@bongos/core 1.19.235 → 1.19.237

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.235",
-  "core_contract": "1.19.235",
-  "source_commit": "b91cbff1532b00e3cdd2204e713b35cf093c9b02",
+  "core_version": "1.19.237",
+  "core_contract": "1.19.237",
+  "source_commit": "eaeb8fe89968c0626abe204eb28a8f30caf91a35",
   "source_ref": "HEAD",
-  "built_at": "2026-08-18T16:46:17.722Z",
+  "built_at": "2026-08-18T17:14:57.073Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 311,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1319,
+    "functional_verbatim": 1322,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1651,
-  "tree_sha256": "d20a6edcee7ad8a7e81eefec0b07689a820b194634cdb5350c8c4263127990ea",
+  "file_count": 1654,
+  "tree_sha256": "53eb12ad4fd9752bd82babaf455317c7f3600dc379b40042cdbd29db67bef408",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -2687,7 +2687,7 @@
     {
       "path": "modules/dev-box/app/src/vendor/bongos-client.cjs",
       "mode": "0000644",
-      "sha256": "b0bd3bbad51ea1b68f7fd36165d77fce12939cde82b37cd2266a00c103002f4b"
+      "sha256": "5c99db7b6b1b59e595c3c6a7002cf7baa3b130a198213b007448d02a427883f1"
     },
     {
       "path": "modules/dev-box/app/test/unit.mjs",
@@ -2739,6 +2739,11 @@
       "mode": "0000644",
       "sha256": "a3261a569a381ed4b19f6f5d32598a9cec09f62be51533fd6b7c5272d53b63d3"
     },
+    {
+      "path": "modules/discord/board-broadcast.js",
+      "mode": "0000644",
+      "sha256": "545b65d5db473617de01f19fa3ee3f154373e7696f8549624e441e327181c4e6"
+    },
     {
       "path": "modules/discord/bug-attachments.js",
       "mode": "0000644",
@@ -2747,7 +2752,7 @@
     {
       "path": "modules/discord/db.js",
       "mode": "0000644",
-      "sha256": "543afaee208f27d5a6a68c55b08395cd29f1091ffae2bfca1df0cdf9b7b64b5e"
+      "sha256": "79188ee4a6934be0783f18e718a025390e337abdf201c3a521e75b5cdf1e8c0b"
     },
     {
       "path": "modules/discord/discord-approvals.js",
@@ -2797,7 +2802,7 @@
     {
       "path": "modules/discord/module.json",
       "mode": "0000644",
-      "sha256": "20dbf26cfca116f5035e90a7ceec83baa29670bbd5c56dc03a1003db2983edf4"
+      "sha256": "506d3c99714060d6fcce93e971546430692591a74df86260d04c07910a185831"
     },
     {
       "path": "modules/discord/pollers/discord-bot.js",
@@ -2812,7 +2817,7 @@
     {
       "path": "modules/discord/routes/discord.js",
       "mode": "0000644",
-      "sha256": "6c3d77cb86ea3f9328de88c8ddf02a1af95e3c95ed92559bf380f627f7f59f48"
+      "sha256": "a1de692d790297b2f2286c00980aa981e0ece68fbddabf882a4fcb140ff8132b"
     },
     {
       "path": "modules/discord/ship-broadcast.js",
@@ -2822,7 +2827,7 @@
     {
       "path": "modules/discord/webhook.js",
       "mode": "0000644",
-      "sha256": "ebf32fb813b9ca84eaade229cad2206ea7de35399c121a893b78a46a1b3af0b0"
+      "sha256": "cd93f8e837f5fbf92777ff46114ef0ff7e0d3d19b96df750e4c159c1ed42c293"
     },
     {
       "path": "modules/economy/CLAUDE.md",
@@ -2902,7 +2907,7 @@
     {
       "path": "modules/government/board.js",
       "mode": "0000644",
-      "sha256": "9d3d9414ca1c1bafc901a7343cdccafc7261b0dba492134a9a1064e6b3d82b61"
+      "sha256": "a73c72cb9101a74f0d01fbdb4b87101687b54fc876a98bcef6f3bffafc29b5ad"
     },
     {
       "path": "modules/government/catalog.js",
@@ -2917,7 +2922,7 @@
     {
       "path": "modules/government/db.js",
       "mode": "0000644",
-      "sha256": "ab75e3e0fd2b7eee747e525403f8a2ea863dbf1f4332cb3c6ec1b413ed7af7e3"
+      "sha256": "d50b12547863df08cf32c606fe91187e1239f5b0d339f9d34ed9f3b5403b3d15"
     },
     {
       "path": "modules/government/migrations/governance_001_tables.sql",
@@ -3272,12 +3277,12 @@
     {
       "path": "modules/hall-ui/public/government.html",
       "mode": "0000644",
-      "sha256": "87ec2d8c002edf0a440e658cb29e567a07544bc36bb535d4cb0fd5130629a92e"
+      "sha256": "7962d925606ec7c33e9579ebe8bdc45ef29b35899bacfb18d36af71a314629e2"
     },
     {
       "path": "modules/hall-ui/public/government.js",
       "mode": "0000644",
-      "sha256": "505003cd76eb3760459ed53555b5c0803e1efaffb2e17ee15c7ed032a1607289"
+      "sha256": "b1de692afb7abb2bd95a91a31d7c8d244c9a9f702c8ab3d73214bb23472614ec"
     },
     {
       "path": "modules/hall-ui/public/hall-kit.js",
@@ -4322,12 +4327,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7731f20b3114fe6a083c06fe6b92d0048e4d5d136ba4fcc49f9a10f66c9577e5"
+      "sha256": "0aa89af9e9b19d147dac4f2e227a5c83e551f017c214a93a1b8fdc1b06bbd181"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "844c9c21b09d3d41cd8663a37d651ec717a5ba25d5fb24fda5e57930ca278cb2"
+      "sha256": "504c5178ba2a13a17ed7c187fcc07760980e1f34f0e9ded12b0e45f3c30d5d40"
     },
     {
       "path": "public-docs/index.html",
@@ -5942,7 +5947,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c3a588bdcb0781e8f71dd492f26b09a2212ababebf52e511dccb9018ad84f89b"
+      "sha256": "87b7144a9581bd6f2877671b4624aed2bb872ad7456ec1d8208493a53e604150"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6619,6 +6624,11 @@
       "mode": "0000644",
       "sha256": "9765fcdc48191281115dfaac650719ac8f84257b602d1e83c351e9b9ad6d2949"
     },
+    {
+      "path": "tests/discord_board_broadcast.mjs",
+      "mode": "0000644",
+      "sha256": "d2b3406427e242c09a0913643ebe6726a6e738d3a3cf576d0de6e4fd21b0c1f9"
+    },
     {
       "path": "tests/discord_bot.mjs",
       "mode": "0000644",
@@ -6887,13 +6897,18 @@
     {
       "path": "tests/government_board_view.mjs",
       "mode": "0000644",
-      "sha256": "104dbfd5510f4abf4580cf89f57e4be15667b4b6e6f171a2635786bfd4d65f9e"
+      "sha256": "827d743080201f11b2282aaa77d37149aaddaddc42b2b444c260a2696a7727ca"
     },
     {
       "path": "tests/government_board_vote.mjs",
       "mode": "0000644",
       "sha256": "c1b9b0963dde0c033bd0eb411b63032a51edaa3d91751100593b7e3b4999c017"
     },
+    {
+      "path": "tests/government_board_vote_ui.mjs",
+      "mode": "0000644",
+      "sha256": "a9e46b10cf9b6c17550f22463d13caa0d4b63d87d4fc63d087dd14e4b95b8312"
+    },
     {
       "path": "tests/government_board_window.mjs",
       "mode": "0000644",

