@bongos/core 1.19.617 → 1.19.619

package/docs/adr/README.md

@@ -359,3 +359,5 @@ This keeps the decision history honest and traceable.
 | 0265 | [**Work with no goal survives a version close, and the order the ten-area cut actually needs** ([task 1003713](https://cloudbongos.com/builders#/task/1003713) · goal 1000086 — *Strict versioning*, criteria `sv-every-task-has-a-goal` + `sv-cutover-proven-live`). `closeVersion`'s post-apply invariant counts GOALS, and every task write inside the close is scoped `WHERE goal_id = $1` — so a task belonging to no goal is reached by no disposition, counted by no re-count, and ships stranded on a version that is over. Not hypothetical: six such tasks already sat on shipped GDS-V3/GDS-V4, and 47 rows on BONGOS-V1 carried a null `goal_id` (R11 required the column going forward but never backfilled, because every catch-all lookup matches the exact title `<VERSION> — general` and BONGOS-V1's is titled 'Work with no goal yet'). Decision: a second invariant in the same transaction refuses a close leaving ANY non-terminal task on the version, failing `CLOSE_LEAVES_STRANDED_TASKS` with the ids; exempting only the maintenance goal (its carry-forward runs in the later `onClosed` hook) — through the SAME `maintenanceGoalExemptSql` the goal count uses, never a second copy — and `__smoke__` fixtures. Consequence recorded here too: because `PATCH /tasks/:id {goal_id}` refuses a cross-version move (409 `goal_version_mismatch`) and `roll_forward` CREATES a successor rather than merging into one, [ADR 0264](<redacted>.md)'s cut must run home-then-close-then-**fold on the planning version**, where task and destination finally share a version. Rejected: a `fold_into` disposition (puts scope decisions inside a shipping transaction), creating the six new areas on the building version via R07 admissions (spends ten overrides to route around the rule they price), and a backfill instead of a gate (fixes today's rows, not the forty-eighth).](<redacted>.md) | lifecycle / version boundary |
 | 0266 | [**The Board Room is its own surface, reachable by whoever may vote** ([task 1003734](https://cloudbongos.com/builders#/task/1003734) · goal 1000111 — *Working area 7, Government*, criterion `wa7-government`; owner decision 2026-09-08). The hall's only **upward-pointing** gate ([ADR 0175](<redacted>.md)) shipped as a hash tab inside `/government`, and two things about that did not survive inspection. **The nav never followed the page:** R16 correctly widened the PAGE gate from `government.manage` (archon) to `page.view.government` (metic+) when the page became three rooms — its own comment says *"the shell follows the widest legitimate audience"* — but `shell.js` still declares that item as label Permissions with gate archon, so a Metic who SITS on the board has no nav link at all and the only word in the nav is Permissions. Watch, Harbor, Gate and Sessions each own a nav item; the voting room was reachable only by knowing a URL fragment. **The surface was narrower than the franchise:** `board.vote.cast` floors at XENOS deliberately (`board.js:149` — the floor is low *so that widening the board works*) while the shell demands metic+, so the moment a constitution widens membership below Metic — the exact act [ADR 0175](<redacted>.md) §6 exists to make a CONFIG change — those members may vote by API and cannot load the page they would vote on, reintroducing the code-path change §6 removed. Decision: **its own page at `/board-room`, gated on the same atom the vote route checks.** The floor stays coarse — membership is still checked in-handler per item against that item's own snapshotted constitution — so a builder who clears the floor but sits on no board sees the room and no ballot, which is honest (§9 made the ballot open on purpose). **The migration is client-side because a fragment never reaches the server:** `#board-room` cannot be caught by any server route, so `government.js` redirects on load, preserving `?item=N` — recorded as a decision because adding a regex to `serve-internal.js` looks like the obvious fix and silently never fires. Three writers move (Discord `board-broadcast.js`, the `board_votes` need href, docs), and the redirect stays a release regardless because announcements already in channel history carry the old link forever. A **waiting-vote count** goes on the nav item: the data already exists (`boardVotesNeed` carries a live count pre-filtered to what the vote route would accept, served on `GET /me`), but `shell.js` has NO badge/bell/dot mechanism at all, so one is built once, generically, zero-is-silent, visible to exactly whoever the item is. Found while scoping and filed separately ([task 1003738](https://cloudbongos.com/builders#/task/1003738)): the hall renders needs as a SINGLE slot and `computeNeeds` sorts only by state with a stable sort, so registry order decides inside the `action_needed` bucket and `boardVotesNeed` sits fourth behind `artKeyNeed` — any builder with an unresolved image key never sees the board notice, which was live for this decision's own owner at the moment they asked for the bell. Rejected: a nav item merely deep-linking to the existing tab (cheaper, keeps the hash links free, but leaves the voting room inside a page whose gate answers a different question); a bell in the global header (a second inbox, needing its own read/unread and dismissal semantics); and a SOUND (`alert.wav`/`chime.wav` already ship, so it would be easy — it was not asked for).](<redacted>.md) | government / the board / hall nav |
 | 0267 | [**Unanimity, and the revise-and-re-sit loop** ([task 1003733](https://cloudbongos.com/builders#/task/1003733) · goal 1000111 — *Government*, owner decision 2026-09-08). A Full Idea is ratified by **unanimous** agreement from round one; a sitting that does not carry RETURNS to its author, who revises and re-sits it, unbounded, until the board is unanimous. `unanimous` joins `PASS_RULES` as a fourth answer on the axis these rules actually differ on — **what silence means**: it is two conditions, not one, because "nobody objected" is true of an empty room. Everyone who spoke must have said yes AND somebody must have spoken, so an unvoted sitting RETURNS, which is exactly what makes the clock the owner asked for safe under it ([ADR 0191](<redacted>.md) §4: a deadline may only be given to a rule whose expiry means return). **There is deliberately no membership denominator** — that is the whole difference from `majority`, and it is the owner's "silence does not block" as code: an absent member is not in the reckoning, so one yes out of four carries. The stated cost is that an attentive minority can ratify on a distracted board; the alternative is one person on holiday stopping the pipeline. Trigger changes follow from the rule: a single yes does NOT close it (a later member must still be able to object — the sitting runs its clock, full turnout closes early), while a reasoned objection closes it AT ONCE (no vote-changing in v1 fixes the outcome, and the author needs the feedback to revise). ADR 0191 §3's author rule rides both unchanged. **`BOARD_DEFAULTS` is NOT moved**: a fresh instance stays the day-one monarchy, because under any non-author-yes rule a solo founder can never ratify their own ideas (0191 §5) — adoption is a board amendment, and no env var can change a constitution. The revise-and-re-sit loop already existed (`POST /inbox/:id/resubmit` re-grades and re-fires the window hook); what the board owes it is now pinned by test — a return CLOSES the item so the next window may open, and pays nothing. Named limits: a zero-vote return carries no human objection (the author gets the mechanical weakest-section flag), and this changes nothing live until the separate defect where a ratified amendment does not survive to the next read is fixed.](<redacted>.md) | government / board room |
