@bongos/core 1.19.224 → 1.19.226

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.224",
-  "core_contract": "1.19.224",
-  "source_commit": "cddd2aa1a006cc4524db36eb319d3813a35c5e57",
+  "core_version": "1.19.226",
+  "core_contract": "1.19.226",
+  "source_commit": "b99c0b52cf19ffd33ad98d0fc3dd763011559401",
   "source_ref": "HEAD",
-  "built_at": "2026-08-18T04:10:09.443Z",
+  "built_at": "2026-08-18T04:50:04.434Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 311,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1305,
+    "functional_verbatim": 1308,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1637,
-  "tree_sha256": "88a20aaa26450db245b3da0aa9685b344fb4c9c2a53618fb5242e79dfe8ec9fb",
+  "file_count": 1640,
+  "tree_sha256": "024eb9d71d1dd27389cb4db58a347eadfad7412b37e48d140a9c113cc8ee9234",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "81ffa13d3b249b46c4ed62be26cf8e985102697f090a3cfbe7491ff728976028"
+      "sha256": "f963a7ac5bccdc2811ea13f288ec9ff706b4c090ff0df185e9d3111d62194a5e"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "23b9f9be8ed1276fa2422cb74ae185c0e37813672e83196aeb6810f091815c12"
+      "sha256": "8b5bf5d1a077d73a402cbd3ddb215b021d764b9a0167185b072dcf41c802bc67"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "0e38267f075a54b3695a40da4a54f366d5b42827027e4e3614713e6bcc19ca4a"
+      "sha256": "6bfe5877a0ee3bea5f6162298792a67bd40741786a3add959e237052255929c2"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "004ad81d92eab45d5384876ce355b8f9208c32e202289f5c4fb1117932d27a14"
+      "sha256": "68708a1f6a8c4a01dcc62306ee1d09a40f961698bbb0605454a2749514738da2"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "661cd90af7bd8d0190cf9cef5614fee48dc48858d3cf9dea681da8b3fc99d170"
+      "sha256": "8b8a1df89fcd53cae49b2f398ac335dc35fbfd3632a9d6c6e1fa49b8e8f4244b"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1372,12 +1372,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "43f6538485af5153a0ce0fb82f103431fa869cc7d996f5b6694577c474b0f0fe"
+      "sha256": "981ce74f7c526b079ec880c5343d91f28bfba16c5446b19726d11669679ffdb7"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "675d873f35c886145c80d954b885692ef0608b4e5b1b843943611f59260eceed"
+      "sha256": "af44a3a2e2b866f4d7effd64b910047aeda53d894e17b9e7fdbf7f33ad0b8502"
     },
     {
       "path": "docs/architecture.md",
@@ -2687,7 +2687,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "0e38267f075a54b3695a40da4a54f366d5b42827027e4e3614713e6bcc19ca4a"
+      "sha256": "6bfe5877a0ee3bea5f6162298792a67bd40741786a3add959e237052255929c2"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -2899,6 +2899,11 @@
       "mode": "0000644",
       "sha256": "5bf474bee95bc8a8982e4a52c9e5b19955a20195dc1affd51c07e99540c8c059"
     },
+    {
+      "path": "modules/government/board.js",
+      "mode": "0000644",
+      "sha256": "0711f087cc61ed19f91fb207705a9e4831422c9acf29ae8402f87926a31d2a51"
+    },
     {
       "path": "modules/government/catalog.js",
       "mode": "0000644",
@@ -2912,7 +2917,7 @@
     {
       "path": "modules/government/db.js",
       "mode": "0000644",
-      "sha256": "581d1b67c4765ec3f1d98a7af06afaefb2b6904f84d4fbb8be79f3d0008d4712"
+      "sha256": "1f50cef895c7937aebbb365aa7a9ce1b1681bd097034c0045d94458cd369f50a"
     },
     {
       "path": "modules/government/migrations/governance_001_tables.sql",
@@ -3002,7 +3007,7 @@
     {
       "path": "modules/government/routes/government.js",
       "mode": "0000644",
-      "sha256": "120877f860336de8bb010fe09872348257967b79a51951e5914fc32e907b5886"
+      "sha256": "41ac023e96901b9b3cf8a5059a5c26ff5f86b564d7bb37dc8d5a55a206db85fb"
     },
     {
       "path": "modules/government/routes/rank-sync.js",
@@ -3512,7 +3517,7 @@
     {
       "path": "modules/ideas/completeness.js",
       "mode": "0000644",
-      "sha256": "84d977372c79a46f8481176b7cdc740cbaca9480af3464b7b66183aad6d6e180"
+      "sha256": "07e5666362c91f92d34388b4f6f4507cc5387866d317970478e6cae417c19975"
     },
     {
       "path": "modules/ideas/inbox.js",
@@ -3532,7 +3537,7 @@
     {
       "path": "modules/ideas/module.json",
       "mode": "0000644",
-      "sha256": "64116b6abe3b2e13e3e6697b5c53e12534de698376410e2a14e319d4836481be"
+      "sha256": "c9a5e2bab38b9e45e4934f578f4ebbf0966f9e971318548d5c445d2f6a3de3a7"
     },
     {
       "path": "modules/ideas/routes/blockers.js",
@@ -3542,7 +3547,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "d6307869ae1b4388aa33244a1807f74ca2442122dea597e2f1ea5b7fe4533495"
+      "sha256": "9e9288725b66b696bdc565e693c82f046bd78665ae070e3f571ff987f82a7b7b"
     },
     {
       "path": "modules/ideas/templates.js",
