@bongos/core 1.19.922 → 1.19.924

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.922",
-  "core_contract": "1.19.922",
-  "source_commit": "b57f79a73cefa42840ff10d77aab958af1fe4ed4",
+  "core_version": "1.19.924",
+  "core_contract": "1.19.924",
+  "source_commit": "c6cacd0f4e168f1f47817662b3eb47afa9b0e325",
   "source_ref": "HEAD",
-  "built_at": "2026-09-20T20:40:52.111Z",
+  "built_at": "2026-09-20T22:26:38.017Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 510,
+    "docs_redacted": 511,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2309,
+    "functional_verbatim": 2312,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2845,
-  "tree_sha256": "36516d370c40955c53b7b0b70845d49e03d34aaecf7d5e58a54bf78ed454f694",
+  "file_count": 2849,
+  "tree_sha256": "c69c8cf54442568a4116f2e35e4ec1e9e72abbe2fac0bc4e258966118ad5aceb",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2099,10 +2099,15 @@
       "mode": "0000644",
       "sha256": "3a743808de440eebd5fcdd74a4c88e41acc82cc02ce5632cb392b2aa0c05b48e"
     },
+    {
+      "path": "docs/adr/0322-a-remnant-needs-evidence-and-merged-wins.md",
+      "mode": "0000644",
+      "sha256": "6a4ad58720701e760068d5ce1761733790beef0a142aa31a08782d029cc7a390"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "caece332e048f6ee15517740255c4d715efc025c82756ac095ccde7814b60daa"
+      "sha256": "7c66ecbd1940f3cdd830f0fb4acf65c41178807a431bb8fab382e4b8a0dbc8ae"
     },
     {
       "path": "docs/api-reference.md",
@@ -2137,12 +2142,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "4f848ba8e139ff864151d71e4f743f799b23cf1d6a59e3638aae13ed45bce4d6"
+      "sha256": "b0baae493a096ea80d8eb03a2f94b3024b8ccfa252817d12f16ea4fbc9e0bc40"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "dc177418430b6f87b508867d35d8ef7e821d113d0ede598462a690402d699f46"
+      "sha256": "f1377ec71f59b2e976046d5a382ba8319b201242faf5de6e3760f57c595c40e4"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2672,7 +2677,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "d657d8b2fc7eb2bb4379a22a41d95b835ac655848626120a2218ab7603df5313"
+      "sha256": "7fd498d8715f13993c9a6063ec9add31cdc9ee13b1892af2c366e5c8314dc233"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4272,7 +4277,7 @@
     {
       "path": "modules/economy/reward.js",
       "mode": "0000644",
-      "sha256": "ef4b939d83324c927dd1b1c8e3200212d0b5da973a87db6f9810c9c7edb942ad"
+      "sha256": "79f225665dfc84fce1c50d01a25bbf81986c91047732d04113f24a68f766d29a"
     },
     {
       "path": "modules/economy/routes/cost.js",
@@ -4787,12 +4792,12 @@
     {
       "path": "modules/hall-ui/public/deploy.html",
       "mode": "0000644",
-      "sha256": "939d7544560d07848172df49700bdbb6f13d9e8ccb04040cf3f85a2eafd1f9bf"
+      "sha256": "b194f231a0b503bbfd0a5d68fc16e7a1bb6c008b6a1d8139e083ec839d018b95"
     },
     {
       "path": "modules/hall-ui/public/deploy.js",
       "mode": "0000644",
-      "sha256": "6676d4b7f5eb4a55d7cc4070824fc174f0ce7a74ce25441834e1d6175367fadc"
+      "sha256": "e5a689447524c8c3460a2a649bea3673c958c6ec8607ad41144c575d29d142d0"
     },
     {
       "path": "modules/hall-ui/public/diagram-viewer.css",
@@ -5117,7 +5122,7 @@
     {
       "path": "modules/hall-ui/public/project-settings.css",
       "mode": "0000644",
-      "sha256": "5015849e7273ecea7a044a133eab54913930b949e20e206a9503a08074fab3fa"
+      "sha256": "e4a266b0b5b2574f3864e67afb1581a53b374f6cab02f01df34d8b51dc2570c0"
     },
     {
       "path": "modules/hall-ui/public/project-settings.html",
@@ -5399,6 +5404,11 @@
       "mode": "0000644",
       "sha256": "363598b5905c850967b407f20110a1d9e9d5b1090a958700cb6a4ed5cea70d80"
     },
+    {
+      "path": "modules/ideas/idea-state.js",
+      "mode": "0000644",
+      "sha256": "e516f7951b91234c1f9dc6e327dc7365b6f6c9aad69bb3a85835061e2d072253"
+    },
     {
       "path": "modules/ideas/inbox.js",
       "mode": "0000644",
@@ -5477,7 +5487,7 @@
     {
       "path": "modules/ideas/routes/inbox.js",
       "mode": "0000644",
-      "sha256": "5ec576c26e46c8a27cd3b40d400abd177f4bdf1f2124e286a294fa58a809489a"
+      "sha256": "c302e5cd180ce9a6253ab30fad24b970d06f33f0916ac5d922323e536da7b213"
     },
     {
       "path": "modules/ideas/routing.js",
@@ -5507,7 +5517,7 @@
     {
       "path": "modules/ideas/trail.js",
       "mode": "0000644",
-      "sha256": "35dfa6abb78efdac695b89805d660ff4bb0e0d2bc2587f0d1945310dcffb2980"
+      "sha256": "5ea6bad2296406f56bcf3a00f040ce78a789f24fc0d7d5b933e1526cbbb97cd2"
     },
     {
       "path": "modules/lifecycle/CLAUDE.md",
@@ -6402,7 +6412,7 @@
     {
       "path": "modules/provisioning/core-upgrade.js",
       "mode": "0000644",
-      "sha256": "b66e81df0685777b9c6f92260d372fab3b37a81d39dbbf5d9183537634ec3e2b"
+      "sha256": "284fffcdb5bbeac39e16699428b5c775be45e0fc2b88fe9dab38a41b9daba0df"
