@bongos/core 1.19.233 → 1.19.235

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.233",
-  "core_contract": "1.19.233",
-  "source_commit": "17f28d2147bc72ed6a97cbc256e388a889e7ddec",
+  "core_version": "1.19.235",
+  "core_contract": "1.19.235",
+  "source_commit": "b91cbff1532b00e3cdd2204e713b35cf093c9b02",
   "source_ref": "HEAD",
-  "built_at": "2026-08-18T16:32:54.929Z",
+  "built_at": "2026-08-18T16:46:17.722Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 311,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1317,
+    "functional_verbatim": 1319,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1649,
-  "tree_sha256": "211de1015cfb5ba8ea8bb0e6aa7467566e296ffea14ebc4cabd2875e21fb6b2c",
+  "file_count": 1651,
+  "tree_sha256": "d20a6edcee7ad8a7e81eefec0b07689a820b194634cdb5350c8c4263127990ea",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -347,12 +347,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "841ea9c45ad482286f056e885cd25c6769931134a2ff066b638d7585a097888e"
+      "sha256": "5084f59df8019560f49971f00b40e9b8d1d6eb9511a9a78fc136ecaff025e57d"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "a9c482ca4c6d2cc313c76f3e098c3bdaa802f5c1253c749e3b5df6dfbae06463"
+      "sha256": "84050a82e7dc6f855b6b02a4c89b1321717b1fcf45fdc426ac6c53961f10012f"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -362,17 +362,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "fafd3c715b3eb716d7f8355001cf4ea4a8254b78fd757c4a4343ad673a4f1bd8"
+      "sha256": "5c99db7b6b1b59e595c3c6a7002cf7baa3b130a198213b007448d02a427883f1"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "dc1ef3a4e2843b836e828e5c8d290861dda56844e4f5727ad5d9b3001d7e4e6b"
+      "sha256": "14c4cc02b3965badc021489bb7dd0f80bb71c3cc57b2e1dc4dafa76d86128088"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "48ea243ec0016c7dc2842322100406c339b2b7d05bccf8f0119060fc0cf7e5b2"
+      "sha256": "d5de9d514dc1515fab89430301550566fe5c8c5941026c58eb107800746fb63c"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1372,12 +1372,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "18317d38ec567284fbb3fd3e351d8fecd10c0aa9371b353128e1e9ff0e6e7717"
+      "sha256": "c0a604b304ff9936d08998b2b4206e7ecad8ff668ec704b08161c5d79d0bc04c"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "f2f81530200394e99b8591d43839ba024ab0e055331f86c119fa0e5ab39abbce"
+      "sha256": "be4bc7b6dd627fa7ea85e4a90a908588b81d6d5a5d4eb5a6f2c1858f155538f7"
     },
     {
       "path": "docs/architecture.md",
@@ -2902,7 +2902,7 @@
     {
       "path": "modules/government/board.js",
       "mode": "0000644",
-      "sha256": "98c0543844eb7a2143fc9541098e067702d3b76b4a546034b050a45105403d1a"
+      "sha256": "9d3d9414ca1c1bafc901a7343cdccafc7261b0dba492134a9a1064e6b3d82b61"
     },
     {
       "path": "modules/government/catalog.js",
@@ -2917,7 +2917,7 @@
     {
       "path": "modules/government/db.js",
       "mode": "0000644",
-      "sha256": "dd937ea64d6e4cd6ff677c136c5b8a493fecbf75b63082d9449b4a4390d1a0af"
+      "sha256": "ab75e3e0fd2b7eee747e525403f8a2ea863dbf1f4332cb3c6ec1b413ed7af7e3"
     },
     {
       "path": "modules/government/migrations/governance_001_tables.sql",
@@ -3027,7 +3027,7 @@
     {
       "path": "modules/government/routes/government.js",
       "mode": "0000644",
-      "sha256": "2c7ae89e1e8e91107a8e0a55cc82d6ee4f8804fedb76d07dbe5e502c4801e187"
+      "sha256": "bf07f55f73d27d738840f4f0e0ffcb8a6d19225e7500dbb36e4a83a1109635db"
     },
     {
       "path": "modules/government/routes/rank-sync.js",
@@ -3272,12 +3272,12 @@
     {
       "path": "modules/hall-ui/public/government.html",
       "mode": "0000644",
-      "sha256": "ffd03d1fefcd4c4639f66812fe35dd3f74a2c65ed02a576a5d9703883df10736"
+      "sha256": "87ec2d8c002edf0a440e658cb29e567a07544bc36bb535d4cb0fd5130629a92e"
     },
     {
       "path": "modules/hall-ui/public/government.js",
       "mode": "0000644",
-      "sha256": "39215495c3ec93b4426c95b0a16db76297a070aa678318507f8c064a57692e5d"
+      "sha256": "505003cd76eb3760459ed53555b5c0803e1efaffb2e17ee15c7ed032a1607289"
     },
     {
       "path": "modules/hall-ui/public/hall-kit.js",
@@ -4322,12 +4322,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c1798947aa88297385a13e4c3b16070a6a6e79208e077b5c40459580dfe3f55c"
+      "sha256": "7731f20b3114fe6a083c06fe6b92d0048e4d5d136ba4fcc49f9a10f66c9577e5"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "25e6cf1d1ba69421a3a6ee12d77ab8609f6748aacb0d5390ccc0c287dc2c2ff0"
+      "sha256": "844c9c21b09d3d41cd8663a37d651ec717a5ba25d5fb24fda5e57930ca278cb2"
     },
     {
       "path": "public-docs/index.html",
@@ -5807,7 +5807,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "a074972d1da13fb71acdd9d60126488f345ff59c33d83aca90cea50b8ed064ab"
+      "sha256": "93b2a09220f4d96f69294531cbca274b1132d164cf32be2f66d40d30e1953551"
     },
     {
       "path": "src/bongos/routes.js",
@@ -5942,7 +5942,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "aff6b3aeff836216d9b45d025375021888c25cc3f6942705341698652836bdd2"
+      "sha256": "c3a588bdcb0781e8f71dd492f26b09a2212ababebf52e511dccb9018ad84f89b"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6904,6 +6904,11 @@
       "mode": "0000644",
       "sha256": "74cfbd482b689df40348af3bdaf050f056e216ff18fdd6add4136d4589b7cd92"
     },
+    {
+      "path": "tests/government_charter_library.mjs",
+      "mode": "0000644",
+      "sha256": "9a52ac8fbbc9e7b0fc4b45841b9dbf831615e5d64eb1e3f0d9c446fc70552629"
+    },
     {
       "path": "tests/government_claim_eligibility.mjs",
       "mode": "0000644",
@@ -6914,6 +6919,11 @@
       "mode": "0000644",
       "sha256": "330372412c80d8d33698eba68a5c19e79daff17b0d820a9a797c883071a5641f"
     },
+    {
+      "path": "tests/government_constitution_view.mjs",
+      "mode": "0000644",
+      "sha256": "64fc8006d5b3a562b01a38bfd0ad00a1357969b0ac52ce270e77d4d93eddca80"
+    },
     {
       "path": "tests/government_fold.mjs",
       "mode": "0000644",
@@ -6972,7 +6982,7 @@
     {
       "path": "tests/government_routes.mjs",
       "mode": "0000644",
-      "sha256": "d32b42a6046361fdcb6ff26e92dfe2abd46fb76a218168c719377ca39614112b"
+      "sha256": "88f1c323de51a9b9f710bd4ad8cbf86da75b226d7b99db2bc2054e065b81a70a"
     },
     {
       "path": "tests/government_seed.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 284 operations across 46 resource groups
+- 285 operations across 46 resource groups
 
