate to Metic, and without a Metic-readable data endpoint that page would render nothing but a 403. Approving a held PR stays archon (`.decide`, system).\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `gate_approval.read` (all required).",
         "x-rank": "metic+archon",
         "x-source": "modules/lifecycle/routes/gate-approvals.js",
         "x-permissions": [
@@ -5101,18 +5101,18 @@
         ]
       }
     },
-    "/governance/assignments": {
+    "/government/assignments": {
       "get": {
-        "operationId": "get_governance_assignments",
+        "operationId": "get_government_assignments",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "GET /governance/assignments",
-        "description": "governance.manage — every builder↔role assignment row.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "GET /government/assignments",
+        "description": "government.manage — every builder↔role assignment row.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "responses": {
           "200": {
@@ -5120,7 +5120,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetGovernanceAssignmentsResponse"
+                  "$ref": "#/components/schemas/GetGovernmentAssignmentsResponse"
                 }
               }
             }
@@ -5142,23 +5142,23 @@
         ]
       },
       "post": {
-        "operationId": "post_governance_assignments",
+        "operationId": "post_government_assignments",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "POST /governance/assignments",
-        "description": "governance.manage — assign a CUSTOM role to a builder. assigned_by is ALWAYS the session builder, never input (the audit trail's \"who did this\" must be the authenticated actor).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "POST /government/assignments",
+        "description": "government.manage — assign a CUSTOM role to a builder. assigned_by is ALWAYS the session builder, never input (the audit trail's \"who did this\" must be the authenticated actor).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostGovernanceAssignmentsRequest"
+                "$ref": "#/components/schemas/PostGovernmentAssignmentsRequest"
               }
             }
           },
@@ -5185,18 +5185,18 @@
         ]
       }
     },
-    "/governance/assignments/{builderId}/{roleKey}": {
+    "/government/assignments/{builderId}/{rankKey}": {
       "delete": {
-        "operationId": "delete_governance_assignments_builderId_roleKey",
+        "operationId": "delete_government_assignments_builderId_rankKey",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "DELETE /governance/assignments/:builderId/:roleKey",
-        "description": "governance.manage — remove a custom-role assignment. Idempotent: `removed` says whether a row went away.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "DELETE /government/assignments/:builderId/:rankKey",
+        "description": "government.manage — remove a custom-role assignment. Idempotent: `removed` says whether a row went away.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "parameters": [
           {
@@ -5209,13 +5209,13 @@
             "description": "Path parameter `builderId`."
           },
           {
-            "name": "roleKey",
+            "name": "rankKey",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `roleKey`."
+            "description": "Path parameter `rankKey`."
           }
         ],
         "responses": {
@@ -5224,7 +5224,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DeleteGovernanceAssignmentsBuilderIdRoleKeyResponse"
+                  "$ref": "#/components/schemas/DeleteGovernmentAssignmentsBuilderIdRankKeyResponse"
                 }
               }
             }
@@ -5249,18 +5249,18 @@
         ]
       }
     },
-    "/governance/permissions": {
+    "/government/permissions": {
       "get": {
-        "operationId": "get_governance_permissions",
+        "operationId": "get_government_permissions",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "GET /governance/permissions",
-        "description": "governance.manage — the permission catalog + principals, straight from code (the catalog is CODE, not a table); no DB read. Principals are read-only by construction. Three flags the tab renders its locks from, and the tab must read all three rather than just `grantable`, because since ADR 0172 grantability depends on WHICH role is selected: • `grantable` — the CUSTOM-role answer (system:false). Unchanged meaning. • `system` — an in-app Archon power: locked on a custom role, togglable on a sub-Archon rank-role. • `substrate` — locked EVERYWHERE, on every role, forever (ADR 0043).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "GET /government/permissions",
+        "description": "government.manage — the permission catalog + principals, straight from code (the catalog is CODE, not a table); no DB read. Principals are read-only by construction. Three flags the tab renders its locks from, and the tab must read all three rather than just `grantable`, because since ADR 0172 grantability depends on WHICH role is selected: • `grantable` — the CUSTOM-role answer (system:false). Unchanged meaning. • `system` — an in-app Archon power: locked on a custom role, togglable on a sub-Archon rank-role. • `substrate` — locked EVERYWHERE, on every role, forever (ADR 0043).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "responses": {