     },
     {
       "path": "modules/provisioning/credential-preflight.js",
@@ -6509,6 +6519,11 @@
       "mode": "0000644",
       "sha256": "9d530c724f49392e5eed301b498631be5bfa096eca344cd7b26b88b5fc9210d3"
     },
+    {
+      "path": "modules/provisioning/migrations/provisioning_020_core_upgrade_preflight.sql",
+      "mode": "0000644",
+      "sha256": "cdc3e8992d1e4273a472b826f208736235c8a3b16a700de33a7705cdae99ef9e"
+    },
     {
       "path": "modules/provisioning/module.json",
       "mode": "0000644",
@@ -6542,7 +6557,7 @@
     {
       "path": "modules/provisioning/provisioning.js",
       "mode": "0000644",
-      "sha256": "c2e7574b84038bd2f4da93d5ec54f8e577353d9c37e5585bff1dd9b8f855cccf"
+      "sha256": "cfd57a109b12ecc629422c16a4db85fe2daf1700dcae60df2885701e5eecd5cc"
     },
     {
       "path": "modules/provisioning/rate-limit.js",
@@ -7902,12 +7917,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "0169c3fafa67ebf63c9ae35566e8104bcf210ae80973c8e1837874109fe85354"
+      "sha256": "71c16e136b5801d5f4e6c1a7f51259a4806e4455a56667d938f741165fb606c2"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b62dd828c8e8b167dfc4bca7d54fdec8c76b13f89a44e61365d48962abf77ba9"
+      "sha256": "5ffcd517937622f074ddafa5e24c388f82e70025be47e2b2903ecb51fca516d1"
     },
     {
       "path": "public-docs/index.html",
@@ -8852,7 +8867,7 @@
     {
       "path": "scripts/gds/provision-core-upgrade.js",
       "mode": "0000644",
-      "sha256": "1fd6e38184bb0943fdc22e314b9e6cad0b5ebeae7f7370992adbd3b4f2ad5a9e"
+      "sha256": "1c17b46ebe04bf19abfcfe40a0b3029c052362155b90b6445ea2b105cae7e621"
     },
     {
       "path": "scripts/gds/provision-disconnect.js",
@@ -8892,7 +8907,7 @@
     {
       "path": "scripts/gds/provision.js",
       "mode": "0000644",
-      "sha256": "784400e0a2912fb4c9bd14107dca7d50cc4a10d77b4a849cd73fe853a6cf3966"
+      "sha256": "2dee107429b1391e6e00a0c4915f9972c0e9d16f90a3d2ac111a34ffa5e7bc1d"
     },
     {
       "path": "scripts/gds/publish-credential-check.js",
@@ -9907,7 +9922,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "86c69951f0059e5374245ef798c5cd24cd82d836a4ccf706e80f186de986b473"
+      "sha256": "d846a0cb8672ac4215442311fbc5a8c6bcd00f99e085e98b485095a2573007c5"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10817,12 +10832,12 @@
     {
       "path": "tests/core_upgrade_door.mjs",
       "mode": "0000644",
-      "sha256": "9b6fb0b2279102a6b9224c1e598adb8cb3d8dd039a7d63116f56862852c64ec8"
+      "sha256": "c1142dc4a706d33bdef42cff56f4c5be4a7c091bbfd5a9f6ed87af04cd3518c6"
     },
     {
       "path": "tests/core_upgrade_runner.mjs",
       "mode": "0000644",
-      "sha256": "5d0b4fa1ec48d40ebc801902b5279475533ae2dc8819e587bb95bc17783cba06"
+      "sha256": "c818ad655da58837122dc40a8d64b0ca89eb643aebba094ed674546cbaa3b1f5"
     },
     {
       "path": "tests/cosmos_token_contrast.mjs",
@@ -10967,7 +10982,7 @@
     {
       "path": "tests/deploy_page_projects.mjs",
       "mode": "0000644",
-      "sha256": "2de9feef1fa6be72e8f9866a28b262149628316042f277c20d1bc00a088ec5d4"
+      "sha256": "4a3ff955e0b1a605a96bdff6ec5dc36e0a5041e5a7fc8fa8b45768249a422d3a"
     },
     {
       "path": "tests/design_tokens_sync.mjs",
@@ -12034,6 +12049,11 @@
       "mode": "0000644",
       "sha256": "8bfc36537ffccae702e74e8763534fa535486a2eb8bbf9ee546a2c7368d1dc6b"
     },
+    {
+      "path": "tests/idea_state.mjs",
+      "mode": "0000644",
+      "sha256": "f71f7007d72689e865b1945feac66012398b38557affdc776d0a6abdc2140e65"
+    },
     {
       "path": "tests/idea_task_descent.mjs",
       "mode": "0000644",

package/docs/adr/0322-a-remnant-needs-evidence-and-merged-wins.md

@@ -0,0 +1,110 @@
+# ADR 0322 — The five states are derived once, and a remnant needs evidence
+
+- **Status:** Accepted
+- **Date:** 2026-09-20
+- **Task:** [task 1004103](https://cloudbongos.com/builders#/task/1004103) (BV2.R17, goal 1000095 — BONGOS-V2)
+- **Spec:** `docs/specs/<redacted>.md` decisions 4, 19 and 20; criterion `ideator-sky-tells-the-truth`
+- **Design of record:** `docs/design/ideator-surface-direction.md` §"The five objects"
+- **Under:** [ADR 0321](0321-brightness-is-a-weighted-share-and-the-targets-are-a-row.md), [ADR 0313](0313-a-removal-is-proposed-by-the-ship-and-confirmed-by-a-person.md), [ADR 0312](0312-provenance-is-a-second-ideas-owned-edge-table.md)
+
+## Context
+
+The ideator surface draws a thought as one of five objects: **star** (it caused work that
+is still alive), **protostar** (filed, not yet ignited), **satellite** (folded into another
+thought), **remnant** (it burned, then the project removed it) and **cold body** (declined
+at triage, so it never ignited and has no size at all). Dim and dark are different states
+and must be different objects, not one dot at two opacities.
