@bongos/core 1.19.971 → 1.19.973

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.971",
-  "core_contract": "1.19.971",
-  "source_commit": "64be47e290d62d4a4397189fe7c91e056e557c92",
+  "core_version": "1.19.973",
+  "core_contract": "1.19.973",
+  "source_commit": "8bcf4277c73e7ff41a8f1af4410a2784be3df109",
   "source_ref": "HEAD",
-  "built_at": "2026-09-23T01:18:55.107Z",
+  "built_at": "2026-09-23T03:12:31.192Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 515,
+    "docs_redacted": 516,
     "agent_docs_stubbed": 26,
-    "functional_verbatim": 2371,
+    "functional_verbatim": 2378,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2912,
-  "tree_sha256": "eb2fb77b0138a60460479f83e4a369b7f2c8101b489e124e33596a81711ddffd",
+  "file_count": 2920,
+  "tree_sha256": "40673ab635365235ddebe8e5c8660ca9a834bff7591bf34c9a42008b8b5f0b0a",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -1027,7 +1027,7 @@
     {
       "path": "docs/adr/0111-instance-hosting-provisioning-module.md",
       "mode": "0000644",
-      "sha256": "d216d4cfb0f269afa00af7963b3fe16d97596a6407b26859c7fd3126c7fc518c"
+      "sha256": "9d756ca919e0851c57ae20d5151bea438920706fe8716af626438e9ba208a01f"
     },
     {
       "path": "docs/adr/0112-private-goals-invitations-join-requests.md",
@@ -2107,7 +2107,7 @@
     {
       "path": "docs/adr/0323-hosting-is-three-shapes-and-we-are-not-the-landlord.md",
       "mode": "0000644",
-      "sha256": "8fa6ef943e3fc0855d15f83baefaabf810994b80da2ecdbbcc28d752ed0498f3"
+      "sha256": "fb85b571c6d7838df24f0775e53ed676300e2715ae8c8cdd03eb2129062ce9e3"
     },
     {
       "path": "docs/adr/0324-the-public-npm-cli-channel-is-retired.md",
@@ -2117,37 +2117,42 @@
     {
       "path": "docs/adr/0325-the-managed-fleet-control-plane-is-the-hub-we-already-run.md",
       "mode": "0000644",
-      "sha256": "6ae902e7626feb915300f4b21b6d20ae3369116a86bf624bd614ac9616c3ac11"
+      "sha256": "a3e70f66c143eebc01bf5108eac294925b01996f64a6aadaf11f135163daa8c3"
     },
     {
       "path": "docs/adr/0326-an-upgrade-may-add-a-deny-rule-to-a-file-the-instance-owns.md",
       "mode": "0000644",
       "sha256": "7484e3b187c1aa84b23ef359baf8e86eabcf61164c9f75076af1e53ef04020f1"
     },
+    {
+      "path": "docs/adr/0327-a-cloud-host-runs-on-the-owners-account-and-the-key-is-borrowed.md",
+      "mode": "0000644",
+      "sha256": "2c80244a082fb8c907bc83690724dbfb775adc35da124977668d8e56425d99b2"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "116fb18808cd324f04600f3c7fd15bb849b0c5c81871db1995f2dcee9bb7e77b"
+      "sha256": "114e0093960f4c02a66e79fc10c3ff779889452889886b7e07c0fe732c751915"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "efc898a856bca98c7a182ef23d87bb0f5eb15da9574473bb9b23272ce71d506a"
+      "sha256": "8873738d997a6674e1e441d84ab099f50f771c4878cef4f179624269124d9617"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "b64eee9aa839aa1b528436dfbaa8070f790f80f9d8d992bb6fd3cb06818a23d1"
+      "sha256": "4149767d635c42bbe1b4d4e44c18c017e188871cd3445887262ee1df1106061f"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "845aca9c32af0d4982eba5aefae1126cb77807eb8f5452f338a79895a9a56eb8"
+      "sha256": "c81ef654e2952bba818d2c3aa8b3ceba9601a3984558babbdb3db91258832284"
     },
     {
       "path": "docs/branding-contract.md",