+| 0268 | [**The constitution comes from two roots, and a decision that did not take must say so** ([task 1003739](https://cloudbongos.com/builders#/task/1003739) · goal 1000111 — *Government*). On 2026-08-25 cloudbongos.com's board RATIFIED an amendment (rank:metic+ · consent · a 1440-minute sitting) and the constitution never changed — for two weeks `GET /government/constitution` answered the day-one monarchy with the passed amendment sitting in its own `history` array directly beneath the contradicting `board` block. Every sitting since was decided under a rule the board had voted to replace, and it silently un-shipped [ADR 0191](<redacted>.md) (majority) and would have un-shipped [ADR 0267](<redacted>.md) the same way. **Cause:** `modules/government/config.js` resolved BOTH its neutral starter and its instance pack from one `path.resolve(__dirname, '..', '..')`, under a comment saying the roots coincided *today* — true in a single checkout, false on a STANDALONE instance ([ADR 0108](<redacted>.md) §1), where the server runs `node_modules/@cloudbongos/core` with `WorkingDirectory=<instance repo>`. The neutral path stayed right (it really is core content); the INSTANCE path resolved inside the core package, so the host's own `config/government.json` was never read and `applyBoardAmendment` wrote the ratified amendment into `node_modules`, where the nightly core upgrade ([ADR 0161](<redacted>.md) cuts a release per merge) erased it within a day. **Nothing threw and nothing could have** — both paths exist, both are writable, and an absent instance pack is a legal state, so the read fell through to the neutral monarchy exactly as designed. `src/branding.js` had the pattern right three files away. **Fix:** neutral from `resolveCoreRoot()`, instance from `resolveInstanceRoot()`, reached through `src/module-api` — which had exposed NEITHER resolver, and that absence is precisely why the module re-derived the wrong one ([ADR 0083](<redacted>.md) forbids requiring a core internal). Resolved at load, not per call, because `resolveInstanceRoot()` falls back to `process.cwd()` and a lazy resolve would let a `chdir` move the constitution; `applyBoardAmendment` now mkdirs, since the write targets a directory the core does not own. Single-checkout behaviour is byte-identical, asserted rather than claimed. **The detector, which is the durable half:** `constitutionView` carries a `divergence` block comparing the newest PASSED amendment (sanitized as an apply would write it) field-by-field against what is in force, rendered above the hall's dials in words rather than config keys. It REPORTS and never HEALS — the instance pack is also the file a human editing the constitution touches, so a silent re-apply would revert a legitimate hand edit with no way to tell the two apart. A RETURNED amendment is never compared (that is what *returned* means). Does NOT put the 2026-08-25 amendment back in force — that is a board act. Sibling sweep RUN, not promised: one real hit filed as [task 1003745](https://cloudbongos.com/builders#/task/1003745) (quarantine.js's repo-containment refusal is blind to the instance repo).](<redacted>.md) | government / instance roots |
+| 0269 | [**The CLI session store is host-keyed at a fixed anchor; the per-brand file stays the active pointer** ([task 1003741](https://cloudbongos.com/builders#/task/1003741) · goal 1000090 — *Working area 4, Bongos Core distribution*). The CLI resolved its session path from the BRANDING PACK, read out of whatever checkout the process stood in — one slot, that moved. Standalone (the public CLI's whole situation) no checkout means no brand, so every instance shared `~/.config/cloudbongos/gds-session.json` and signing into a second DESTROYED the first; in-repo it landed in `~/.config/<slug>/` where the standalone CLI could never find it (`npx … api GET /me` from a bare dir returned the cloudbongos builder while a valid hermeslines session sat on the same machine). Not theoretical — the owner's config dir carries a hand-made `gds-session.<redacted>.bak.json` and four more of the same shape. **Decision: one file per instance keyed by HOST at a FIXED anchor (`~/.config/<FALLBACK_DIR>/instances/<host>.json`), with the per-brand `gds-session.json` left exactly where it is as the ACTIVE pointer.** Four load-bearing parts. (1) The anchor must never read `configHome()`/`configDirName()`/the pack — a test asserts the function body names none, since routing it back through the brand silently reinstates the split. (2) The active pointer does NOT move: every existing reader (in-repo skills, the card hook, the dev box, `readSessionToken`) looks there, and the store is purely additive. (3) The OUTGOING session is archived BEFORE the incoming one lands — a session written before the store existed is not in it, so without this the first login after upgrading still loses it, the bug surviving its own fix. (4) A stored token is VERIFIED against `/api/gds/me` before being reinstated; unverified falls through to the real device flow, `--force` signs in as somebody else. `login` also names the other instances and how to switch, since sessions are now kept rather than overwritten. Files 0600 in a 0700 dir; an `api_base` naming no host is not stored rather than stored under a guess, so nothing can write outside the store. The dir is `instances/` NOT `sessions/` — `sessions` is a live module key and [ADR 0083](<redacted>.md) §Decision #4 forbids kernel machinery naming one; the fitness gate caught it. Rejected: moving the active pointer (breaks every reader for no visible gain); one file holding a map (changes a format hooks and the dev box parse today); keying under `configHome()` (the bug); restoring without verifying (hands over a dead session that looks live); a new `bongos switch` verb (login is the command already reached for, and the public CLI's surface is deliberately small).](<redacted>.md) | cli / auth / distribution |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1731 strings** across 3 surfaces · 1499 distinct pieces of copy · 1731 certain, 0 heuristic · 163 shown in more than one place.