+
+Three surfaces are about to draw them — the room (BV2.R03), the descent (R10) and the sky
+(R20) — and the spec's own phrasing is that every state must be *computed from the ledger,
+and no surface has to infer one*.
+
+The facts already exist. `idea_inbox.status` carries the triage verdict (`open`,
+`promoted`, `discarded`, `merged`; `core_195`). ADR 0321 gave economy `ideaBrightnesses()`,
+returning `hasWork`, `share` and `attributable` per idea. `tasks.goal_id` and `tasks.status`
+say where a thought's work sits and whether it awaits a nod. Nothing was missing; what was
+missing was one place that reads them.
+
+## Decision
+
+**One resolver, `modules/ideas/idea-state.js`, and no surface decides a state.** A state
+inferred in three renderers is three states: the sky can say a thought went out while the
+room beside it still calls it alive, with nothing erroring and no way to tell which is
+right. The resolver is pure — facts in, object out — the way `routing.js` is pure about a
+landing. `attachStateToTrail` is the one async wrapper, composed on the trail route after
+`attachSizeToTrail`.
+
+**Brightness goes on the `reward` port.** `ideas` may not reach `credit_log` any other way
+(ADR 0083 rule 1), and it already declares `reward` in `consumes`, so no new dependency
+edge. Shipping size without brightness had left the module able to draw how big a thought
+was and unable to say whether it was still alive.
+
+**The order of the tests is the decision**, and each step could have gone the other way:
+
+1. **Merged wins over everything.** A folded thought is a satellite even when it earned
+   money of its own — and it *keeps* that money; `trail-size.js` is emphatic that stream 1
+   books against the idea whose lineage row named the shipping task. This changes what the
+   thought **is**, not what it earned. Letting work win here draws a satellite as an
+   independent star beside the thought that absorbed it: one idea, twice in the sky.
+2. **Work beats a discard.** The design defines a cold body as one that *"never ignited, so
+   it has no size at all"* — a stated property, and testing work before status is what
+   makes it true by construction rather than by hope. It is reachable: triage can discard a
+   duplicate whose twin already routed and paid, and `updateIdea` never touches the ledger.
+3. **A remnant needs evidence, never the absence of an answer.** `share === 0` means the
+   project confirmed every piece of the descent gone. `share === null` means the removal
+   facts could not be read at all — ADR 0321 is explicit that those are different answers.
+   An idea with work and no readable facts is a **star** carrying `attributable: false`, so
+   a surface says "unknown" rather than "full". Reading a falsy share as death turns one
+   unmounted module into a sky of hollow rings.
+4. **A protostar is the absence of work, not the presence of a status.** Ignition is being
+   *paid* for something, not being converted into a row, so a promoted-but-unshipped idea is
+   still unignited — which is exactly the state the nod queue exists for.
+
+**Position is a second axis**, because the design says the object alone cannot carry it: a
+protostar **in a well** has a home and awaits a nod; one in **open space** has nothing
+holding it. The resolver returns `position`, `wellGoalId` and `awaitingNod` for every state
+(a star has a position too), and the nod is asked of *every* task rather than only the one
+that named the well — an idea that became two tasks, one promoted and one still at
+`backlog`, still has something waiting on a person.
+
+**`suggested_goal_id` is deliberately not a well.** It sits on the row, it names a goal, and
+it is the wrong fact: `projection.js` records it as strictly advisory — the routing hint on
+a filing that did **not** convert, with `tasks.goal_id` as the binding home. Reading it here
+would draw a protostar inside a well that never caught it and put it in a nod queue nobody
+can act on, because no task exists to promote. The binding fact is now selected on both of
+the trail's task joins (`trail.js`), which costs no extra round trip.
+
+**The page reads the ledger once.** `attachSizeToTrail` leaves economy's own `byTask`
+breakdown on each row and brightness takes its share of exactly that, so the state attach
+hands it straight back. All of the sizes or none: a partial map reads a missing entry as
+"no work", which would draw a paid star as a protostar.
+
+**An absent `reward` port does not empty the sky.** The states still resolve on status
+alone, carrying `attributable: false` — the same posture `trail-size.js` takes with
+`size: null`.
+
+## Consequences
+
+- `GET /inbox/by-builder/:id` now returns `state` per idea beside `size` and
+  `descent_tasks`. Additive; no existing consumer reads it yet, and R03/R10/R20 will.
+- The five objects are spelled once (`IDEA_STATES`), so a renderer switching on hand-copied
+  strings cannot drift by a hyphen and silently draw nothing.
+- Nothing here writes, and no credit moves. ADR 0313 stands: `shipped` is terminal, and
+  only the picture changes.
+- `tests/idea_state.mjs` (31 cases, DB-free). The ordering, the zero-over-zero edge, the
+  well and the trail SQL are each mutation-probed.
+
+## Rejected
+
+- **Resolving the state in each renderer.** The cheapest thing to write and the reason the
+  done-when says "no surface has to infer one".
+- **Deriving the state from `share` alone.** It merges a protostar with a remnant — the
+  precise distinction the two channels exist to draw, and the one BV2.R19's proof checks.