       "mode": "0000644",
-      "sha256": "69be768131540bf8830bcf51b3d09991175859ddc1145059d0f4e5591f03b9b1"
+      "sha256": "ac14c9d29de36fdcc10553c603d9768e4dccd315a0815f6201439ee80e7177f2"
     },
     {
       "path": "docs/branding-fill-prompt.md",
@@ -2157,17 +2162,17 @@
     {
       "path": "docs/canonical-permissions.md",
       "mode": "0000644",
-      "sha256": "bbc4878ab6e3a0cedf5fad1b197d427b44d89ea2d32fd8dce9babfe73da09ee1"
+      "sha256": "1ffa2b188ed243db1b881298fda5391ece0383c8c02367109bad08698d1a9935"
     },
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "a9b42bc18dbb2dddee7892c2e785011313eba87c8df0b86c3358b7af9050840b"
+      "sha256": "3174b60315d83707f5f9ab53f6dae77fc7c0a50fdb2da3d7ff866e0ebdfb414b"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "bbd6bbd017e16f884388664bafcbe4bc6532e40968bc96546cced0b965c28f99"
+      "sha256": "828a4e9925c463d88698b98da4510e7fda508234b88b96fc8af7a9f5652b901a"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2242,7 +2247,7 @@
     {
       "path": "docs/design/projects-hub-direction-v2.md",
       "mode": "0000644",
-      "sha256": "fcf62d08a9a8fd1f362686cbc2e0caefdb18b917c9b22997c9133e52a7928afe"
+      "sha256": "21234463264e42940104122e2128d2ea7bd70f12b3dd5c58b79f60121e5925d5"
     },
     {
       "path": "docs/design/projects-hub-direction.md",
@@ -2682,27 +2687,27 @@
     {
       "path": "docs/design/vanilla-hall-ui-redesign-scope.md",
       "mode": "0000644",
-      "sha256": "94f0874388d36d1b2bc1b6aa79f3793ea9b842d9de88ce84622f969108a03a4c"
+      "sha256": "1c8d6c3d7ed30281edafe76965c0e4ddd3e4c273d32c2b2f091eea961a7eb8d3"
     },
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "ca43a028309885e4375a3fa216fc2636d33262d3038bf9e65a15f6e8b68f354d"
+      "sha256": "4422d0aacc8d5da421837809008fe8c3bbbc7082e497f032bacc7a0babf74cf8"
     },
     {
       "path": "docs/handoff-template.md",
       "mode": "0000644",
-      "sha256": "a60d85b8523b5944d4db8105b60166395ab9c1f931fb92f0f95a825b657fe277"
+      "sha256": "8792668e8f0c09ec14951e4a7d11902a5890198723442f7c21932adcc1b941be"
     },
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "f4d8da00ac6a0416fc0b38be5186cfa841ba18d8afccfd53b8c6055d56ad0f88"
+      "sha256": "901f1a8dfe7a0aea5b6ac94a6b931fe7a7241a79948b02570ae8a872777dd382"
     },
     {
       "path": "docs/modules-contract.md",
       "mode": "0000644",
-      "sha256": "c1e41acf516ebd056ba4d1f1ab8f731d4e80bbce13cf334524c04611940fc1fb"
+      "sha256": "e7e260c0dbd767070a9d40513eec4d6de47a6c3b363ee43d888fdb366a57be80"
     },
     {
       "path": "docs/onboarding/browser-terminal-guide.md",
@@ -2757,7 +2762,7 @@
     {
       "path": "docs/onboarding/drachmae-and-karma.md",
       "mode": "0000644",
-      "sha256": "015f8b4299d0682ceaa7c0fd8fba6ffdfb2063d1c56e49e992f53ab5bb584c12"
+      "sha256": "8ae9e810de94cee194d7756f8cf7aa945bae8d36ad9e40ccb68e84f13de0cfcc"
     },
     {
       "path": "docs/onboarding/primer.md",
@@ -2777,12 +2782,12 @@
     {
       "path": "docs/packs/engineer.md",
       "mode": "0000644",
-      "sha256": "87ecb718bbac689f52e3bc640f900e738f7b79015f2ca2157c56a86d748f322c"
+      "sha256": "b7cb50de31efaa49ce41a475a916abc652454a2eacca5aaaaf8ee8cba46067c6"
     },
     {
       "path": "docs/packs/ideator.md",
       "mode": "0000644",
