@bongos/core 1.19.232 → 1.19.233

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.232",
-  "core_contract": "1.19.232",
-  "source_commit": "0410dea5ee4d77aab90467679874cc5abee21963",
+  "core_version": "1.19.233",
+  "core_contract": "1.19.233",
+  "source_commit": "17f28d2147bc72ed6a97cbc256e388a889e7ddec",
   "source_ref": "HEAD",
-  "built_at": "2026-08-18T11:50:40.699Z",
+  "built_at": "2026-08-18T16:32:54.929Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 311,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1315,
+    "functional_verbatim": 1317,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1647,
-  "tree_sha256": "94232cdfd24e7ff58e77b2642499e86fad84a4d09483c8b5150028b363080d4d",
+  "file_count": 1649,
+  "tree_sha256": "211de1015cfb5ba8ea8bb0e6aa7467566e296ffea14ebc4cabd2875e21fb6b2c",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "6be7d91bb8c0b620f3a67e071e96435946413330e05c97bf901fd7241bbd10f9"
+      "sha256": "841ea9c45ad482286f056e885cd25c6769931134a2ff066b638d7585a097888e"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "6af213e35ced87effe655c14a220b472768551c37f0cd7abddebcbdbcb7d81a9"
+      "sha256": "a9c482ca4c6d2cc313c76f3e098c3bdaa802f5c1253c749e3b5df6dfbae06463"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "18f00d369a1689973e2eeb33034302142884cb2836d3f1ea76b882f3379d0cf8"
+      "sha256": "fafd3c715b3eb716d7f8355001cf4ea4a8254b78fd757c4a4343ad673a4f1bd8"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "ed6940e45f5634264705869043f0a795ddb4bea264f036789b3c80cc08424b97"
+      "sha256": "dc1ef3a4e2843b836e828e5c8d290861dda56844e4f5727ad5d9b3001d7e4e6b"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "e3d388b90604d290b3e6346129701b7f2a0a15b4c3b6abe915a43c8702daa1e8"
+      "sha256": "48ea243ec0016c7dc2842322100406c339b2b7d05bccf8f0119060fc0cf7e5b2"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1372,12 +1372,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "3212eaeaaf4f1f64889fa6b144fcc48845ed12c4fe08b2a74d3c2bcffc503064"
+      "sha256": "18317d38ec567284fbb3fd3e351d8fecd10c0aa9371b353128e1e9ff0e6e7717"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "0709c0e537931a75055afea96cf48dd9f3820faa09cd781f07028b7d0b1f26c8"
+      "sha256": "f2f81530200394e99b8591d43839ba024ab0e055331f86c119fa0e5ab39abbce"
     },
     {
       "path": "docs/architecture.md",
@@ -2902,7 +2902,7 @@
     {
       "path": "modules/government/board.js",
       "mode": "0000644",
-      "sha256": "359de8efb5ec1365e6114a8c5b3d62aadd484ca7d94d1a36684b6c0c640aaa99"
+      "sha256": "98c0543844eb7a2143fc9541098e067702d3b76b4a546034b050a45105403d1a"
     },
     {
       "path": "modules/government/catalog.js",
@@ -2917,7 +2917,7 @@
     {
       "path": "modules/government/db.js",
       "mode": "0000644",
-      "sha256": "cb5c481fcd1a9f6becb63b88a1f0ca4004e592a2f70e02c968a3cc10378dabd5"
+      "sha256": "dd937ea64d6e4cd6ff677c136c5b8a493fecbf75b63082d9449b4a4390d1a0af"
     },
     {
       "path": "modules/government/migrations/governance_001_tables.sql",
@@ -2989,6 +2989,11 @@
       "mode": "0000644",
       "sha256": "5629112a9bb932873a00b8ddefa847d9a21ed0f8f59cc8a77ffb9c9c5e0eea49"
     },
+    {
+      "path": "modules/government/migrations/government_008_closed_items_index.sql",
+      "mode": "0000644",
+      "sha256": "2392050b4295f9fdb4105b8434a4c44833b5f0e850f11b41afe82ea1860fef34"
+    },
     {
       "path": "modules/government/module.json",
       "mode": "0000644",
@@ -3022,7 +3027,7 @@
     {
       "path": "modules/government/routes/government.js",
       "mode": "0000644",
-      "sha256": "2bde6d18afc3f24ae2eaeac08b16d83d3ab6ddb22b61da4b9b2f261ee4e844a6"
+      "sha256": "2c7ae89e1e8e91107a8e0a55cc82d6ee4f8804fedb76d07dbe5e502c4801e187"
     },
     {
       "path": "modules/government/routes/rank-sync.js",
@@ -3267,12 +3272,12 @@
     {
       "path": "modules/hall-ui/public/government.html",
       "mode": "0000644",
-      "sha256": "23ceb462eddfb0f66ba3030231ae1394d72eb0b6689a7f127c1ba52554c874bf"
+      "sha256": "ffd03d1fefcd4c4639f66812fe35dd3f74a2c65ed02a576a5d9703883df10736"
     },
     {
       "path": "modules/hall-ui/public/government.js",
       "mode": "0000644",
-      "sha256": "4778f9a83d63900aca6969a85e7cb67850ffb591a6cbae1fb4be270393741cd1"
+      "sha256": "39215495c3ec93b4426c95b0a16db76297a070aa678318507f8c064a57692e5d"
     },
     {
       "path": "modules/hall-ui/public/hall-kit.js",
@@ -4317,12 +4322,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "de0ff156427786537d3a4231d4fae7721d52027b9a25d6185bc53efac35b24d2"
+      "sha256": "c1798947aa88297385a13e4c3b16070a6a6e79208e077b5c40459580dfe3f55c"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c5fa9bf830e64903a205cf28feabd9255772343cc1f002f344fa92ede02f7f7d"
+      "sha256": "25e6cf1d1ba69421a3a6ee12d77ab8609f6748aacb0d5390ccc0c287dc2c2ff0"
     },
     {
       "path": "public-docs/index.html",
@@ -5802,7 +5807,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "34850de6361ab78ce8788e20c483ded22d3de9ff9fb42bf14497509b0870f66c"
+      "sha256": "a074972d1da13fb71acdd9d60126488f345ff59c33d83aca90cea50b8ed064ab"
     },
     {
       "path": "src/bongos/routes.js",
@@ -5902,7 +5907,7 @@
     {
       "path": "src/bongos/serve-internal.js",
       "mode": "0000644",
-      "sha256": "94af8e061c690b6fb979cd95ec3a65e21b0f830898a05ab868c5a9f34d9dee72"
+      "sha256": "885076ed4dce0676735055df3f841a72ac41846568d39434a80d48eacced3e16"
     },
     {
       "path": "src/bongos/stealth-gate.js",
@@ -5937,7 +5942,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "1302cbcd4f4b6b35032165625c203741ccc846304680876d3789ce212d0bc746"
+      "sha256": "aff6b3aeff836216d9b45d025375021888c25cc3f6942705341698652836bdd2"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6879,6 +6884,11 @@
       "mode": "0000644",
       "sha256": "1a6f90e319c88ecd3e5588d5a6df44a9848c0adf08efd13bfcc52ac99e84d5d0"
     },
+    {
+      "path": "tests/government_board_view.mjs",
+      "mode": "0000644",
+      "sha256": "104dbfd5510f4abf4580cf89f57e4be15667b4b6e6f171a2635786bfd4d65f9e"
+    },
     {
       "path": "tests/government_board_vote.mjs",
       "mode": "0000644",
@@ -6967,7 +6977,7 @@
     {
       "path": "tests/government_seed.mjs",
       "mode": "0000644",
-      "sha256": "9c0c1049180013f30a3403a4e308112ed871119d9e60c459e9573108b35a5a27"
+      "sha256": "cd67c76a30e1c69838f99afbb8edd17a0ec2109a8105b61805b9564e27464137"
     },
     {
       "path": "tests/government_session_scope.mjs",
@@ -7057,7 +7067,7 @@
     {
       "path": "tests/hall_page_gate_map.mjs",
       "mode": "0000644",
-      "sha256": "cb23b7a54220c3c53906fed559fb0c8a8e97375aa48dfc3cf64a1af88339e110"
+      "sha256": "98a5317bf8599941802794a5a0679e1ad2ff84dbaa7c36c88140a5f5fcd30780"
     },
     {
       "path": "tests/hall_palette.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 283 operations across 46 resource groups
+- 284 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -349,6 +349,8 @@ function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/board/items — rank: any-builder — GET /government/board/items
+      getGovernmentBoardItems: (args) => request("GET", "/government/board/items", { hasBody: false }, args),
       // POST /government/board/items — rank: metic+archon — POST /government/board/items
       postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes

package/clients/bongos-client/index.cjs

@@ -348,6 +348,8 @@ function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/board/items — rank: any-builder — GET /government/board/items
+      getGovernmentBoardItems: (args) => request("GET", "/government/board/items", { hasBody: false }, args),
       // POST /government/board/items — rank: metic+archon — POST /government/board/items
       postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes

package/clients/bongos-client/index.d.ts

@@ -603,6 +603,8 @@ export interface BongosClient {
     postGovernmentAssignments(args: RequestArgs & { body: PostGovernmentAssignmentsRequest }): Promise<ApiResponse>;
     /** DELETE /government/assignments/{builderId}/{rankKey} — rank: archon */
     deleteGovernmentAssignmentsBuilderIdRankKey(args?: RequestArgs): Promise<DeleteGovernmentAssignmentsBuilderIdRankKeyResponse>;
+    /** GET /government/board/items — rank: any-builder */
+    getGovernmentBoardItems(args?: RequestArgs): Promise<ApiResponse>;
     /** POST /government/board/items — rank: metic+archon */
     postGovernmentBoardItems(args: RequestArgs & { body: PostGovernmentBoardItemsRequest }): Promise<PostGovernmentBoardItemsResponse>;
     /** POST /government/board/items/{itemId}/votes — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -345,6 +345,8 @@ export function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/board/items — rank: any-builder — GET /government/board/items
+      getGovernmentBoardItems: (args) => request("GET", "/government/board/items", { hasBody: false }, args),
       // POST /government/board/items — rank: metic+archon — POST /government/board/items
       postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes

package/docs/api/openapi.json

@@ -5337,6 +5337,38 @@
       }
     },
     "/government/board/items": {
+      "get": {
+        "operationId": "get_government_board_items",
+        "tags": [
+          "government"
+        ],
+        "summary": "GET /government/board/items",
+        "description": "board.vote.cast — the Board Room view: open items with their clock, the OPEN BALLOT, the closed history (R16 of goal 1000069). Gated on the XENOS-floored vote atom, deliberately: seeing the ballot is part of casting (§9 — a board whose votes are invisible constrains nobody), and the room teaches as well as governs (criterion C5). NOT government.manage — that is the admin tab's atom; the room must be visible to whoever the constitution may enfranchise. Membership still gates nothing here: this is a read, and the write (the vote) re-checks membership in-handler.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).\n\n**Permissions:** `board.vote.cast` (all required).",
+        "x-rank": "any-builder",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "board.vote.cast"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
       "post": {
         "operationId": "post_government_board_items",
         "tags": [
@@ -17969,7 +18001,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 283,
+  "x-endpoint-count": 284,
   "x-schema-count": 321,
   "x-undocumented-bodies": 8,
   "x-response-schemas": 215,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 283 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 284 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -216,13 +216,14 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/goals/inbox` | `any-builder` | — | GET /goals/inbox — the caller's private-goals inbox (task 1952 / ADR 0112): { invitations: invites addressed to me (accept/decline); join… |
 | POST | `/api/bongos/goals/reorder` | `metic+archon` | `version_id`, `ordered_ids` | POST /goals/reorder — Archon drag-to-reorder: set the priority order of every goal WITHIN one version (task 1760). |
 