+- **Treating an unreadable `share` as zero.** "We could not look" is not "everything was
+  removed"; ADR 0321 pays for that distinction upstream and discarding it here wastes it.
+- **Status-first ordering** (a discarded idea is always a cold body). It contradicts the
+  object's own stated property the moment triage discards something that already paid.
+- **Reading `suggested_goal_id` as a well.** Advisory by construction; it would populate a
+  nod queue with entries nothing can act on.
+- **A sixth object for "unknown brightness".** The vocabulary is the owner's and is five;
+  the uncertainty is carried as a flag on the answer, not as a new thing in the sky.

package/docs/adr/README.md

@@ -413,3 +413,4 @@ This keeps the decision history honest and traceable.
 | 0319 | [**A removal verdict is a row beside the question, because both answers close it the same way** ([task 1004095](https://cloudbongos.com/builders#/task/1004095), goal 1000095 — BONGOS-V2). [ADR 0313](0313-a-removal-is-proposed-by-the-ship-and-confirmed-by-a-person.md) settled that a ship deleting an earlier shipped task’s files files a QUESTION and a person answers it; task 1004090 built the question and nothing could answer it. Building the answer surfaced the property that decides the design: a proposal is a question, not work, so CONFIRMING and DISMISSING both leave nothing to build and both end the task at `abandoned` — meaning a status alone records neither, and brightness could not tell the star it must dim from the one it must not. ADR 0313 had already rejected the obvious alternative (a `removed` status; `shipped` is terminal and much of the ledger leans on it — a removal is a fact recorded BESIDE work, not a new terminal state). Decision: `lifecycle_removal_verdicts` (migration `lifecycle_009`), PRIMARY KEY on `proposal_task_id` so one proposal holds one answer ever — a second decide is REFUSED (409), never upserted and never an idempotent 200, because overwriting destroys the record that a person answered differently; the row is locked `FOR UPDATE` first, so simultaneous Confirm and Dismiss cannot both read “undecided”, and `ALREADY_DECIDED` is checked BEFORE `PROPOSAL_CLOSED` because an answered proposal is also abandoned and the useful message is the one naming the earlier verdict. The verdict and the status change commit in ONE transaction. What this does NOT ship is the target list: the affected tasks and paths stay PROSE in the proposal body (the owner’s 2026-09-20 decision, since [ADR 0242](0242-a-cascade-is-a-declaration-table-on-the-event-that-already-exists.md) forbids widening the runner to fan out), and nothing here parses it — brightness designs that storage. What brightness does get is structured: the verdict plus `ship_task_id`, denormalised out of the `source_ref` that encodes it as a string nothing can join on. Surface: spec decision 15’s “existing awaiting-nod surface” is the CARD, not the QUEUE — [ADR 0299](0299-the-nod-queue-stays-scoped-to-routed-filings.md) keeps that queue scoped to routed filings and a removal proposal has no idea lineage at all, so it gets its own slice on the same card at the same floor. The PERMISSION is reused (`task.promote`, Metic+, read and write both) and the VERB is not: no existing route means “that work is genuinely gone”, and `/tasks/:id/abandon` would close the question without recording which answer was given. Top-level `/removal-proposals` rather than `/tasks/removal-proposals`, because the manifest mounts `tasks` first and its `/tasks/:id` swallows a later file’s literal segment. Rot is INHERITED: `backlog` is rottable and `abandoned` is not, so an unanswered proposal rots and an answered one leaves the feed with no code written for either — pinned against the rot module’s own exported vocabulary. Rejected: the status as the record; parsing the body at confirm time; widening the nod queue; separate `/confirm` and `/dismiss` routes; upserting a second verdict; a `LIKE ‘prefix%’` match (a rule key may contain an underscore, which is a LIKE wildcard).](0319-a-removal-verdict-is-a-row-beside-the-question.md) | ideas / lifecycle |
 | 0318 | [**Listing a file for task affinity is not claiming to own it** ([task 1004110](https://cloudbongos.com/builders#/task/1004110), goal 1000095 — BONGOS-V2). The case [ADR 0314](0314-module-protection-is-per-path-not-per-module.md) named and left open, closed by neither of the two routes it predicted. `builder-settings` derived `protected` — Archon-only to scope a goal to — on exactly one glob, `src/bongos/routes/me.js`, caught by the blanket `src/bongos/routes/` prefix. **That glob was never an ownership claim:** `MODULE_GLOBS` listed it for task AFFINITY and said in the same comment that the `GET /me` aggregator stays a thin core facade, and `isProtected()` cannot tell the two apart. **Both predicted routes were measured and rejected.** Narrowing the blanket prefix: all eighteen files under `src/bongos/routes/` are protected by that prefix AND NOTHING ELSE, so narrowing unwalls `auth.js`, `builders.js`, `backup.js` and `core-update.js` together — now pinned as a tripwire test rather than left as a caution. Moving `me.js` into `modules/builder-settings/`: the aggregator resolves TEN module ports (`lifecycle`, `reward`, `onboarding`, `government`, `specialities`, `grade`, `box`, `art` ×2, `discord`) and `builder-settings` is one of them, so hosting it inside one module means resolving nine foreign ports from the inside — the `core -> module` edge [ADR 0083](0083-modular-architecture-strangler-build-plan.md) rule 1 forbids. Decision: **ownership follows what the file is** — `me.js` moves to `kernel`, which already owns `src/bongos/routes/security.js`. This is 0314 one step on: owning the command is not owning the authority, and **being listed next to a module is not owning it either**. **Rejected: a general affinity tier** in `MODULE_GLOBS` mirroring `isCommandPath` — the audit does not support it. Three other modules (`kernel`, `devsecops`, `methodology`) are also protected only by paths outside their own directory, but in each the foreign path genuinely IS the domain; `builder-settings` was the only module protected by a path its own source called core, so a new tier would be a new place for a hole to hide, built for a population of one. `protectedModules()` goes 9 -> 8. **The wall that matters does not move:** a sub-Metic builder touching `/me` is still refused by `checkPermissionPaths`, asserted directly rather than assumed. The sixteen still-unowned route files remain [task 1004116](https://cloudbongos.com/builders#/task/1004116), whose option (a) this de-risks.](0318-listing-a-file-for-task-affinity-is-not-owning-it.md) | permissions / module scope |