-      "sha256": "93cef9d530a668d750d6cba4789fda25b15d176c35366240cb72187e272fa141"
+      "sha256": "bcb98ba4302f46c2001eb7081684300150966a7b05cc43691199fa1573292f90"
     },
     {
       "path": "docs/project-context.template.md",
@@ -2792,12 +2797,12 @@
     {
       "path": "docs/recipes/README.md",
       "mode": "0000644",
-      "sha256": "08332b6f45ad3f4c5784022824f934deb8a9818716184062e97bafc610b8c2f7"
+      "sha256": "507b8581452bd98ae1a7332f612792daf9524634a3a8f2464552dbe00efb98bd"
     },
     {
       "path": "docs/recipes/audit-replay.md",
       "mode": "0000644",
-      "sha256": "df362cf57fd748cca551a0c1a7048a678d5e833490dc5d2ab5d6ce1d33595f33"
+      "sha256": "a64df81552aeae1f6a58466d112a5ff9cc0c19c81d98fc5b0a24b5768146cb97"
     },
     {
       "path": "docs/recipes/autobongos-windows-host.md",
@@ -2832,7 +2837,7 @@
     {
       "path": "docs/recipes/gds-db-backup.md",
       "mode": "0000644",
-      "sha256": "d3e628bc627cb29874e977bf2e93c6557dc72a210506c22515a983f4f513d627"
+      "sha256": "50a69f0112049bb2061c52ddf98723b56ba40908baf356cc18f9ec55f7d1ec4b"
     },
     {
       "path": "docs/recipes/instance-deploy.md",
@@ -2857,7 +2862,7 @@
     {
       "path": "docs/recipes/managed-settings-remote-control.md",
       "mode": "0000644",
-      "sha256": "d1bc074f2a8de8d6d32f32d832e425637dc1dc6a03ae57ec417cd5a003264237"
+      "sha256": "c4fd5c7bae9889d56344298827694c84f0d5608f5f883e01fc846d02de8ea28c"
     },
     {
       "path": "docs/recipes/memory-backup.md",
@@ -2867,7 +2872,7 @@
     {
       "path": "docs/recipes/memory-sync-conflicts.md",
       "mode": "0000644",
-      "sha256": "320e8fc42e8695493764257bf0475028b063b5709b2ef10978ba3e9ad27c758f"
+      "sha256": "4afa777a2b03efab6747d17f8a1d467e6be68b7abb9f001a9ad41c2da11b67dc"
     },
     {
       "path": "docs/recipes/multi-builder-merge.md",
@@ -2877,12 +2882,12 @@
     {
       "path": "docs/recipes/ops-gotchas.md",
       "mode": "0000644",
-      "sha256": "7c314496531873dae2d637017575a22bd731e59849d196a13e7a8999ae5fc764"
+      "sha256": "b94f63ecf7d8a061265c2ba33997a1032940f6ddf11de7083ad877d6bcb17ff4"
     },
     {
       "path": "docs/recipes/overnight-builder.md",
       "mode": "0000644",
-      "sha256": "7aeb6baa163a79e7ac8903886198896cbe3a9a52bdea5b60450a693632b1f74b"
+      "sha256": "2424d2fdc4438bebdd9e90e163386316635e5144847f3fcb8177796dbd5adb5c"
     },
     {
       "path": "docs/recipes/packaging-the-core.md",
@@ -2892,7 +2897,7 @@
     {
       "path": "docs/recipes/parallel-goal-waves.md",
       "mode": "0000644",
-      "sha256": "4879badb2ab0678098d3f5cfa1002a6b4b50e8a691a5d4afc17b533803fbe262"
+      "sha256": "d549a07d80b133e8bec623dab7bd1204e191a0a0096c933dbcf80e9b0d50ea72"
     },
     {
       "path": "docs/recipes/private-npm-distribution.md",
@@ -2907,12 +2912,12 @@
     {
       "path": "docs/recipes/reranking-a-goals-board.md",
       "mode": "0000644",
-      "sha256": "ecd8986c5e4831db53a803dae625e5f1b898b711911e8e6f1c4f1b79a98cbfe8"
+      "sha256": "40232652e9d474dd37052457f832b2b3f0f5b99d6b1abb025c1b73231217f284"
     },
     {
       "path": "docs/recipes/search-index-ingestion.md",
       "mode": "0000644",
-      "sha256": "71ea9295e4f66375ce29f00b6fc3e6e12bc34fc5c1709e8b813d1c4071198963"