package/modules/dev-box/app/src/vendor/bongos-client.cjs

@@ -348,8 +348,14 @@ function createClient(opts = {}) {
       postGovernmentAssignments: (args) => request("POST", "/government/assignments", { hasBody: true }, args),
       // DELETE /government/assignments/{builderId}/{rankKey} — rank: archon — DELETE /government/assignments/:builderId/:rankKey
       deleteGovernmentAssignmentsBuilderIdRankKey: (args) => request("DELETE", "/government/assignments/{builderId}/{rankKey}", { hasBody: false }, args),
+      // GET /government/board/items — rank: any-builder — GET /government/board/items
+      getGovernmentBoardItems: (args) => request("GET", "/government/board/items", { hasBody: false }, args),
+      // POST /government/board/items — rank: metic+archon — POST /government/board/items
+      postGovernmentBoardItems: (args) => request("POST", "/government/board/items", { hasBody: true }, args),
       // POST /government/board/items/{itemId}/votes — rank: any-builder — POST /government/board/items/:itemId/votes
       postGovernmentBoardItemsItemIdVotes: (args) => request("POST", "/government/board/items/{itemId}/votes", { hasBody: true }, args),
+      // GET /government/constitution — rank: any-builder — GET /government/constitution
+      getGovernmentConstitution: (args) => request("GET", "/government/constitution", { hasBody: false }, args),
       // GET /government/permissions — rank: archon — GET /government/permissions
       getGovernmentPermissions: (args) => request("GET", "/government/permissions", { hasBody: false }, args),
       // GET /government/ranks — rank: archon — GET /government/ranks