+**1734 strings** across 3 surfaces · 1502 distinct pieces of copy · 1734 certain, 0 heuristic · 163 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 78 | 1258 |
+| `builders-hall` | `modules/hall-ui/public` | 78 | 1261 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 373 |
 
@@ -51,12 +51,12 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `512ab32e3bf2` | 4x | Close box | modules/hall-ui/public/box-panel.js:149, modules/hall-ui/public/box-panel.js:163, modules/hall-ui/public/box-panel.js:206 |
 | `a5257c88eb07` | 4x | GitHub username | modules/public-landing/public/projects.html:864, modules/public-landing/public/projects.html:865, modules/public-landing/public/projects.html:1247 |
 | `3eb67b892dea` | 4x | Percy Jackson | modules/public-landing/public/index.html:803, modules/public-landing/public/index.html:821, modules/public-landing/public/index.html:827 |
-| `0887725744f2` | 4x | Restricted. | modules/hall-ui/public/gate.js:219, modules/hall-ui/public/government.js:1129, modules/hall-ui/public/harbor.js:337 |
+| `0887725744f2` | 4x | Restricted. | modules/hall-ui/public/gate.js:219, modules/hall-ui/public/government.js:1183, modules/hall-ui/public/harbor.js:337 |
 | `e57ec24e13ef` | 4x | Sign in with GitHub | modules/hall-ui/public/hall-render.js:265, modules/hall-ui/public/hall-render.js:336, modules/hall-ui/public/hall-render.js:405 |
 | `2ae36be1c531` | 4x | Start a project | modules/public-landing/public/index.html:727, modules/public-landing/public/index.html:891, modules/public-landing/public/projects.html:509 |
 | `eff70e59d12e` | 4x | Task {…} | modules/hall-ui/public/task.js:454, modules/hall-ui/public/task.js:463, modules/hall-ui/public/task.js:691 |
 | `b31fc908c962` | 4x | You claimed #{…}. Open a terminal to start work. | modules/hall-ui/public/goals-page.js:418, modules/hall-ui/public/goals-page.js:515, modules/hall-ui/public/work.js:853 |
-| `1de02052abf2` | 3x | Available from the {…} rank up. | modules/hall-ui/public/gate.js:222, modules/hall-ui/public/government.js:1132, modules/hall-ui/public/harbor.js:340 |
+| `1de02052abf2` | 3x | Available from the {…} rank up. | modules/hall-ui/public/gate.js:222, modules/hall-ui/public/government.js:1186, modules/hall-ui/public/harbor.js:340 |
 | `a78477a24a48` | 3x | Builders' Hall | modules/hall-ui/public/index.html:12, modules/hall-ui/public/index.html:12, modules/hall-ui/public/index.html:45 |
 | `12ee050d0180` | 3x | Copy desk | modules/hall-ui/public/copy-desk.html:15, modules/hall-ui/public/copy-desk.html:15, modules/hall-ui/public/copy-desk.html:27 |
 | `a873e7c29d80` | 3x | Copy prompt | modules/hall-ui/public/task.js:617, modules/hall-ui/public/task.js:637, modules/hall-ui/public/work.js:548 |
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4160b56d14af` | 2x | Archive goal | modules/hall-ui/public/goals-render.js:927, modules/hall-ui/public/goals-render.js:1009 |
 | … | | _123 more in the JSON registry_ | |
 
-## `builders-hall` — 1258 strings
+## `builders-hall` — 1261 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -101,7 +101,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `27d9721f358f` | certain | + Invite | `modules/hall-ui/public/goals-render.js:1136` |
 | `646fab1157fe` | certain | + {…} more project{…} not publicly listed. | `modules/hall-ui/public/profile.js:296` |
 | `05da3082c8c5` | certain | +{…} more | `modules/hall-ui/public/gate.js:134` |
-| `9c8aba2b2fa4` | certain | , // membership | `modules/hall-ui/public/government.js:899` |
+| `9c8aba2b2fa4` | certain | , // membership | `modules/hall-ui/public/government.js:953` |
 | `37964829d693` | certain | , and | `modules/hall-ui/public/government.html:55` |
 | `9a663ca57b14` | certain | , claiming, and shipping show — render as rich in-feed widgets or as plain text. Widgets are prettier but spen | `modules/hall-ui/public/settings.html:277` |
 | `ac57fe1ccd6e` | certain | , follow its acceptance criteria, stay within touches[], /builder-ship | `modules/hall-ui/public/work.js:841` |
@@ -152,6 +152,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `627c683a5e5d` | certain | All time | `modules/hall-ui/public/hall-widgets.js:130` |
 | `b38c01691857` | certain | All your work → | `modules/hall-ui/public/hall-widgets.js:110` |
 | `e99cc5d37404` | certain | Already a member? | `modules/hall-ui/public/hall-render.js:336` |
+| `da5368d10f85` | certain | Amendment {…} passed{…}, and the constitution below is not the one it decided: | `modules/hall-ui/public/government.js:647` |
 | `69f0ca4a4d84` | certain | Analytics scope | `modules/hall-ui/public/hall-render.js:1114` |
 | `14bdceaac078` | certain | Answer the five questions and this spark becomes a Full Idea. | `modules/hall-ui/public/ideas.js:586` |
 | `52ed0e2e3470` | certain | Any rank | `modules/hall-ui/public/task-lib.js:62` |
@@ -166,7 +167,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4160b56d14af` | certain | Archive goal | `modules/hall-ui/public/goals-render.js:927` |
 | `4160b56d14af` | certain | Archive goal | `modules/hall-ui/public/goals-render.js:1009` |
 | `206acb4467a2` | certain | Archive this goal? | `modules/hall-ui/public/goals-render.js:999` |
-| `5fcfdf8975cf` | certain | As configuration: | `modules/hall-ui/public/government.js:771` |