+      "sha256": "a2f3bf8406ec48be025b5c59fd66292f489dcf8645cde309a3aee7dc6522616f"
     },
     {
       "path": "docs/recipes/self-host.md",
@@ -2927,12 +2932,12 @@
     {
       "path": "docs/recipes/ship-and-regrade.md",
       "mode": "0000644",
-      "sha256": "f4adbd2090b5ae49c69a76fe181a0f19bdfe186a09d666063ca290b724ae60ea"
+      "sha256": "3308eb707071987ba85c7d2f0b21e209ab1fe3954640d56fb3afda4bd428654d"
     },
     {
       "path": "docs/recipes/staging-environment.md",
       "mode": "0000644",
-      "sha256": "6a8c677c81185f2f4d8474303d331f7226e1f10cd6a4be1d7914fa4a2c3e2d6e"
+      "sha256": "97cd5890168ad31eae842ff4f9c2f3f084b32fe06b390facebec776823e7aa45"
     },
     {
       "path": "docs/recipes/standalone-live-docs.md",
@@ -2952,7 +2957,7 @@
     {
       "path": "docs/recipes/windows-builders.md",
       "mode": "0000644",
-      "sha256": "2608bea40745e61407454eb73ff3dc19d2c088a986741fb243001a1a0848ee00"
+      "sha256": "1155aa374c885816f59c87d9da1932275450a11f131c5e9545d15ae02daf663e"
     },
     {
       "path": "docs/research/cursor-competitive-analysis.md",
@@ -4827,12 +4832,12 @@
     {
       "path": "modules/hall-ui/public/deploy.html",
       "mode": "0000644",
-      "sha256": "7754c64bee96f0d833f443ad2a666de6bd106703faa8a6fe7e0dab3820684b89"
+      "sha256": "b7ef61f7c61406f8a178c0dfbffe03b2b40119f8e2f5425fef50a4e0086282c4"
     },
     {
       "path": "modules/hall-ui/public/deploy.js",
       "mode": "0000644",
-      "sha256": "e3a4fa62e761dddfb54a1f13680eb64ff87c4d37e83fa41a846ebfe1f41d44c8"
+      "sha256": "a38b55232d052171493a7887e37886e8bfe5ec76c39d7d52c6285729c0514fc1"
     },
     {
       "path": "modules/hall-ui/public/diagram-viewer.css",
@@ -4952,12 +4957,12 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "db143d107e2a58f7d3056556202a0864f6595f723ff302441c092e670f3c4ea3"
+      "sha256": "67b2f5c6dc93f0371f23d71bdb833d3be374332faeff31d5f03ce76e5e288c76"
     },
     {
       "path": "modules/hall-ui/public/goals-render.js",
       "mode": "0000644",
-      "sha256": "8d296e2ba0cafdcdf575d8bee24a0aeae3b03173480f2b7b5f5efd33f66e18b6"
+      "sha256": "f864bd013921e47c23c910516cc9de954d5ba177f48f3ffeb02c2cea65e11f14"
     },
     {
       "path": "modules/hall-ui/public/goals.css",
@@ -5079,6 +5084,11 @@
       "mode": "0000644",
       "sha256": "256622e813f4c5ce4159f69fd364b5b77aa7281182b64908ce04e80afe4603b5"
     },
+    {
+      "path": "modules/hall-ui/public/mine-lens.js",
+      "mode": "0000644",
+      "sha256": "4d415f710bd5546099f60b5f5403139ea0fdd5ecd2b54ec383c86586d18713d3"
+    },
     {
       "path": "modules/hall-ui/public/modules.css",
       "mode": "0000644",
@@ -5197,7 +5207,7 @@
     {
       "path": "modules/hall-ui/public/project-settings.css",
       "mode": "0000644",
-      "sha256": "142e1d75d854b7764b5e3160a69dd99d35f3f7ae5174544ed17fc8c6eea97c31"
+      "sha256": "67039998300271792308b65c2a418e3473a550c8891a074496069a3c56d2d98f"
     },
     {
       "path": "modules/hall-ui/public/project-settings.html",
@@ -5464,20 +5474,25 @@
       "mode": "0000644",
       "sha256": "b7d197f62936bfe1ad5d96bd6c36218819c9b55cd602f749fe29a9eeb6e3b285"
     },
+    {
+      "path": "modules/hall-ui/public/work-summary.js",
+      "mode": "0000644",
+      "sha256": "3e80c04a9f7d945a7ea4954c5bb0c2888b6c7c36e11c85c0f1c59456890857eb"