@@ -4297,12 +4302,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c0b226a7cd5289673d7a88f416d410c5855a7094e8cd0bcff12e063b705baf82"
+      "sha256": "93e2a0f8b239aa724d99178fa5cfcd7794d7a09c9e820a9ba3f8da94a81ec2b0"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "49b050b03e108d8f8be6aef3ed472dfd699496a1101e7bd286793e17351db3b5"
+      "sha256": "378978670cd1efdcc3929f44178118e321f8e381bb923aff175716af2b24134d"
     },
     {
       "path": "public-docs/index.html",
@@ -5782,7 +5787,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "af5bdd9e362923afc1b78a741b5254147678b34cecb7d92f879387cc94a05631"
+      "sha256": "a37f6723510eb9d3a4adc3a927213336716810c8814ec82b4b9547eed1983188"
     },
     {
       "path": "src/bongos/routes.js",
@@ -5917,7 +5922,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ff93015b043ae508d50b88b8de3fe512221a9906479d36e28bc418d837455fd4"
+      "sha256": "d7a3216e0393ff4a4cb0fe3c7823b9c8a294ff45549a4a698b95c78ea93e4ad8"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6844,6 +6849,16 @@
       "mode": "0000644",
       "sha256": "1a6f90e319c88ecd3e5588d5a6df44a9848c0adf08efd13bfcc52ac99e84d5d0"
     },
+    {
+      "path": "tests/government_board_vote.mjs",
+      "mode": "0000644",
+      "sha256": "c1b9b0963dde0c033bd0eb411b63032a51edaa3d91751100593b7e3b4999c017"
+    },
+    {
+      "path": "tests/government_board_window.mjs",
+      "mode": "0000644",
+      "sha256": "bb78d4fe2610e08a2d538d4e4a64cd3b7198da12b09da1313a58ed32a96dab5a"
+    },
     {
       "path": "tests/government_catalog.mjs",
       "mode": "0000644",
@@ -6917,7 +6932,7 @@
     {
       "path": "tests/government_routes.mjs",
       "mode": "0000644",
-      "sha256": "7f406d5296489d08804eae5b431d07244e1f2f3464513cccccb72e7b33253c14"
+      "sha256": "d32b42a6046361fdcb6ff26e92dfe2abd46fb76a218168c719377ca39614112b"
     },
     {
       "path": "tests/government_seed.mjs",
@@ -7062,7 +7077,7 @@
     {
       "path": "tests/idea_completeness.mjs",
       "mode": "0000644",
-      "sha256": "e7b6af463185ea77f40d62408026c55c7fb077f18999b972564b3b5bc7656ca5"
+      "sha256": "7e2024b3f1fa79a6bdec55b134be6337d4867df0a77fedb205f32b783a3d6193"
     },
     {
       "path": "tests/idea_full_capture.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 280 operations across 46 resource groups
+- 281 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -349,6 +349,8 @@ function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
+      postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/clients/bongos-client/index.cjs

@@ -348,6 +348,8 @@ function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
+      postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/clients/bongos-client/index.d.ts

@@ -232,6 +232,7 @@ export interface PostGoalsReorderResponse { ok: boolean; goals: unknown }
 export interface PostGoalsRequest { version_id: string; title: string; description?: string; scope_modules?: string[]; succeeds_goal_id?: number }
 export interface PostGoalsResponse { ok: boolean; goal: unknown; succeeds_goal_id: unknown }
 export interface PostGovernmentAssignmentsRequest { builder_id: number; rank_key: string }
+export interface PostGovernmentBoardItemsItemIdVotesRequest { direction: string; reason_md?: string; section_key?: string }
 export interface PostGovernmentRanksRankKeyResetResponse { ok: boolean; rank_key: unknown; seeded_rank: unknown; permission_count: unknown }
 export interface PostGovernmentRanksRequest { rank_key: string; label: string; description?: string }
 export interface PostGovernmentRanksResponse { rank: unknown }
@@ -599,6 +600,8 @@ export interface BongosClient {
     postGovernmentAssignments(args: RequestArgs & { body: PostGovernmentAssignmentsRequest }): Promise<ApiResponse>;
     /** DELETE /government/assignments/{builderId}/{rankKey} — rank: archon */
     deleteGovernmentAssignmentsBuilderIdRankKey(args?: RequestArgs): Promise<DeleteGovernmentAssignmentsBuilderIdRankKeyResponse>;
+    /** POST /government/board/items/{itemId}/votes — rank: any-builder */
+    postGovernmentBoardItemsItemIdVotes(args: RequestArgs & { body: PostGovernmentBoardItemsItemIdVotesRequest }): Promise<ApiResponse>;
     /** GET /government/permissions — rank: archon */
     getGovernmentPermissions(args?: RequestArgs): Promise<GetGovernmentPermissionsResponse>;
     /** GET /government/ranks — rank: archon */

package/clients/bongos-client/index.mjs

@@ -345,6 +345,8 @@ export function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
+      postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/docs/api/openapi.json

@@ -5336,6 +5336,65 @@
         ]
       }
     },
+    "/government/board/items/{itemId}/votes": {
+      "post": {