+| `5fcfdf8975cf` | certain | As configuration: | `modules/hall-ui/public/government.js:824` |
 | `01a0f29ff406` | certain | As first filed | `modules/hall-ui/public/idea.js:252` |
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:37` |
 | `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/collab.js:41` |
@@ -174,7 +175,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8c8ec2597036` | certain | Assigned {…} to builder {…}. | `modules/hall-ui/public/government.js:470` |
 | `46714066f2da` | certain | Audit log | `modules/hall-ui/public/watch.html:148` |
 | `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/gate.js:222` |
-| `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/government.js:1132` |
+| `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/government.js:1186` |
 | `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/harbor.js:340` |
 | `bdbe9ff6a177` | certain | Awaiting the grader, or a confirmation, before it can ship. | `modules/hall-ui/public/task.js:607` |
 | `ecfbb10d4ca9` | certain | Awaiting the owner/manager's approval | `modules/hall-ui/public/goals-render.js:934` |
@@ -207,7 +208,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `181cfa50b127` | certain | By the numbers | `modules/hall-ui/public/profile.html:60` |
 | `a015a43bfc7f` | certain | CLI access | `modules/hall-ui/public/settings.html:144` |
 | `084eb64bce72` | certain | Capabilities held by a machine identity, never by a person or a rank. Shown for completeness; nothing here can | `modules/hall-ui/public/government.html:125` |
-| `bdca1f219e6f` | certain | Cast objection | `modules/hall-ui/public/government.js:987` |
+| `bdca1f219e6f` | certain | Cast objection | `modules/hall-ui/public/government.js:1041` |
 | `a974494e44f3` | certain | Catalog at a glance | `modules/hall-ui/public/modules.html:50` |
 | `c1c7158e0a43` | certain | Category saved. | `modules/hall-ui/public/project-settings.js:214` |
 | `0279db21e29a` | certain | Change in Settings → | `modules/hall-ui/public/hall-render.js:513` |
@@ -216,7 +217,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `52384bdc035c` | certain | Changes save at once. Your new choice plays the next time that event fires. | `modules/hall-ui/public/settings.html:336` |
 | `cab7a9526ca1` | certain | Changes save the moment you pick. “Default” clears your override and falls back to the system's choice. | `modules/hall-ui/public/settings.html:306` |
 | `4b714191b423` | certain | Changes touching protected build surfaces, held for your approval. | `modules/hall-ui/public/gate.js:243` |
-| `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:741` |
+| `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:794` |
 | `f8725cf3ba62` | certain | Checking dependency order… | `modules/hall-ui/public/work.js:802` |
 | `7a41b18c0de8` | certain | Checking for conflicts… | `modules/hall-ui/public/work.js:781` |
 | `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1118` |
@@ -346,7 +347,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3db890b074a7` | certain | Could not update visibility just now. | `modules/hall-ui/public/goals-render.js:1219` |
 | `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:1286` |
 | `6bd74fd20311` | certain | Could not verify your access. Try again. | `modules/hall-ui/public/sessions.js:280` |
-| `278e8281c82f` | certain | Could not vote: {…} | `modules/hall-ui/public/government.js:1015` |
+| `278e8281c82f` | certain | Could not vote: {…} | `modules/hall-ui/public/government.js:1069` |
 | `a48e9f098392` | certain | Could not {…} just now. | `modules/hall-ui/public/goals-render.js:1205` |
 | `cb09ee26014f` | certain | Could not {…}: {…} | `modules/hall-ui/public/government.js:321` |
 | `28ec06f6060a` | certain | Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text  | `modules/hall-ui/public/ideas.html:167` |
@@ -402,10 +403,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `44f928d13699` | certain | Event sounds | `modules/hall-ui/public/settings.html:328` |
 | `8690c6424585` | certain | Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims. | `modules/hall-ui/public/watch.html:69` |
 | `34efbc699a88` | certain | Every builder's box, running ones first. Close a box to reclaim it; block a builder to keep them from opening  | `modules/hall-ui/public/harbor.html:48` |
-| `a97b064db76f` | certain | Every closed amendment sitting, ratified and returned alike, with the rule it was decided under. | `modules/hall-ui/public/government.js:780` |
+| `a97b064db76f` | certain | Every closed amendment sitting, ratified and returned alike, with the rule it was decided under. | `modules/hall-ui/public/government.js:834` |
 | `2ae1eb35611e` | certain | Every done-when criterion for this goal, with its full detail. | `modules/hall-ui/public/goals.html:210` |
 | `8825f1d90dd1` | certain | Every idea this builder captured — promoted, discarded, merged, or still open. | `modules/hall-ui/public/profile.html:153` |
 | `bc481184a282` | certain | Every place you are currently signed in — this browser, your terminal, any dev box. A session refreshes for an | `modules/hall-ui/public/settings.html:163` |