 ## Install
 

package/clients/bongos-client/bongos-client.global.js

@@ -355,6 +355,8 @@ function createClient(opts = {}) {
       postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
       postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
+      // GET /government/constitution — rank: any-builder — GET /government/constitution
+      getGovernmentConstitution: (args) => request("GET", "/government/constitution", { hasBody: false }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/clients/bongos-client/index.cjs

@@ -354,6 +354,8 @@ function createClient(opts = {}) {
       postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
       postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
+      // GET /government/constitution — rank: any-builder — GET /government/constitution
+      getGovernmentConstitution: (args) => request("GET", "/government/constitution", { hasBody: false }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/clients/bongos-client/index.d.ts

@@ -609,6 +609,8 @@ export interface BongosClient {
     postGovernmentBoardItems(args: RequestArgs & { body: PostGovernmentBoardItemsRequest }): Promise<PostGovernmentBoardItemsResponse>;
     /** POST /government/board/items/{itemId}/votes — rank: any-builder */
     postGovernmentBoardItemsItemIdVotes(args: RequestArgs & { body: PostGovernmentBoardItemsItemIdVotesRequest }): Promise<ApiResponse>;
+    /** GET /government/constitution — rank: any-builder */
+    getGovernmentConstitution(args?: RequestArgs): Promise<ApiResponse>;
     /** GET /government/permissions — rank: archon */
     getGovernmentPermissions(args?: RequestArgs): Promise<GetGovernmentPermissionsResponse>;
     /** GET /government/ranks — rank: archon */

package/clients/bongos-client/index.mjs

@@ -351,6 +351,8 @@ export function createClient(opts = {}) {
       postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
       postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
+      // GET /government/constitution — rank: any-builder — GET /government/constitution
+      getGovernmentConstitution: (args) => request("GET", "/government/constitution", { hasBody: false }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/docs/api/openapi.json

@@ -5479,6 +5479,40 @@
         ]
       }
     },
+    "/government/constitution": {
+      "get": {
+        "operationId": "get_government_constitution",
+        "tags": [
+          "government"
+        ],
+        "summary": "GET /government/constitution",
+        "description": "board.vote.cast — the Constitution view (R18 of goal 1000069): the live board block plus the full amendment history, passed and returned alike. Same atom as the room — reading the rule you vote under is part of casting, and the section teaches (criterion C5). The live value resolves fresh per request, so an amendment applied a moment ago reads back immediately (the same instant-effect posture as everything else here).\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).\n\n**Permissions:** `board.vote.cast` (all required).",
+        "x-rank": "any-builder",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "board.vote.cast"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/government/permissions": {
       "get": {
         "operationId": "get_government_permissions",
@@ -18001,7 +18035,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 284,
+  "x-endpoint-count": 285,
   "x-schema-count": 321,
   "x-undocumented-bodies": 8,
   "x-response-schemas": 215,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 284 endpoints across 46 route files.
+> **Generated from the live route files** — the route file is authoritative. 285 endpoints across 46 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -216,7 +216,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/goals/inbox` | `any-builder` | — | GET /goals/inbox — the caller's private-goals inbox (task 1952 / ADR 0112): { invitations: invites addressed to me (accept/decline); join… |
 | POST | `/api/bongos/goals/reorder` | `metic+archon` | `version_id`, `ordered_ids` | POST /goals/reorder — Archon drag-to-reorder: set the priority order of every goal WITHIN one version (task 1760). |
 