           "200": {
@@ -5268,7 +5268,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetGovernancePermissionsResponse"
+                  "$ref": "#/components/schemas/GetGovernmentPermissionsResponse"
                 }
               }
             }
@@ -5290,18 +5290,18 @@
         ]
       }
     },
-    "/governance/roles": {
+    "/government/ranks": {
       "get": {
-        "operationId": "get_governance_roles",
+        "operationId": "get_government_ranks",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "GET /governance/roles",
-        "description": "governance.manage — the full role list with each role's grants.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "GET /government/ranks",
+        "description": "government.manage — the full role list with each role's grants.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "responses": {
           "200": {
@@ -5309,7 +5309,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/GetGovernanceRolesResponse"
+                  "$ref": "#/components/schemas/GetGovernmentRanksResponse"
                 }
               }
             }
@@ -5331,23 +5331,23 @@
         ]
       },
       "post": {
-        "operationId": "post_governance_roles",
+        "operationId": "post_government_ranks",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "POST /governance/roles",
-        "description": "governance.manage — create a CUSTOM role (is_system false, no seeded_rank — the seeded four exist only via governance_002). Grants are added one at a time via the toggle below, so creation carries none.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "POST /government/ranks",
+        "description": "government.manage — create a CUSTOM role (is_system false, no seeded_rank — the seeded four exist only via governance_002). Grants are added one at a time via the toggle below, so creation carries none.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "requestBody": {
           "required": true,
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/PostGovernanceRolesRequest"
+                "$ref": "#/components/schemas/PostGovernmentRanksRequest"
               }
             }
           },
@@ -5359,7 +5359,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostGovernanceRolesResponse"
+                  "$ref": "#/components/schemas/PostGovernmentRanksResponse"
                 }
               }
             }
@@ -5381,28 +5381,28 @@
         ]
       }
     },
-    "/governance/roles/{roleKey}/permissions/{permissionKey}": {
+    "/government/ranks/{rankKey}/permissions/{permissionKey}": {
       "put": {
-        "operationId": "put_governance_roles_roleKey_permissions_permissionKey",
+        "operationId": "put_government_ranks_rankKey_permissions_permissionKey",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "PUT /governance/roles/:roleKey/permissions/:permissionKey",
-        "description": "governance.manage — grant one permission to a role (the toggle's ON half). The order of refusals is the authority order: role exists → role is not the Archon one → the key exists → the key is grantable TO THIS ROLE.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "PUT /government/ranks/:rankKey/permissions/:permissionKey",
+        "description": "government.manage — grant one permission to a role (the toggle's ON half). The order of refusals is the authority order: role exists → role is not the Archon one → the key exists → the key is grantable TO THIS ROLE.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "parameters": [
           {
-            "name": "roleKey",
+            "name": "rankKey",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `roleKey`."
+            "description": "Path parameter `rankKey`."
           },
           {
             "name": "permissionKey",
@@ -5420,7 +5420,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PutGovernanceRolesRoleKeyPermissionsPermissionKeyResponse"
+                  "$ref": "#/components/schemas/PutGovernmentRanksRankKeyPermissionsPermissionKeyResponse"
                 }
               }
             }
@@ -5445,26 +5445,26 @@
         ]
       },
       "delete": {
-        "operationId": "delete_governance_roles_roleKey_permissions_permissionKey",
+        "operationId": "delete_government_ranks_rankKey_permissions_permissionKey",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "DELETE /governance/roles/:roleKey/permissions/:permissionKey",
-        "description": "governance.manage — revoke a grant (the toggle's OFF half). Deliberately NOT validated against the catalog: a grant whose key the catalog since retired is exactly the row an Archon most needs to remove (the resolver already drops it — this is hygiene, not authority).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "DELETE /government/ranks/:rankKey/permissions/:permissionKey",
+        "description": "government.manage — revoke a grant (the toggle's OFF half). Deliberately NOT validated against the catalog: a grant whose key the catalog since retired is exactly the row an Archon most needs to remove (the resolver already drops it — this is hygiene, not authority).\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "parameters": [
           {
-            "name": "roleKey",
+            "name": "rankKey",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `roleKey`."