+    },
     {
       "path": "modules/hall-ui/public/work.css",
       "mode": "0000644",
-      "sha256": "4e72a471f22b3d52442434a2c21f25ffa491d43627a6a97ba3b62127d3d5d52f"
+      "sha256": "275d7dac3b28713810a3bc615a8820fdc66b8bee8e0f919c00a3ea7908a786c5"
     },
     {
       "path": "modules/hall-ui/public/work.html",
       "mode": "0000644",
-      "sha256": "6c1caf329e90d7a5d8404d9a23df957543c6767751c2c33901b286d45489ae85"
+      "sha256": "0b80ef6ff87b232032f18fdcff21e798dbc6a11b7fa94b44422af3bcba502cd3"
     },
     {
       "path": "modules/hall-ui/public/work.js",
       "mode": "0000644",
-      "sha256": "7cb5426fccf53211c24255cf27dd2b61fbfebda52611a7280ccbb7507d5ad2c7"
+      "sha256": "ccf5a2bad033e97bf0a3ed1105beac415df9191afd9d5778185ef6da5caee3a9"
     },
     {
       "path": "modules/hall-ui/public/work.states.json",
@@ -5752,7 +5767,7 @@
     {
       "path": "modules/lifecycle/db-goals.js",
       "mode": "0000644",
-      "sha256": "1b229bd4bf18563dd772c0be46f320ae533e71a5c7ba32aaa4b523ac9f97a4dc"
+      "sha256": "746a6c8980110e7cf741bd676dbb9aae20f9cfcb1b7e2c8c943ba44c14435e5f"
     },
     {
       "path": "modules/lifecycle/db-grade.js",
@@ -6042,7 +6057,7 @@
     {
       "path": "modules/lifecycle/routes/goals.js",
       "mode": "0000644",
-      "sha256": "856f1ab40127186fa22c10fd37fbe57eb2d856cbdf75faee0e21209579ad887c"
+      "sha256": "91039df9ca263ad34bda8e230b8e52f2099e6114a2a9eb4bae2b6b21210994c8"
     },
     {
       "path": "modules/lifecycle/routes/help-requests.js",
@@ -6567,7 +6582,7 @@
     {
       "path": "modules/provisioning/core-upgrade.js",
       "mode": "0000644",
-      "sha256": "96c6b73411a489e5c41fd567123fa8ef35f7a757db0e1df0c0cafd720674b05f"
+      "sha256": "d87095c75428e1996be5fb51c4dd65b4d99f78706cedd94a14fc05e5b2c602fd"
     },
     {
       "path": "modules/provisioning/credential-preflight.js",
@@ -7272,12 +7287,12 @@
     {
       "path": "modules/public-landing/public/contact.html",
       "mode": "0000644",
-      "sha256": "22e81df702236494bff7f283cd25ecbca92df2ea485d995fbd66c0e924faff41"
+      "sha256": "c630db2604c7aad51b6ff4f5651c3eab999af27b0f96ca5d7df59dd8945c4879"
     },
     {
       "path": "modules/public-landing/public/index.html",
       "mode": "0000644",
-      "sha256": "5d34918fcf47f5fecb866083427ec41e9cf9ceef485796dc7152f45ce4d6c7b1"
+      "sha256": "2ede2b2d6a11ee21f23993ba81b5e82f74e41a923d6c02516fab3741842b949f"
     },
     {
       "path": "modules/public-landing/public/index.probes.json",
@@ -7292,7 +7307,7 @@
     {
       "path": "modules/public-landing/public/privacy.html",
       "mode": "0000644",
-      "sha256": "5af37c9fd5be9c15ac195528764f87c2ade2b63a72a24fadfa87b83183769d28"
+      "sha256": "ed096a49d0844a258f166bec5deae5f4a58542c6611d9cbdfe437ba17ff14f42"
     },
     {
       "path": "modules/public-landing/public/projects-empty.states.json",
@@ -7307,7 +7322,7 @@
     {
       "path": "modules/public-landing/public/projects.html",
       "mode": "0000644",
-      "sha256": "180097d115d67efd4d5c08119529eb4e9cbafe6e8cae26d5e59c26f910a1434d"
+      "sha256": "a9c38198d1491112e83ae135ac59f1318e6beb076d551677e9a239ce0ed6a335"
     },
     {
       "path": "modules/public-landing/public/projects.probes.json",
@@ -7322,7 +7337,7 @@
     {