-## `government` (12)
+## `government` (13)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -226,6 +226,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/<redacted>
 | GET | `/api/bongos/government/board/items` | `any-builder` | — | board.vote.cast — the Board Room view: open items with their clock, the OPEN BALLOT, the closed history (R16 of goal 1000069). |
 | POST | `/api/bongos/government/board/items` | `metic+archon` | `subject_type`, `proposal`, `rationale_md` | board.item.open — put an AMENDMENT to the board (R14 of goal 1000069, ADR 0175 §7). |
 | POST | `/api/bongos/government/board/items/:itemId/votes` | `any-builder` | `direction`, `reason_md`, `section_key` | board.vote.cast — cast a vote on an open board item (R08 of goal 1000069, ADR 0175). |
+| GET | `/api/bongos/government/constitution` | `any-builder` | — | board.vote.cast — the Constitution view (R18 of goal 1000069): the live board block plus the full amendment history, passed and returned … |
 | GET | `/api/bongos/government/permissions` | `archon` | — | government.manage — the permission catalog + principals, straight from code (the catalog is CODE, not a table); no DB read. |
 | GET | `/api/bongos/government/ranks` | `archon` | — | government.manage — the full rank list with each rank's grants. |
 | POST | `/api/bongos/government/ranks` | `archon` | `rank_key`, `label`, `description` | government.manage — create a CUSTOM rank (is_system false, no seeded_rank — the seeded four exist only via governance_002). |

package/modules/government/board.js

@@ -520,6 +520,56 @@ async function boardRoomView({ closedLimit = 20 } = {}) {
   return { open: open.map(project), closed: closed.map(project) };
 }
 
+// ── the Constitution view (BV1.R18 of goal 1000069, criterion C3/C5) ────────
+//
+// What this project RUNS — the live, sanitized board block, resolved fresh per
+// request so an amendment applied a moment ago reads back immediately — plus
+// the full change history: every closed amendment sitting, passed and
+// RETURNED alike (a failed attempt to change the rules is part of the record;
+// that is what "a switch can never be flipped quietly" means). Each history
+// row carries the rule it was DECIDED UNDER (the item's snapshot), so the
+// reader can verify every change was made legally by the constitution of its
+// day — the §7 chain, auditable end to end.
+// ── the charter ladder's recommendation (BV1.R19, criterion C5) ─────────────
+//
+// The developmental ladder from the Six Variables synthesis (Part III), as the
+// spec's task text records it: formality is adopted only where informal
+// coordination breaks. PURE and server-side so R26's proof can hold the
+// recommendation against the real headcount — the library's one live datum.
+// The bands deliberately track only the thresholds the synthesis NAMES
+// (~9 name an executive, ~50 written charter + council, ~150 adjudication
+// separates / federate beyond); everything else is reference prose, not code.
+function recommendedCharter(headcount) {
+  const n = Number(headcount) || 0;
+  if (n <= 2) return { key: 'monarchy', rung: 'solo/pair', why: 'informal coordination has nothing to break yet — the founding monarchy is the honest shape' };
+  if (n <= 8) return { key: 'direct-democracy', rung: 'circle (3–8)', why: 'a consent circle of all trusted members — the rung this ladder was written on' };
+  if (n <= 49) return { key: 'presidential', rung: '~9: name an executive', why: 'past ~9, naming an executive beats everyone coordinating with everyone' };
+  if (n <= 149) return { key: 'foundation', rung: '~50: written charter + council', why: 'past ~50, the charter must be written down and a council carries it' };
+  return { key: 'federation', rung: '~150: adjudication separates — federate beyond', why: 'past ~150, one body cannot both govern and adjudicate; federate' };
+}
+
+async function constitutionView({ historyLimit = 50 } = {}) {
+  const { board: live } = loadGovernmentConfig();
+  const [rows, headcount] = await Promise.all([
+    db.listAmendmentHistory(historyLimit),
+    db.countActiveBuilders(),
+  ]);
+  const history = rows.map((r) => ({
+    item_id: String(r.item_id),
+    amendment_id: String(r.amendment_id),
+    proposed: r.proposed,
+    rationale_md: r.rationale_md,
+    proposed_by: r.proposed_by == null ? null : String(r.proposed_by),
+    proposer_login: r.proposer_login || null,
+    proposer_name: r.proposer_name || null,
+    opened_at: r.opened_at,
+    closed_at: r.closed_at,
+    outcome: r.outcome,
+    decided_under: r.decided_under || null,
+  }));
+  return { board: live, history, headcount, recommended: recommendedCharter(headcount) };
+}
+
 // ── R13's read: the feedback a returned idea carries back to its author ─────
 //
 // One reasoned objection is what returns an idea (§3), so the feedback IS that
@@ -561,4 +611,6 @@ module.exports = {
   validateProposedConstitution,
   proposeAmendment,
   boardRoomView,
+  constitutionView,
+  recommendedCharter,
 };

package/modules/government/db.js

@@ -509,6 +509,39 @@ async function getAmendmentSubjects(amendmentIds) {
   return rows;
 }
 
