@bongos/core 1.19.614 → 1.19.615

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1729,
-    "unique_ids": 1497,
-    "certain": 1729,
+    "strings": 1731,
+    "unique_ids": 1499,
+    "certain": 1731,
     "heuristic": 0,
     "duplicate_ids": 163
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 78,
-      "strings": 1256
+      "strings": 1258
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -241,7 +241,7 @@
       "occurrences": 4,
       "at": [
         "modules/hall-ui/public/gate.js:219",
-        "modules/hall-ui/public/government.js:1104",
+        "modules/hall-ui/public/government.js:1129",
         "modules/hall-ui/public/harbor.js:337",
         "modules/hall-ui/public/watch.js:1241"
       ]
@@ -301,7 +301,7 @@
       "occurrences": 3,
       "at": [
         "modules/hall-ui/public/gate.js:222",
-        "modules/hall-ui/public/government.js:1107",
+        "modules/hall-ui/public/government.js:1132",
         "modules/hall-ui/public/harbor.js:340"
       ]
     },
@@ -1915,7 +1915,7 @@
       "surface": "builders-hall",
       "text": ", // membership",
       "file": "modules/hall-ui/public/government.js",
-      "line": 876,
+      "line": 899,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -1946,6 +1946,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "574acf2f93bb",
+      "surface": "builders-hall",
+      "text": ", never quietly ratified — so a clock is worth proposing. The recommended sitting is",
+      "file": "modules/hall-ui/public/government.js",
+      "line": 619,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "741e355954ac",
       "surface": "builders-hall",
@@ -2491,7 +2500,7 @@
       "surface": "builders-hall",
       "text": "As configuration:",
       "file": "modules/hall-ui/public/government.js",
-      "line": 751,
+      "line": 771,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2563,7 +2572,7 @@
       "surface": "builders-hall",
       "text": "Available from the {…} rank up.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1107,
+      "line": 1132,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -2860,7 +2869,7 @@
       "surface": "builders-hall",
       "text": "Cast objection",
       "file": "modules/hall-ui/public/government.js",
-      "line": 962,
+      "line": 987,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -2941,7 +2950,7 @@
       "surface": "builders-hall",
       "text": "Charter library",
       "file": "modules/hall-ui/public/government.js",
-      "line": 721,
+      "line": 741,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4111,7 +4120,7 @@
       "surface": "builders-hall",
       "text": "Could not vote: {…}",
       "file": "modules/hall-ui/public/government.js",
-      "line": 990,
+      "line": 1015,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -4615,7 +4624,7 @@
       "surface": "builders-hall",
       "text": "Every closed amendment sitting, ratified and returned alike, with the rule it was decided under.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 760,
+      "line": 780,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5254,7 +5263,7 @@
       "surface": "builders-hall",
       "text": "How it has changed",
       "file": "modules/hall-ui/public/government.js",
-      "line": 760,
+      "line": 780,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5326,7 +5335,7 @@
       "surface": "builders-hall",
       "text": "How this project is governed.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1142,
+      "line": 1167,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5587,7 +5596,7 @@
       "surface": "builders-hall",
       "text": "It cleared the completeness grade at {…}/100.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 932,
+      "line": 957,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7252,7 +7261,7 @@
       "surface": "builders-hall",
       "text": "Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1121,
+      "line": 1146,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8062,7 +8071,7 @@
       "surface": "builders-hall",
       "text": "Restricted.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1104,
+      "line": 1129,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -8359,7 +8368,7 @@
       "surface": "builders-hall",
       "text": "Selectable today",
       "file": "modules/hall-ui/public/government.js",
-      "line": 721,
+      "line": 741,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9133,7 +9142,7 @@
       "surface": "builders-hall",
       "text": "The developmental ladder: {…}. Formality is adopted only where informal coordination breaks.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 728,