       "path": "modules/public-landing/public/terms.html",
       "mode": "0000644",
-      "sha256": "7f94fcaabb2492951486ce22b876363c09fbe1dec6a2eb43127a3d0ce2041409"
+      "sha256": "b39a1dc189c251abe3cc60dfb2d5fb997f1b51e577d8250460cb48522f857d80"
     },
     {
       "path": "modules/public-landing/public/world/assets/clouds/cloud-island-large.png",
@@ -8107,12 +8122,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "7b458e15cda96ebf05079d2bb4fe7af847fc64e401a2d8f9584831cfb591cd64"
+      "sha256": "d11c17bd857df10fee11791ce0185febbd12f4ef00a3dfb3b4e458e5774dbfd8"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "211d62a555349042e0d897f9f6a795a7fb45abac88dd2584231ecf042d6b0051"
+      "sha256": "af8108050fe47609107780692cb3baae77f379e91b4033450f5e57402c18f5fb"
     },
     {
       "path": "public-docs/index.html",
@@ -8207,7 +8222,7 @@
     {
       "path": "scripts/gds/api-alias-caller-scan.js",
       "mode": "0000644",
-      "sha256": "bdb23756d2dcf4f9a3f22a8c64151f70aee5c62b82601672f5e8fb6adbc367ed"
+      "sha256": "bc4fc8d9590f642eb4f0b1175cdb1faf0c3245eecc3c0d01956f4c64dff79b37"
     },
     {
       "path": "scripts/gds/api.js",
@@ -8479,6 +8494,11 @@
       "mode": "0000644",
       "sha256": "8ac4c8909b75aa5e2022a967ba9ac0cbcdac60da9d75757603827b86964c825b"
     },
+    {
+      "path": "scripts/gds/cloudbongos-token-isolation.conf",
+      "mode": "0000644",
+      "sha256": "a7ed3ca963b4c96c2a495621174a7f9bea279cf971d263e873742b502940e7e9"
+    },
     {
       "path": "scripts/gds/codemod-rename-src-gds.js",
       "mode": "0000644",
@@ -8697,7 +8717,7 @@
     {
       "path": "scripts/gds/fitness.js",
       "mode": "0000644",
-      "sha256": "c84fbcc5d9c2676c90756a9cce02987c9dd30b68d17bee01698d6a7bc5cf9c7c"
+      "sha256": "1cd68eac421a200da6ef60e773f291720ba7584c9c4fd39c33422223002c58de"
     },
     {
       "path": "scripts/gds/gate-review.js",
@@ -9062,7 +9082,7 @@
     {
       "path": "scripts/gds/provision-core-upgrade.js",
       "mode": "0000644",
-      "sha256": "f22c31d00a50a312d7228922cbe70fedc503e704cc7f2cb33a8686a4954c1c1e"
+      "sha256": "3e9467d52cf9b704fc3cfa9f103e86c22b4128bdc021dee104e192f5f13a5ccf"
     },
     {
       "path": "scripts/gds/provision-disconnect.js",
@@ -9217,7 +9237,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "b536a889714c7f1ddc027b3f29602351d6942e1e52157469a5f82400490ee1d4"
+      "sha256": "34b696c853afcea12cb078f2a75a37072ca25430334d780733ea16def5cf6076"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -9234,6 +9254,11 @@
       "mode": "0000644",
       "sha256": "39554a1c45f9d4c507df8d782cf2d928adae312110ba9a057421354d5999dc69"
     },
+    {
+      "path": "scripts/gds/scope-roster-guard.js",
+      "mode": "0000644",
+      "sha256": "c737b299ec466ff040a200f754feab52df80154cdbb1969fde835d5f311c37e8"
+    },
     {
       "path": "scripts/gds/seam-wiring-guard.js",
       "mode": "0000644",
@@ -9717,7 +9742,7 @@
     {
       "path": "scripts/hall-preview/server.js",
       "mode": "0000644",
-      "sha256": "9c2fc2f33ddd4f51e715e89cc84d615c55aa070ee2173cdaa8fb7559f2f5a14a"
+      "sha256": "48607e2724aceb0a9e116748713dbef945585bacfa962785eb58bfa37349255c"
     },
     {
       "path": "scripts/hall-preview/task-visual.js",
@@ -9927,7 +9952,7 @@
     {
       "path": "src/bongos/module-scope-map.js",