-## `government` (11)
+## `government` (12)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/government/assignments` | `archon` | — | government.manage — every builder↔rank assignment row. |
 | POST | `/api/bongos/government/assignments` | `archon` | `builder_id`, `rank_key` | government.manage — assign a CUSTOM rank to a builder. |
 | DELETE | `/api/bongos/government/assignments/:builderId/:rankKey` | `archon` | — | government.manage — remove a custom-rank assignment. |
+| GET | `/api/bongos/government/board/items` | `any-builder` | — | board.vote.cast — the Board Room view: open items with their clock, the OPEN BALLOT, the closed history (R16 of goal 1000069). |
 | POST | `/api/bongos/government/board/items` | `metic+archon` | `subject_type`, `proposal`, `rationale_md` | board.item.open — put an AMENDMENT to the board (R14 of goal 1000069, ADR 0175 §7). |
 | POST | `/api/bongos/government/board/items/:itemId/votes` | `any-builder` | `direction`, `reason_md`, `section_key` | board.vote.cast — cast a vote on an open board item (R08 of goal 1000069, ADR 0175). |
 | GET | `/api/bongos/government/permissions` | `archon` | — | government.manage — the permission catalog + principals, straight from code (the catalog is CODE, not a table); no DB read. |

package/modules/government/board.js

@@ -453,6 +453,73 @@ async function proposeAmendment({ proposal, rationaleMd = null, proposedBy } = {
   return { ok: true, amendment, item };
 }
 
+// ── the Board Room view (BV1.R16 of goal 1000069, ADR 0175 §9) ──────────────
+//
+// One assembled read for the room: open items with their clock, the OPEN
+// BALLOT (people, directions, timestamps, objections), and the bounded closed
+// history — enriched with what each subject IS (an idea's title, an
+// amendment's proposed constitution). Deliberately a VIEW, not a policy
+// surface: nothing here decides anything, and the payload carries the same
+// constitution SNAPSHOT the deciding paths use, so the room describes the rule
+// each item actually runs under. `remaining_seconds` comes from the database
+// clock per row — the client renders a countdown, it never does clock math.
+//
+// The subject AUTHOR rides along (an idea's captor / an amendment's proposer)
+// so R17's vote UI can grey out the anti-self case for ideas without a second
+// round trip — the SERVER still refuses regardless (castVote), this is only
+// the courtesy rendering.
+async function boardRoomView({ closedLimit = 20 } = {}) {
+  const [open, closed] = await Promise.all([
+    db.listOpenBoardItems(),
+    db.listClosedBoardItems(closedLimit),
+  ]);
+  const all = [...open, ...closed];
+  const votes = await db.getVotesForItems(all.map((i) => i.id));
+  const ideaIds = [...new Set(all.filter((i) => i.subject_type === 'full_idea').map((i) => i.subject_id))];
+  const amendmentIds = [...new Set(all.filter((i) => i.subject_type === 'constitutional_amendment').map((i) => i.subject_id))];
+  const [ideas, amendments] = await Promise.all([
+    db.getIdeaSubjects(ideaIds),
+    db.getAmendmentSubjects(amendmentIds),
+  ]);
+  const ideaById = new Map(ideas.map((r) => [String(r.id), r]));
+  const amendmentById = new Map(amendments.map((r) => [String(r.id), r]));
+  const votesByItem = new Map();
+  for (const v of votes) {
+    const key = String(v.item_id);
+    if (!votesByItem.has(key)) votesByItem.set(key, []);
+    votesByItem.get(key).push({
+      voter_id: String(v.voter_id),
+      github_login: v.github_login,
+      display_name: v.display_name,
+      direction: v.direction,
+      reason_md: v.reason_md,
+      section_key: v.section_key,
+      cast_at: v.cast_at,
+    });
+  }
+  const project = (item) => {
+    const subject = item.subject_type === 'full_idea'
+      ? (() => { const r = ideaById.get(String(item.subject_id)); return r ? { title: r.title, author_id: String(r.captured_by) } : null; })()
+      : (() => { const r = amendmentById.get(String(item.subject_id)); return r ? { proposed: r.proposed, rationale_md: r.rationale_md, author_id: r.proposed_by == null ? null : String(r.proposed_by) } : null; })();
+    return {
+      id: String(item.id),
+      subject_type: item.subject_type,
+      subject_id: String(item.subject_id),
+      subject, // null when the subject row is gone — the room says so honestly
+      opened_by: item.opened_by == null ? null : String(item.opened_by),
+      opened_at: item.opened_at,
+      closes_at: item.closes_at,
+      remaining_seconds: item.remaining_seconds ?? null,
+      expired: item.expired === true,
+      closed_at: item.closed_at || null,
+      outcome: item.outcome || null,
+      constitution: item.constitution || null,
+      votes: votesByItem.get(String(item.id)) || [],
+    };
+  };
+  return { open: open.map(project), closed: closed.map(project) };
+}
+
 // ── R13's read: the feedback a returned idea carries back to its author ─────
 //
 // One reasoned objection is what returns an idea (§3), so the feedback IS that
@@ -493,4 +560,5 @@ module.exports = {
   latestRejectionForIdea,
   validateProposedConstitution,
   proposeAmendment,
+  boardRoomView,
 };

package/modules/government/db.js

@@ -437,6 +437,78 @@ async function getIdeaCompleteness(ideaId) {
   return rows[0] ? rows[0].completeness_score : null;
 }
 