 | 0321 | [**Brightness is a payout-weighted share, and a removal's targets are rows** ([task 1004099](https://cloudbongos.com/builders#/task/1004099), goal 1000095 — BONGOS-V2). Size is an idea's total ideator payout and never falls; brightness is how much of that work is still alive, and the pair is what lets a thought whose version was torn out draw LARGE AND DARK rather than merging with one that never mattered. Two things had to be settled. **The removal facts were stored in the wrong direction**: [ADR 0319](0319-a-removal-verdict-is-a-row-beside-the-question.md) gave a confirmed removal a row carrying the verdict and `ship_task_id` — the task whose merge DELETED the files — and deliberately left out the tasks whose work was removed, saying brightness would design its own storage when it needed one. Those are different rows under different ideas, so reading one as the other dims the wrong star while looking like a working query. `<redacted>` stores `(proposal_task_id, removed_task_id, paths)` at PROPOSAL time, from the SAME derivation objects the proposal body renders as prose — one derivation, two renderings, so they cannot disagree and `removal-proposals.js` keeps its refusal to parse a body back. Proposal time and not verdict time because the attribution comes from capped, rate-limited GitHub commit-history reads that only exist while the cascade runs. NOT a runner fan-out ([ADR 0242](0242-a-cascade-is-a-declaration-table-on-the-event-that-already-exists.md)): the rule still files one task; this records a side fact about it. `ON CONFLICT DO NOTHING`, never `DO UPDATE`, since a degraded second walk finds FEWER paths and must not erase a good first read — and the writer runs on the cascade's SKIPPED row too, so a re-ship repairs what a derivation outage missed. **The share is weighted by PAYOUT, not by task count**, or deleting a one-line fix dims a star as hard as deleting the feature; weighting by what each hop earned also makes 'large and dead' exact, and makes the two channels a share of ONE number rather than two unrelated measurements. Basis is paid + estimated to match size, which required `priceDescentForIdea`/`ideaSizes` to return a per-task `byTask` summing EXACTLY to `credits` — including ledger payments for tasks the descent no longer reaches, which `idea-size.js` keeps in `credits` so size cannot fall and which would otherwise make the parts sum to less than the whole. Three edges, each silent: an idea that earned nothing is `share: 1, hasWork: false`, because zero over zero is not zero and a protostar is not a remnant (the BV2.R19 distinction); an unreadable removal port gives `share: null, attributable: false`, because 'could not look' is not 'nothing was removed'; and a CONFIRMED removal naming no target dims nothing at all — brightness cannot know which idea — so `countUnattributedConfirmed()` exists to say the gap out loud instead of quietly brightening the sky. Brightness lives in `economy` beside size and reaches lifecycle through the new `lifecycle.removals` port, resolved OPTIONALLY and NOT declared in `consumes` (declaring it would turn 'lifecycle off' into 'instance will not start' — the `ideas.descent` precedent). **No credit is clawed back and nothing here writes**: ADR 0313 stands, `shipped` is terminal, only the picture changes. Rejected: parsing the proposal body (ADR 0319 already refused it — a human-facing line shape fails silently when reworded); re-deriving at verdict time; treating `ship_task_id` as the removed task; counting tasks rather than payouts; clamping the share at the top, which would hide the anomaly it claims to prevent.](0321-brightness-is-a-weighted-share-and-the-targets-are-a-row.md) | ideas / economy |
+| 0322 | [**The five states are derived once, and a remnant needs evidence** ([task 1004103](https://cloudbongos.com/builders#/task/1004103), goal 1000095 — BONGOS-V2). The ideator surface draws a thought as one of five objects — star, protostar, satellite, remnant, cold body — and three surfaces are about to draw them (the room, the descent, the sky). Every fact already existed: `idea_inbox.status` (`core_195`), [ADR 0321](0321-brightness-is-a-weighted-share-and-the-targets-are-a-row.md)’s `hasWork` / `share` / `attributable`, and `tasks.goal_id` + `tasks.status`. What was missing was ONE place that reads them: a state inferred in three renderers is three states, and the sky can say a thought went out while the room beside it still calls it alive, with nothing erroring. **Decision:** one pure resolver (`modules/ideas/idea-state.js`), brightness exposed on the `reward` port (ideas may not reach `credit_log` any other way — [ADR 0083](0083-modular-architecture-strangler-build-plan.md) rule 1 — and already declares `reward` in `consumes`), and the ORDER of the tests IS the decision. **MERGED wins over everything:** a folded thought keeps its own money (`trail-size.js` is emphatic) but is no longer its own point in the sky, so letting work win draws one idea twice, beside the thought that absorbed it. **WORK beats a DISCARD:** a cold body “never ignited, so it has no size at all” is a stated PROPERTY, and testing work first makes it true by construction — triage really can discard a duplicate whose twin already routed and paid, and `updateIdea` never touches the ledger. **A REMNANT needs EVIDENCE, never the absence of an answer:** `share: 0` is a confirmed removal, `share: null` is an unreadable one, and ADR 0321 pays for that distinction upstream — so an idea with work and no readable facts is a STAR carrying `attributable: false`, because reading a falsy share as death turns one unmounted module into a sky of hollow rings. **A PROTOSTAR is the absence of WORK, not of a status:** ignition is being PAID for something, so a promoted-but-unshipped idea is still unignited, which is exactly what the nod queue exists for. **Position is a second axis** (`well` / `open-space` / `awaitingNod`) because the design says the object alone cannot carry it, and the nod is asked of EVERY task, not only the one that named the well. **`suggested_goal_id` is deliberately NOT a well** — `projection.js` records it as strictly advisory, the routing hint on a filing that did not convert, so reading it would put a thought in a nod queue with no task to promote; the binding `tasks.goal_id` now rides on both of the trail’s task joins at no extra round trip. The page reads the ledger ONCE: the state attach hands economy back the `byTask` breakdown size just computed, all of them or none (a partial map reads a missing entry as “no work” and draws a paid star as a protostar). An absent `reward` port does not empty the sky — states still resolve, flagged unattributable. Nothing writes; ADR 0313 stands. Rejected: resolving in each renderer; deriving from `share` alone (it merges a protostar with a remnant, the exact BV2.R19 distinction); treating an unreadable share as zero; status-first ordering; reading the hint as a home; a sixth object for “unknown brightness” (the vocabulary is the owner’s and is five — the uncertainty is a flag on the answer, not a new thing in the sky).](0322-a-remnant-needs-evidence-and-merged-wins.md) | ideas / economy |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**1832 strings** across 3 surfaces · 1589 distinct pieces of copy · 1832 certain, 0 heuristic · 166 shown in more than one place.