+        "operationId": "post_government_board_items_itemId_votes",
+        "tags": [
+          "government"
+        ],
+        "summary": "POST /government/board/items/:itemId/votes",
+        "description": "board.vote.cast — cast a vote on an open board item (R08 of goal 1000069, ADR 0175). The atom FLOORS AT XENOS deliberately (the R04 carry- note): the permission is only the coarse gate, and the real wall is the in-handler membership re-check against the constitution SNAPSHOTTED on the item — do not \"tighten\" the floor to archon; that would fork authority truth and make widening the franchise a migration instead of a config change. Open ballot, anti-self, idempotent (UNIQUE(item_id, voter_id)), voter karma +1 on a fresh in-window cast. The policy lives in board.js castVote; this handler is the HTTP mapping.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).\n\n**Permissions:** `board.vote.cast` (all required).",
+        "x-rank": "any-builder",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "board.vote.cast"
+        ],
+        "parameters": [
+          {
+            "name": "itemId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `itemId`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGovernmentBoardItemsItemIdVotesRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/government/permissions": {
       "get": {
         "operationId": "get_government_permissions",
@@ -15962,6 +16021,27 @@
         ],
         "additionalProperties": false
       },
+      "PostGovernmentBoardItemsItemIdVotesRequest": {
+        "type": "object",
+        "properties": {
+          "direction": {
+            "type": "string",
+            "maxLength": 3
+          },
+          "reason_md": {
+            "type": "string",
+            "maxLength": 5000
+          },
+          "section_key": {
+            "type": "string",
+            "maxLength": 32
+          }
+        },
+        "required": [
+          "direction"
+        ],
+        "additionalProperties": false
+      },
       "PostGovernmentRanksRankKeyResetResponse": {
         "type": "object",
         "properties": {
@@ -17729,8 +17809,8 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 280,
-  "x-schema-count": 317,
+  "x-endpoint-count": 281,
+  "x-schema-count": 318,
   "x-undocumented-bodies": 8,
   "x-response-schemas": 214,
   "x-generated-by": "scripts/gds/gen-api-docs.js"

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 280 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 281 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -216,13 +216,14 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/goals/inbox` | `any-builder` | — | GET /goals/inbox — the caller's private-goals inbox (task 1952 / ADR 0112): { invitations: invites addressed to me (accept/decline); join… |
 | POST | `/api/bongos/goals/reorder` | `metic+archon` | `version_id`, `ordered_ids` | POST /goals/reorder — Archon drag-to-reorder: set the priority order of every goal WITHIN one version (task 1760). |
 
-## `government` (9)
+## `government` (10)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/government/assignments` | `archon` | — | government.manage — every builder↔rank assignment row. |
 | POST | `/api/bongos/government/assignments` | `archon` | `builder_id`, `rank_key` | government.manage — assign a CUSTOM rank to a builder. |
 | DELETE | `/api/bongos/government/assignments/:builderId/:rankKey` | `archon` | — | government.manage — remove a custom-rank assignment. |
+| POST | `/api/bongos/government/board/items/:itemId/votes` | `any-builder` | `direction`, `reason_md`, `section_key` | board.vote.cast — cast a vote on an open board item (R08 of goal 1000069, ADR 0175). |
 | GET | `/api/bongos/government/permissions` | `archon` | — | government.manage — the permission catalog + principals, straight from code (the catalog is CODE, not a table); no DB read. |
 | GET | `/api/bongos/government/ranks` | `archon` | — | government.manage — the full rank list with each rank's grants. |
 | POST | `/api/bongos/government/ranks` | `archon` | `rank_key`, `label`, `description` | government.manage — create a CUSTOM rank (is_system false, no seeded_rank — the seeded four exist only via governance_002). |

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -348,6 +348,8 @@ function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
+      postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/modules/government/board.js

@@ -0,0 +1,211 @@
+'use strict';
+
+// modules/government/board.js — the Board Room's OPEN half: a ratification
+// window opens automatically when a Full Idea passes the completeness grade
+// (BV1.R07 of goal 1000069, ADR 0175 §5).