+            "description": "Path parameter `rankKey`."
           },
           {
             "name": "permissionKey",
@@ -5482,7 +5482,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DeleteGovernanceRolesRoleKeyPermissionsPermissionKeyResponse"
+                  "$ref": "#/components/schemas/DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse"
                 }
               }
             }
@@ -5507,28 +5507,28 @@
         ]
       }
     },
-    "/governance/roles/{roleKey}/reset": {
+    "/government/ranks/{rankKey}/reset": {
       "post": {
-        "operationId": "post_governance_roles_roleKey_reset",
+        "operationId": "post_government_ranks_rankKey_reset",
         "tags": [
-          "governance"
+          "government"
         ],
-        "summary": "POST /governance/roles/:roleKey/reset",
-        "description": "governance.manage — restore a SEEDED rank-role to its catalog default (ADR 0172). The counterweight to making the rank-roles editable: a rank's grant set is ~60 rows, so an owner who drifts one has no practical way back by clicking, and \"what does Trusted mean by default\" is a question only the catalog can answer. Restores catalog.seedForRank(role.seeded_rank) — the same derivation governance_002 seeded from, so the answer cannot drift from the floors even after later catalog edits. Deliberately NOT offered for a CUSTOM role: a custom role has no catalog default to return to (its \"default\" is the empty set it was created with), so the honest verb there is revoking the grants, which the toggle already does.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `governance.manage` (all required).",
+        "summary": "POST /government/ranks/:rankKey/reset",
+        "description": "government.manage — restore a SEEDED rank-role to its catalog default (ADR 0172). The counterweight to making the rank-roles editable: a rank's grant set is ~60 rows, so an owner who drifts one has no practical way back by clicking, and \"what does Trusted mean by default\" is a question only the catalog can answer. Restores catalog.seedForRank(role.seeded_rank) — the same derivation governance_002 seeded from, so the answer cannot drift from the floors even after later catalog edits. Deliberately NOT offered for a CUSTOM role: a custom role has no catalog default to return to (its \"default\" is the empty set it was created with), so the honest verb there is revoking the grants, which the toggle already does.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
         "x-rank": "archon",
-        "x-source": "modules/government/routes/governance.js",
+        "x-source": "modules/government/routes/government.js",
         "x-permissions": [
-          "governance.manage"
+          "government.manage"
         ],
         "parameters": [
           {
-            "name": "roleKey",
+            "name": "rankKey",
             "in": "path",
             "required": true,
             "schema": {
               "type": "string"
             },
-            "description": "Path parameter `roleKey`."
+            "description": "Path parameter `rankKey`."