+**1839 strings** across 3 surfaces · 1596 distinct pieces of copy · 1839 certain, 0 heuristic · 166 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 84 | 1342 |
+| `builders-hall` | `modules/hall-ui/public` | 84 | 1349 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 5 | 390 |
 
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `996edffc1966` | 2x | Access requests | modules/hall-ui/public/watch.html:46, modules/hall-ui/public/watch.html:61 |
 | … | | _126 more in the JSON registry_ | |
 
-## `builders-hall` — 1342 strings
+## `builders-hall` — 1349 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -89,6 +89,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `66cea7cefa4e` | certain | '; for (const row of bodyRows) { html += ' | `modules/hall-ui/public/md-reader.js:220` |
 | `53e4ac514458` | certain | '; out.push(html); continue; } // Lists (unordered '- ' or ordered '1. '); consecutive items collapse. if (/^( | `modules/hall-ui/public/md-reader.js:224` |
 | `87fa099f5068` | certain | '; } html += ' | `modules/hall-ui/public/md-reader.js:224` |
+| `af615fa9f404` | certain | (checked {…}) | `modules/hall-ui/public/deploy.js:152` |
 | `544794f1ec8f` | certain | (later in | `modules/hall-ui/public/index.html:9` |
 | `3ac2eb36ba97` | certain | (no sections) | `modules/hall-ui/public/drachmae.js:260` |
 | `a4614c0b8eb5` | certain | (or use the Claude Code CLI) and open the project. | `modules/hall-ui/public/hall-render.js:864` |
@@ -235,8 +236,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `cab7a9526ca1` | certain | Changes save the moment you pick. “Default” clears your override and falls back to the system's choice. | `modules/hall-ui/public/settings.html:365` |
 | `4b714191b423` | certain | Changes touching protected build surfaces, held for your approval. | `modules/hall-ui/public/gate.js:403` |
 | `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:799` |
+| `f66f5cdaa732` | certain | Checked against {…} — nothing blocks this move.{…} | `modules/hall-ui/public/deploy.js:155` |
 | `f8725cf3ba62` | certain | Checking dependency order… | `modules/hall-ui/public/work.js:854` |
 | `7a41b18c0de8` | certain | Checking for conflicts… | `modules/hall-ui/public/work.js:833` |
+| `69da40d030b0` | certain | Checking what this would do… | `modules/hall-ui/public/deploy.js:145` |
 | `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:1053` |
 | `834f8c6f3b72` | certain | Choose a builder… | `modules/hall-ui/public/goals-render.js:1222` |
 | `b3d0e2af5176` | certain | Choose a goal first. | `modules/hall-ui/public/task.js:938` |
@@ -322,7 +325,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:297` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:640` |
-| `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:157` |
+| `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:254` |
 | `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1133` |
 | `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1132` |
 | `7a778d188e87` | certain | Could not remove: {…} | `modules/hall-ui/public/government.js:369` |
@@ -616,8 +619,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1ae18e58fead` | certain | Most recent first. Each load of this page is itself recorded in the audit log. | `modules/hall-ui/public/sessions.js:340` |
 | `f14a91b3f625` | certain | Most recent first. Each row is one recorded work session; every id on it opens its record. | `modules/hall-ui/public/sessions.html:56` |
 | `e52ae74f0052` | certain | Move to goal | `modules/hall-ui/public/task.js:581` |
-| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:122` |
-| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:217` |
+| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:218` |
+| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:314` |
 | `ae84ebe1d735` | certain | Name cannot be blank. | `modules/hall-ui/public/settings.js:761` |
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:766` |
 | `5e8199266a8a` | certain | Name unvouched | `modules/hall-ui/public/watch.js:374` |
@@ -653,7 +656,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2a6d7552e21f` | certain | No other sessions. | `modules/hall-ui/public/settings-sessions.js:64` |
 | `9f73b3f3dad0` | certain | No rank floor — any builder can claim this task | `modules/hall-ui/public/task-lib.js:62` |
 | `3fd0c6fcb92e` | certain | No request and no invite needed. Sign in with GitHub, and a step-by-step guide takes you the rest of the way. | `modules/hall-ui/public/hall-render.js:277` |
-| `2947c1ddea9a` | certain | No running box to deploy. | `modules/hall-ui/public/deploy.js:195` |
+| `2947c1ddea9a` | certain | No running box to deploy. | `modules/hall-ui/public/deploy.js:292` |
 | `9fb9f766450d` | certain | No sections yet | `modules/hall-ui/public/primer.js:130` |
 | `bef9fe43ba84` | certain | No sessions recorded yet. They land here as builders ship and end sessions. | `modules/hall-ui/public/sessions.js:146` |
 | `4485497d87bb` | certain | No specialities yet. Create one below — it takes a name and a craft, and you can train it afterwards. | `modules/hall-ui/public/settings-specialities.js:169` |