+//
+// THE GRADE IS THE FLOOR, THE VOTE IS THE MERIT. The deterministic completeness
+// scorer (modules/ideas/completeness.js) asks "is the thought fully expressed";
+// the board asks "is it worth doing". Board time is never spent on what a free
+// deterministic check can bounce, so a sub-bar idea NEVER reaches the board —
+// and that gate is enforced HERE, inside the module that owns the board, not by
+// trusting callers to pre-filter. The ideas module fires this through the
+// `government` kernel port and passes the stored score; this file decides.
+//
+// THE BAR IS THE SAME ONE THE IDEATOR CREDIT LANE USES (ADR 0175 §5 pins it to
+// economy's IDEA_FULL_PASS_BAR = 60). It is declared here as this module's own
+// constant rather than imported — a module must not require() another module
+// (ADR 0083); the two constants are held equal by tests/government_board_window
+// .mjs instead, the same no-second-list-that-drifts discipline the seed tests
+// use. If the bar ever becomes per-instance policy, both modules should read it
+// from ONE config surface in the same change.
+//
+// AUTOMATIC MEANS CONCURRENT. A window opens the moment an idea passes (owner
+// decision 10), so overlapping windows are normal, expected, and each carries
+// its own clock. What cannot exist is two OPEN windows for the same subject —
+// government_003's partial unique index makes that structural, and the INSERT
+// below leans on it (ON CONFLICT DO NOTHING against the partial index), so a
+// re-grade, a resubmission race, or a double-fired hook opens nothing twice.
+//
+// THE CONSTITUTION IS SNAPSHOTTED ON THE ITEM. The rule in force when a window
+// opens is what decides it (government_003's `constitution` column): an
+// amendment ratified mid-sitting must not rewrite how an already-open item
+// closes. The snapshot is R05's SANITIZED board block — loadGovernmentConfig
+// runs the fail-closed sanitizer, so a malformed config file snapshots as the
+// strict default (monarchy), never as a wider board.
+//
+// The config read is two synchronous file reads. config.js says boot-time, not
+// per request — and window-opening is the rare event (a Full Idea capture, a
+// few a day at most), not a hot path; reading LIVE is what makes an amendment
+// take effect on the very next window without a process restart, the same
+// instant-effect posture the resolver takes (ADR 0016).
+
+const db = require('./db');
+const { loadGovernmentConfig } = require('./config');
+const { isBoardMember } = require('./board-membership');
+
+// ADR 0175 §5: the completeness bar a Full Idea must clear to reach the board.
+// Held equal to economy's IDEA_FULL_PASS_BAR by test — see the header.
+const FULL_IDEA_PASS_BAR = 60;
+
+// Pure: does this stored completeness score clear the bar? Fail-closed — a
+// null score ("not scored" and "could not be scored" deliberately look the
+// same, R142), a non-number, or NaN never reaches the board.