+// The live headcount (R19): active humans, the same two filters as board
+// membership — a machine principal is not a team member, and neither is a
+// departed builder. Feeds the charter library's "recommended at YOUR headcount"
+// line, which R26's proof holds against this exact number.
+async function countActiveBuilders() {
+  const { rows } = await pool.query(
+    `SELECT count(*)::int AS n FROM builders WHERE status = 'active' AND system_role IS NULL`,
+  );
+  return rows[0] ? rows[0].n : 0;
+}
+
+// The constitution's change HISTORY (R18): every CLOSED amendment sitting —
+// passed AND returned — joined to what was proposed, newest first. Returned
+// proposals are deliberately part of the record: "a switch can never be flipped
+// quietly" cuts both ways, and a failed attempt to change the rules is exactly
+// the kind of fact an open ballot exists to keep visible. Served by
+// government_008's closed-items index; bounded.
+async function listAmendmentHistory(limit = 50) {
+  const { rows } = await pool.query(
+    `SELECT i.id AS item_id, i.opened_at, i.closed_at, i.outcome, i.constitution AS decided_under,
+            a.id AS amendment_id, a.proposed, a.rationale_md, a.proposed_by,
+            b.github_login AS proposer_login, b.display_name AS proposer_name
+       FROM government_board_items i
+       JOIN government_amendments a ON a.id = i.subject_id
+       LEFT JOIN builders b ON b.id = a.proposed_by
+      WHERE i.subject_type = 'constitutional_amendment' AND i.closed_at IS NOT NULL
+      ORDER BY i.closed_at DESC
+      LIMIT $1`,
+    [limit],
+  );
+  return rows;
+}
+
 // --- amendments (BV1.R14 of goal 1000069) ------------------------------------
 
 async function createAmendment({ proposed, rationaleMd = null, proposedBy }) {
@@ -630,4 +663,6 @@ module.exports = {
   getVotesForItems,
   getIdeaSubjects,
   getAmendmentSubjects,
+  listAmendmentHistory,
+  countActiveBuilders,
 };

package/modules/government/routes/government.js

@@ -432,6 +432,21 @@ module.exports = function buildGovernmentRouter() {
     }
   });
 
+  // rank: perm board.vote.cast — the Constitution view (R18 of goal 1000069):
+  // the live board block plus the full amendment history, passed and returned
+  // alike. Same atom as the room — reading the rule you vote under is part of
+  // casting, and the section teaches (criterion C5). The live value resolves
+  // fresh per request, so an amendment applied a moment ago reads back
+  // immediately (the same instant-effect posture as everything else here).
+  router.get('/government/constitution', api.requireBuilder, api.requirePermission('board.vote.cast'), async (req, res) => {
+    try {
+      res.json(await board.constitutionView({ historyLimit: 50 }));
+    } catch (err) {
+      console.error('[gds] GET /government/constitution', err);
+      res.fail('constitution_read_failed', { status: 500, message: 'internal error' });
+    }
+  });
+
   // rank: perm board.item.open — put an AMENDMENT to the board (R14 of goal
   // 1000069, ADR 0175 §7). The board's other subject never comes through here:
   // a Full Idea's window opens AUTOMATICALLY on grade pass (R07), so requesting

package/modules/hall-ui/public/government.html

@@ -99,6 +99,6 @@
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
-<script src="/builders/government.js?v=2026-08-18-board-room"></script>
+<script src="/builders/government.js?v=2026-08-18-charter-library"></script>
 </body>
 </html>

package/modules/hall-ui/public/government.js

@@ -402,25 +402,158 @@
   // ---- the three-section IA (R15) -------------------------------------------
 