package/modules/discord/board-broadcast.js

@@ -0,0 +1,105 @@
+// modules/discord/board-broadcast.js — the Board Room announcer
+// (BV1.R21 of goal 1000069, ADR 0175 §8).
+//
+// On window open, the board channel hears that a vote is wanted: the members
+// under the item's SNAPSHOTTED constitution are @mentioned (the mention IS the
+// "vote within X" notice, and Discord's own mobile app IS the mobile push — no
+// new surface), with a deep link straight to the Board Room in the hall.
+//
+// DISCORD IS OUTBOUND-ONLY HERE (§8, and the C6 criterion): this posts, it
+// reads nothing inbound and casts nothing — an objection needs a reason and a
+// section, which a reaction cannot express, so the hall is the only voting
+// surface and this message is a doorway to it.
+//
+// THE MENTION EXCEPTION: webhook.postWebhookMentions allowlists exactly the
+// member ids the GOVERNMENT PORT resolved — server data, never message text —
+// under the item's snapshot, so an amendment mid-sitting cannot change who is
+// summoned to an already-open item. A member without a Discord link is named
+// in text instead (visible, unpinged, honest). #871's parse:[] still stands:
+// nothing typed into content can ever ring anyone.
+//
+// BEST-EFFORT BY DESIGN, like every broadcast in this module: it never throws,
+// so a Discord hiccup can never fail a window open — the room in the hall is
+// the durable surface, this is the nudge.
+
+'use strict';
+
+const api = require('../../src/module-api');
+const db = require('./db');
+const webhook = require('./webhook');
+
+// Compose + post the announcement. deps injectable for the DB-free tests:
+//   resolveMembers(constitution) → the government port's resolveBoardMembers
+//   getLink(builderId)           → db.getDiscordLink
+//   post(channel, text, userIds) → webhook.postWebhookMentions
+// Strip markdown-significant characters from a builder-editable name so a
+// crafted display name cannot carry formatting, links or lookalike mentions on
+// the back of a legitimate announcement. The PING vector is already closed by
+// allowed_mentions; this closes the cosmetic/phishing one.
+function plainName(name) {
+  // '.' is stripped too: Discord auto-links bare domains, so a name shaped
+  // like one must not survive as a clickable.
+  return String(name).replace(/[\`*_~|@#>\[\]()<:.\/]/g, '').trim().slice(0, 64) || 'a member';
+}
+
+async function postBoardAnnouncement(payload, deps = {}) {
+  const result = { posted: false, skipped: null, mentioned: [], named: [] };
+  if (!payload || payload.item_id == null) { result.skipped = 'no_item'; return result; }
+  const log = deps.log || console.log;
+  try {
+    const government = deps.government !== undefined ? deps.government : (api.resolveOptional && api.resolveOptional('government'));
+    const resolveMembers = deps.resolveMembers
+      || (government && government.resolveBoardMembers ? (c) => government.resolveBoardMembers(c) : null);
+    if (!resolveMembers) { result.skipped = 'no_government_port'; return result; }
+    const members = await resolveMembers(payload.constitution || {});
+    if (!members || !members.length) { result.skipped = 'empty_board'; return result; }
+
+    // ONE bulk query for the whole board's links — never a per-member await.
+    const getLinks = deps.getLinks
+      || (async (ids) => db.getDiscordLinks(ids));
+    let links = new Map();
+    try { links = await getLinks(members.map((m) => m.builder_id)); } catch (_) { /* unlinked reads as unlinked */ }
+    const mentions = [];
+    for (const m of members) {
+      const link = links.get(String(m.builder_id));
+      const discordId = link && (link.discord_user_id || link.discordUserId);
+      if (discordId) {
+        result.mentioned.push(String(discordId));
+        mentions.push(`<@${discordId}>`);
+      } else {
+        // Named, visible, unpinged — an unlinked member still sees their name
+        // when they read the room; linking is their call, not a gate. Names are
+        // builder-editable profile text, so markdown-significant characters are
+        // stripped: a crafted display name must not carry links or formatting
+        // on the back of a legitimate announcement.
+        const safe = plainName(m.display_name || m.github_login || `builder ${m.builder_id}`);
+        result.named.push(safe);
+        mentions.push(safe);
+      }
+    }
+
+    const subject = payload.subject_type === 'constitutional_amendment'
+      ? 'A constitutional amendment'
+      : 'A Full Idea';
+    const clock = payload.window_minutes
+      ? `within ${payload.window_minutes} minutes`
+      : 'at your convenience — the sitting has no clock and closes on the first vote';
+    const origin = ((api.branding && api.branding().domains) || {}).buildersOrigin || '';
+    // Straight to THAT item: ?item=<id> — the Board Room panel reads it and
+    // scrolls to / highlights the named sitting (the hash stays the tab).
+    const link = `${origin ? origin.replace(/\/$/, '') : ''}/government?item=${encodeURIComponent(payload.item_id)}#board-room`;
+    const line = `\u{1F3DB}\u{FE0F} ${subject} is before the board (item ${payload.item_id}). `
+      + `${mentions.join(' ')} — your vote is wanted ${clock}. Vote in the hall: ${link}`;
+
+    const post = deps.post || webhook.postWebhookMentions;
+    await post('board_room', line, result.mentioned);
+    result.posted = true;
+    log(`[discord] board announcement posted (item ${payload.item_id}; ${result.mentioned.length} mentioned, ${result.named.length} named)`);
+  } catch (e) {
+    result.skipped = 'post_failed';
+    log(`[discord] board announcement skipped (window open unaffected): ${e && e.message}`);
+  }
+  return result;
+}
+
+module.exports = { postBoardAnnouncement };

package/modules/discord/db.js

@@ -46,6 +46,18 @@ async function listDiscordLinks() {
   return rows;
 }
 
+// Bulk twin of getDiscordLink (R21): one query for a whole board's links —
+// the announcer mentions every member, and a per-member await is an N+1 the
+// grader rightly flagged. Returns a Map keyed by builder_id AS A STRING.
+async function getDiscordLinks(builderIds) {
+  if (!builderIds || !builderIds.length) return new Map();
+  const { rows } = await pool.query(
+    `SELECT builder_id, discord_user_id FROM discord_links WHERE builder_id = ANY($1::bigint[])`,
+    [builderIds],
+  );
+  return new Map(rows.map((r) => [String(r.builder_id), r]));
+}
+
 async function getDiscordLink(builderId) {
   const { rows } = await pool.query(
     `SELECT builder_id, discord_user_id, linked_at FROM discord_links WHERE builder_id = $1`,
@@ -82,6 +94,7 @@ module.exports = {
   getBuilderByDiscordUserId,
   listDiscordLinks,
   getDiscordLink,
+  getDiscordLinks,
   countRecentDiscordBugFilings,
   recordApplause,
   // kernel db helpers, re-exported off the doorway (one `db.*` namespace)

package/modules/discord/module.json

@@ -11,6 +11,6 @@
     "uiSections": []
   },
   "provides": ["discord.isLinked"],
-  "consumes": ["ideas.capture"],
+  "consumes": ["ideas.capture", "government"],
   "dependencies": { "discord.js": "^14.26.4" }
 }

package/modules/discord/routes/discord.js

@@ -17,6 +17,7 @@ const api = require('../../../src/module-api');
 const auth = require('../auth');
 const db = require('../db');
 const shipBroadcast = require('../ship-broadcast');
+const boardBroadcast = require('../board-broadcast');
 const roleSync = require('../discord-role-sync');
 
 // The module's kernel seams, registered when this factory runs (the loader runs
@@ -43,6 +44,7 @@ const roleSync = require('../discord-role-sync');
 let _shipListenerOff = null;
 let _strandListenerOff = null;
 let _roleSyncListenerOff = null;
+let _boardListenerOff = null;
 function registerSeams() {
   if (!api.hasProvider('discord.isLinked')) {
     api.registerProvider('discord.isLinked', async (builderId) => !!(await db.getDiscordLink(builderId)));
@@ -58,6 +60,10 @@ function registerSeams() {
   _shipListenerOff = api.on('task.shipped', (task) => shipBroadcast.postShipBroadcast(task));
   if (_strandListenerOff) _strandListenerOff();
   _strandListenerOff = api.on('task.strand-flagged', (info) => shipBroadcast.postStrandNotice(info));
+  // R21 (goal 1000069): a window opening in the Board Room summons its members
+  // — the government module emits, this module posts. Outbound only (§8).
+  if (_boardListenerOff) _boardListenerOff();
+  _boardListenerOff = api.on('board.item.opened', (payload) => boardBroadcast.postBoardAnnouncement(payload));
   if (_roleSyncListenerOff) _roleSyncListenerOff();
   _roleSyncListenerOff = api.on('builder.role-sync-needed', ({ builderId }) =>
     roleSync.syncBuilderRole(builderId).catch((e) =>

package/modules/discord/webhook.js

@@ -27,6 +27,7 @@ const WEBHOOKS_PATH = api.configPath('discord-webhooks.json');
 const CHANNELS = new Set([
   'ship_news', 'ship_feed', 'security_ship_feed',
   'member_approvals',
+  'board_room',
 ]);
 
 function loadWebhooks() {
@@ -43,7 +44,11 @@ function loadWebhooks() {
   return cfg;
 }
 