+      "line": 748,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9412,7 +9421,7 @@
       "surface": "builders-hall",
       "text": "The seven government structures, for getting a team up to speed before deciding when to flip a switch.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 721,
+      "line": 741,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9763,7 +9772,7 @@
       "surface": "builders-hall",
       "text": "This sends the idea back to its author. Say why, and which section.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 962,
+      "line": 987,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9952,7 +9961,7 @@
       "surface": "builders-hall",
       "text": "Vote yes",
       "file": "modules/hall-ui/public/government.js",
-      "line": 962,
+      "line": 987,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10294,7 +10303,7 @@
       "surface": "builders-hall",
       "text": "Why — the reason the author will act on",
       "file": "modules/hall-ui/public/government.js",
-      "line": 962,
+      "line": 987,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10492,7 +10501,7 @@
       "surface": "builders-hall",
       "text": "You {…}. One vote per member.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1034,
+      "line": 1059,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10654,7 +10663,7 @@
       "surface": "builders-hall",
       "text": "Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no karma.",
       "file": "modules/hall-ui/public/government.js",
-      "line": 960,
+      "line": 985,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10843,7 +10852,7 @@
       "surface": "builders-hall",
       "text": "active builder{…}: {…}",
       "file": "modules/hall-ui/public/government.js",
-      "line": 721,
+      "line": 741,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10915,7 +10924,7 @@
       "surface": "builders-hall",
       "text": "as configuration: {…}",
       "file": "modules/hall-ui/public/government.js",
-      "line": 707,
+      "line": 727,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11455,7 +11464,7 @@
       "surface": "builders-hall",
       "text": "means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code. This project has",
       "file": "modules/hall-ui/public/government.js",
-      "line": 721,
+      "line": 741,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11527,7 +11536,7 @@
       "surface": "builders-hall",
       "text": "no clock",
       "file": "modules/hall-ui/public/government.js",
-      "line": 602,
+      "line": 621,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -11635,7 +11644,7 @@
       "surface": "builders-hall",
       "text": "objected to",
       "file": "modules/hall-ui/public/government.js",
-      "line": 824,
+      "line": 847,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12080,6 +12089,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "edd5e9f56c25",
+      "surface": "builders-hall",
+      "text": "unanimous agreement",
+      "file": "modules/hall-ui/public/government.js",
+      "line": 601,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "f98966dc7cac",
       "surface": "builders-hall",
@@ -12202,7 +12220,7 @@
       "surface": "builders-hall",
       "text": "your vote",
       "file": "modules/hall-ui/public/government.js",
-      "line": 819,
+      "line": 842,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12454,7 +12472,7 @@
       "surface": "builders-hall",
       "text": "{…} proposed",
       "file": "modules/hall-ui/public/government.js",
-      "line": 626,
+      "line": 645,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12634,7 +12652,7 @@
       "surface": "builders-hall",
       "text": "{…} · who votes, and how it {…}",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1043,
+      "line": 1068,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12706,7 +12724,7 @@
       "surface": "builders-hall",
       "text": "{…}s only",
       "file": "modules/hall-ui/public/government.js",
-      "line": 1121,
+      "line": 1146,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1677,5 +1677,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.612 with no explicit bump. run 34311691842. (task 1002620)
   1.19.614 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.613 with no explicit bump. run 34314327601. (task 1002620)
+  1.19.615 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.614 with no explicit bump. run 34314595235. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/government/board.js

