@bongos/core 1.19.917 → 1.19.919

package/docs/api/openapi.json

@@ -213,6 +213,10 @@
       "name": "public",
       "description": "Endpoints under `/api/bongos/public`."
     },
+    {
+      "name": "removal-proposals",
+      "description": "Endpoints under `/api/bongos/removal-proposals`."
+    },
     {
       "name": "scouting",
       "description": "Endpoints under `/api/bongos/scouting`."
@@ -14126,6 +14130,106 @@
         "security": []
       }
     },
+    "/removal-proposals": {
+      "get": {
+        "operationId": "get_removal_proposals",
+        "tags": [
+          "removal-proposals"
+        ],
+        "summary": "GET /removal-proposals",
+        "description": "GET /removal-proposals — the removal questions nobody has answered yet. rank: metic+archon (task.promote). No client-side rank gate is needed or wanted in the hall: a non-triager's fetch 403s and the slice renders nothing. One gate, on the server, beats a client check that can disagree with it.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.promote` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/removal-proposals.js",
+        "x-permissions": [
+          "task.promote"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetRemovalProposalsResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/removal-proposals/{id}/decide": {
+      "post": {
+        "operationId": "post_removal_proposals_id_decide",
+        "tags": [
+          "removal-proposals"
+        ],
+        "summary": "POST /removal-proposals/:id/decide",
+        "description": "POST /removal-proposals/:id/decide — confirm or dismiss ONE proposal. ONE ROUTE WITH AN ENUM rather than /confirm and /dismiss, because the two answers are the same act with opposite content and splitting them would invite the two halves to drift in what they close, what they record and what they refuse. The enum is validated against an allow-list in the domain layer and by the CHECK in lifecycle_009 — neither admits a value the other does not. rank: metic+archon (task.promote), the same atom as the read above.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.promote` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/removal-proposals.js",
+        "x-permissions": [
+          "task.promote"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostRemovalProposalsIdDecideRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/scouting": {
       "get": {
         "operationId": "get_scouting",
@@ -20092,6 +20196,17 @@
           "page"
         ]
       },
+      "GetRemovalProposalsResponse": {
+        "type": "object",
+        "properties": {
+          "pending": {},
+          "count": {}
+        },
+        "required": [
+          "pending",
+          "count"
+        ]
+      },
       "GetScoutingHandleResponse": {
         "type": "object",
         "properties": {
@@ -23988,6 +24103,22 @@
         ],
         "additionalProperties": false
       },
+      "PostRemovalProposalsIdDecideRequest": {
+        "type": "object",
+        "properties": {
+          "verdict": {
+            "type": "string"
+          },
+          "note": {
+            "type": "string",
+            "maxLength": 2000
+          }
+        },
+        "required": [
+          "verdict"
+        ],
+        "additionalProperties": false
+      },
       "PostSearchMarkRequest": {
         "type": "object",
         "properties": {
@@ -25421,9 +25552,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 401,
-  "x-schema-count": 440,
+  "x-endpoint-count": 403,
+  "x-schema-count": 442,
   "x-undocumented-bodies": 9,
-  "x-response-schemas": 300,
+  "x-response-schemas": 301,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 401 endpoints across 64 route files.
+> **Generated from the live route files** — the route file is authoritative. 403 endpoints across 65 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -558,6 +558,13 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/public/uptime` | `public` | — | Uptime: current status + 90-day history bucketed by hour. |
 | GET | `/api/bongos/public/versions` | `public` | — | read-only surface for the status dashboard (status.<apex>). |
 
+## `removal-proposals` (2)
+
+| Method | Path | Rank | Body | Description |
+|---|---|---|---|---|
+| GET | `/api/bongos/removal-proposals` | `metic+archon` | — | GET /removal-proposals — the removal questions nobody has answered yet. |
+| POST | `/api/bongos/removal-proposals/:id/decide` | `metic+archon` | `verdict`, `note` | POST /removal-proposals/:id/decide — confirm or dismiss ONE proposal. |
+
 ## `scouting` (2)
 
 | Method | Path | Rank | Body | Description |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1828 strings** across 3 surfaces · 1585 distinct pieces of copy · 1828 certain, 0 heuristic · 166 shown in more than one place.
+**1832 strings** across 3 surfaces · 1589 distinct pieces of copy · 1832 certain, 0 heuristic · 166 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 84 | 1338 |
+| `builders-hall` | `modules/hall-ui/public` | 84 | 1342 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 390 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `996edffc1966` | 2x | Access requests | modules/hall-ui/public/watch.html:46, modules/hall-ui/public/watch.html:61 |
 | … | | _126 more in the JSON registry_ | |
 