-async function postWebhook(channel, text) {
+// One poster core; the two entry points differ ONLY in allowed_mentions.
+// #871's rule holds in both: parse:[] always, so nothing typed INTO content can
+// ever ring — postWebhookMentions adds an explicit server-resolved user
+// allowlist and nothing else.
+async function postCore(channel, text, allowedMentions) {
   if (!CHANNELS.has(channel)) {
     throw new Error(`Unknown Discord channel '${channel}'. Known: ${[...CHANNELS].join(', ')}`);
   }
@@ -56,13 +61,10 @@ async function postWebhook(channel, text) {
   }
   // Discord hard-caps message content at 2000 chars.
   const content = String(text).slice(0, 2000);
-  // SECURITY (#871): suppress ALL mention pings. The content is DB-sourced and
-  // attacker-influenceable; allowed_mentions:{parse:[]} renders text verbatim but
-  // fires zero notifications. (Discord defaults to parsing mentions when omitted.)
   const res = await fetch(url, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({ content, allowed_mentions: { parse: [] } }),
+    body: JSON.stringify({ content, allowed_mentions: allowedMentions }),
   });
   if (!res.ok) {
     const body = await res.text().catch(() => '');
@@ -71,4 +73,22 @@ async function postWebhook(channel, text) {
   return { ok: true, status: res.status }; // 204 No Content on success
 }
 
-module.exports = { CHANNELS, WEBHOOKS_PATH, loadWebhooks, postWebhook };
+// SECURITY (#871): suppress ALL mention pings. The content is DB-sourced and
+// attacker-influenceable; allowed_mentions:{parse:[]} renders text verbatim but
+// fires zero notifications. (Discord defaults to parsing mentions when omitted.)
+async function postWebhook(channel, text) {
+  return postCore(channel, text, { parse: [] });
+}
+
+// postWebhookMentions — the ONE sanctioned exception to #871's blanket mention
+// suppression (R21 of goal 1000069: "the mention IS the 'vote within X'
+// notice"). Still parse:[] — nothing typed INTO the content can ever ping — but
+// an explicit `users` allowlist lets exactly the named ids ring. The ids must
+// come from the board-membership resolve (server data), NEVER from message
+// text; the cap of 20 is a sanity bound far above any real board.
+async function postWebhookMentions(channel, text, userIds = []) {
+  const users = [...new Set(userIds.filter((u) => /^\d+$/.test(String(u))))].slice(0, 20).map(String);
+  return postCore(channel, text, { parse: [], users });
+}
+
+module.exports = { CHANNELS, WEBHOOKS_PATH, loadWebhooks, postWebhook, postWebhookMentions };

package/modules/government/board.js

@@ -81,9 +81,31 @@ async function openWindowForFullIdea({ ideaId, completenessScore } = {}) {
     windowMinutes: board.window_minutes,
   });
   if (!item) return { opened: false, reason: 'already_open', item: await db.getOpenBoardItem('full_idea', id) };
+  await emitWindowOpened(item);
   return { opened: true, item };
 }
 
+// The window-open courtesy event (R21's feed): emitAsync AFTER the row exists,
+// for non-deciding reactions only — the Discord announcer mentions the members
+// whose vote is wanted and deep-links the hall. Best-effort by construction
+// (emitAsync isolates listener errors), and nothing that decides or pays may
+// subscribe: the row is the durable fact, the event is a nudge.
+async function emitWindowOpened(item) {
+  try {
+    if (api.emitAsync) {
+      await api.emitAsync('board.item.opened', {
+        item_id: String(item.id),
+        subject_type: item.subject_type,
+        subject_id: String(item.subject_id),
+        opened_by: item.opened_by == null ? null : String(item.opened_by),
+        closes_at: item.closes_at || null,
+        window_minutes: item.constitution ? item.constitution.window_minutes ?? null : null,
+        constitution: item.constitution || null,
+      });
+    }
+  } catch (_) { /* a nudge that fails is a quiet sitting, never a failed open */ }
+}
+
 // ── the vote (BV1.R08 of goal 1000069, ADR 0175 §§4/6/9) ────────────────────
 //
 // OPEN BALLOT, ONE VOTE, NO EDITING. A vote is member + direction + timestamp,
@@ -450,6 +472,7 @@ async function proposeAmendment({ proposal, rationaleMd = null, proposedBy } = {
     windowMinutes: board.window_minutes,
   });
   // A fresh amendment id can never collide with the one-open-per-subject index.
+  if (item) await emitWindowOpened(item);
   return { ok: true, amendment, item };
 }
 
@@ -499,7 +522,17 @@ async function boardRoomView({ closedLimit = 20 } = {}) {
   }
   const project = (item) => {
     const subject = item.subject_type === 'full_idea'
-      ? (() => { const r = ideaById.get(String(item.subject_id)); return r ? { title: r.title, author_id: String(r.captured_by) } : null; })()
+      ? (() => {
+          const r = ideaById.get(String(item.subject_id));
+          return r ? {
+            title: r.title,
+            author_id: String(r.captured_by),
+            // R17: the voter decides with the idea in front of them.
+            field_values: r.field_values || null,
+            template_key: r.template_key || null,
+            completeness_score: r.completeness_score ?? null,
+          } : null;
+        })()
       : (() => { const r = amendmentById.get(String(item.subject_id)); return r ? { proposed: r.proposed, rationale_md: r.rationale_md, author_id: r.proposed_by == null ? null : String(r.proposed_by) } : null; })();
     return {
       id: String(item.id),