   // Tab order is the spec's — Constitution · Board Room · Ranks & Permissions.
-  // Since R16 the Board Room is furnished, so a non-archon (who cannot use the
-  // admin tab) lands there; the Archon still lands on Ranks, their working
-  // surface. Flip the non-archon initial to 'constitution' when R18 lands.
+  // A non-archon lands on the Constitution (the page's IA claim: this is the
+  // page that answers "how is this project governed"); the Archon still lands
+  // on Ranks, their working surface.
   function wireTabs({ isArchon }) {
     window.OTBKit.makeTabs({
       mount: document.getElementById('gov-tabs'),
       hash: true,
-      initial: isArchon ? 'ranks' : 'board-room',
+      initial: isArchon ? 'ranks' : 'constitution',
       tabs: [
         { id: 'constitution', label: 'Constitution', panel: 'gov-panel-constitution' },
         { id: 'board-room', label: 'Board Room', panel: 'gov-panel-board' },
         { id: 'ranks', label: 'Ranks & Permissions', panel: 'gov-panel-ranks' },
       ],
     });
-    // The Constitution frame stays an empty state until R18's read exists —
-    // rendering live values without it would mean hardcoding what drifts.
-    document.getElementById('gov-constitution').innerHTML = window.OTBKit.emptyStateHtml(
-      'The live constitution — what this project runs today, and how it has changed — appears here when the Board Room opens.',
-    );
+  }
+
+  // ---- the Constitution panel (R18) -------------------------------------------
+
+  // Plain language over the three dials, straight from the SERVER's resolved
+  // value (never hardcoded — an amendment applied a moment ago reads back on
+  // the next load), plus the change history: every closed amendment sitting,
+  // passed and RETURNED alike, each with the rule it was decided under — so a
+  // switch can never be flipped quietly, and every change is auditable against
+  // the constitution of its day.
+
+  function membershipSentence(board) {
+    const m = String(board.membership || '');
+    const rank = m.startsWith('rank:') ? m.slice(5) : null;
+    return rank
+      ? `Every active builder holding the <strong>${escapeHtml(rank)}</strong> rank sits on the board — membership follows the rank, live.`
+      : `Membership predicate: <code>${escapeHtml(m || 'unset')}</code>.`;
+  }
+
+  function passRuleSentence(board) {
+    if (board.pass_rule === 'first_ratifier') {
+      return 'An item is decided by its <strong>first vote</strong> — yes ratifies, no returns. The day-one shape: one member acts, done.';
+    }
+    if (board.pass_rule === 'consent') {
+      return 'Items pass by <strong>consent</strong>: silence is consent, a single reasoned objection returns the item to its author, and a sitting that ends with no votes at all passes.';
+    }
+    return `Pass rule: <code>${escapeHtml(String(board.pass_rule || 'unset'))}</code>.`;
+  }
+
+  function windowSentence(board) {
+    if (board.window_minutes === null || board.window_minutes === undefined) {
+      return 'There is <strong>no clock</strong> — an item stays open until a vote decides it.';
+    }
+    const early = board.close_early_on_full_turnout
+      ? ', closing early the moment every member has voted'
+      : '';
+    return `A sitting runs <strong>${escapeHtml(String(board.window_minutes))} minutes</strong>${early}. An unvoted window nulls that member's vote — absence never blocks.`;
+  }
+
+  function historyRow(h) {
+    const who = escapeHtml(h.proposer_name || h.proposer_login || (h.proposed_by ? `builder ${h.proposed_by}` : 'unknown'));
+    const when = escapeHtml(String(h.closed_at).slice(0, 16).replace('T', ' '));
+    const pill = h.outcome === 'passed'
+      ? '<span class="gov-pill gov-pill--seeded">ratified</span>'
+      : '<span class="gov-pill gov-pill--locked">returned</span>';
+    const under = h.decided_under && h.decided_under.pass_rule
+      ? ` · decided under <code>${escapeHtml(h.decided_under.pass_rule)}</code>`
+      : '';
+    return `<div class="gov-assign-row">
+      <span class="gov-assign-row__who">${who} proposed <code>${escapeHtml(JSON.stringify(h.proposed))}</code>${h.rationale_md ? ` — ${escapeHtml(h.rationale_md)}` : ''}</span>
+      ${pill} <span class="muted">${when}${under}</span>
+    </div>`;
+  }
+
+  // ---- the charter library (R19) ---------------------------------------------
+
+  // The REFERENCE half of the Charter Builder — the seven structures, the three
+  // trajectories, the ladder — and deliberately not the configuration machinery
+  // (the scale argument in ADR 0175: formality is adopted only where informal
+  // coordination breaks). `selectable` means EXPRESSIBLE TODAY through the real
+  // config — a rank-predicate membership plus first_ratifier|consent — so nobody
+  // is misled about what a settings change can and cannot reach. Source: the
+  // Six-Variables synthesis (Verro Labs, Aug 2026), Parts III–IV, via the spec.
+  const CHARTERS = [
+    { key: 'monarchy', name: 'Monarchy / BDFL', selectable: true,
+      how: "membership rank:archon · first ratifier · no clock — the shipped default",
+      blurb: 'One trusted executive decides. Fast, legible, and honest at founding scale; the shape every project actually starts in.' },
+    { key: 'timocratic-republic', name: 'Timocratic Republic', selectable: true,
+      how: 'membership by a trusted rank (e.g. rank:metic) · consent · a timed sitting',
+      blurb: 'Standing accrues to those actively building: the franchise follows earned rank, not headcount.' },
+    { key: 'direct-democracy', name: 'Direct Democracy', selectable: true,
+      how: 'membership rank:xenos (everyone) · consent · a timed sitting',
+      blurb: 'Every builder sits on the board. Consent keeps it unblockable: silence passes, one reasoned objection returns.' },
+    { key: 'presidential', name: 'Presidential', selectable: false,
+      blurb: 'An ELECTED executive with a fixed term. Needs election machinery this system does not have yet — documented for later.' },
+    { key: 'cooperative', name: 'Cooperative', selectable: false,
+      blurb: 'Formal one-member-one-vote with membership shares and exit rules. Needs the membership-share machinery — documented for later.' },
+    { key: 'federation', name: 'Federation', selectable: false,
+      blurb: 'Multiple chambers or sub-projects, each self-governing, coordinating through a compact. The >150 shape — documented for later.' },
+    { key: 'foundation', name: 'Foundation', selectable: true,
+      how: 'a CUSTOM rank as the trustee body (the Ranks tab creates it) · consent · a timed sitting',
+      blurb: 'A written charter carried by a small appointed council. Expressible today by governing through a custom rank.' },
+  ];
+  const TRAJECTORIES = [
+    { name: 'Locked', blurb: 'The constitution stays as founded until deliberately amended — no automatic movement.' },
+    { name: 'Laddered', blurb: 'Steps up the developmental ladder as the team crosses each headcount threshold.' },
+    { name: 'Scheduled', blurb: 'Pre-commits the dates or milestones at which each step happens, decided in advance.' },
+  ];
+  const LADDER = 'solo/pair → circle (3–8) → ~9 name an executive → ~25 → ~50 written charter + council → ~150 adjudication separates → beyond: federate';
+
+  function charterCard(c, recommendedKey) {
+    const pill = c.selectable
+      ? '<span class="gov-pill gov-pill--seeded">selectable today</span>'
+      : '<span class="gov-pill gov-pill--locked">documented for later</span>';
+    const rec = c.key === recommendedKey ? ' <span class="gov-pill gov-pill--custom">recommended at your headcount</span>' : '';
+    const how = c.how ? `<div class="gov-perm__guards">as configuration: ${escapeHtml(c.how)}</div>` : '';
+    return `<div class="gov-assign-row"><span class="gov-assign-row__who"><strong>${escapeHtml(c.name)}</strong> — ${escapeHtml(c.blurb)}${how}</span>${pill}${rec}</div>`;
+  }
+
+  function charterLibraryHtml(data) {
+    const rec = data.recommended || {};
+    return `
+      <h2 class="gov-h">Charter library</h2>
+      <p class="gov-grid-note">The seven government structures, for getting a team up to speed before deciding when to flip a switch. <strong>Selectable today</strong> means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code. This project has <strong>${escapeHtml(String(data.headcount ?? '?'))}</strong> active builder${data.headcount === 1 ? '' : 's'}: ${escapeHtml(rec.why || '')} <em>(${escapeHtml(rec.rung || '')})</em>.</p>
+      <div class="gov-section">${CHARTERS.map((c) => charterCard(c, rec.key)).join('')}</div>
+      <h2 class="gov-h">Trajectories</h2>
+      <p class="gov-grid-note">How a project moves between structures over time — summarized from the synthesis:</p>
+      <div class="gov-section">${TRAJECTORIES.map((t) => `<div class="gov-assign-row"><span class="gov-assign-row__who"><strong>${escapeHtml(t.name)}</strong> — ${escapeHtml(t.blurb)}</span></div>`).join('')}</div>
+      <p class="gov-grid-note muted">The developmental ladder: ${escapeHtml(LADDER)}. Formality is adopted only where informal coordination breaks.</p>
+    `;
+  }
+
+  async function loadConstitution() {
+    const box = document.getElementById('gov-constitution');
+    let data;
+    try {
+      data = await fetchJson('/government/constitution');
+    } catch (err) {
+      if (err && err.kind === '401') return;
+      box.innerHTML = `<p class="gov-empty">Could not load the constitution just now.</p>`;
+      return;
+    }
+    const b = data.board || {};
+    const history = data.history || [];
+    box.innerHTML = `
+      <section class="gov-section">
+        <div class="gov-section__head">What this project runs today</div>
+        <p class="gov-grid-note">${membershipSentence(b)}</p>
+        <p class="gov-grid-note">${passRuleSentence(b)}</p>
+        <p class="gov-grid-note">${windowSentence(b)}</p>
+        <p class="gov-grid-note muted">As configuration: <code>${escapeHtml(JSON.stringify(b))}</code>. Changing it is a board act — propose an amendment, and it is decided under the rule above.</p>
+      </section>
+      <h2 class="gov-h">How it has changed</h2>
+      ${history.length
+        ? `<div class="gov-section">${history.map(historyRow).join('')}</div>`
+        : `<p class="gov-empty">Never amended — this project still runs its founding constitution.</p>`}
+      ${charterLibraryHtml(data)}
+    `;
   }
 