+function ideaPassesBar(score) {
+  const n = Number(score);
+  return score !== null && score !== undefined && Number.isFinite(n) && n >= FULL_IDEA_PASS_BAR;
+}
+
+// The open entry point the ideas capture path fires (through the `government`
+// port, fail-open on its side). Returns, never throws into the capture path:
+//   { opened: true,  item }                      — a window is now open
+//   { opened: false, reason: 'below_bar' }       — sub-bar; R13 returns it instead
+//   { opened: false, reason: 'already_open', item } — this subject already sits
+//   { opened: false, reason: 'bad_subject' }     — unidentifiable idea id
+async function openWindowForFullIdea({ ideaId, completenessScore } = {}) {
+  const id = Number(ideaId);
+  if (!Number.isFinite(id) || id <= 0) return { opened: false, reason: 'bad_subject' };
+  if (!ideaPassesBar(completenessScore)) return { opened: false, reason: 'below_bar' };
+  const { board } = loadGovernmentConfig();
+  const item = await db.openBoardItem({
+    subjectType: 'full_idea',
+    subjectId: id,
+    openedBy: null, // the grade opened this, nobody did (government_003's design)
+    constitution: board,
+    windowMinutes: board.window_minutes,
+  });
+  if (!item) return { opened: false, reason: 'already_open', item: await db.getOpenBoardItem('full_idea', id) };
+  return { opened: true, item };
+}
+
+// ── the vote (BV1.R08 of goal 1000069, ADR 0175 §§4/6/9) ────────────────────
+//
+// OPEN BALLOT, ONE VOTE, NO EDITING. A vote is member + direction + timestamp,
+// visible to everyone (§9 — a board whose votes are invisible constrains
+// nobody). One vote per member per item is government_003's UNIQUE(item_id,
+// voter_id); casting again returns the existing vote rather than erroring,
+// which is what "idempotent" means here — a double-click or a retried request
+// is one vote, and there is no vote-changing in v1.
+//
+// THE FLOOR IS COARSE, MEMBERSHIP IS THE GATE — and that split is deliberate
+// (the R04 carry-note): `board.vote.cast` floors at XENOS so that widening the
+// franchise is a CONFIG change, never a grant migration. The real wall is the
+// in-handler membership re-check against the constitution SNAPSHOTTED ON THE
+// ITEM — per request, uncached (ADR 0016), so a demotion between open and vote
+// refuses the vote, and an amendment mid-sitting cannot change who may vote on
+// an already-open item.
+//
+// ANTI-SELF IS A HARD SERVER-SIDE RULE (the spec's bright line: it is what
+// keeps ratification from being ceremonial). The author of a full_idea — and
+// the proposer of an amendment — may not vote on their own item, mirroring the
+// peer_votes guard.
+//
+// AN OBJECTION MUST BE ACTIONABLE (§4, criterion C2): a 'no' carries free text
+// AND exactly one of the five Full Idea section keys; a 'yes' carries neither.
+// The DB CHECK enforces it structurally; the validation here exists to return
+// a NAMED refusal instead of a constraint error. The section keys mirror the
+// government_003 CHECK, which mirrors modules/ideas/templates.js — a module
+// may not require a sibling (ADR 0083), so the three lists are held equal by
+// tests/government_board_vote.mjs, the same discipline as the pass bar above.
+const FULL_IDEA_SECTION_KEYS = Object.freeze(['purpose', 'big_picture', 'why_had', 'why_matters', 'fit']);
+
+// Author karma on RATIFICATION: +3, mirroring the criterion-proposal ratify
+// award (modules/ideas/inbox.js KARMA_RATIFY_DELTA — tuned down from +5 in
+// V3.R28; the +5 still printed in planning-session/SKILL.md and openapi.json is
+// STALE, do not copy it). Ratification is the CLOSE outcome, so R10's tally is
+// what fires the payout — this file owns the constant and the payout so the
+// close path cannot invent its own number. Held equal to the ideas constant by
+// tests/government_board_vote.mjs (ADR 0083 forbids the sibling import — the
+// same held-equal discipline as the pass bar and the section keys).
+const AUTHOR_RATIFY_KARMA_DELTA = 3;
+
+// Pay the item's author their ratification karma. IDEMPOTENT BY REASON KEY —
+// `board.item.ratified:<itemId>` is unique per item and the INSERT is a single
+// WHERE-NOT-EXISTS statement (the economy credit-lane idiom), so R10's close,
+// a re-driven close sweep, or a concurrent double-close can never double-pay.
+// A subject with no author (an auto-opened item whose idea row is gone) pays
+// nobody, silently — there is no one to pay, not an error.