@@ -47,7 +47,10 @@ const db = require('./db');
 // file (the reward-port delegation lesson: a destructured binding is frozen at
 // load and un-patchable).
 const governmentConfig = require('./config');
-const { loadGovernmentConfig, PASS_RULES, MAX_WINDOW_MINUTES } = governmentConfig;
+const {
+  loadGovernmentConfig, PASS_RULES, MAX_WINDOW_MINUTES,
+  RECOMMENDED_WINDOW_MINUTES, CLOCK_SAFE_PASS_RULES, isClockSafe,
+} = governmentConfig;
 const {
   isBoardMember, resolveBoardMembers, parseMembershipPredicate, wouldBeBoardMember,
 } = require('./board-membership');
@@ -288,8 +291,11 @@ async function castVote({ itemId, voterId, direction, reasonMd = null, sectionKe
 
 // ── close + tally (BV1.R10 of goal 1000069, ADR 0175 §3) ────────────────────
 //
-// EVERY RULE DECLARED, NONE EMERGENT. The tally is one line: a single reasoned
-// objection returns the idea; anything else — including ZERO votes — passes.
+// EVERY RULE DECLARED, NONE EMERGENT. Under the two ORIGINAL rules the tally is
+// one line: a single reasoned objection returns the idea; anything else —
+// including ZERO votes — passes. `majority` and `unanimous` (ADR 0191, ADR 0267)
+// are the rules where absence stops being free, each in its own way; read
+// tallyOutcome for the whole counting story.
 // Absent members are NULLED by construction rather than by branch: the tally
 // only ever reads the votes that were cast, so a member who never voted simply
 // does not exist in it, and absence can never block (§2 — the sitting model).
@@ -301,7 +307,9 @@ async function castVote({ itemId, voterId, direction, reasonMd = null, sectionKe
 //     Archon ratifies or returns, done); consent closes early only on FULL
 //     TURNOUT (every current member has voted — recorded positions and the
 //     vote karma are worth the wait, and no later vote can change the outcome
-//     anyway since there is no vote-changing in v1);
+//     anyway since there is no vote-changing in v1); majority and unanimous
+//     close the moment the outcome is FIXED (carried, or unreachable, or —
+//     under unanimous — objected to), and otherwise on full turnout;
 //   • on expiry — R11's poller calls the same closeItem, so the clock and the
 //     turnout can never disagree about what a close means.
 // An unknown pass_rule closes NOTHING after a vote (fail-closed — only the
@@ -390,6 +398,24 @@ function tallyOutcome(votes, { constitution = {}, members = null, authorId = nul
       && yes.some((v) => !isAuthorVote(v, authorId));
     return carried ? 'passed' : 'returned';
   }
+  if (constitution.pass_rule === 'unanimous') {
+    // TWO CONDITIONS, AND THE SECOND IS THE ONE PEOPLE FORGET. Unanimity is not
+    // "nobody objected" — an empty room objects to nothing. It is "everyone who
+    // spoke said yes, AND somebody said yes", so a sitting that nobody attended
+    // RETURNS rather than passing on silence. That is what makes the clock safe
+    // here (ADR 0191 §4's condition) and what separates this rule from consent.
+    //
+    // ABSENCE IS NOT COUNTED AT ALL — there is deliberately no membership
+    // denominator (owner decision 2026-09-08: silence must not block, which is
+    // why the clock exists). A member who never voted is neither a yes nor a no;
+    // they simply are not in the reckoning, exactly as under first_ratifier.
+    //
+    // The ADR 0191 author rule is unchanged and rides the same two helpers: an
+    // author's 'no' cannot return their own idea (decidingVotes drops it), and
+    // the affirmative voice that carries it must not be the author's own.
+    if (decidingVotes(list, authorId).some((v) => v.direction === 'no')) return 'returned';
+    return list.some((v) => v.direction === 'yes' && !isAuthorVote(v, authorId)) ? 'passed' : 'returned';
+  }
   // first_ratifier / consent / anything unknown: one reasoned objection returns
   // the idea, anything else — including ZERO votes — passes. The author's own
   // vote is excluded so they cannot return their own idea.
@@ -418,6 +444,16 @@ function majorityDecided({ votes, members, authorId }) {
   return !hasMajority(yes.length + notYetVoted, memberCount);
 }
 