       "mode": "0000644",
-      "sha256": "70b35812cbf26b9ce8c25663bbc4fcce40272b4877b89baf70cd64a5fe90b3b3"
+      "sha256": "6a0ba1ebba51ecbce958e2b2d97d244f589108592647be0261ae556aee078680"
     },
     {
       "path": "src/bongos/module-submissions.js",
@@ -10122,7 +10147,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "ef138765707d6d54a7992d02ad0b3e21673b90c47e2ea6a3384f95ee6e90a00a"
+      "sha256": "5c4f2b444f4f874cffab074db62621204eb8b2e198cf31cad9536ea6b0268911"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10317,7 +10342,7 @@
     {
       "path": "tests/api_alias_caller_ratchet.mjs",
       "mode": "0000644",
-      "sha256": "58e78fbcfada9df14fee87c526d225bdcc0e6f65a5e9085a4b6ea382a8041eb2"
+      "sha256": "ed6f7125359286b760f57355b50d04c00e6e8c0c9ecfb3f4f9f8cf3a6babb1ae"
     },
     {
       "path": "tests/api_alias_exceptions.mjs",
@@ -11032,12 +11057,12 @@
     {
       "path": "tests/core_upgrade_door.mjs",
       "mode": "0000644",
-      "sha256": "c4238e2f2e2c52f23fb6948f5e6545bc4880efe75eb9af229a455db6017db05c"
+      "sha256": "edaf8b6ea41f069bed111ff0a7330c4f3b1d4ffc63201364704ed0b25508e7b8"
     },
     {
       "path": "tests/core_upgrade_runner.mjs",
       "mode": "0000644",
-      "sha256": "85bc665f5d80ff1c7e8134e6be7dd8fa336b4fb50344164b034b0e72a963f04d"
+      "sha256": "47618fa0dd42bfa8f542b6830c3e68b715e655280f9aaf6684085478b257d497"
     },
     {
       "path": "tests/cosmos_token_contrast.mjs",
@@ -11187,7 +11212,7 @@
     {
       "path": "tests/deploy_page_projects.mjs",
       "mode": "0000644",
-      "sha256": "5c582192ddd83ef289be692b12d898c8837b54312348751082478d036987a647"
+      "sha256": "d9eeb744c03fe5cefa8a86b7128c6da43f24d0acc3705c39899f72c402b3a47e"
     },
     {
       "path": "tests/design_tokens_sync.mjs",
@@ -11429,6 +11454,11 @@
       "mode": "0000644",
       "sha256": "949526efc49c317a7be7e33beea0643b29748f3fd4e914d3a3670ce9ce6aadeb"
     },
+    {
+      "path": "tests/fitness_scope_roster.mjs",
+      "mode": "0000644",
+      "sha256": "d7af736db2193b2f2f8d2152b399d167f8be9825b86b5f1bb7ce990b86e0eaf3"
+    },
     {
       "path": "tests/fitness_two_root.mjs",
       "mode": "0000644",
@@ -11634,6 +11664,11 @@
       "mode": "0000644",
       "sha256": "bb1bc68167bc599082aaf2b582d4907461bdf62fd0d8cf0b6a80cdff75e51449"
     },
+    {
+      "path": "tests/goal_mine_lens.mjs",
+      "mode": "0000644",
+      "sha256": "d29e381e03bbb523c66967ef66956abb2ca103ddf161cc68eff31ac4c3610a2c"
+    },
     {
       "path": "tests/goal_names.mjs",
       "mode": "0000644",
@@ -11667,7 +11702,7 @@
     {
       "path": "tests/goal_tier.mjs",
       "mode": "0000644",
-      "sha256": "3c420d28341a6e5aaeb5d4af978e72acefec3c9bd7d97f66fd11a72517118606"
+      "sha256": "57bb4c1def9f674661aabc7cc34812db0fe9e1fec42f06cb0e9c0b0c3881aeb8"
     },
     {
       "path": "tests/goal_unknown_module_hint.mjs",
@@ -12014,6 +12049,11 @@
       "mode": "0000644",
       "sha256": "e0310ad743e1b47dbe62765087797d1da8a00a7ea7a696ab64948ad5f0460300"
     },
+    {
+      "path": "tests/hall_mine_lens.mjs",
+      "mode": "0000644",
+      "sha256": "e6b231a6c25c518f79913160b924573ff37d8c364dc7a265041f398f0385dec7"
+    },
     {
       "path": "tests/hall_nav.mjs",
       "mode": "0000644",