+// --- the Board Room reads (BV1.R16 of goal 1000069) --------------------------
+//
+// The room's view: open items with their clock, the OPEN BALLOT (voter
+// identity, direction, timestamp, objection), and the closed history. Remaining
+// time is computed by the DATABASE clock per row (the same posture as expiry),
+// so the client never does clock math against its own skew. Concurrent windows
+// are normal — the reads are lists, ordered.
+
+async function listOpenBoardItems() {
+  const { rows } = await pool.query(
+    `SELECT *,
+            (closes_at IS NOT NULL AND closes_at < now()) AS expired,
+            CASE WHEN closes_at IS NULL THEN NULL
+                 ELSE GREATEST(0, EXTRACT(EPOCH FROM (closes_at - now()))::int) END AS remaining_seconds
+       FROM government_board_items
+      WHERE closed_at IS NULL
+      ORDER BY opened_at DESC`,
+  );
+  return rows;
+}
+
+// Bounded closed history, newest close first. Served by government_008's
+// closed-items index — the closed set grows forever (resubmission is
+// unbounded), and this runs on every Board Room page load.
+async function listClosedBoardItems(limit = 20) {
+  const { rows } = await pool.query(
+    `SELECT * FROM government_board_items
+      WHERE closed_at IS NOT NULL
+      ORDER BY closed_at DESC
+      LIMIT $1`,
+    [limit],
+  );
+  return rows;
+}
+
+// The open ballot for a SET of items in one query — voter identity joined so
+// the room shows people, not ids (§9: a board whose votes are invisible
+// constrains nobody).
+async function getVotesForItems(itemIds) {
+  if (!itemIds || !itemIds.length) return [];
+  const { rows } = await pool.query(
+    `SELECT v.*, b.github_login, b.display_name
+       FROM government_board_votes v
+       JOIN builders b ON b.id = v.voter_id
+      WHERE v.item_id = ANY($1::bigint[])
+      ORDER BY v.cast_at, v.id`,
+    [itemIds],
+  );
+  return rows;
+}
+
+// Subject enrichment, one query per subject family. Shared-table reads (the
+// boundary is code imports, not table access) — a full_idea shows its title,
+// an amendment its proposed block + rationale.
+async function getIdeaSubjects(ideaIds) {
+  if (!ideaIds || !ideaIds.length) return [];
+  const { rows } = await pool.query(
+    `SELECT id, title, captured_by FROM idea_inbox WHERE id = ANY($1::bigint[])`,
+    [ideaIds],
+  );
+  return rows;
+}
+
+async function getAmendmentSubjects(amendmentIds) {
+  if (!amendmentIds || !amendmentIds.length) return [];
+  const { rows } = await pool.query(
+    `SELECT id, proposed, rationale_md, proposed_by FROM government_amendments WHERE id = ANY($1::bigint[])`,
+    [amendmentIds],
+  );
+  return rows;
+}
+
 // --- amendments (BV1.R14 of goal 1000069) ------------------------------------
 
 async function createAmendment({ proposed, rationaleMd = null, proposedBy }) {
@@ -553,4 +625,9 @@ module.exports = {
   getLatestReturnedItemWithObjection,
   createAmendment,
   getAmendment,
+  listOpenBoardItems,
+  listClosedBoardItems,
+  getVotesForItems,
+  getIdeaSubjects,
+  getAmendmentSubjects,
 };

package/modules/government/migrations/government_008_closed_items_index.sql

@@ -0,0 +1,17 @@
+-- government_008_closed_items_index.sql — index the closed-history read
+-- (task 1003029 / R16 of goal 1000069).
+--
+-- The Board Room's closed history reads "newest closes first, LIMIT n" on every
+-- page load, and the closed set grows forever (one row per window; resubmission
+-- is unbounded by design). The table's other indexes are partial on OPEN items
+-- (the sweep, the one-open-per-subject wall) or on outcome alone — none order
+-- by close time. Same reasoning as government_006's returned-items index.
+-- Additive, idempotent, no rows touched.
+
+BEGIN;
+
+CREATE INDEX IF NOT EXISTS government_board_items_closed_by_time
+  ON government_board_items (closed_at DESC)
+  WHERE closed_at IS NOT NULL;
+
+COMMIT;

package/modules/government/routes/government.js

@@ -414,6 +414,24 @@ module.exports = function buildGovernmentRouter() {
     }
   });
 