+async function awardAuthorRatifyKarma(item) {
+  const authorId = await db.getBoardItemAuthor(item);
+  if (authorId == null) return { paid: false, reason: 'no_author' };
+  const fresh = await db.insertAuthorRatifyKarma({
+    authorId, itemId: item.id, delta: AUTHOR_RATIFY_KARMA_DELTA,
+  });
+  return fresh ? { paid: true, karma_delta: AUTHOR_RATIFY_KARMA_DELTA } : { paid: false, reason: 'already_paid' };
+}
+
+// Voter karma: +1 per in-window vote (owner decision 8 — accepted with the
+// yes-clicking bias named; the item volume is too low to farm). Booked only on
+// a FRESH insert, so the idempotent re-cast can never double-pay.
+const VOTE_KARMA_DELTA = 1;
+
+// Pure: validate a vote payload into a normalized shape, or name the refusal.
+function validateVote({ direction, reasonMd, sectionKey } = {}) {
+  if (direction !== 'yes' && direction !== 'no') {
+    return { ok: false, reason: 'bad_direction' };
+  }
+  if (direction === 'yes') {
+    if (reasonMd != null || sectionKey != null) return { ok: false, reason: 'yes_carries_nothing' };
+    return { ok: true, direction, reasonMd: null, sectionKey: null };
+  }
+  const reason = typeof reasonMd === 'string' ? reasonMd.trim() : '';
+  if (!reason) return { ok: false, reason: 'objection_needs_reason' };
+  if (!FULL_IDEA_SECTION_KEYS.includes(sectionKey)) return { ok: false, reason: 'objection_needs_section' };
+  return { ok: true, direction, reasonMd: reason, sectionKey };
+}
+
+// Cast a vote on an open item. Returns a typed result, never throws for a
+// policy refusal — the route maps each to its status:
+//   { ok: true,  vote, fresh: true, karma_delta }   — recorded now
+//   { ok: true,  vote, fresh: false }               — idempotent re-cast
+//   { ok: false, reason: 'item_not_found' | 'item_closed' | 'vote_window_expired'
+//               | 'not_board_member' | 'anti_self_vote' | <validateVote reason> }
+async function castVote({ itemId, voterId, direction, reasonMd = null, sectionKey = null } = {}) {
+  const id = Number(itemId);
+  if (!Number.isFinite(id) || id <= 0) return { ok: false, reason: 'item_not_found' };
+  const v = validateVote({ direction, reasonMd, sectionKey });
+  if (!v.ok) return v;
+
+  const item = await db.getBoardItemForVote(id);
+  if (!item) return { ok: false, reason: 'item_not_found' };
+  if (item.closed_at) return { ok: false, reason: 'item_closed' };
+  // The clock is checked here as well as by the R11 poller: a vote landing in
+  // the gap between expiry and the sweep would be a vote after time. The
+  // comparison ran on the DATABASE clock (getBoardItemForVote computes it).
+  if (item.expired) return { ok: false, reason: 'vote_window_expired' };
+
+  // The membership re-check runs against the item's SNAPSHOT, live rows,
+  // uncached — the fourth entry in the resolver family's ADR 0016 ledger.
+  const constitution = item.constitution || {};
+  if (!(await isBoardMember(voterId, constitution))) return { ok: false, reason: 'not_board_member' };
+
+  const authorId = await db.getBoardItemAuthor(item);
+  if (authorId != null && String(authorId) === String(voterId)) {
+    return { ok: false, reason: 'anti_self_vote' };
+  }
+
+  const inserted = await db.insertBoardVote({
+    itemId: id, voterId, direction: v.direction, reasonMd: v.reasonMd, sectionKey: v.sectionKey,
+  });
+  if (!inserted) {
+    // UNIQUE(item_id, voter_id) — the idempotent path. Return what stands.
+    const existing = await db.getBoardVote(id, voterId);
+    return { ok: true, vote: existing, fresh: false };
+  }
+  // Karma rides the FRESH insert only, and the whole route refused a closed or
+  // expired item above, so every paid vote is by construction in-window.
+  await db.insertVoteKarma({ voterId, itemId: id, delta: VOTE_KARMA_DELTA });
+  return { ok: true, vote: inserted, fresh: true, karma_delta: VOTE_KARMA_DELTA };
+}
+
+module.exports = {
+  FULL_IDEA_PASS_BAR,
+  ideaPassesBar,
+  openWindowForFullIdea,
+  FULL_IDEA_SECTION_KEYS,
+  VOTE_KARMA_DELTA,
+  AUTHOR_RATIFY_KARMA_DELTA,
+  awardAuthorRatifyKarma,
+  validateVote,
+  castVote,
+};