package/modules/government/db.js

@@ -493,8 +493,15 @@ async function getVotesForItems(itemIds) {
 // an amendment its proposed block + rationale.
 async function getIdeaSubjects(ideaIds) {
   if (!ideaIds || !ideaIds.length) return [];
+  // The five sections ride along (R17): the full idea must be IN FRONT of the
+  // voter while they decide — that context is the entire reason voting happens
+  // in the hall rather than on a reaction. LEFT JOIN: an idea whose grade row
+  // is somehow gone still shows its title.
   const { rows } = await pool.query(
-    `SELECT id, title, captured_by FROM idea_inbox WHERE id = ANY($1::bigint[])`,
+    `SELECT i.id, i.title, i.captured_by, g.field_values, g.template_key, g.completeness_score
+       FROM idea_inbox i
+       LEFT JOIN ideas_grades g ON g.idea_id = i.id
+      WHERE i.id = ANY($1::bigint[])`,
     [ideaIds],
   );
   return rows;

package/modules/hall-ui/public/government.html

@@ -99,6 +99,6 @@
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
-<script src="/builders/government.js?v=2026-08-18-charter-library"></script>
+<script src="/builders/government.js?v=2026-08-18-board-announce"></script>
 </body>
 </html>

package/modules/hall-ui/public/government.js

@@ -80,6 +80,17 @@
     unknown_permission: 'The permission catalog does not define that key.',
     bad_rank_key: 'Rank keys are kebab-case: lowercase letters, digits, dashes.',
     validation_failed: 'Missing or invalid fields.',
+    // the vote refusals (R17 over R08's route)
+    not_board_member: 'Only members of this item\u2019s board may vote on it \u2014 membership follows the rules that were in force when the window opened.',
+    anti_self_vote: 'You can\u2019t vote on your own idea \u2014 that\u2019s the line that keeps ratification honest.',
+    item_closed: 'This sitting has closed \u2014 refreshing.',
+    vote_window_expired: 'This sitting\u2019s clock has run out \u2014 the sweep is closing it.',
+    objection_needs_reason: 'An objection must say why \u2014 write the reason.',
+    objection_needs_section: 'An objection must point at exactly one section of the idea.',
+    yes_carries_nothing: 'A yes carries no reason or section \u2014 those belong to objections.',
+    bad_direction: 'A vote is yes or no \u2014 nothing else.',
+    item_not_found: 'That item no longer exists \u2014 refreshing.',
+    bad_item_id: 'That item id isn\u2019t valid.',
   };
   const friendlyError = (code) => ERROR_COPY[code] || null;
 
@@ -610,6 +621,76 @@
     return `<div class="gov-section">${rows}</div>`;
   }
 
+  // ---- the vote form (R17) -----------------------------------------------------
+
+  // The five section labels, mirrored from the base template declaration
+  // (modules/ideas/templates.js — the words the author saw when writing; a test
+  // holds the two equal, since browser code cannot import a server module).
+  const SECTION_LABELS = {
+    purpose: 'Purpose of Idea',
+    big_picture: 'What does the Big Picture look like',
+    why_had: 'Why did you have the Idea',
+    why_matters: 'Why does the Idea Matter',
+    fit: 'How does the Idea Fit into the big picture of the project',
+  };
+
+  // The idea's five sections, IN FRONT of the voter — the entire reason voting
+  // happens in the hall rather than on a reaction. Rendered in template order.
+  function ideaSectionsHtml(item) {
+    const fv = item.subject && item.subject.field_values;
+    if (!fv) return '';
+    const rows = Object.keys(SECTION_LABELS).map((key) => `
+      <div class="gov-perm">
+        <div class="gov-perm__main">
+          <code class="gov-perm__key">${escapeHtml(SECTION_LABELS[key])}</code>
+          <div class="gov-perm__guards">${escapeHtml(String(fv[key] ?? ''))}</div>
+        </div>
+      </div>`).join('');
+    const score = item.subject.completeness_score;
+    return `<details class="gov-section"><summary class="gov-section__head">The idea, in full${score != null ? ` \u00b7 completeness ${escapeHtml(String(score))}/100` : ''}</summary>${rows}</details>`;
+  }
+
+  function voteFormHtml(item, viewerId) {
+    if (item.closed_at) return '';
+    const mine = item.votes.find((v) => String(v.voter_id) === String(viewerId));
+    if (mine) return '';
+    if (item.subject_type === 'full_idea' && item.subject && String(item.subject.author_id) === String(viewerId)) {
+      return `<p class="gov-grid-note">This is your idea \u2014 its author does not vote on it. The board decides; a return comes back to you with its reason.</p>`;
+    }
+    const sections = Object.keys(SECTION_LABELS).map((key) => `
+      <label class="gov-perm" style="cursor:pointer"><input type="radio" name="vote-section-${escapeHtml(item.id)}" value="${escapeHtml(key)}"> <span>${escapeHtml(SECTION_LABELS[key])}</span></label>`).join('');
+    return `<div class="gov-vote" data-item="${escapeHtml(item.id)}">
+      <button type="button" class="gov-btn" data-vote="yes">Vote yes</button>
+      <details class="gov-vote__no">
+        <summary class="gov-btn gov-btn--ghost">Object\u2026</summary>
+        <p class="gov-grid-note">An objection returns the idea to its author with your reason and the section it faults \u2014 the feedback they revise against.</p>
+        <textarea class="gov-input" data-vote-reason placeholder="Why \u2014 the reason the author will act on" maxlength="5000" rows="3"></textarea>
+        <div class="gov-vote__sections">${sections}</div>
+        <button type="button" class="gov-btn" data-vote="no">Cast objection</button>
+      </details>
+    </div>`;
+  }
+
+  async function castVoteFromRoom(itemId, direction, container) {
+    const body = { direction };
+    if (direction === 'no') {
+      const reason = (container.querySelector('[data-vote-reason]') || {}).value || '';
+      const picked = container.querySelector(`input[name="vote-section-${itemId}"]:checked`);
+      body.reason_md = reason;
+      if (picked) body.section_key = picked.value;
+    }
+    try {
+      const out = await sendJson('POST', `/government/board/items/${encodeURIComponent(itemId)}/votes`, body);
+      toast(out.item_closed
+        ? `Vote cast \u2014 the sitting closed: ${out.outcome}.`
+        : 'Vote cast.');
+    } catch (err) {
+      if (err && err.kind === '401') return;
+      toast(`Could not vote: ${err.message || err}`);
+    }
+    loadBoard(); // re-render either way — the room shows what stands
+  }
+
   function itemCard(item, viewerId) {
     const yes = item.votes.filter((v) => v.direction === 'yes').length;
     const no = item.votes.filter((v) => v.direction === 'no').length;
@@ -623,12 +704,14 @@
     const myLine = item.closed_at ? '' : (mine
       ? `<p class="gov-grid-note">You voted <strong>${escapeHtml(mine.direction)}</strong>. One vote per member — no changes.</p>`
       : `<p class="gov-grid-note">You have not voted on this item. Casting arrives with the vote form.</p>`);
-    return `<section class="gov-section">
+    return `<section class="gov-section" id="board-item-${escapeHtml(item.id)}">
       <div class="gov-section__head">${subjectLine(item)} ${state}</div>
       ${amendmentDetail}
       <p class="gov-grid-note">tally: ${yes} yes · ${no} no — sitting under <code>${escapeHtml((item.constitution && item.constitution.pass_rule) || '?')}</code>, membership <code>${escapeHtml((item.constitution && item.constitution.membership) || '?')}</code></p>
       ${myLine}
+      ${item.closed_at ? '' : ideaSectionsHtml(item)}
       ${ballotHtml(item, viewerId)}
+      ${voteFormHtml(item, viewerId)}
     </section>`;
   }
 