+  // rank: perm board.vote.cast — the Board Room view: open items with their
+  // clock, the OPEN BALLOT, the closed history (R16 of goal 1000069). Gated on
+  // the XENOS-floored vote atom, deliberately: seeing the ballot is part of
+  // casting (§9 — a board whose votes are invisible constrains nobody), and the
+  // room teaches as well as governs (criterion C5). NOT government.manage —
+  // that is the admin tab's atom; the room must be visible to whoever the
+  // constitution may enfranchise. Membership still gates nothing here: this is
+  // a read, and the write (the vote) re-checks membership in-handler.
+  router.get('/government/board/items', api.requireBuilder, api.requirePermission('board.vote.cast'), async (req, res) => {
+    try {
+      const view = await board.boardRoomView({ closedLimit: 20 });
+      res.json({ ...view, viewer_id: String(req.builder.id) });
+    } catch (err) {
+      console.error('[gds] GET /government/board/items', err);
+      res.fail('board_read_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // rank: perm board.item.open — put an AMENDMENT to the board (R14 of goal
   // 1000069, ADR 0175 §7). The board's other subject never comes through here:
   // a Full Idea's window opens AUTOMATICALLY on grade pass (R07), so requesting

package/modules/hall-ui/public/government.html

@@ -99,6 +99,6 @@
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
-<script src="/builders/government.js?v=2026-08-18-government-ia"></script>
+<script src="/builders/government.js?v=2026-08-18-board-room"></script>
 </body>
 </html>

package/modules/hall-ui/public/government.js

@@ -401,30 +401,121 @@
 
   // ---- the three-section IA (R15) -------------------------------------------
 
-  // Tab order is the spec's — Constitution · Board Room · Ranks & Permissions —
-  // but the INITIAL tab is Ranks until R16/R18 fill the other two: landing the
-  // Archon on a frame when the working surface is one tab over would be IA
-  // winning over usefulness. Flip `initial` to 'constitution' when R18 lands.
-  function wireTabs() {
+  // Tab order is the spec's — Constitution · Board Room · Ranks & Permissions.
+  // Since R16 the Board Room is furnished, so a non-archon (who cannot use the
+  // admin tab) lands there; the Archon still lands on Ranks, their working
+  // surface. Flip the non-archon initial to 'constitution' when R18 lands.
+  function wireTabs({ isArchon }) {
     window.OTBKit.makeTabs({
       mount: document.getElementById('gov-tabs'),
       hash: true,
-      initial: 'ranks',
+      initial: isArchon ? 'ranks' : 'board-room',
       tabs: [
         { id: 'constitution', label: 'Constitution', panel: 'gov-panel-constitution' },
         { id: 'board-room', label: 'Board Room', panel: 'gov-panel-board' },
         { id: 'ranks', label: 'Ranks & Permissions', panel: 'gov-panel-ranks' },
       ],
     });
-    // The frames' empty states — kit-standard, one line, no fake data. What this
-    // project actually RUNS is config the server owns; rendering it here before
-    // the R18 read exists would mean hardcoding a value that drifts.
+    // The Constitution frame stays an empty state until R18's read exists —
+    // rendering live values without it would mean hardcoding what drifts.
     document.getElementById('gov-constitution').innerHTML = window.OTBKit.emptyStateHtml(
       'The live constitution — what this project runs today, and how it has changed — appears here when the Board Room opens.',
     );
-    document.getElementById('gov-board').innerHTML = window.OTBKit.emptyStateHtml(
-      'Nothing is before the board. When a Full Idea clears the completeness grade, its window opens here.',
-    );
+  }
+
+  // ---- the Board Room panel (R16) --------------------------------------------
+
+  // The room renders what the server assembled: open items with the database's
+  // own countdown, the OPEN BALLOT (people, directions, timestamps, objections),
+  // and the closed history. Nothing here decides anything — casting arrives with
+  // R17; this panel is the accountability surface (§9: a board whose votes are
+  // invisible constrains nobody).
+
+  function fmtRemaining(seconds) {
+    if (seconds === null || seconds === undefined) return null;
+    const s = Number(seconds);
+    if (!Number.isFinite(s) || s <= 0) return 'closing…';
+    if (s < 90) return `closes in ${Math.max(1, Math.round(s))}s`;
+    if (s < 5400) return `closes in ${Math.round(s / 60)}m`;
+    return `closes in ${(s / 3600).toFixed(1)}h`;
+  }
+
+  function subjectLine(item) {
+    if (item.subject_type === 'full_idea') {
+      const title = item.subject ? item.subject.title : `idea ${item.subject_id}`;
+      return `<a href="/#/idea/${escapeHtml(String(item.subject_id))}">${escapeHtml(title)}</a> <span class="gov-pill gov-pill--floor">Full Idea</span>`;
+    }
+    return `Constitutional amendment <span class="gov-pill gov-pill--floor">amendment</span>`;
+  }
+
+  function clockLine(item) {
+    if (item.closes_at) {
+      const rem = fmtRemaining(item.remaining_seconds);
+      return rem || 'timed sitting';
+    }
+    const rule = item.constitution && item.constitution.pass_rule;
+    return rule === 'first_ratifier'
+      ? 'no clock — closes on the first vote'
+      : 'no clock';
+  }
+
+  function ballotHtml(item, viewerId) {
+    if (!item.votes.length) {
+      return `<p class="gov-empty">No votes yet${item.closed_at ? ' — closed unopposed' : ''}.</p>`;
+    }
+    const rows = item.votes.map((v) => {
+      const who = escapeHtml(v.display_name || v.github_login || `builder ${v.voter_id}`);
+      const mine = String(v.voter_id) === String(viewerId) ? ' <span class="gov-held-note">your vote</span>' : '';
+      const when = escapeHtml(String(v.cast_at).slice(0, 16).replace('T', ' '));
+      const objection = v.direction === 'no'
+        ? `<div class="gov-perm__guards">objected to <code>${escapeHtml(v.section_key || '')}</code> — ${escapeHtml(v.reason_md || '')}</div>`
+        : '';
+      return `<div class="gov-assign-row"><span class="gov-assign-row__who">${who}${mine}</span>
+        <span class="gov-pill ${v.direction === 'no' ? 'gov-pill--locked' : 'gov-pill--seeded'}">${v.direction}</span>
+        <span class="muted">${when}</span>${objection}</div>`;
+    }).join('');
+    return `<div class="gov-section">${rows}</div>`;
+  }
+
+  function itemCard(item, viewerId) {
+    const yes = item.votes.filter((v) => v.direction === 'yes').length;
+    const no = item.votes.filter((v) => v.direction === 'no').length;
+    const state = item.closed_at
+      ? `<span class="gov-pill ${item.outcome === 'passed' ? 'gov-pill--seeded' : 'gov-pill--locked'}">${escapeHtml(item.outcome || '')}</span>`
+      : `<span class="gov-pill gov-pill--custom">open</span> <span class="muted">${escapeHtml(clockLine(item))}</span>`;
+    const amendmentDetail = item.subject_type === 'constitutional_amendment' && item.subject
+      ? `<div class="gov-perm__guards">proposes: <code>${escapeHtml(JSON.stringify(item.subject.proposed))}</code>${item.subject.rationale_md ? ` — ${escapeHtml(item.subject.rationale_md)}` : ''}</div>`
+      : '';
+    const mine = item.votes.find((v) => String(v.voter_id) === String(viewerId));
+    const myLine = item.closed_at ? '' : (mine
+      ? `<p class="gov-grid-note">You voted <strong>${escapeHtml(mine.direction)}</strong>. One vote per member — no changes.</p>`
+      : `<p class="gov-grid-note">You have not voted on this item. Casting arrives with the vote form.</p>`);
+    return `<section class="gov-section">
+      <div class="gov-section__head">${subjectLine(item)} ${state}</div>
+      ${amendmentDetail}
+      <p class="gov-grid-note">tally: ${yes} yes · ${no} no — sitting under <code>${escapeHtml((item.constitution && item.constitution.pass_rule) || '?')}</code>, membership <code>${escapeHtml((item.constitution && item.constitution.membership) || '?')}</code></p>
+      ${myLine}
+      ${ballotHtml(item, viewerId)}
+    </section>`;
+  }
+
+  async function loadBoard() {
+    const box = document.getElementById('gov-board');
+    let data;
+    try {
+      data = await fetchJson('/government/board/items');
+    } catch (err) {
+      if (err && err.kind === '401') return;
+      box.innerHTML = `<p class="gov-empty">Could not load the Board Room just now.</p>`;
+      return;
+    }
+    const viewerId = data.viewer_id;
+    const open = (data.open || []).map((i) => itemCard(i, viewerId)).join('');
+    const closed = (data.closed || []).map((i) => itemCard(i, viewerId)).join('');
+    box.innerHTML =
+      (open || window.OTBKit.emptyStateHtml('Nothing is before the board. When a Full Idea clears the completeness grade, its window opens here.'))
+      + `<h2 class="gov-h">Closed sittings</h2>`
+      + (closed || `<p class="gov-empty">No sitting has closed yet.</p>`);
   }
 