+// Has every CURRENT member cast a vote? The full-turnout courtesy three of the
+// four rules grant, in one place rather than three: by then every position is on
+// the record and no later vote can change the outcome (there is no vote-changing
+// in v1). An empty board has no turnout to complete, so it is never full.
+function fullTurnout(votes, members) {
+  if (!members || !members.length) return false;
+  const voters = new Set((votes || []).map((v) => String(v.voter_id)));
+  return members.every((m) => voters.has(String(m.builder_id)));
+}
+
 // Should a just-cast vote close the item now, under the SNAPSHOTTED rule?
 //
 // EVERY RULE NEEDS A NON-AUTHOR VOTE FIRST (task 1003273): an author's cast is
@@ -431,18 +467,29 @@ function shouldCloseAfterVote({ constitution, votes, members, authorId = null }
     if (!deciding.length) return false; // nobody but the author has spoken
     if (majorityDecided({ votes, members, authorId })) return true;
     // Full turnout closes it too, when the constitution says so — the same
-    // courtesy consent gets, and by then every position is on the record.
+    // courtesy consent gets.
+    if (!(constitution || {}).close_early_on_full_turnout) return false;
+    return fullTurnout(votes, members);
+  }
+  if (rule === 'unanimous') {
+    if (!deciding.length) return false; // nobody but the author has spoken
+    // A REASONED OBJECTION ENDS IT IMMEDIATELY, and that is a kindness rather
+    // than impatience: there is no vote-changing in v1, so once a non-author
+    // 'no' is on the record the outcome is fixed at 'returned' whatever the
+    // absent members do. Holding the sitting open would only delay the feedback
+    // the author needs to revise and re-sit — which is the whole point of this
+    // rule (ADR 0267). Same reasoning as majorityDecided's unreachable branch.
+    if (deciding.some((v) => v.direction === 'no')) return true;
+    // A single yes does NOT end it. Unlike first_ratifier, a later member must
+    // still be able to object — the sitting runs its clock, and only full
+    // turnout (every position on the record) can close it early.
     if (!(constitution || {}).close_early_on_full_turnout) return false;
-    if (!members || !members.length) return false;
-    const voters = new Set((votes || []).map((v) => String(v.voter_id)));
-    return members.every((m) => voters.has(String(m.builder_id)));
+    return fullTurnout(votes, members);
   }
   if (rule === 'consent') {
     if (!(constitution || {}).close_early_on_full_turnout) return false;
-    if (!members || !members.length) return false; // an empty board has no turnout to complete
     if (!deciding.length) return false;
-    const voters = new Set((votes || []).map((v) => String(v.voter_id)));
-    return members.every((m) => voters.has(String(m.builder_id)));
+    return fullTurnout(votes, members);
   }
   return false; // unknown rule: only the clock closes it
 }
@@ -510,6 +557,10 @@ async function closeItem(item, { cause = 'vote' } = {}) {
     : null;
   // Only `majority` needs the membership denominator; the absence-passes rules
   // read nothing but the cast votes, so we do not spend the query on them.
+  // `unanimous` does not need it either — it has no denominator by design — and
+  // is listed nowhere here on purpose: the members list it DOES use is the
+  // full-turnout early close, which lives on the vote path (shouldCloseAfterVote
+  // resolves it there), never in the tally.
   const members = constitution.pass_rule === 'majority'
     ? await resolveBoardMembers(constitution)
     : null;
@@ -859,7 +910,27 @@ async function constitutionView({ historyLimit = 50 } = {}) {
     outcome: r.outcome,
     decided_under: r.decided_under || null,
   }));
-  return { board: live, history, headcount, recommended: recommendedCharter(headcount) };
+  return {
+    board: live,
+    history,
+    headcount,
+    recommended: recommendedCharter(headcount),
+    // THE CLOCK ADVICE THE AMENDMENT FORM NEEDS (task 1003733, ADR 0267 §3).
+    // A proposer choosing a pass rule has to choose a window in the same breath
+    // — a constitution is ratified whole, never by diff — and the two choices
+    // are not independent: a deadline is only safe under a rule whose expiry
+    // means RETURN (ADR 0191 §4). So the server states which rules that is and
+    // what to put in the box, rather than leaving the hall to hardcode a number
+    // and the proposer to guess whether a clock is even honest here.
+    // `window_minutes: null` stays a legal answer under a clock-safe rule; it
+    // means "wait indefinitely for a voice", which the hall says out loud.
+    clock: {
+      recommended_window_minutes: RECOMMENDED_WINDOW_MINUTES,
+      max_window_minutes: MAX_WINDOW_MINUTES,
+      clock_safe_pass_rules: CLOCK_SAFE_PASS_RULES,
+      live_rule_is_clock_safe: isClockSafe(live.pass_rule),
+    },
+  };
 }
 
 // ── R13's read: the feedback a returned idea carries back to its author ─────

package/modules/government/config.js

@@ -155,6 +155,35 @@ const BOARD_DEFAULTS = Object.freeze({
   close_early_on_full_turnout: true,
 });
 