-## `builders-hall` — 1338 strings
+## `builders-hall` — 1342 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -125,6 +125,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5723baf26b2d` | certain | A quick idea is a thought filed fast. It is not an unfinished Full Idea — only its author can offer it up for  | `modules/hall-ui/public/idea.js:260` |
 | `23dc5028183a` | certain | A quick report — title, what's going on, and where it belongs. Pick a goal and it lands there as a task the mo | `modules/hall-ui/public/ideas.html:60` |
 | `a1f06e5c11ae` | certain | A quiet place to tend the words and art the project shows people. | `modules/hall-ui/public/studio.html:38` |
+| `08c1f66fd572` | certain | A refactor, a move, or work already superseded | `modules/hall-ui/public/goal-inbox.js:336` |
 | `244ea2a3564e` | certain | A role says how you work. A speciality says what you work on — and how you, as someone who knows the subject,  | `modules/hall-ui/public/settings.html:253` |
 | `eff6b977b1d2` | certain | A self-drawing map of the codebase: what each module is, and what depends on it. Redrawn from the code on ever | `modules/hall-ui/public/atlas.html:31` |
 | `f3d6ed7c0d2c` | certain | A shipped task cannot be retired — it is immutable history now. | `modules/hall-ui/public/task.js:751` |
@@ -462,7 +463,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4794a991de3d` | certain | Getting started | `modules/hall-ui/public/hall-widgets.js:59` |
 | `a28b1a567f1a` | certain | GitHub username | `modules/hall-ui/public/hall-render.js:294` |
 | `8e52f0649662` | certain | Give the category a label. | `modules/hall-ui/public/project-settings.js:189` |
-| `79934b879a12` | certain | Give the nod | `modules/hall-ui/public/goal-inbox.js:244` |
+| `79934b879a12` | certain | Give the nod | `modules/hall-ui/public/goal-inbox.js:258` |
 | `988e2c60df3d` | certain | Goal archived. | `modules/hall-ui/public/goals-render.js:1048` |
 | `9e70797b7e97` | certain | Goal id | `modules/hall-ui/public/goals-render.js:830` |
 | `529460e82058` | certain | Goal invitations to you | `modules/hall-ui/public/goal-inbox.js:113` |
@@ -621,7 +622,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:766` |
 | `5e8199266a8a` | certain | Name unvouched | `modules/hall-ui/public/watch.js:374` |
 | `3970d299c95a` | certain | Needs work | `modules/hall-ui/public/studio.js:162` |
-| `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:463` |
+| `7def635421ea` | certain | Needs your attention | `modules/hall-ui/public/goal-inbox.js:557` |
 | `87f09d983f6c` | certain | New category label | `modules/hall-ui/public/project-settings.js:138` |
 | `d427d9dab01c` | certain | New claims are paused: {…} confirmed {…} can't land yet, so {…} reward is pending. Rebase and re-ship, or rele | `modules/hall-ui/public/hall-render.js:674` |
 | `7fcc2583c372` | certain | New custom rank | `modules/hall-ui/public/government.html:79` |
@@ -952,6 +953,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `282c3fa2d456` | certain | That is the wording it already has. Change something, or file a flag instead if you only want to mark it. | `modules/hall-ui/public/copy-desk.js:438` |
 | `c0e28f30524d` | certain | That project's own standing, as reported by that project. | `modules/hall-ui/public/profile.js:314` |
 | `e99d4a811e92` | certain | That request is no longer available. | `modules/hall-ui/public/profile-connections.js:270` |
+| `34017119ce22` | certain | That work is genuinely gone | `modules/hall-ui/public/goal-inbox.js:336` |
 | `6e5a324b2972` | certain | That's you | `modules/hall-ui/public/watch.js:803` |
 | `50198c465225` | certain | The 16-value rank enum in three bands, which ranks are live, and the permissions each rank holds. | `modules/hall-ui/public/diagrams.html:59` |
 | `c5e6bdd32fe3` | certain | The Board Room is open to the builders this project’s constitution seats on its board. | `modules/hall-ui/public/board-room.js:436` |
@@ -1266,7 +1268,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `99f88f2af2ee` | certain | of work — a tangent, an investigation, an unprompted suggestion — instead of staying on your claimed task. It  | `modules/hall-ui/public/settings.html:316` |