+| `47be006e5ad5` | certain | Every sitting since has been decided under the constitution below, not the ratified one. Nothing is re-applied | `modules/hall-ui/public/government.js:647` |
 | `efafe5ce29ed` | certain | Every task linked to this criterion has shipped — a Metic can confirm it | `modules/hall-ui/public/goals-render.js:699` |
 | `ddebbccd4b37` | certain | Everyone building across hosted projects, ranked by track record. Descriptive only — cross-project numbers nev | `modules/hall-ui/public/people.html:29` |
 | `4750e12477e7` | certain | Everyone is already a member | `modules/hall-ui/public/goals-render.js:1152` |
@@ -473,7 +475,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d9bd3b703fe4` | certain | Hover an island to light its links, click one for its details, or open it from the index below. | `modules/hall-ui/public/atlas.html:68` |
 | `68382894d8f9` | certain | How a planning session seeds each version's task pool, and how a version closes and archives its scope. | `modules/hall-ui/public/diagrams.html:85` |
 | `0bab9286ea38` | certain | How each builder's shipped work has been graded over the past thirty days. | `modules/hall-ui/public/watch.html:76` |
-| `fb7489e8b67c` | certain | How it has changed | `modules/hall-ui/public/government.js:780` |
+| `fb7489e8b67c` | certain | How it has changed | `modules/hall-ui/public/government.js:834` |
 | `ec3f26ff8137` | certain | How planning sessions feed each version's task pool and how a version closes. | `modules/hall-ui/public/diagrams.html:84` |
 | `0bae5deb899d` | certain | How readily Claude opens a | `modules/hall-ui/public/settings.html:259` |
 | `868cf6930d64` | certain | How task estimates compare with the time work actually took. | `modules/hall-ui/public/watch.html:156` |
@@ -481,7 +483,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `06cb721a03e1` | certain | How the system works — {{worldName}} | `modules/hall-ui/public/diagrams.html:6` |
 | `06cb721a03e1` | certain | How the system works — {{worldName}} | `modules/hall-ui/public/diagrams.html:6` |
 | `4f3802e6c81e` | certain | How the whole build is doing — the program at a glance, then each version. Shipped work stays out of the way. | `modules/hall-ui/public/roadmap.js:441` |
-| `b536897de6a3` | certain | How this project is governed. | `modules/hall-ui/public/government.js:1167` |
+| `b536897de6a3` | certain | How this project is governed. | `modules/hall-ui/public/government.js:1221` |
 | `2d156231e9fe` | certain | How you advance | `modules/hall-ui/public/ranks.html:55` |
 | `c763425718f2` | certain | How you get paid, and how you earn trust. A reference to jump around in: every section has its own link, and t | `modules/hall-ui/public/drachmae.html:38` |
 | `4c247368c384` | certain | How you got here, what you'd build | `modules/hall-ui/public/hall-render.js:284` |
@@ -510,7 +512,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b9cb720ad5d1` | certain | Invited? Sign in | `modules/hall-ui/public/hall-render.js:276` |
 | `0e48bb2c8c94` | certain | Island index | `modules/hall-ui/public/atlas.html:76` |
 | `2170b74c6526` | certain | Isometric map of the repository | `modules/hall-ui/public/atlas.html:54` |
-| `bd8d04eb265c` | certain | It cleared the completeness grade at {…}/100. | `modules/hall-ui/public/government.js:957` |
+| `bd8d04eb265c` | certain | It cleared the completeness grade at {…}/100. | `modules/hall-ui/public/government.js:1011` |
 | `4f5b39802b07` | certain | It holds no unfinished work, so this is a single step. Archiving is reversible — an archived goal can be reope | `modules/hall-ui/public/goals-render.js:999` |
 | `79791be35018` | certain | It opens this hall in your browser — click one | `modules/hall-ui/public/hall-render.js:750` |
 | `d751fe51e178` | certain | It shipped and it is live. Your review coaches the grader on how it judged the work, then remakes or tweaks th | `modules/hall-ui/public/studio.js:87` |
@@ -695,7 +697,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b95918d421ae` | certain | People — {{worldName}} | `modules/hall-ui/public/people.html:6` |
 | `b95918d421ae` | certain | People — {{worldName}} | `modules/hall-ui/public/people.html:6` |
 | `4a46b478edaf` | certain | Per page | `modules/hall-ui/public/hall-kit.js:74` |
-| `e1e10dc5e357` | certain | Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read. | `modules/hall-ui/public/government.js:1146` |
+| `e1e10dc5e357` | certain | Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read. | `modules/hall-ui/public/government.js:1200` |
 | `fcf996d77050` | certain | Pick a rank to see what it may do. The four ladder ranks ship with the platform; a custom rank is yours to sha | `modules/hall-ui/public/government.html:78` |
 | `2ec5f77eb6f0` | certain | Preferred disciplines | `modules/hall-ui/public/settings.html:126` |
 | `f03d68e60416` | certain | Preferred work | `modules/hall-ui/public/hall-render.js:562` |
@@ -785,7 +787,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9d9567d1dead` | certain | Reset {…} to its default permissions?\n\nEvery change you've made to this rank is discarded, and it takes effe | `modules/hall-ui/public/government.js:300` |
 | `3ef9382d4726` | certain | Resolved — the copy was changed | `modules/hall-ui/public/copy-desk.html:122` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/gate.js:219` |
-| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/government.js:1129` |
+| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/government.js:1183` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/harbor.js:337` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/watch.js:1241` |
 | `b33dde402434` | certain | Retire this goal — you will be asked what happens to any unfinished work | `modules/hall-ui/public/goals-render.js:927` |
@@ -818,7 +820,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `582bdd9435eb` | certain | Select task {…} for bulk actions | `modules/hall-ui/public/work.js:405` |
 | `d91c8e9be76c` | certain | Select task {…} for bulk claim | `modules/hall-ui/public/goals-render.js:339` |
 | `7e1d54119e08` | certain | Select task {…} for bulk release | `modules/hall-ui/public/work.js:216` |
-| `ae43a132699b` | certain | Selectable today | `modules/hall-ui/public/government.js:741` |
+| `ae43a132699b` | certain | Selectable today | `modules/hall-ui/public/government.js:794` |
 | `d14e8e9acaff` | certain | Session ended. | `modules/hall-ui/public/settings-sessions.js:81` |
 | `55e0a34bafed` | certain | Session log{…} | `modules/hall-ui/public/task.js:447` |
 | `cccb362bd6da` | certain | Sessions — {{worldName}} | `modules/hall-ui/public/sessions.html:6` |
@@ -901,10 +903,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `600b90074021` | certain | The art pipeline draws tiles and sprites with Google AI Studio (Gemini). Needed only if you generate art — you | `modules/hall-ui/public/settings.html:185` |
 | `4462dcaaaa7d` | certain | The artist reads this instead of guessing. A pointer with no judgement costs them a look and tells them nothin | `modules/hall-ui/public/copy-desk.html:103` |
 | `195b295d0bf3` | certain | The atlas regenerates itself on the server every time code ships; it has not been generated on this deploy yet | `modules/hall-ui/public/atlas.html:63` |
+| `f38140e472df` | certain | The board ratified a change that is not in force. | `modules/hall-ui/public/government.js:647` |
 | `716a303927d6` | certain | The box you turn on has a | `modules/hall-ui/public/box-panel.js:339` |
 | `520da1cd5dcc` | certain | The complete architecture: your device (screen only), the dev box (worker, code, and local memory), the server | `modules/hall-ui/public/diagrams.html:76` |
 | `2dc061096c48` | certain | The copy desk — every flagged string | `modules/hall-ui/public/studio.html:57` |
-| `bac12faf3328` | certain | The developmental ladder: {…}. Formality is adopted only where informal coordination breaks. | `modules/hall-ui/public/government.js:748` |
+| `bac12faf3328` | certain | The developmental ladder: {…}. Formality is adopted only where informal coordination breaks. | `modules/hall-ui/public/government.js:801` |
 | `6e2554615883` | certain | The event sounds could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:393` |
 | `36ed1b04583e` | certain | The full queues | `modules/hall-ui/public/studio.html:56` |
 | `cb7c7879eeba` | certain | The fundamentals | `modules/hall-ui/public/project-settings.html:40` |
@@ -935,7 +938,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d01d36a596b0` | certain | The session log could not be loaded. Try again. | `modules/hall-ui/public/sessions.js:242` |
 | `d01d36a596b0` | certain | The session log could not be loaded. Try again. | `modules/hall-ui/public/sessions.js:294` |
 | `e48a9b77d91b` | certain | The session log opens from a higher rank. | `modules/hall-ui/public/sessions.html:41` |
-| `af664a644b13` | certain | The seven government structures, for getting a team up to speed before deciding when to flip a switch. | `modules/hall-ui/public/government.js:741` |
+| `af664a644b13` | certain | The seven government structures, for getting a team up to speed before deciding when to flip a switch. | `modules/hall-ui/public/government.js:794` |
 | `6360a5988f26` | certain | The shape and health of the codebase. | `modules/hall-ui/public/watch.html:112` |
 | `fc422cced9e3` | certain | The shared goals you’ve joined. Browse, join, and leave goals — and read their criteria — on the | `modules/hall-ui/public/goals.js:94` |
 | `ac46dc53d95f` | certain | The shared repository the core ships and the modules this project built for itself, each credited to its autho | `modules/hall-ui/public/modules.html:47` |
@@ -974,7 +977,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/project-settings.html:36` |
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/watch.html:40` |
 | `87f1c2e07790` | certain | This page unlocks as you advance. | `modules/hall-ui/public/not-ready.html:26` |
-| `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/government.js:987` |
+| `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/government.js:1041` |
 | `09256febc32d` | certain | This sentence has {…} {…} where a value is dropped in when it is shown. | `modules/hall-ui/public/copy-desk.js:422` |
 | `c9e50a67988a` | certain | This task has shipped and its credits have landed. Neither Ship it nor Confirm is available. | `modules/hall-ui/public/task.js:612` |
 | `7217c4f1769d` | certain | This will {…} | `modules/hall-ui/public/harbor.js:125` |