   // ---- the Board Room panel (R16) --------------------------------------------
@@ -554,7 +687,8 @@
     document.getElementById('gov-sub').textContent = 'How this project is governed — the constitution it runs, the Board Room, and the ranks & permissions that administer it.';
     document.getElementById('gov-body').hidden = false;
     wireTabs({ isArchon });
-    loadBoard(); // the room loads for everyone the page admits
+    loadBoard();        // the room loads for everyone the page admits
+    loadConstitution(); // so does the rule it runs under (R18)
 
     if (!isArchon) { sealRanksPanel(); return; }
     wireForms();

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.233",
+  "version": "1.19.235",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.233",
+      "version": "1.19.235",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.233",
+  "version": "1.19.235",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/bongos/route-rank-check.js

@@ -257,6 +257,9 @@ const GOVERNMENT_PINS = {
   // R16: the Board Room view — the open ballot is visible to whoever may cast
   // (xenos-floored atom; the room teaches as well as governs, criterion C5).
   'GET /government/board/items': 'perm:board.vote.cast',
+  // R18: the Constitution view — the live rule + the amendment history; reading
+  // the rule you vote under is part of casting.
+  'GET /government/constitution': 'perm:board.vote.cast',
 };
 
 // Module-scoped privileged-rank pins: a privileged route that lives in a FEATURE

package/src/module-api.js

@@ -893,8 +893,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.231 with no explicit bump. run 32133691409. (task 1002620)
 //   1.19.233 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.232 with no explicit bump. run 32160823445. (task 1002620)
+//   1.19.234 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.233 with no explicit bump. run 32161368847. (task 1002620)
+//   1.19.235 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.234 with no explicit bump. run 32161981393. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.233'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.235'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/government_charter_library.mjs