@@ -666,6 +669,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1967d2176f2e` | certain | Nobody has an open ask right now. | `modules/hall-ui/public/collab.html:78` |
 | `c65c9f5c02e3` | certain | Nobody is waiting on you. Requests reach you by role — | `modules/hall-ui/public/collab.html:54` |
 | `91c409a4aea5` | certain | Nobody vouched for this name — anyone can file a request naming anyone. Confirm who is asking before you admit | `modules/hall-ui/public/watch.js:374` |
+| `428a62539050` | certain | Not checked yet — the runner takes this reading on its own tick. | `modules/hall-ui/public/deploy.js:150` |
 | `c72e0bdb834a` | certain | Not declared in module.json — this is who ships the module. | `modules/hall-ui/public/modules.js:62` |
 | `361b353ded5e` | certain | Not enough shipped work yet to chart. | `modules/hall-ui/public/hall-widgets.js:184` |
 | `90230572d017` | certain | Not found | `modules/hall-ui/public/task.js:970` |
@@ -684,7 +688,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `fec5d78497e8` | certain | Nothing in the backlog right now. | `modules/hall-ui/public/work.js:1107` |
 | `905e99f158c2` | certain | Nothing is discarded by omission: every task needs a decision before this can be submitted. Abandoning stamps  | `modules/hall-ui/public/goals-render.js:1012` |
 | `2ec0fbb20a42` | certain | Nothing is waiting. A spark appears here when its author offers a quick idea up for development. | `modules/hall-ui/public/ideas.js:747` |
-| `9ac63d97239a` | certain | Nothing newer is published that this box can take. There is nothing to deploy. | `modules/hall-ui/public/deploy.js:140` |
+| `9ac63d97239a` | certain | Nothing newer is published that this box can take. There is nothing to deploy. | `modules/hall-ui/public/deploy.js:237` |
 | `ad9a17a8a5eb` | certain | Nothing shipped yet. | `modules/hall-ui/public/profile.js:242` |
 | `ad9a17a8a5eb` | certain | Nothing shipped yet. | `modules/hall-ui/public/work.js:1068` |
 | `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:258` |
@@ -859,7 +863,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `324af64c8b6e` | certain | See all {…} goals {…} | `modules/hall-ui/public/roadmap.js:207` |
 | `a9c398651862` | certain | See the cross-project record | `modules/hall-ui/public/profile-canonical.js:114` |
 | `17d5b5739f46` | certain | See the work board → | `modules/hall-ui/public/hall-render.js:1003` |
-| `55cde0774831` | certain | See what would change | `modules/hall-ui/public/deploy.js:108` |
+| `55cde0774831` | certain | See what would change | `modules/hall-ui/public/deploy.js:121` |
 | `75dc5463facc` | certain | Select at least 2 waiting tasks to copy a parallel-session prompt. | `modules/hall-ui/public/work.js:818` |
 | `a98882faa482` | certain | Select at least 2 waiting tasks to copy a sequential prompt. | `modules/hall-ui/public/work.js:843` |
 | `582bdd9435eb` | certain | Select task {…} for bulk actions | `modules/hall-ui/public/work.js:454` |
@@ -867,7 +871,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7e1d54119e08` | certain | Select task {…} for bulk release | `modules/hall-ui/public/work.js:242` |
 | `ae43a132699b` | certain | Selectable today | `modules/hall-ui/public/government.js:799` |
 | `53cc6d8dd23c` | certain | Send invitation | `modules/hall-ui/public/goals-render.js:1211` |
-| `a39b0f9d86e5` | certain | Serving {…} — read from the box itself, {…}. | `modules/hall-ui/public/deploy.js:142` |
+| `a39b0f9d86e5` | certain | Serving {…} — read from the box itself, {…}. | `modules/hall-ui/public/deploy.js:239` |
 | `64a1f055129e` | certain | Session card richness | `modules/hall-ui/public/settings-render.js:83` |
 | `d14e8e9acaff` | certain | Session ended. | `modules/hall-ui/public/settings-sessions.js:81` |
 | `55e0a34bafed` | certain | Session log{…} | `modules/hall-ui/public/task.js:487` |
@@ -1009,6 +1013,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `198ba9353bf6` | certain | The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment,  | `modules/hall-ui/public/task.js:975` |
 | `34555793f33e` | certain | The task list could not be loaded right now. | `modules/hall-ui/public/work.js:1301` |
 | `aed969dd1e18` | certain | The unattended runner works only the goals listed here, and only while it is on. This is the switch — it lives | `modules/hall-ui/public/gate.html:54` |
+| `8c991355687d` | certain | The upgrade checked {…} and refused:{…} | `modules/hall-ui/public/deploy.js:160` |
 | `a42a37c43bfb` | certain | The words this project shows people — what has been flagged, and what nobody has looked at. | `modules/hall-ui/public/copy-desk.js:328` |
 | `bcdbded93d4e` | certain | The work board failed to load. Reload to try again. | `modules/hall-ui/public/work.js:1496` |
 | `25794c439321` | certain | Then copy the project onto your machine and run the one-shot bootstrap (it checks your setup, installs depende | `modules/hall-ui/public/hall-render.js:890` |
@@ -1043,12 +1048,13 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/government.html:37` |
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/project-settings.html:36` |
 | `9a685b01e2c6` | certain | This page opens at a higher rank. | `modules/hall-ui/public/watch.html:40` |