@@ -995,7 +998,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `71c09cda8246` | certain | Voice for {…} | `modules/hall-ui/public/settings.js:76` |
 | `2940b7828d26` | certain | Volume {…}%. | `modules/hall-ui/public/settings.js:218` |
 | `6905f2ee5702` | certain | Vote on this work | `modules/hall-ui/public/builders.js:739` |
-| `b2937e14ee9b` | certain | Vote yes | `modules/hall-ui/public/government.js:987` |
+| `b2937e14ee9b` | certain | Vote yes | `modules/hall-ui/public/government.js:1041` |
 | `8cc425582984` | certain | Vulnerability reports | `modules/hall-ui/public/watch.html:132` |
 | `b1e63e33f739` | certain | Vulnerability reports, engagement reports, override requests, and the audit log. | `modules/hall-ui/public/watch.html:129` |
 | `f2e019bfdbe8` | certain | Waiting to be developed | `modules/hall-ui/public/ideas.html:41` |
@@ -1033,7 +1036,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5cc53380b1e8` | certain | Why (optional) | `modules/hall-ui/public/goals-render.js:999` |
 | `62ab2e60f629` | certain | Why is this better? | `modules/hall-ui/public/copy-desk.html:164` |
 | `2b047710fd6d` | certain | Why this goal is being retired (required) | `modules/hall-ui/public/goals-render.js:1009` |
-| `fbd8a815b808` | certain | Why — the reason the author will act on | `modules/hall-ui/public/government.js:987` |
+| `fbd8a815b808` | certain | Why — the reason the author will act on | `modules/hall-ui/public/government.js:1041` |
 | `a3ac116b499a` | certain | Why? | `modules/hall-ui/public/copy-desk.html:99` |
 | `0dcb485477b6` | certain | Windows (ARM) | `modules/hall-ui/public/hall-render.js:750` |
 | `c5fd76a9e03d` | certain | Won {…} | `modules/hall-ui/public/builders.js:487` |
@@ -1055,7 +1058,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `da274462bb30` | certain | You have no open asks. | `modules/hall-ui/public/collab.html:75` |
 | `6b759151f722` | certain | You have reached the end. The button below is now active. | `modules/hall-ui/public/primer.js:310` |
 | `6d5a4ca58dd6` | certain | You haven’t joined any goals yet. | `modules/hall-ui/public/goals.js:83` |
-| `8e527ab12334` | certain | You {…}. One vote per member. | `modules/hall-ui/public/government.js:1059` |
+| `8e527ab12334` | certain | You {…}. One vote per member. | `modules/hall-ui/public/government.js:1113` |
 | `8e1915b19274` | certain | You're in the {…} server with your rank role. | `modules/hall-ui/public/settings.js:921` |
 | `d8c542541c15` | certain | You're not signed in yet. Sign in to manage your connections, your keys, your dev box and the way the hall beh | `modules/hall-ui/public/settings.html:41` |
 | `7d26333b5fb0` | certain | Your asks | `modules/hall-ui/public/collab.html:69` |
@@ -1073,7 +1076,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `20d453b11ae5` | certain | Your name | `modules/hall-ui/public/hall-render.js:284` |
 | `6dadadffa36e` | certain | Your name cannot be blank. | `modules/hall-ui/public/settings.js:832` |
 | `bd77210a8c90` | certain | Your name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:837` |
-| `c0a01a95e97e` | certain | Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no  | `modules/hall-ui/public/government.js:985` |
+| `c0a01a95e97e` | certain | Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no  | `modules/hall-ui/public/government.js:1039` |
 | `8fc605026acf` | certain | Your pending join {…}: {…} — awaiting approval. | `modules/hall-ui/public/goal-inbox.js:88` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:856` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1393` |
@@ -1094,7 +1097,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `44e6e402db94` | certain | account, then open | `modules/hall-ui/public/hall-render.js:750` |
 | `ae43396446ed` | certain | account. | `modules/hall-ui/public/hall-render.js:750` |
 | `9612c983451f` | certain | achieved · | `modules/hall-ui/public/roadmap.js:295` |
-| `dbfc9e6e921b` | certain | active builder{…}: {…} | `modules/hall-ui/public/government.js:741` |
+| `dbfc9e6e921b` | certain | active builder{…}: {…} | `modules/hall-ui/public/government.js:794` |
 | `754babaae931` | certain | and ask in | `modules/hall-ui/public/hall-render.js:748` |
 | `181d339c9318` | certain | and build right here in the browser — no remote control needed. Either way, reopening the online terminal late | `modules/hall-ui/public/hall-render.js:750` |
 | `bc960f460250` | certain | and install dependencies ( | `modules/hall-ui/public/hall-render.js:791` |
@@ -1102,7 +1105,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d86265f99668` | certain | and {…} more waiting{…} | `modules/hall-ui/public/studio.js:156` |
 | `520853131591` | certain | artist mode | `modules/hall-ui/public/studio.html:36` |
 | `b4033000c537` | certain | as a table | `modules/hall-ui/public/profile-charts.js:202` |
-| `d7c511423bc0` | certain | as configuration: {…} | `modules/hall-ui/public/government.js:727` |
+| `d7c511423bc0` | certain | as configuration: {…} | `modules/hall-ui/public/government.js:780` |
 | `a756e47632cd` | certain | at {…} — {…}. The timer above is the fallback that is actually in force. | `modules/hall-ui/public/project-settings.js:103` |