 | `5e7a2220c6a9` | certain | of {…} | `modules/hall-ui/public/roadmap.js:288` |
 | `759c12b5f983` | certain | oldest first | `modules/hall-ui/public/hall-widgets.js:134` |
-| `cbaf58cdbe35` | certain | open the queue | `modules/hall-ui/public/goal-inbox.js:427` |
+| `cbaf58cdbe35` | certain | open the queue | `modules/hall-ui/public/goal-inbox.js:521` |
 | `af3a8e0fe6a8` | certain | open your goals | `modules/hall-ui/public/goal-inbox.js:121` |
 | `4f279d68175f` | certain | open, on the Security tab | `modules/hall-ui/public/watch.html:47` |
 | `7b85e6494596` | certain | opens a new tab | `modules/hall-ui/public/palette.js:190` |
@@ -1375,7 +1377,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:990` |
 | `a6e4ed98fbea` | certain | {…} · revoke it any time under Active sessions. | `modules/hall-ui/public/settings.js:922` |
 | `d73256fbc395` | certain | {…} · who votes, and how it {…} | `modules/hall-ui/public/board-room.js:357` |
-| `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:326` |
+| `cab2a4296aec` | certain | {…} · {…} · {…}{…} | `modules/hall-ui/public/goal-inbox.js:420` |
 | `085f93f3f775` | certain | {…} — see all standings | `modules/hall-ui/public/hall-render.js:80` |
 | `f75ee96a7511` | certain | {…} — total payout from shipped work. | `modules/hall-ui/public/profile.js:94` |
 | `2a2728a4ec4f` | certain | {…}% of tasks complete | `modules/hall-ui/public/roadmap.js:63` |
@@ -1387,6 +1389,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `499916045b19` | certain | {…}{…} asks to join | `modules/hall-ui/public/goal-inbox.js:69` |
 | `97e27ab169ae` | certain | {…}{…} session{…} across {…} builder{…}. | `modules/hall-ui/public/sessions.js:338` |
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:653` |
+| `7f79bedecf60` | certain | {…}{…} — open it to see what went | `modules/hall-ui/public/goal-inbox.js:336` |
 | `9588652a7aff` | certain | · follows your profile setting | `modules/hall-ui/public/settings.js:566` |
 | `4a5ff4f662df` | certain | — ${…} of ${…} this month ({…}%). {…} | `modules/hall-ui/public/hall-render.js:517` |
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:713` |
@@ -1396,14 +1399,15 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `da9962dc1729` | certain | — or open any diagram fullscreen. | `modules/hall-ui/public/diagrams.html:33` |
 | `e5c5e94152b3` | certain | — that's all the tooling you need up front. | `modules/hall-ui/public/hall-render.js:890` |
 | `392afc533191` | certain | — type | `modules/hall-ui/public/hall-render.js:825` |
-| `ff7514f48a7b` | certain | — untouched {…}+ days | `modules/hall-ui/public/goal-inbox.js:363` |
+| `ff7514f48a7b` | certain | — untouched {…}+ days | `modules/hall-ui/public/goal-inbox.js:457` |
 | `d3afa6d6dd9e` | certain | — your words, in your voice. Needed for a note or a follow-up. | `modules/hall-ui/public/studio.js:162` |
 | `68b547166d48` | certain | — {…} confirmed {…} can't land yet, so {…} reward is pending (it lands on ship). Rebase + re-ship or release { | `modules/hall-ui/public/hall-render.js:558` |
 | `5b9fa7cb4fb0` | certain | …and {…} more waiting — | `modules/hall-ui/public/goal-inbox.js:121` |
-| `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:264` |
-| `616fb9adf3cf` | certain | …{…} more going quiet. | `modules/hall-ui/public/goal-inbox.js:353` |
+| `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:278` |
+| `f16717b3e122` | certain | …{…} more awaiting an answer. | `modules/hall-ui/public/goal-inbox.js:358` |
+| `616fb9adf3cf` | certain | …{…} more going quiet. | `modules/hall-ui/public/goal-inbox.js:447` |
 | `e35f11bdc5d7` | certain | …{…} more open ideas — triage clears them one at a time. | `modules/hall-ui/public/builders.js:895` |
-| `5f1d914ad45e` | certain | …{…} more — | `modules/hall-ui/public/goal-inbox.js:427` |
+| `5f1d914ad45e` | certain | …{…} more — | `modules/hall-ui/public/goal-inbox.js:521` |
 | `de8fa5223aee` | certain | ‹ Prev | `modules/hall-ui/public/hall-kit.js:74` |
 | `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:80` |
 | `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:184` |