@@ -12302,7 +12342,7 @@
     {
       "path": "tests/idea_spark_hall.mjs",
       "mode": "0000644",
-      "sha256": "35b588799f4d7c72eecb13600800fe6b828c629fb4570c704857f09d9ff10c5d"
+      "sha256": "8f0631d6dd2dd3acf7706b5166aa831e26dd5a3625861b95e3b89187afa48e4a"
     },
     {
       "path": "tests/idea_spark_mark.mjs",
@@ -12487,7 +12527,7 @@
     {
       "path": "tests/known_failing_ratchet.mjs",
       "mode": "0000644",
-      "sha256": "256e691e969fbdb1f023b4673f181ced0663f344ed3a307c40e6531eb6585735"
+      "sha256": "7948d954b8ca3fc3a1229f69e18dc154857e61df812a49a11a7db89199185c4e"
     },
     {
       "path": "tests/land_watch.mjs",
@@ -12497,7 +12537,7 @@
     {
       "path": "tests/landing_legal_pages.mjs",
       "mode": "0000644",
-      "sha256": "b5e616b73f541f7a0e0c3ecbac6137f02a4ed0d59a042dd6f59f82f8eb5b2191"
+      "sha256": "91805fd1afccdfbf97bdfebf771ec22ad86325e8484d5280e234f00a0323a8e6"
     },
     {
       "path": "tests/landing_page.mjs",
@@ -13177,7 +13217,7 @@
     {
       "path": "tests/projects_hub_pre_uat.mjs",
       "mode": "0000644",
-      "sha256": "19e1b68463ddccb1a1155e1adfb3d4c130711745030183fb1d27650f1bfe5444"
+      "sha256": "b0aa7ed3cbc5a205942dbfb8a34344574a9a350c07dcda816ac70b8f36c5af38"
     },
     {
       "path": "tests/promote_deps_gate.mjs",
@@ -13737,7 +13777,7 @@
     {
       "path": "tests/served_paths_shipped.mjs",
       "mode": "0000644",
-      "sha256": "bae6e331f44fcebe2300b380a390afef771df9ae5a2cfc27caf1b957f9419713"
+      "sha256": "93f085601b9d537b945b18ffb323d511671c31126d7e9a128dad5c787ddfc493"
     },
     {
       "path": "tests/session-cards.mjs",

package/docs/adr/0111-instance-hosting-provisioning-module.md

@@ -1,6 +1,7 @@
 # ADR 0111 — Instance hosting + domains as a Cloud Bongos module: the `provisioning` module boundary + the self-host / managed split
 
 - **Status:** Accepted, **superseded in part by [ADR 0323](0323-hosting-is-three-shapes-and-we-are-not-the-landlord.md)** (2026-09-21) — the module boundary and the enqueue-only trust boundary STAND; the DigitalOcean droplet and `co-tenant` shapes it provisions do not. Customer projects move to a managed platform; DigitalOcean hosts hubs only.
+- **Status:** §2 STANDS and is now kernel-enforced as of [task 1004176](https://cloudbongos.com/builders#/task/1004176) (2026-09-23). It was, until then, enforced by the code alone — the web tier does only enqueue intents, but both tiers run as the same unix user and the token file was readable by it, so the boundary was a convention ([ADR 0327](0327-a-cloud-host-runs-on-the-owners-account-and-the-key-is-borrowed.md) §5). A systemd drop-in (`InaccessiblePaths=/etc/cloudbongos/box.env`, tracked at `scripts/gds/cloudbongos-token-isolation.conf`) now puts an empty mode-000 node over that file in the web tier's own mount namespace. The two tiers still run as the same unix user; the isolation is namespace-based, not ownership-based, and the reasoning for that narrower remedy is in [ADR 0327](0327-a-cloud-host-runs-on-the-owners-account-and-the-key-is-borrowed.md) §5.
 - **Status (original):** Accepted (boundary + split decided with the owner; build is task-pending — see §Consequences for the seeded tasks)
 - **Date:** 2026-07-03
 - **Track:** internal (a portable Cloud Bongos platform capability)