@@ -649,6 +732,27 @@
       (open || window.OTBKit.emptyStateHtml('Nothing is before the board. When a Full Idea clears the completeness grade, its window opens here.'))
       + `<h2 class="gov-h">Closed sittings</h2>`
       + (closed || `<p class="gov-empty">No sitting has closed yet.</p>`);
+    // R21: the Discord announcement deep-links ?item=<id>#board-room — land the
+    // reader on THAT sitting. Query, not hash (the hash is the tab, makeTabs
+    // owns it); a missing or unknown id is simply the room as usual.
+    const wanted = new URLSearchParams(window.location.search).get('item');
+    if (wanted) {
+      const el = document.getElementById(`board-item-${wanted}`);
+      if (el) {
+        el.scrollIntoView({ block: 'start' });
+        el.style.outline = '2px solid var(--color-text-success, #4a4)';
+      }
+    }
+    // R17: the cast buttons. One delegated listener; the SERVER refuses every
+    // illegitimate cast regardless (membership, anti-self, closed, expired) —
+    // the form is a courtesy, the route is the wall.
+    box.querySelectorAll('.gov-vote [data-vote]').forEach((btn) => {
+      btn.addEventListener('click', () => {
+        const wrap = btn.closest('.gov-vote');
+        btn.disabled = true;
+        castVoteFromRoom(wrap.dataset.item, btn.dataset.vote, wrap);
+      });
+    });
   }
 
   // ---- init ----------------------------------------------------------------

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.235",
+  "version": "1.19.237",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.235",
+      "version": "1.19.237",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.235",
+  "version": "1.19.237",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -897,8 +897,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.233 with no explicit bump. run 32161368847. (task 1002620)
 //   1.19.235 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.234 with no explicit bump. run 32161981393. (task 1002620)
+//   1.19.236 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.235 with no explicit bump. run 32162811851. (task 1002620)
+//   1.19.237 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.236 with no explicit bump. run 32164526454. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.235'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.237'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/discord_board_broadcast.mjs