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1828,
-    "unique_ids": 1585,
-    "certain": 1828,
+    "strings": 1832,
+    "unique_ids": 1589,
+    "certain": 1832,
     "heuristic": 0,
     "duplicate_ids": 166
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 84,
-      "strings": 1338
+      "strings": 1342
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -2164,6 +2164,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "08c1f66fd572",
+      "surface": "builders-hall",
+      "text": "A refactor, a move, or work already superseded",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 336,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "244ea2a3564e",
       "surface": "builders-hall",
@@ -5202,7 +5211,7 @@
       "surface": "builders-hall",
       "text": "Give the nod",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 244,
+      "line": 258,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -6633,7 +6642,7 @@
       "surface": "builders-hall",
       "text": "Needs your attention",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 463,
+      "line": 557,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9607,6 +9616,15 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
+    {
+      "id": "34017119ce22",
+      "surface": "builders-hall",
+      "text": "That work is genuinely gone",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 336,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "6e5a324b2972",
       "surface": "builders-hall",
@@ -12438,7 +12456,7 @@
       "surface": "builders-hall",
       "text": "open the queue",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 427,
+      "line": 521,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13419,7 +13437,7 @@
       "surface": "builders-hall",
       "text": "{…} · {…} · {…}{…}",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 326,
+      "line": 420,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13522,6 +13540,15 @@
       "origin": "js-markup",
       "confidence": "certain"
     },
+    {
+      "id": "7f79bedecf60",
+      "surface": "builders-hall",
+      "text": "{…}{…} — open it to see what went",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 336,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
     {
       "id": "9588652a7aff",
       "surface": "builders-hall",
@@ -13608,7 +13635,7 @@
       "surface": "builders-hall",
       "text": "— untouched {…}+ days",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 363,
+      "line": 457,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13644,7 +13671,16 @@
       "surface": "builders-hall",
       "text": "…{…} more awaiting a nod.",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 264,
+      "line": 278,
+      "origin": "js-markup",
+      "confidence": "certain"
+    },
+    {
+      "id": "f16717b3e122",
+      "surface": "builders-hall",
+      "text": "…{…} more awaiting an answer.",
+      "file": "modules/hall-ui/public/goal-inbox.js",
+      "line": 358,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13653,7 +13689,7 @@
       "surface": "builders-hall",
       "text": "…{…} more going quiet.",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 353,
+      "line": 447,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -13671,7 +13707,7 @@
       "surface": "builders-hall",
       "text": "…{…} more —",
       "file": "modules/hall-ui/public/goal-inbox.js",
-      "line": 427,
+      "line": 521,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -2308,5 +2308,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.915 with no explicit bump. run 35525694524. (task 1002620)
   1.19.917 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.916 with no explicit bump. run 35526196428. (task 1002620)
+  1.19.918 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.917 with no explicit bump. run 35529342372. (task 1002620)
+  1.19.919 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.918 with no explicit bump. run 35531198454. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/goal-inbox.js