+// THE CLOCK, AS A NUMBER SOMEBODY CAN ADOPT (task 1003733, ADR 0267 §3).
+//
+// The note above says why BOARD_DEFAULTS ships CLOCKLESS and must keep doing so:
+// its rule is `first_ratifier`, under which expiry means PASS, so a default
+// clock would ratify what nobody read. But "the platform must not arm this for
+// you" is not the same as "you must invent a number" — and the owner asking for
+// unanimity asked for the timer in the same breath, because under a rule where
+// absence is nulled the deadline is the only thing that ends a quiet sitting.
+//
+// So the recommended sitting length lives here as a named constant rather than
+// as a magic number the Board Room's charter library retypes. Twenty-four hours
+// matches the pace the rest of the pipeline runs at (the 2026-08-25 amendment
+// reached for the same figure independently), and is long enough that a member
+// asleep in another timezone still gets a vote.
+//
+// A constitution may still legitimately name `window_minutes: null` under a
+// clock-safe rule — that is "wait indefinitely for a voice", a real state a
+// project can choose, and the hall says so out loud rather than pretending.
+const RECOMMENDED_WINDOW_MINUTES = 1440;
+
+// Which rules a clock is SAFE under — ADR 0191 §4's condition, as data instead
+// of as a paragraph: a deadline may only be given to a rule whose expiry means
+// RETURN. Under `first_ratifier` and `consent` the tally passes on absence, so
+// the expiry sweep would ratify unread items; under `majority` and `unanimous`
+// it returns them. The Board Room reads this to decide whether offering a clock
+// alongside a proposed rule is honest.
+const CLOCK_SAFE_PASS_RULES = Object.freeze(['majority', 'unanimous']);
+const isClockSafe = (rule) => CLOCK_SAFE_PASS_RULES.includes(rule);
+
 // The pass rules that EXIST, not the ones a project should pick. `first_ratifier`
 // is the day-one default and what an unreadable value falls back to.
 //
@@ -166,14 +195,23 @@ const BOARD_DEFAULTS = Object.freeze({
 //     UNOPPOSED. Silence is assent, deliberately (owner decision 6).
 //   • majority       — strictly more than half of the RESOLVED MEMBERSHIP must
 //     vote yes. Silence is NOT assent: an item that never reaches a majority
-//     RETURNS at expiry. This is the only rule under which not voting is a
-//     meaningful act, and the only one where a clock is safe — see the note on
-//     window_minutes below.
-// Adding `majority` cannot widen the fail-closed fallback: sanitizeBoard still
-// falls back to first_ratifier, and majority is the STRICTER end of this axis
-// anyway (it demands affirmative votes from a majority, where the other two
-// pass on absence).
-const PASS_RULES = Object.freeze(['first_ratifier', 'consent', 'majority']);
+//     RETURNS at expiry. Not voting is a meaningful act here, and a clock is
+//     safe — see the note on window_minutes below.
+//   • unanimous      — nobody who spoke objected, and somebody spoke. One
+//     reasoned objection returns it; so does a sitting that ends with no
+//     affirmative voice at all. Silence neither blocks nor assents: an absent
+//     member drops out of the reckoning entirely (there is NO membership
+//     denominator here, which is exactly what separates it from `majority`),
+//     and absence alone can never carry an item either. A clock is safe under
+//     this rule for the same reason it is safe under `majority` — expiry with
+//     nothing cast RETURNS. Owner decision 2026-09-08 (ADR 0267): a Full Idea
+//     is ratified by unanimity, and a sitting that does not carry goes back to
+//     its author to be revised and re-sat, as many times as it takes.
+// Adding `majority` or `unanimous` cannot widen the fail-closed fallback:
+// sanitizeBoard still falls back to first_ratifier, and both of the added rules
+// sit at the STRICTER end of this axis anyway (each demands an affirmative
+// vote, where the original two pass on absence).
+const PASS_RULES = Object.freeze(['first_ratifier', 'consent', 'majority', 'unanimous']);
 
 // A membership predicate names WHO SITS. The grammar and its parser live in
 // ./membership-predicate — ONE implementation, shared with R06's resolver
@@ -321,6 +359,9 @@ module.exports = {
   applyBoardAmendment,
   BOARD_DEFAULTS,
   PASS_RULES,
+  RECOMMENDED_WINDOW_MINUTES,
+  CLOCK_SAFE_PASS_RULES,
+  isClockSafe,
   MAX_WINDOW_MINUTES,
   NEUTRAL_PATH,
   INSTANCE_PATH,

package/modules/hall-ui/public/government.js

@@ -594,12 +594,31 @@
         + 'Silence is <em>not</em> agreement here, so an item that never reaches a majority is returned to its author. '
         + 'An author may vote on their own idea, but it can never be carried by their vote alone.';
     }
+    // ADR 0267. Silence is the axis again, and unanimity sits between the other
+    // three on it: an absent member does not block (that is what the clock is
+    // for), but absence alone cannot carry anything either.
+    if (board.pass_rule === 'unanimous') {
+      return 'Items pass by <strong>unanimous agreement</strong>: everyone who votes must vote yes, and at least one member must. '
+        + 'A single reasoned objection returns the item to its author to be revised and put back to the board — as many rounds as it takes. '
+        + 'Being away does not block anything, but a sitting that ends with nobody in favour is returned rather than passed. '
+        + 'An author may vote on their own idea, but it can never be carried by their vote alone.';
+    }
     return `Pass rule: <code>${escapeHtml(String(board.pass_rule || 'unset'))}</code>.`;
   }
 