@@ -0,0 +1,121 @@
+// tests/discord_board_broadcast.mjs — announce a window (BV1.R21 of goal
+// 1000069, ADR 0175 §8 / criterion C6): mention the members, deep-link the hall.
+//
+// DB-free, deps-injected (the postShipBroadcast testing shape). The invariants:
+//   1. THE MENTION ALLOWLIST IS EXACTLY THE LINKED MEMBERS — ids come from the
+//      government port's resolve under the item's SNAPSHOT, never from text;
+//      an unlinked member is NAMED, visible and unpinged.
+//   2. OUTBOUND-ONLY AND BEST-EFFORT — a Discord hiccup, a missing port, or an
+//      empty board is a named skip, never a throw (a failed nudge must never
+//      fail a window open).
+//   3. THE EMITTER FIRES ON FRESH OPENS ONLY — an idempotent re-open (the
+//      already_open path) summons nobody twice.
+//   4. #871 SURVIVES — the poster keeps parse:[] and only rings the explicit
+//      user allowlist; content can never ping anyone on its own.
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const { postBoardAnnouncement } = require(path.join(ROOT, 'modules', 'discord', 'board-broadcast.js'));
+const webhook = require(path.join(ROOT, 'modules', 'discord', 'webhook.js'));
+
+const MONARCHY = { membership: 'rank:archon', pass_rule: 'first_ratifier', window_minutes: null, close_early_on_full_turnout: true };
+const payload = (over = {}) => ({
+  item_id: '11', subject_type: 'full_idea', subject_id: '7', opened_by: null,
+  closes_at: null, window_minutes: null, constitution: MONARCHY, ...over,
+});
+const member = (id, login) => ({ builder_id: String(id), github_login: login, display_name: login });
+
+test('linked members are @mentioned on the allowlist; unlinked members are named, unpinged', async () => {
+  let posted = null;
+  const out = await postBoardAnnouncement(payload({ window_minutes: 90 }), {
+    resolveMembers: async (c) => { assert.deepEqual(c, MONARCHY, 'summoned under the item SNAPSHOT'); return [member(1, 'linked-one'), member(2, 'unlinked-two')]; },
+    getLinks: async (ids) => {
+      assert.deepEqual(ids, ['1', '2'], 'ONE bulk query for the whole board — never a per-member await');
+      return new Map([['1', { discord_user_id: '111222333' }]]);
+    },
+    post: async (channel, text, userIds) => { posted = { channel, text, userIds }; },
+    log: () => {},
+  });
+  assert.equal(out.posted, true);
+  assert.deepEqual(out.mentioned, ['111222333']);
+  assert.deepEqual(out.named, ['unlinked-two']);
+  assert.equal(posted.channel, 'board_room');
+  assert.deepEqual(posted.userIds, ['111222333'], 'the allowlist is EXACTLY the linked members — never parsed from text');
+  assert.ok(posted.text.includes('<@111222333>'));
+  assert.ok(posted.text.includes('unlinked-two'), 'the unlinked member is still named');
+  assert.ok(posted.text.includes('within 90 minutes'), 'the mention IS the vote-within-X notice');
+  assert.ok(posted.text.includes('/government?item=11#board-room'), 'deep-links THAT item — the panel scrolls to it');
+});
+
+test('a clockless sitting says so, and an amendment names its subject honestly', async () => {
+  let text = null;
+  await postBoardAnnouncement(payload({ subject_type: 'constitutional_amendment', subject_id: '5' }), {
+    resolveMembers: async () => [member(1, 'a')],
+    getLinks: async () => new Map([['1', { discord_user_id: '9' }]]),
+    post: async (_c, t) => { text = t; },
+    log: () => {},
+  });
+  assert.ok(text.includes('constitutional amendment'));
+  assert.ok(text.includes('no clock'), 'a monarchy sitting has no deadline to claim');
+});
+
+test('missing port, empty board, and a Discord failure are named skips — NEVER throws', async () => {
+  assert.deepEqual(await postBoardAnnouncement(payload(), { government: null, log: () => {} }),
+    { posted: false, skipped: 'no_government_port', mentioned: [], named: [] });
+  assert.equal((await postBoardAnnouncement(payload(), { resolveMembers: async () => [], log: () => {} })).skipped, 'empty_board');
+  const out = await postBoardAnnouncement(payload(), {
+    resolveMembers: async () => [member(1, 'a')],
+    getLinks: async () => new Map([['1', { discord_user_id: '9' }]]),
+    post: async () => { throw new Error('discord down'); },
+    log: () => {},
+  });
+  assert.deepEqual({ posted: out.posted, skipped: out.skipped }, { posted: false, skipped: 'post_failed' });
+  assert.equal((await postBoardAnnouncement(null, { log: () => {} })).skipped, 'no_item');
+});
+
+test('the emitter fires on FRESH opens only, and the listener is registered (source pins)', () => {
+  const board = fs.readFileSync(path.join(ROOT, 'modules', 'government', 'board.js'), 'utf8');
+  const open = board.slice(board.indexOf('async function openWindowForFullIdea'), board.indexOf('async function emitWindowOpened'));
+  assert.ok(open.indexOf('already_open') < open.indexOf('emitWindowOpened(item)'),
+    'the idempotent re-open path returns BEFORE the emit — nobody is summoned twice');
+  assert.match(board, /emitAsync\('board\.item\.opened'/, 'the event exists');
+  const routes = fs.readFileSync(path.join(ROOT, 'modules', 'discord', 'routes', 'discord.js'), 'utf8');
+  assert.match(routes, /api\.on\('board\.item\.opened', \(payload\) => boardBroadcast\.postBoardAnnouncement\(payload\)\)/,
+    'the discord module subscribes — government emits, discord posts, nothing decides');
+  const manifest = JSON.parse(fs.readFileSync(path.join(ROOT, 'modules', 'discord', 'module.json'), 'utf8'));
+  assert.ok(manifest.consumes.includes('government'), 'the port consumption is declared');
+});
+
+test('#871 survives: the mention poster keeps parse:[] and rings only the explicit allowlist', () => {
+  const src = fs.readFileSync(path.join(ROOT, 'modules', 'discord', 'webhook.js'), 'utf8');
+  const block = src.slice(src.indexOf('async function postWebhookMentions'));
+  assert.match(block, /postCore\(channel, text, \{ parse: \[\], users \}\)/,
+    'content can never ping on its own — only the server-resolved ids ring');
+  const plain = src.slice(src.indexOf('async function postWebhook('), src.indexOf('async function postWebhookMentions'));
+  assert.match(plain, /postCore\(channel, text, \{ parse: \[\] \}\)/,
+    'the default poster stays fully suppressed — #871 verbatim');
+  assert.match(block, /slice\(0, 20\)/, 'the allowlist is sanity-bounded');
+  assert.match(block, /\^\\d\+\$/, 'only numeric snowflake ids survive the filter');
+  assert.ok(webhook.CHANNELS.has('board_room'), 'the channel key exists');
+});
+
+test('an unlinked member\'s crafted display name is stripped of markdown and links', async () => {
+  let text = null;
+  await postBoardAnnouncement(payload(), {
+    resolveMembers: async () => [{ builder_id: '3', github_login: 'x', display_name: '[click me](https://evil.example) **@everyone**' }],
+    getLinks: async () => new Map(),
+    post: async (_c, t) => { text = t; },
+    log: () => {},
+  });
+  assert.ok(!text.includes('['), 'no markdown link syntax survives');
+  assert.ok(!/\w\.\w/.test(text.replace(/Vote in the hall:.*$/,'')), 'no linkable residue survives (Discord auto-links bare domains)');
+  assert.ok(!text.includes('**'), 'no formatting survives');
+  assert.ok(!text.includes('@everyone'), 'no lookalike mention survives (the ping was already dead; now the text is too)');
+  assert.ok(text.includes('click me'), 'the words themselves remain — visible, honest, inert');
+});