           }
         ],
         "responses": {
@@ -5537,7 +5537,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostGovernanceRolesRoleKeyResetResponse"
+                  "$ref": "#/components/schemas/PostGovernmentRanksRankKeyResetResponse"
                 }
               }
             }
@@ -12536,36 +12536,36 @@
           "ok"
         ]
       },
-      "DeleteGovernanceAssignmentsBuilderIdRoleKeyResponse": {
+      "DeleteGovernmentAssignmentsBuilderIdRankKeyResponse": {
         "type": "object",
         "properties": {
           "ok": {
             "type": "boolean"
           },
           "builder_id": {},
-          "role_key": {},
+          "rank_key": {},
           "removed": {}
         },
         "required": [
           "ok",
           "builder_id",
-          "role_key",
+          "rank_key",
           "removed"
         ]
       },
-      "DeleteGovernanceRolesRoleKeyPermissionsPermissionKeyResponse": {
+      "DeleteGovernmentRanksRankKeyPermissionsPermissionKeyResponse": {
         "type": "object",
         "properties": {
           "ok": {
             "type": "boolean"
           },
-          "role_key": {},
+          "rank_key": {},
           "permission_key": {},
           "removed": {}
         },
         "required": [
           "ok",
-          "role_key",
+          "rank_key",
           "permission_key",
           "removed"
         ]
@@ -12977,7 +12977,7 @@
           "goals"
         ]
       },
-      "GetGovernanceAssignmentsResponse": {
+      "GetGovernmentAssignmentsResponse": {
         "type": "object",
         "properties": {
           "assignments": {}
@@ -12986,7 +12986,7 @@
           "assignments"
         ]
       },
-      "GetGovernancePermissionsResponse": {
+      "GetGovernmentPermissionsResponse": {
         "type": "object",
         "properties": {
           "permissions": {},
@@ -12997,7 +12997,7 @@
           "principals"
         ]
       },
-      "GetGovernanceRolesResponse": {
+      "GetGovernmentRanksResponse": {
         "type": "object",
         "properties": {
           "roles": {}
@@ -15646,14 +15646,14 @@
           "succeeds_goal_id"
         ]
       },
-      "PostGovernanceAssignmentsRequest": {
+      "PostGovernmentAssignmentsRequest": {
         "type": "object",
         "properties": {
           "builder_id": {
             "type": "integer",
             "minimum": 1
           },
-          "role_key": {
+          "rank_key": {
             "type": "string",
             "minLength": 2,
             "maxLength": 64
@@ -15661,14 +15661,31 @@
         },
         "required": [
           "builder_id",
-          "role_key"
+          "rank_key"
         ],
         "additionalProperties": false
       },
-      "PostGovernanceRolesRequest": {
+      "PostGovernmentRanksRankKeyResetResponse": {
         "type": "object",
         "properties": {
-          "role_key": {
+          "ok": {
+            "type": "boolean"
+          },
+          "rank_key": {},
+          "seeded_rank": {},
+          "permission_count": {}
+        },
+        "required": [
+          "ok",
+          "rank_key",
+          "seeded_rank",
+          "permission_count"
+        ]
+      },
+      "PostGovernmentRanksRequest": {
+        "type": "object",
+        "properties": {
+          "rank_key": {
             "type": "string",
             "minLength": 2,
             "maxLength": 64
@@ -15684,12 +15701,12 @@
           }
         },
         "required": [
-          "role_key",
+          "rank_key",
           "label"
         ],
         "additionalProperties": false
       },
-      "PostGovernanceRolesResponse": {
+      "PostGovernmentRanksResponse": {
         "type": "object",
         "properties": {
           "role": {}
@@ -15698,23 +15715,6 @@
           "role"
         ]
       },
-      "PostGovernanceRolesRoleKeyResetResponse": {
-        "type": "object",
-        "properties": {
-          "ok": {
-            "type": "boolean"
-          },
-          "role_key": {},
-          "seeded_rank": {},
-          "permission_count": {}
-        },
-        "required": [
-          "ok",
-          "role_key",
-          "seeded_rank",
-          "permission_count"
-        ]
-      },
       "PostInboxIdRatifyRequest": {
         "type": "object",
         "properties": {
@@ -17264,19 +17264,19 @@
           "criteria"
         ]
       },
-      "PutGovernanceRolesRoleKeyPermissionsPermissionKeyResponse": {
+      "PutGovernmentRanksRankKeyPermissionsPermissionKeyResponse": {
         "type": "object",
         "properties": {
           "ok": {
             "type": "boolean"
           },
-          "role_key": {},
+          "rank_key": {},
           "permission_key": {},
           "granted": {}
         },
         "required": [
           "ok",
-          "role_key",
+          "rank_key",
           "permission_key",
           "granted"
         ]