-  function windowSentence(board) {
+  // The clock, and the advice the SERVER computes about it (task 1003733). A
+  // proposer choosing a pass rule must choose a window in the same breath — a
+  // constitution is ratified whole — and the two are not independent: a deadline
+  // is only honest under a rule whose expiry RETURNS the item (ADR 0191 §4).
+  // Which rules those are, and what to put in the box, come from
+  // GET /government/constitution's `clock` block; nothing is derived here, so
+  // the page cannot drift from what config.js actually considers safe.
+  function windowSentence(board, clock) {
     if (board.window_minutes === null || board.window_minutes === undefined) {
-      return 'There is <strong>no clock</strong> — an item stays open until a vote decides it.';
+      const advice = clock && clock.live_rule_is_clock_safe && clock.recommended_window_minutes
+        ? ` Under this pass rule a deadline would be safe — an expired sitting is <em>returned</em>, never quietly ratified — so a clock is worth proposing. The recommended sitting is <strong>${fmtWindow(clock.recommended_window_minutes)}</strong>.`
+        : '';
+      return `There is <strong>no clock</strong> — an item stays open until a vote decides it.${advice}`;
     }
     const early = board.close_early_on_full_turnout
       ? ', closing early the moment every member has voted'
@@ -636,8 +655,9 @@
   // trajectories, the ladder — and deliberately not the configuration machinery
   // (the scale argument in ADR 0175: formality is adopted only where informal
   // coordination breaks). `selectable` means EXPRESSIBLE TODAY through the real
-  // config — a rank-predicate membership plus first_ratifier|consent — so nobody
-  // is misled about what a settings change can and cannot reach. Source: the
+  // config — a rank-predicate membership plus one of the four pass rules
+  // (first_ratifier | consent | majority | unanimous) — so nobody is misled
+  // about what a settings change can and cannot reach. Source: the
   // Six-Variables synthesis (Verro Labs, Aug 2026), Parts III–IV, via the spec.
   // EVERY SELECTABLE CHARTER CARRIES A MACHINE-CHECKABLE PREDICATE (task 1003095).
   //
@@ -752,7 +772,7 @@
       <ul class="ov-rows">
         ${dialRow('Who sits on the board', membershipSentence(b))}
         ${dialRow('What counts as passing', passRuleSentence(b))}
-        ${dialRow('How long a sitting runs', windowSentence(b))}
+        ${dialRow('How long a sitting runs', windowSentence(b, data.clock))}
       </ul>
       <p class="ov-foot">As configuration: <code>${escapeHtml(JSON.stringify(b))}</code>. Changing it is a board act — propose an amendment, and it is decided under the rule above.</p>
     `;
@@ -805,6 +825,9 @@
     // it waits indefinitely for a majority, which is a real state a project can
     // configure itself into (task 1003273).
     if (rule === 'majority') return 'no clock — waits for a majority';
+    // Same honesty for unanimity: with no deadline it waits indefinitely for
+    // someone to be in favour, which is a state a project can configure (ADR 0267).
+    if (rule === 'unanimous') return 'no clock — waits for a unanimous yes';
     return 'no clock';
   }
 
@@ -907,12 +930,14 @@
     first_ratifier: 'by first ratifier',
     consent: 'by consent',
     majority: 'by majority',
+    unanimous: 'by unanimous agreement',
   };
 
   const PASS_RULE_PLAIN = {
     first_ratifier: 'The first vote decides it: a yes ratifies, an objection returns it to its author.',
     consent: 'It passes unless someone objects — silence is agreement, and one reasoned objection returns it.',
     majority: 'It passes only when more than half the board votes yes. Silence is not agreement here.',
+    unanimous: 'Everyone who votes must vote yes, and at least one member must. One objection sends it back for revision.',
   };
 
   function decidedByHtml(item) {

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.614",
+  "version": "1.19.615",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.614",
+      "version": "1.19.615",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",