package/tests/government_board_view.mjs

@@ -56,7 +56,7 @@ test('the assembled view: enrichment, the open ballot, the snapshot, the databas
     },
     getIdeaSubjects: async (ids) => {
       assert.deepEqual(ids.map(String).sort(), ['6', '7']);
-      return [{ id: 7n, title: 'A big idea', captured_by: 9n }]; // idea 6 is GONE — deleted subject
+      return [{ id: 7n, title: 'A big idea', captured_by: 9n, field_values: { purpose: 'p' }, template_key: 'base-v1', completeness_score: 82 }]; // idea 6 is GONE — deleted subject
     },
     getAmendmentSubjects: async (ids) => {
       assert.deepEqual(ids.map(String), ['5']);
@@ -68,7 +68,9 @@ test('the assembled view: enrichment, the open ballot, the snapshot, the databas
   assert.equal(view.closed.length, 1);
 
   const idea = view.open[0];
-  assert.deepEqual(idea.subject, { title: 'A big idea', author_id: '9' }, 'an idea shows its title + author (R17 greys anti-self from this)');
+  assert.deepEqual(idea.subject,
+    { title: 'A big idea', author_id: '9', field_values: { purpose: 'p' }, template_key: 'base-v1', completeness_score: 82 },
+    'an idea shows its title, author, AND its five sections — the voter decides with the idea in front of them (R17)');
   assert.equal(idea.remaining_seconds, 540, 'the DATABASE clock, passed through — the client never does clock math');
   assert.deepEqual(idea.constitution, MONARCHY, 'the SNAPSHOT rides along — the room describes the rule the item runs under');
   assert.equal(idea.votes.length, 1);

package/tests/government_board_vote_ui.mjs

@@ -0,0 +1,70 @@
+// tests/government_board_vote_ui.mjs — the vote UI (BV1.R17 of goal 1000069,
+// criteria C2/C5): cast, reason box, five-section picker — with the full idea
+// in front of the voter, which is the entire reason voting happens in the hall
+// rather than on a Discord reaction.
+//
+// Browser code cannot be imported into node tests wholesale (it is an IIFE over
+// the DOM), so these are SOURCE PINS over the exact seams that must not drift —
+// the same technique the palette and hall audits use — plus one real cross-
+// module equality: the section labels against the template declaration.
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const CLIENT = fs.readFileSync(path.join(ROOT, 'modules', 'hall-ui', 'public', 'government.js'), 'utf8');
+const { BASE_TEMPLATE } = require(path.join(ROOT, 'modules', 'ideas', 'templates.js'));
+const board = require(path.join(ROOT, 'modules', 'government', 'board.js'));
+
+test('the five section labels ARE the template declaration — key and label, in order', () => {
+  const block = CLIENT.slice(CLIENT.indexOf('const SECTION_LABELS'), CLIENT.indexOf('function ideaSectionsHtml'));
+  const declared = [...block.matchAll(/(\w+): '([^']+)'/g)].map((m) => [m[1], m[2]]);
+  const template = BASE_TEMPLATE.fields.map((f) => [f.key, f.label]);
+  assert.deepEqual(declared, template,
+    'the voter reads the same five section names the author wrote under — held equal here because browser code cannot import the server module');
+});
+
+test('the idea is in front of the voter: sections render from the subject, in template order', () => {
+  assert.match(CLIENT, /item\.subject\.field_values|subject && item\.subject\.field_values/,
+    'the sections come from the board view payload, never a second fetch');
+  assert.match(CLIENT, /Object\.keys\(SECTION_LABELS\)\.map/,
+    'rendered in the declared order — jsonb key order is never trusted');
+  const card = CLIENT.slice(CLIENT.indexOf('function itemCard'), CLIENT.indexOf('async function loadBoard'));
+  assert.match(card, /ideaSectionsHtml\(item\)/, 'the sections sit ON the item card, above the ballot');
+});
+
+test('an objection needs the reason AND exactly one section; a yes sends neither', () => {
+  const cast = CLIENT.slice(CLIENT.indexOf('async function castVoteFromRoom'), CLIENT.indexOf('function itemCard'));
+  assert.match(cast, /if \(direction === 'no'\)/, 'reason + section are attached only to an objection');
+  assert.match(cast, /body\.reason_md = reason/, 'the reason box feeds reason_md');
+  assert.match(cast, /body\.section_key = picked\.value/, 'the picker feeds exactly one section_key');
+  assert.match(cast, /\/government\/board\/items\/.*\/votes/, 'casts into R08\'s route — the server is the wall');
+  assert.match(cast, /loadBoard\(\)/, 'the room re-renders either way — it shows what stands');
+  assert.match(cast, /item_closed/, 'a cast that CLOSED the sitting says so (first_ratifier / full turnout)');
+});
+
+test('the author of a full_idea sees the anti-self note instead of a form — amendments do not', () => {
+  const form = CLIENT.slice(CLIENT.indexOf('function voteFormHtml'), CLIENT.indexOf('async function castVoteFromRoom'));
+  assert.match(form, /subject_type === 'full_idea'[^]*author_id.*viewerId/,
+    'the grey-out is SUBJECT-TYPED, mirroring castVote\'s carve-out — an amendment proposer may vote (§7)');
+  assert.match(form, /does not vote on it/, 'the note says why, not just no');
+  assert.match(form, /if \(mine\) return ''/, 'one vote per member — a cast voter gets no second form');
+  assert.match(form, /if \(item\.closed_at\) return ''/, 'closed sittings take no votes');
+});
+
+test('every refusal castVote can return has friendly copy', () => {
+  // The route maps board.js's typed refusals to res.fail codes; the client's
+  // ERROR_COPY must name each one so a refused vote explains itself.
+  const source = fs.readFileSync(path.join(ROOT, 'modules', 'government', 'board.js'), 'utf8');
+  const castBlock = source.slice(source.indexOf('function validateVote'), source.indexOf('// ── close + tally'));
+  const reasons = [...new Set([...castBlock.matchAll(/reason: '([a-z_]+)'/g)].map((m) => m[1]))];
+  assert.ok(reasons.length >= 6, `sanity: found castVote's refusal set (${reasons})`);
+  const copyBlock = CLIENT.slice(CLIENT.indexOf('const ERROR_COPY'), CLIENT.indexOf('const friendlyError'));
+  for (const r of reasons) {
+    assert.ok(copyBlock.includes(`${r}:`), `ERROR_COPY must explain '${r}'`);
+  }
+});