   // ---- init ----------------------------------------------------------------
@@ -435,11 +526,20 @@
     document.getElementById('gov-sub').textContent = 'Restricted.';
   }
 
+  // Since R16 the page shell admits page.view.government (metic+), and only the
+  // RANKS tab is the archon admin surface — so the seal narrowed from the whole
+  // page to that one panel. Cosmetic defence-in-depth as ever: every
+  // /government/* CRUD endpoint still gates on government.manage server-side,
+  // and the board read carries its own atom.
+  function sealRanksPanel() {
+    const panel = document.getElementById('gov-panel-ranks');
+    const body = document.getElementById('gov-body');
+    // Replace the admin surface with the sealed note, inside its own tab only.
+    panel.innerHTML = '<p class="gov-sealed">Ranks & Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read.</p>';
+    body.hidden = false;
+  }
+
   async function init() {
-    // Confirm rank for a friendly sealed notice; the server gates the page and
-    // every /government endpoint on `government.manage` regardless (cosmetic
-    // defence-in-depth). government.manage is system:true, so only the archon
-    // rank can hold it — rank is an accurate client-side proxy.
     let me;
     try {
       me = await fetchJson('/me');
@@ -449,17 +549,20 @@
       me = null;
     }
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
-    if (rank !== 'archon') { showSealed(); return; }
+    const isArchon = rank === 'archon';
 
     document.getElementById('gov-sub').textContent = 'How this project is governed — the constitution it runs, the Board Room, and the ranks & permissions that administer it.';
     document.getElementById('gov-body').hidden = false;
-    wireTabs();
+    wireTabs({ isArchon });
+    loadBoard(); // the room loads for everyone the page admits
+
+    if (!isArchon) { sealRanksPanel(); return; }
     wireForms();
     try {
       await load();
     } catch (err) {
       if (err && err.kind === '401') return;
-      if (err && err.kind === '403') { showSealed(); return; }
+      if (err && err.kind === '403') { sealRanksPanel(); return; }
       document.getElementById('gov-grid').innerHTML = `<p class="gov-empty">Could not load government data just now.</p>`;
     }
   }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.232",
+  "version": "1.19.233",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.232",
+      "version": "1.19.233",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.232",
+  "version": "1.19.233",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/route-rank-check.js

@@ -254,6 +254,9 @@ const GOVERNMENT_PINS = {
   // R14: propose a constitutional amendment (the board's only proposed subject —
   // a Full Idea's window opens automatically on grade pass).
   'POST /government/board/items': 'perm:board.item.open',
+  // R16: the Board Room view — the open ballot is visible to whoever may cast
+  // (xenos-floored atom; the room teaches as well as governs, criterion C5).
+  'GET /government/board/items': 'perm:board.vote.cast',
 };
 