 | `63bd14f73960` | certain | author trusted | `modules/hall-ui/public/gate.js:141` |
 | `93438b9ffa98` | certain | below or type | `modules/hall-ui/public/box-panel.js:226` |
@@ -1162,7 +1165,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2ce7738b1eb0` | certain | loading goals… | `modules/hall-ui/public/task-detail.js:394` |
 | `754bdec368ed` | certain | lowest credits | `modules/hall-ui/public/hall-widgets.js:136` |
 | `cffba8409070` | certain | manage its visibility in Settings → Cross-project record | `modules/hall-ui/public/profile.js:266` |
-| `5c3fdd34cd02` | certain | means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code | `modules/hall-ui/public/government.js:741` |
+| `5c3fdd34cd02` | certain | means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code | `modules/hall-ui/public/government.js:794` |
 | `0eefd625d954` | certain | merged into | `modules/hall-ui/public/idea.js:210` |
 | `70c234985d42` | certain | most recent first | `modules/hall-ui/public/hall-widgets.js:134` |
 | `e7213f35cd9a` | certain | move → #{…} {…} | `modules/hall-ui/public/goals-render.js:969` |
@@ -1182,7 +1185,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b5567b42fa52` | certain | not yet | `modules/hall-ui/public/not-ready.html:25` |
 | `8ca0a499ec86` | certain | nothing recorded yet · {…} | `modules/hall-ui/public/profile-charts.js:220` |
 | `e2c643fbf4d6` | certain | npm install | `modules/hall-ui/public/hall-render.js:791` |
-| `e90b5601ce16` | certain | objected to | `modules/hall-ui/public/government.js:847` |
+| `e90b5601ce16` | certain | objected to | `modules/hall-ui/public/government.js:901` |
 | `351d56b80a6c` | certain | of all in-flight tasks shipped | `modules/hall-ui/public/roadmap.js:305` |
 | `09172f45e6da` | certain | of the 90% needed | `modules/hall-ui/public/primer.html:101` |
 | `99f88f2af2ee` | certain | of work — a tangent, an investigation, an unprompted suggestion — instead of staying on your claimed task. It  | `modules/hall-ui/public/settings.html:260` |
@@ -1246,7 +1249,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1651cb1876f5` | certain | who sits on the board | `modules/hall-ui/public/government.html:55` |
 | `143f77e2b782` | certain | why these are the same | `modules/hall-ui/public/task-detail.js:477` |
 | `ec7c228cb4ce` | certain | why this isn’t worth doing | `modules/hall-ui/public/task-detail.js:528` |
-| `66d979d0db89` | certain | your vote | `modules/hall-ui/public/government.js:842` |
+| `66d979d0db89` | certain | your vote | `modules/hall-ui/public/government.js:896` |
 | `d2bd1c3ab0f5` | certain | { if (row.key === 'rot_timer' && row.editable) return rowHtml(row, rotBodyHtml(row)); if (row.key === 'work_ca | `modules/hall-ui/public/project-settings.js:152` |
 | `50d4a70a2eb2` | certain | {…} Access is invite-based: an Archon approves each new builder. To begin, request access below. | `modules/hall-ui/public/hall-render.js:284` |
 | `9aac280c89ec` | certain | {…} Anyone with a GitHub account can join: sign in and you're in, starting at the newcomer rank. | `modules/hall-ui/public/hall-render.js:267` |
@@ -1274,7 +1277,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c3d9687e2375` | certain | {…} of {…} shipped | `modules/hall-ui/public/profile.js:488` |
 | `f32710d0ef37` | certain | {…} of {…} steps cleared. | `modules/hall-ui/public/hall-render.js:978` |
 | `60743fe1e40d` | certain | {…} per page | `modules/hall-ui/public/hall-kit.js:74` |
-| `154bc518bab4` | certain | {…} proposed | `modules/hall-ui/public/government.js:645` |
+| `154bc518bab4` | certain | {…} proposed | `modules/hall-ui/public/government.js:698` |
 | `275f3565c78b` | certain | {…} reset to its default {…} permissions. | `modules/hall-ui/public/government.js:304` |
 | `33afba17ee0f` | certain | {…} seeded | `modules/hall-ui/public/roadmap.js:214` |
 | `732b4c935e36` | certain | {…} sessions | `modules/hall-ui/public/task.js:446` |
@@ -1294,7 +1297,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:223` |
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:1055` |
 | `94445e6ed5e8` | certain | {…} · code | `modules/hall-ui/public/pair.js:53` |
-| `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/government.js:1068` |
+| `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/government.js:1122` |
 | `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:326` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `f75ee96a7511` | certain | {…} — total payout from shipped work. | `modules/hall-ui/public/profile.js:70` |
@@ -1302,7 +1305,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `15e545eb3ce2` | certain | {…}, no such task | `modules/hall-ui/public/task.js:691` |
 | `c43050b62297` | certain | {…}/100 complete | `modules/hall-ui/public/idea.js:87` |
 | `8e8c7da4f7f5` | certain | {…}criteria met · awaiting review | `modules/hall-ui/public/goals-render.js:155` |
-| `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:1146` |
+| `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:1200` |
 | `499916045b19` | certain | {…}{…} asks to join | `modules/hall-ui/public/goal-inbox.js:69` |
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:546` |
 | `9588652a7aff` | certain | · follows your profile setting | `modules/hall-ui/public/settings.js:636` |