@@ -0,0 +1,77 @@
+// tests/government_charter_library.mjs — the charter library (BV1.R19 of goal
+// 1000069, criterion C5): seven constitutions, three trajectories, the ladder —
+// and ONE live datum, the recommendation at this project's actual headcount.
+//
+// The recommendation is SERVER-SIDE and pure precisely so R26's proof can hold
+// it against the real number; the library prose is client reference content.
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const GOV = path.join(ROOT, 'modules', 'government');
+const board = require(path.join(GOV, 'board.js'));
+const db = require(path.join(GOV, 'db.js'));
+
+const { recommendedCharter } = board;
+
+test('the ladder bands track exactly the thresholds the synthesis names', () => {
+  assert.equal(recommendedCharter(1).key, 'monarchy');
+  assert.equal(recommendedCharter(2).key, 'monarchy', 'this project today: two builders → the founding monarchy');
+  assert.equal(recommendedCharter(3).key, 'direct-democracy', 'the circle rung starts at 3');
+  assert.equal(recommendedCharter(8).key, 'direct-democracy');
+  assert.equal(recommendedCharter(9).key, 'presidential', '~9: name an executive');
+  assert.equal(recommendedCharter(49).key, 'presidential');
+  assert.equal(recommendedCharter(50).key, 'foundation', '~50: written charter + council');
+  assert.equal(recommendedCharter(149).key, 'foundation');
+  assert.equal(recommendedCharter(150).key, 'federation', '~150: adjudication separates — federate');
+  assert.equal(recommendedCharter(0).key, 'monarchy', 'a zero/unknown headcount fails to the founding shape');
+  assert.equal(recommendedCharter('nonsense').key, 'monarchy');
+});
+
+test('constitutionView carries the live headcount and its recommendation', async () => {
+  const originals = { listAmendmentHistory: db.listAmendmentHistory, countActiveBuilders: db.countActiveBuilders };
+  db.listAmendmentHistory = async () => [];
+  db.countActiveBuilders = async () => 7;
+  try {
+    const view = await board.constitutionView();
+    assert.equal(view.headcount, 7);
+    assert.equal(view.recommended.key, 'direct-democracy');
+    assert.ok(view.recommended.rung.includes('circle'));
+  } finally { Object.assign(db, originals); }
+});
+
+test('the headcount counts the same population membership does (SQL pin)', () => {
+  const src = fs.readFileSync(path.join(GOV, 'db.js'), 'utf8');
+  const block = src.slice(src.indexOf('async function countActiveBuilders'), src.indexOf("// The constitution's change HISTORY"));
+  assert.match(block, /status = 'active'/);
+  assert.match(block, /system_role IS NULL/, 'a machine principal is not a team member');
+});
+
+test('the library presents all seven structures with honest selectable marks (client source pins)', () => {
+  const client = fs.readFileSync(path.join(ROOT, 'modules', 'hall-ui', 'public', 'government.js'), 'utf8');
+  const lib = client.slice(client.indexOf('const CHARTERS'), client.indexOf('function charterCard'));
+  for (const name of ['Monarchy / BDFL', 'Timocratic Republic', 'Direct Democracy', 'Presidential', 'Cooperative', 'Federation', 'Foundation']) {
+    assert.ok(lib.includes(`name: '${name}'`), `the library must present ${name}`);
+  }
+  // Selectable ⇔ expressible through the REAL config (a rank predicate + a
+  // shipped pass rule). Every selectable entry must SAY HOW; every
+  // documented-for-later entry must not pretend.
+  const selectableTrue = (lib.match(/selectable: true/g) || []).length;
+  const selectableFalse = (lib.match(/selectable: false/g) || []).length;
+  assert.equal(selectableTrue + selectableFalse, 7, 'every structure is marked, none left ambiguous');
+  assert.equal(selectableTrue, 4, 'monarchy, timocratic republic, direct democracy, foundation — the config-expressible four');
+  const trueBlocks = lib.split('selectable: true').slice(1);
+  for (const b of trueBlocks) {
+    assert.ok(b.slice(0, 200).includes('how:'), 'a selectable structure names its configuration');
+  }
+  assert.match(client, /recommended at your headcount/, 'the one live datum is rendered');
+  assert.match(client, /c\.key === recommendedKey/, "the pill is driven by the SERVER's recommendation, never re-derived client-side");
+  for (const t of ['Locked', 'Laddered', 'Scheduled']) {
+    assert.ok(client.includes(`name: '${t}'`), `trajectory ${t} present`);
+  }
+});