 // Module-scoped privileged-rank pins: a privileged route that lives in a FEATURE

package/src/bongos/serve-internal.js

@@ -789,8 +789,15 @@ function mountInternalSurfaces(app) {
       || SESSIONS_PAGE_RE.test(norm)) {
       return gdsAuth.requireGovernmentPage(req, res, next);
     }
+    // R16 (goal 1000069) widened the government shell from the manage atom
+    // (archon) to page.view.government (metic+): since R15 the page is THREE
+    // rooms — Constitution, Board Room, Ranks & Permissions — and only the
+    // third is the archon admin surface. Its DATA routes all still gate on
+    // government.manage individually (defence in depth unchanged); the board +
+    // constitution reads carry their own atoms. The shell follows the widest
+    // legitimate audience — the audience changed when the page did.
     if (GOVERNMENT_PAGE_RE.test(norm)) {
-      return gdsAuth.requireGovernmentManagePage(req, res, next);
+      return gdsAuth.requireGovernmentPage(req, res, next);
     }
     if (PEOPLE_PAGE_RE.test(norm) || SCOUTING_PAGE_RE.test(norm)) {
       return gdsAuth.requireProjectCuratePage(req, res, next);

package/src/module-api.js

@@ -891,8 +891,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.230 with no explicit bump. run 32133132988. (task 1002620)
 //   1.19.232 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.231 with no explicit bump. run 32133691409. (task 1002620)
+//   1.19.233 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.232 with no explicit bump. run 32160823445. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.232'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.233'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/government_board_view.mjs

@@ -0,0 +1,129 @@
+// tests/government_board_view.mjs — the Board Room view (BV1.R16 of goal
+// 1000069, ADR 0175 §9): open items with their clock, the open ballot, and the
+// closed history — assembled server-side, decided nowhere.
+//
+// DB-free (db monkeypatched, the sibling board tests' idiom). The invariants:
+//   1. THE VIEW DECIDES NOTHING — it projects rows; the payload carries each
+//      item's SNAPSHOT so the room describes the rule the item actually runs
+//      under, and remaining time is the database's number, passed through.
+//   2. SUBJECTS ARE ENRICHED, HONESTLY — an idea shows its title + author, an
+//      amendment its proposed block; a subject whose row is GONE projects
+//      subject:null rather than being dropped or invented.
+//   3. THE BALLOT IS OPEN — voter identity rides every vote row (§9), and an
+//      objection carries its reason + section for the room to show.
+//   4. THE READ IS GATED ON THE VOTE ATOM, NOT THE MANAGE ATOM — seeing the
+//      ballot is part of casting; the pin (and the generalized gate test in
+//      government_routes.mjs) hold the route to board.vote.cast.
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const GOV = path.join(ROOT, 'modules', 'government');
+const board = require(path.join(GOV, 'board.js'));
+const db = require(path.join(GOV, 'db.js'));
+
+const { boardRoomView } = board;
+
+const MONARCHY = { membership: 'rank:archon', pass_rule: 'first_ratifier', window_minutes: null, close_early_on_full_turnout: true };
+
+async function withDb(stubs, fn) {
+  const originals = {};
+  for (const [k, v] of Object.entries(stubs)) { originals[k] = db[k]; db[k] = v; }
+  try { return await fn(); }
+  finally { for (const [k, v] of Object.entries(originals)) db[k] = v; }
+}
+
+test('the assembled view: enrichment, the open ballot, the snapshot, the database clock — all passthrough', async () => {
+  const view = await withDb({
+    listOpenBoardItems: async () => [
+      { id: 11n, subject_type: 'full_idea', subject_id: 7n, opened_by: null, opened_at: 'T1', closes_at: 'T2', remaining_seconds: 540, expired: false, closed_at: null, outcome: null, constitution: MONARCHY },
+      { id: 12n, subject_type: 'constitutional_amendment', subject_id: 5n, opened_by: 42n, opened_at: 'T1', closes_at: null, remaining_seconds: null, expired: false, closed_at: null, outcome: null, constitution: MONARCHY },
+    ],
+    listClosedBoardItems: async (limit) => { assert.equal(limit, 20); return [
+      { id: 9, subject_type: 'full_idea', subject_id: 6, opened_by: null, opened_at: 'T0', closes_at: null, closed_at: 'T3', outcome: 'returned', constitution: MONARCHY },
+    ]; },
+    getVotesForItems: async (ids) => {
+      assert.deepEqual(ids.map(String).sort(), ['11', '12', '9'].sort(), 'one ballot query for ALL items, open and closed');
+      return [
+        { item_id: 11n, voter_id: 42n, github_login: 'first-member', display_name: 'First Member', direction: 'yes', reason_md: null, section_key: null, cast_at: 'T2' },
+        { item_id: 9, voter_id: 43, github_login: 'second-member', display_name: null, direction: 'no', reason_md: 'fit is thin', section_key: 'fit', cast_at: 'T2' },
+      ];
+    },
+    getIdeaSubjects: async (ids) => {
+      assert.deepEqual(ids.map(String).sort(), ['6', '7']);
+      return [{ id: 7n, title: 'A big idea', captured_by: 9n }]; // idea 6 is GONE — deleted subject
+    },
+    getAmendmentSubjects: async (ids) => {
+      assert.deepEqual(ids.map(String), ['5']);
+      return [{ id: 5n, proposed: { pass_rule: 'consent' }, rationale_md: 'open up', proposed_by: 42n }];
+    },
+  }, () => boardRoomView());
+
+  assert.equal(view.open.length, 2);
+  assert.equal(view.closed.length, 1);
+
+  const idea = view.open[0];
+  assert.deepEqual(idea.subject, { title: 'A big idea', author_id: '9' }, 'an idea shows its title + author (R17 greys anti-self from this)');
+  assert.equal(idea.remaining_seconds, 540, 'the DATABASE clock, passed through — the client never does clock math');
+  assert.deepEqual(idea.constitution, MONARCHY, 'the SNAPSHOT rides along — the room describes the rule the item runs under');
+  assert.equal(idea.votes.length, 1);
+  assert.equal(idea.votes[0].github_login, 'first-member', 'the ballot is OPEN — identity on every vote row');
+
+  const amendment = view.open[1];
+  assert.deepEqual(amendment.subject, { proposed: { pass_rule: 'consent' }, rationale_md: 'open up', author_id: '42' });
+  assert.equal(amendment.remaining_seconds, null, 'no clock is null, not zero');
+
+  const gone = view.closed[0];
+  assert.equal(gone.subject, null, 'a deleted subject projects null — shown honestly, never dropped or invented');
+  assert.equal(gone.outcome, 'returned');
+  assert.equal(gone.votes[0].section_key, 'fit', 'the objection travels with the closed history');
+  // every id is a string — Postgres bigints and JS numbers must compare equal downstream
+  for (const item of [...view.open, ...view.closed]) {
+    assert.equal(typeof item.id, 'string');
+    assert.equal(typeof item.subject_id, 'string');
+    for (const v of item.votes) assert.equal(typeof v.voter_id, 'string');
+  }
+});
+
+test('an empty board is two empty lists — no error, no placeholder rows', async () => {
+  const view = await withDb({
+    listOpenBoardItems: async () => [],
+    listClosedBoardItems: async () => [],
+    getVotesForItems: async (ids) => { assert.deepEqual(ids, []); return []; },
+    getIdeaSubjects: async (ids) => { assert.deepEqual(ids, []); return []; },
+    getAmendmentSubjects: async (ids) => { assert.deepEqual(ids, []); return []; },
+  }, () => boardRoomView());
+  assert.deepEqual(view, { open: [], closed: [] });
+});
+
+test('the reads are indexed and clock math stays in SQL (source pins)', () => {
+  const src = fs.readFileSync(path.join(GOV, 'db.js'), 'utf8');
+  const open = src.slice(src.indexOf('async function listOpenBoardItems'), src.indexOf('async function listClosedBoardItems'));
+  assert.match(open, /EXTRACT\(EPOCH FROM \(closes_at - now\(\)\)\)/, 'remaining time is the DATABASE clock');
+  assert.match(open, /GREATEST\(0,/, 'a just-expired item reads 0, never negative');
+  const closed = src.slice(src.indexOf('async function listClosedBoardItems'), src.indexOf('async function getVotesForItems'));
+  assert.match(closed, /ORDER BY closed_at DESC/, 'newest closes first');
+  const migration = fs.readFileSync(path.join(GOV, 'migrations', 'government_008_closed_items_index.sql'), 'utf8');
+  assert.ok(migration.includes('government_board_items_closed_by_time'), 'the closed-history read is indexed (the R13 grader lesson, applied up front)');
+});
+
+test('the room is gated on the vote atom, and the page shell widened WITH the tab seal (the R16 pair)', () => {
+  const rrc = require(path.join(ROOT, 'src', 'bongos', 'route-rank-check.js'));
+  assert.equal(rrc.MODULE_EXPECTED_RANKS.government['GET /government/board/items'],
+    `${rrc.PERM_PIN_PREFIX}board.vote.cast`, 'seeing the ballot is part of casting — never the manage atom');
+  // The page-gate widening and the client-side ranks seal land TOGETHER: the
+  // shell admitting metic+ without the admin tab sealing itself would render a
+  // broken tab; the seal without the widening would seal a page nobody new can
+  // reach. Both halves pinned here so neither can be reverted alone.
+  const serve = fs.readFileSync(path.join(ROOT, 'src', 'bongos', 'serve-internal.js'), 'utf8');
+  const idx = serve.indexOf('GOVERNMENT_PAGE_RE.test(norm)');
+  assert.ok(serve.slice(idx, idx + 200).includes('requireGovernmentPage'),
+    'the shell admits page.view.government (metic+), not the manage atom');
+  const client = fs.readFileSync(path.join(ROOT, 'modules', 'hall-ui', 'public', 'government.js'), 'utf8');
+  assert.match(client, /sealRanksPanel/, 'the admin tab seals itself for non-archons');
+});