@@ -191,6 +191,20 @@
       return;
     }
 
+    // task 1004095 (BV2.R16): confirming or dismissing a removal proposal. Like
+    // the two branches above it refreshes ITS OWN slice only — repainting the
+    // goals list would leave the answered row sitting there still asking (the
+    // task-1003066 lesson). The verdict is server-declared on the button rather
+    // than inferred from which one was pressed, so this branch needs to know
+    // nothing about the vocabulary beyond what to say afterwards.
+    const removal = e.target.closest('[data-removal-task]');
+    if (removal) {
+      const verdict = removal.dataset.removalVerdict;
+      act(() => postJSON(`${API}/removal-proposals/${encodeURIComponent(removal.dataset.removalTask)}/decide`, { verdict }),
+        REMOVAL_TOASTS[verdict] || 'Answered.', loadRemovals);
+      return;
+    }
+
     const item = e.target.closest('.ginbox__item');
     const goalId = item && item.dataset.goal;
     if (!goalId) return;
@@ -275,6 +289,86 @@
       .catch(() => { /* a non-triager's 403, or a hiccup: never break the hall */ });
   }
 
+  // ---- removal proposals (task 1004095, BV2.R16) ----------------------------
+  //
+  // A ship that deleted files an earlier SHIPPED task put there files a QUESTION,
+  // never a verdict (task 1004090, ADR 0313): refactors, renames and file moves
+  // all look like deletions to a diff, so nothing is marked removed until a person
+  // says so. This slice is where they say so.
+  //
+  // WHY IT IS NOT A ROW IN THE NOD QUEUE, which is the obvious place. That queue is
+  // scoped to ROUTED FILINGS — `origin='route'` in ideas_task_lineage — and ADR 0299
+  // decided, on live numbers, that it stays that way and is honestly named for that
+  // population. A removal proposal has no idea lineage at all. Same CARD (the
+  // anti-accretion rule at the top of this file), same floor, separate slice.
+  //
+  // THE ANSWER IS NOT IN THIS ROW, and that is deliberate. Which files went and
+  // whose work they were is prose in the proposal's body, because the cascade that
+  // files it has no field for a target (ADR 0242). So the title LINKS to the task
+  // and the buttons sit beside it: a person who has not read the evidence should
+  // have to take one more step, not one fewer.
+  //
+  // No client-side rank gate, for the same reason the nod slice has none: GET
+  // /removal-proposals is Metic+ server-side, so a non-triager's fetch 403s and the
+  // slice renders nothing. One gate, on the server.
+  // What each answer says when it lands. Keyed by the SERVER's verdict name, the
+  // ROT_TOASTS convention, so a verdict added later degrades to a neutral
+  // confirmation instead of a blank toast. The wording states the CONSEQUENCE,
+  // because that is the half a person cannot see from the row they just cleared.
+  const REMOVAL_TOASTS = {
+    confirmed: 'Confirmed — the ideas behind that work will dim.',
+    dismissed: 'Dismissed — nothing dims.',
+  };
+
+  // THE LABELS ARE ONE WORD EACH BECAUSE THE ROW IS A FLEX LINE AT EVERY WIDTH.
+  // `.ginbox__actions` is `flex: 0 0 auto` and nothing in the card wraps, so two
+  // buttons take their width straight off the body’s. Measured at 375px:
+  // "Confirm removal" + "Dismiss" left the title 46px wide and 440px tall — a
+  // column of single letters — where every other row on this card keeps 138–218px.
+  // One word each brings it back into that band; the sentence each answer means
+  // rides the `title`, and the head already says what the question is.
+  function removalRowHtml(r) {
+    const title = escapeHtml(r.title || `task #${r.proposal_task_id}`);
+    const from = r.ship_task_id
+      ? `deleted by task #${escapeHtml(String(r.ship_task_id))}`
+      : 'from a ship whose id could not be read';
+    const goal = r.goal_title ? ` · ${escapeHtml(r.goal_title)}` : '';
+    return `<li class="ginbox__item ginbox__item--stacked">
+        <div class="ginbox__body">
+          <a class="ginbox__goal" href="/task/${encodeURIComponent(r.proposal_task_id)}">${title}</a>
+          <span class="ginbox__sub">${from}${goal} — open it to see what went</span>
+        </div>
+        <div class="ginbox__actions">
+          <button class="btn-ghost" type="button" data-removal-task="${escapeHtml(String(r.proposal_task_id))}"
+            data-removal-verdict="confirmed" title="That work is genuinely gone">Confirm</button>
+          <button class="btn-ghost" type="button" data-removal-task="${escapeHtml(String(r.proposal_task_id))}"
+            data-removal-verdict="dismissed" title="A refactor, a move, or work already superseded">Dismiss</button>
+        </div>
+      </li>`;
+  }
+
+  function renderRemovals(data) {
+    const box = host && host.querySelector('#attention-removals');
+    if (!box) return;
+    const rows = (data && Array.isArray(data.pending) ? data.pending : []);
+    const count = data && data.count != null ? data.count : rows.length;
+    if (!rows.length) {
+      box.innerHTML = '';
+    } else {
+      const more = count > 5 ? `<p class="ginbox__pending">…${count - 5} more awaiting an answer.</p>` : '';
+      box.innerHTML = '<h3 class="ginbox__sec-h">Was this removed? '
+        + `<span class="count-pill">${count}</span></h3>`
+        + `<ul class="ginbox__list">${rows.slice(0, 5).map(removalRowHtml).join('')}</ul>${more}`;
+    }
+    window.OTBAttention?.refresh();
+  }
+
+  function loadRemovals() {
+    return getJSON(`${API}/removal-proposals`)
+      .then((data) => renderRemovals(data))
+      .catch(() => { /* a non-triager's 403, or an older server: never break the hall */ });
+  }
+
   // ---- the rot queue (task 1003279, goal 1000072) ---------------------------
   //
   // "Untouched-for-X triggers a configured action rather than a silent decay."
@@ -484,6 +578,13 @@
       // triage. Its rows carry the shared .ginbox__item class, so refresh()
       // counts them with no change to the selector below.
       '<div id="attention-nod"></div>' +
+      // task 1004095 (BV2.R16): removal proposals — a ship deleted files an
+      // earlier shipped task put there, and somebody has to say whether that work
+      // is genuinely gone or it was a refactor. Straight after nod because it is
+      // the same act at the same floor: a Metic+ answering a question the system
+      // filed, inside a goal. Before blockers because a blocker is waiting on the
+      // owner specifically, while this is waiting on whoever looks first.
+      '<div id="attention-removals"></div>' +
       // task 1003455 (goal 1000089): open blockers — things stuck on the owner
       // (modules/ideas/blockers.js). AFTER nod, BEFORE rot: like every slice
       // above it, a blocker is genuinely waiting on a human, but unlike them it
@@ -499,6 +600,7 @@
     host.addEventListener('click', onClick);
     load();
     loadNodQueue();
+    loadRemovals();
     loadBlockers();
     loadRot();
     // task 1002802 (P06): the profile slice lives in its own file (builders.js is