package/tests/government_constitution_view.mjs

@@ -0,0 +1,88 @@
+// tests/government_constitution_view.mjs — the Constitution section (BV1.R18 of
+// goal 1000069, criteria C3/C5): what we run, and how it changed.
+//
+// DB-free (db monkeypatched). The invariants:
+//   1. THE LIVE VALUE IS RESOLVED, NEVER HARDCODED — the view calls R05's
+//      config resolution per request, so an amendment applied a moment ago
+//      reads back immediately, and this vanilla checkout reads as monarchy.
+//   2. THE HISTORY SHOWS RETURNED PROPOSALS TOO — a failed attempt to change
+//      the rules is part of the record ("a switch can never be flipped
+//      quietly" cuts both ways), each row carrying the rule it was DECIDED
+//      UNDER so every change is auditable against the constitution of its day.
+//   3. THE READ RIDES THE VOTE ATOM — reading the rule you vote under is part
+//      of casting; never the manage atom.
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const GOV = path.join(ROOT, 'modules', 'government');
+const board = require(path.join(GOV, 'board.js'));
+const db = require(path.join(GOV, 'db.js'));
+const { BOARD_DEFAULTS } = require(path.join(GOV, 'config.js'));
+
+async function withDb(stubs, fn) {
+  const originals = {};
+  for (const [k, v] of Object.entries(stubs)) { originals[k] = db[k]; db[k] = v; }
+  try { return await fn(); }
+  finally { for (const [k, v] of Object.entries(originals)) db[k] = v; }
+}
+
+test('the live board block is RESOLVED per request — this vanilla checkout reads monarchy', async () => {
+  const view = await withDb({ listAmendmentHistory: async () => [], countActiveBuilders: async () => 2 }, () => board.constitutionView());
+  assert.deepEqual(view.board, BOARD_DEFAULTS,
+    'no instance pack here, so the resolved value IS the neutral monarchy — never a hardcoded copy');
+  assert.deepEqual(view.history, []);
+});
+
+test('the history projects passed AND returned, with proposer identity and the decided-under snapshot', async () => {
+  const MONARCHY = { membership: 'rank:archon', pass_rule: 'first_ratifier', window_minutes: null, close_early_on_full_turnout: true };
+  const view = await withDb({
+    countActiveBuilders: async () => 2,
+    listAmendmentHistory: async (limit) => {
+      assert.equal(limit, 50);
+      return [
+        { item_id: 30n, amendment_id: 5n, proposed: { pass_rule: 'consent' }, rationale_md: 'open up',
+          proposed_by: 42n, proposer_login: 'sole-archon', proposer_name: 'Sole Archon',
+          opened_at: 'T1', closed_at: 'T2', outcome: 'passed', decided_under: MONARCHY },
+        { item_id: 29, amendment_id: 4, proposed: { window_minutes: 5 }, rationale_md: null,
+          proposed_by: null, proposer_login: null, proposer_name: null,
+          opened_at: 'T0', closed_at: 'T1', outcome: 'returned', decided_under: MONARCHY },
+      ];
+    },
+  }, () => board.constitutionView());
+  assert.equal(view.history.length, 2);
+  const [passed, returned] = view.history;
+  assert.equal(passed.outcome, 'passed');
+  assert.equal(passed.proposer_login, 'sole-archon');
+  assert.deepEqual(passed.decided_under, MONARCHY, 'auditable against the constitution of its day (§7 chain)');
+  assert.equal(returned.outcome, 'returned', 'a failed attempt to change the rules stays on the record');
+  assert.equal(returned.proposed_by, null, 'a departed proposer projects null, honestly');
+  for (const h of view.history) {
+    assert.equal(typeof h.item_id, 'string');
+    assert.equal(typeof h.amendment_id, 'string');
+  }
+});
+
+test('the history read includes returned outcomes and is bounded + close-ordered (SQL pins)', () => {
+  const src = fs.readFileSync(path.join(GOV, 'db.js'), 'utf8');
+  const block = src.slice(src.indexOf('async function listAmendmentHistory'), src.indexOf('// --- amendments'));
+  assert.ok(!block.includes("outcome = 'passed'"), 'returned proposals are part of the record — no outcome filter');
+  assert.match(block, /closed_at IS NOT NULL/, 'closed sittings only — an open proposal is the Board Room tab, not history');
+  assert.match(block, /ORDER BY i\.closed_at DESC/, 'newest change first');
+  assert.match(block, /LIMIT \$1/, 'bounded');
+});
+
+test('the read rides the vote atom, and the client renders the SERVER value (source pins)', () => {
+  const rrc = require(path.join(ROOT, 'src', 'bongos', 'route-rank-check.js'));
+  assert.equal(rrc.MODULE_EXPECTED_RANKS.government['GET /government/constitution'],
+    `${rrc.PERM_PIN_PREFIX}board.vote.cast`);
+  const client = fs.readFileSync(path.join(ROOT, 'modules', 'hall-ui', 'public', 'government.js'), 'utf8');
+  assert.match(client, /fetchJson\('\/government\/constitution'\)/, 'the panel loads the resolved value');
+  assert.ok(!/'first_ratifier'[^]*hardcod/i.test(client), 'sanity');
+  assert.match(client, /loadConstitution\(\)/, 'the panel loads for everyone the page admits');
+});

package/tests/government_routes.mjs

@@ -89,8 +89,11 @@ test('every /governance route gates via REAL middleware on exactly its PINNED at
     assert.equal(r.rank, FLOOR_LABEL[floor], `${r.key}: classifies to ${atom}'s floor label (${FLOOR_LABEL[floor]})`);
   }
   // The admin surface's own rule survives the generalization, stated directly:
-  // everything that is not a board route still gates on government.manage.
-  for (const r of classified.filter((x) => !x.key.includes('/board/'))) {
+  // everything outside the Board Room family — the /board/ routes and the
+  // /constitution read (R18: reading the rule you vote under is part of
+  // casting) — still gates on government.manage.
+  const boardFamily = (key) => key.includes('/board/') || key.endsWith('/government/constitution');
+  for (const r of classified.filter((x) => !boardFamily(x.key))) {
     assert.deepEqual(r.perms, ['government.manage'], `${r.key}: the admin surface gates on the manage atom`);
   }
 });