package/tests/government_seed.mjs

@@ -40,6 +40,7 @@ const NON_GRANT_MIGRATIONS = new Set([
   'government_005_seeded_rank_descriptions.sql',   // ADR 0174 seeded-description text fix (task 1003083)
   'government_006_returned_items_index.sql',      // R13 returned-item lookup index (task 1003026)
   'government_007_amendments.sql',                 // R14 amendment proposals table (task 1003027)
+  'government_008_closed_items_index.sql',         // R16 closed-history index (task 1003029)
 ]);
 
 // Permission keys RENAMED after the grant migrations that first granted them.

package/tests/hall_page_gate_map.mjs

@@ -67,8 +67,12 @@ const ORACLE = {
   '/builders/people': 'requireProjectCuratePage',
   '/builders/scouting': 'requireProjectCuratePage',
 
-  // Archon.
-  '/builders/government': 'requireGovernmentManagePage',
+  // Metic+ since R16 (goal 1000069): the Government page is three rooms —
+  // Constitution · Board Room · Ranks & Permissions — and only the third is the
+  // archon admin surface, whose DATA routes all still gate on government.manage
+  // individually. The shell follows the widest legitimate audience; the board
+  // reads carry the vote atom, the manage tab seals itself for non-archons.
+  '/builders/government': 'requireGovernmentPage',
 
   // Deliberately UNGATED — the landing card, the rank ladder, the reward
   // schedule and a builder's public portfolio all render for a stranger.