package/modules/hall-ui/public/style.css

@@ -3032,6 +3032,18 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
 .ginbox__note { margin: 3px 0 0; font-size: 12.5px; color: var(--ink-soft); font-style: italic; }
 .ginbox__actions { flex: 0 0 auto; display: flex; gap: 6px; }
 .ginbox__pending { font-size: 12.5px; margin: 10px 0 0; color: var(--ink-soft); }
+/* task 1004095: a row whose actions are TWO verbs, not one. `.ginbox__actions` is
+   `flex: 0 0 auto` and the card never wraps, so a second button takes its width
+   straight off the title’s — measured at 375px, the removal row’s title fell to
+   96px and 252px tall where every other row on this card keeps 138–218px. The
+   modifier lets the actions drop under the words at phone width instead, which is
+   the card’s own "a phone gets its own treatment, the document never widens"
+   rule. Opt-in: an existing single-verb row is untouched. */
+@media (max-width: 640px) {
+  .ginbox__item--stacked { flex-wrap: wrap; }
+  .ginbox__item--stacked .ginbox__body { flex: 1 1 100%; }
+  .ginbox__item--stacked .ginbox__actions { margin-top: 6px; }
+}
 /* task 1003464: the system's notices are inbox LINES on Home (rebase owed, an
    input the system needs, the monthly budget) — the placement rule, not a
    banner inside the Standing card. A row is a kind in the label voice over one

package/modules/lifecycle/cascade.js

@@ -113,6 +113,13 @@
 // person. Kept as an explicit set rather than inferred, because "is this
 // copy/visual work" is a judgement the rule should state out loud and a test
 // should be able to pin — an inferred predicate is the kind that quietly widens.
+// The removal rule's key, lifted out of its declaration so the SURFACE that
+// answers a removal proposal (task 1004095 / BV2.R16) can find those proposals
+// without hand-typing the string. The key is half of every generated row's
+// `source_ref` (see cascadeSourceRef below), so a reader that re-types it is a
+// reader that silently returns nothing the day the key changes.
+const REMOVAL_RULE_KEY = 'removal-proposed-on-ship';
+
 const COPY_VISUAL_MODULES = Object.freeze([
   'copy-desk',    // the copy registry + proposals (goal 1000074's own spine)
   'hall-ui',      // the builders' hall — the most-seen surface
@@ -234,7 +241,7 @@ const CASCADES = Object.freeze([
     body: artistReviewBody,
   }),
   Object.freeze({
-    key: 'removal-proposed-on-ship',
+    key: REMOVAL_RULE_KEY,
     // ENGINEER, not artist: confirming asks whether deleted code is genuinely
     // gone or was moved, which is a question about the diff.
     discipline: 'engineer',
@@ -567,6 +574,7 @@ async function runCascadesForShip(shipped, deps = {}) {
 
 module.exports = {
   CASCADES,
+  REMOVAL_RULE_KEY,
   removalProposalBody,
   IDEA_CASCADES,
   TRIGGERS,