-| `f93fcb24c6ba` | certain | This platform | `modules/hall-ui/public/deploy.js:187` |
-| `6e9dfe1fb903` | certain | This restarts {…} onto core | `modules/hall-ui/public/deploy.js:122` |
+| `f93fcb24c6ba` | certain | This platform | `modules/hall-ui/public/deploy.js:284` |
+| `6e9dfe1fb903` | certain | This restarts {…} onto core | `modules/hall-ui/public/deploy.js:218` |
 | `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/board-room.js:276` |
 | `09256febc32d` | certain | This sentence has {…} {…} where a value is dropped in when it is shown. | `modules/hall-ui/public/copy-desk.js:422` |
 | `c9e50a67988a` | certain | This task has shipped and its credits have landed. Neither Ship it nor Confirm is available. | `modules/hall-ui/public/task.js:719` |
 | `62b0940efd7d` | certain | This task is already retired. Promote restores it to the backlog. | `modules/hall-ui/public/task.js:755` |
+| `4301ecd67891` | certain | This would fail. | `modules/hall-ui/public/deploy.js:160` |
 | `2ad5823d2cd7` | certain | Three dials, all settings rather than code: | `modules/hall-ui/public/government.html:55` |
 | `82367d2122af` | certain | To paste the sign-in code: | `modules/hall-ui/public/hall-render.js:825` |
 | `f158ed1c24a2` | certain | Toggle fullscreen | `modules/hall-ui/public/diagram-viewer.js:101` |
@@ -1126,6 +1132,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b6b0fcb2bcee` | certain | You already have a pending request or invitation for this goal. | `modules/hall-ui/public/goals-render.js:1365` |
 | `52e93bbc07a6` | certain | You are already a member of this goal. | `modules/hall-ui/public/goals-render.js:1366` |
 | `46b1265ef172` | certain | You are not a member of this goal. | `modules/hall-ui/public/goals-render.js:1322` |
+| `921cb15a8188` | certain | You can still press Move — the runner will refuse it the same way, and the box is left where it is. | `modules/hall-ui/public/deploy.js:160` |
 | `b31fc908c962` | certain | You claimed #{…}. Open a terminal to start work. | `modules/hall-ui/public/goals-page.js:418` |
 | `b31fc908c962` | certain | You claimed #{…}. Open a terminal to start work. | `modules/hall-ui/public/goals-page.js:517` |
 | `b31fc908c962` | certain | You claimed #{…}. Open a terminal to start work. | `modules/hall-ui/public/work.js:905` |
@@ -1236,7 +1243,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `77ad318bb546` | certain | invited — awaiting their response | `modules/hall-ui/public/goals-render.js:1400` |
 | `af0777cd098b` | certain | is hardcoded back inside this | `modules/hall-ui/public/index.html:56` |
 | `c767b3e07826` | certain | is only the screen; the | `modules/hall-ui/public/diagrams.html:74` |
-| `d0e722302840` | certain | is published and this box is not on it yet. | `modules/hall-ui/public/deploy.js:108` |
+| `d0e722302840` | certain | is published and this box is not on it yet. | `modules/hall-ui/public/deploy.js:121` |
 | `aa530bd15088` | certain | itself). The registry stays the single source of truth for what the hall shows; a fitness check (scripts/gds/f | `modules/hall-ui/public/index.html:53` |
 | `966b32c8af7e` | certain | last check-in {…} ago | `modules/hall-ui/public/gate.js:360` |
 | `9018bf6e99eb` | certain | last used {…} · signed in {…} | `modules/hall-ui/public/settings-sessions.js:46` |
@@ -1251,7 +1258,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b9f2e0d43c94` | certain | no clock | `modules/hall-ui/public/government.js:607` |
 | `e3317d58ec83` | certain | no cost logged | `modules/hall-ui/public/hall-render.js:352` |
 | `e02979266baf` | certain | no data | `modules/hall-ui/public/hall-kit.js:735` |
-| `9e194a57d054` | certain | no reading | `modules/hall-ui/public/deploy.js:91` |
+| `9e194a57d054` | certain | no reading | `modules/hall-ui/public/deploy.js:104` |
 | `33ca71bef112` | certain | no tasks yet | `modules/hall-ui/public/goals-render.js:163` |
 | `739a4bd6bd83` | certain | node scripts/setup-builder.js | `modules/hall-ui/public/hall-render.js:890` |
 | `61f0f4b2f4ab` | certain | not categorised yet | `modules/hall-ui/public/goals-page.js:277` |
@@ -1279,7 +1286,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2fb1dad96280` | certain | pending, on the People tab | `modules/hall-ui/public/watch.html:46` |
 | `3b22c5af029b` | certain | rank or above, or that it is your own. | `modules/hall-ui/public/copy-desk.html:47` |
 | `80ddf28baee7` | certain | rank-key (kebab-case) | `modules/hall-ui/public/government.html:82` |
-| `41a4b66c21e5` | certain | reads the control plane's own observation · ADR 0293 · every move is recorded with who asked | `modules/hall-ui/public/deploy.js:199` |
+| `41a4b66c21e5` | certain | reads the control plane's own observation · ADR 0293 · every move is recorded with who asked | `modules/hall-ui/public/deploy.js:296` |
 | `f83f0a9d6b6a` | certain | recorded, on the Operations tab | `modules/hall-ui/public/watch.html:49` |
 | `26da1df6fd4a` | certain | reflects it. | `modules/hall-ui/public/settings.html:136` |
 | `d4bb81532896` | certain | repro steps, context, anything that helps… | `modules/hall-ui/public/ideas.html:84` |