@bongos/core 1.20.26 → 1.20.28

package/docs/adr/0356-a-recruit-invite-expires-30-days-after-it-is-sent-read-time.md

@@ -0,0 +1,46 @@
+# ADR 0356 — A recruit invite expires 30 days after it is sent, decided at read time
+
+- **Status:** accepted
+- **Date:** 2026-09-30
+- **Task:** [task 1002969](https://cloudbongos.com/builders#/task/1002969) (goal 1000110)
+- **Builds on:** privacy spec D4 (`docs/specs/<redacted>.md`; the owner signed the 30 days), [ADR 0335](0335-an-invite-is-a-pre-approved-row-on-the-projects-own-instance.md) D2 (an invite is a `kind='invite'` row on the project's own instance), [ADR 0353](0353-a-hub-invite-is-a-notice-of-the-projects-own-invite.md) (the hub's `pending` row is a notice of that invite)
+- **Amends:** ADR 0335 D2.5 ("no admission path reads `kind`")
+- **Decided with:** the owner split the original task on 2026-09-30. `seen_at` is [task 1004443](https://cloudbongos.com/builders#/task/1004443); the decline relay is [task 1004444](https://cloudbongos.com/builders#/task/1004444).
+
+## Context
+
+An invite writes an `invited` row, and the sign-in gate admits any login holding one. Nothing ever closed it, so an invite sent months ago still let its login walk in. Spec D4 says a recruit invite's door closes after 30 days, enforced when it is read: no sweeper and no cron. ADR 0353 left the hub side of the same question to this task, because an expired invite's hub notice still said "Open project →".
+
+## Decision
+
+**D1 — One definition, computed at read time.** `src/bongos/invite-expiry.js` holds `INVITE_EXPIRY_DAYS` (30) and the SQL for "this row is an invite past its window", `kind = 'invite' AND created_at <= now() - interval '30 days'`. The sign-in gate (`hasInvitedAccessRequest`), the waiting-page probe (`accessStateByLogin`), the onboarding routes and the hub all read it: core directly, and modules through the doorway's `inviteExpiry`. Nothing is stored, so the day a door closes cannot drift between readers, and nothing has to run for it to close.
+
+**D2 — Only invites expire.** An approved application (`kind = 'application'`) stays open: its applicant asked, and D4 is about invites. Goal invites get no expiry either.
+
+**D3 — The gate now reads `kind`, and only to be stricter (amends ADR 0335 D2.5).** D2.5 kept `kind` out of admission because it was descriptive. It is now read in one place, inside the expiry unit, and that unit can only close a door. A row that is anything but an invite behaves exactly as before, so a mis-kinded row fails toward the old gate and never past it. Only server code writes `kind`: the public POST cannot set it. `created_by` is still never read. `tests/application_lifecycle.mjs` enforces both: its admission statements may mention `kind` only inside the expiry unit.
+
+**D4 — What an expired invite looks like.**
+- The gate refuses it. The public "already approved?" check and the standing-invite probe no longer count it, so the invitee may apply and the recruiter can re-invite.
+- A re-invite writes a fresh row, which opens a fresh door. The expired row stays as history.
+- The queue marks it `expired` with `expires_at`. The outstanding-invite list keeps it so the sender knows to invite again, and drops it once a newer invite for that login is live. The hall's queue shows "Invite expired" and offers no rescind.
+- The public status probe answers `expired` (`admitted: false`), and `bongos login` stops waiting on it. An older CLI treats an unknown status as "wait" and times out, which is no worse than before.
+- A rescind that leaves only expired rows clears the hub notice.
+
+**D5 — The hub's notice follows the door.** `listPendingInvitesForAccount` hides a `pending` notice older than the same 30 days (its `joined_at` is when the project sent the notice). `inviteToProject` restamps `joined_at` only on a `pending` row that is already past the window, so a re-invite shows again. A re-send while the invite is live changes nothing, and a real membership is never touched.
+
+## Consequences
+
+- **Invites already older than 30 days close at deploy.** That is the spec's rule applied to existing rows. Their senders re-invite.
+- **Wire skew (ADR 0352).** A newer hub with an older instance hides a notice after 30 days while that instance's door stays open. Only the nudge is lost. An older hub with a newer instance keeps showing an expired notice, which is today's behaviour.
+- **The hub's clock is the notice's, not the invite's.** A notice healed by a late re-send (the hub missed the first) can outlive its invite by up to the gap between them. A lost clear can hide a live notice early. In both cases the next re-invite fixes it.
+- **The outstanding list's cost stays that of its own scan.** "Does this login have a live invite" is a window (`bool_or … OVER (PARTITION BY lower(github_login))`) over the rows the list already reads, not a correlated lookup per row: `access_requests` has no index on `lower(github_login)` outside pending rows, and invite rows are kept as history. The sender filter (`?mine=1`) sits outside the window. Migration `core_266` adds the index those reads lacked, partial on `status = 'invited'` over `lower(github_login)`, which serves the sign-in gate, the standing-invite probe and this list. The owner approved it on 2026-09-30 after a grader finding.
+- **Declining still closes only the hub's notice.** The project's row stays open until it expires. Task 1004444 owns the relay.
+
+## Alternatives considered
+
+- **A sweeper that flips expired rows to `dismissed`.** Spec D4 rules it out. It would also mislabel an expiry as a decline in the history.
+- **Expire every `invited` row, applications included.** That is wider than D4, and at deploy it would lock out every applicant approved more than 30 days ago.
+- **Dismiss the expired row when re-inviting.** That keeps the list tidy, but the hall renders `dismissed` as "Declined", which would be false.
+- **Carry the invite's `created_at` to the hub in a header, making its clock exact.** That is a new wire field on the notify route for an edge case a re-invite already heals.
+
+Proof: `tests/invite_expiry.mjs` (the definition), `tests/application_lifecycle.mjs` (the gate, queues, probe, re-invite and notice clear, interpreted), `tests/invite_expiry_db.mjs` (the same statements on real Postgres, plus the hub's notice), `tests/hub_invite_notices.mjs` and `modules/platform-identity/tests/platform-identity.mjs` (the notice statement's shape), `tests/bongos_login.mjs` (the CLI stops on `expired`).

package/docs/adr/README.md

@@ -473,3 +473,5 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0352 | [**A rollup report carries its "as of" in a header, and the hub keeps the newest** ([task 1004268](https://cloudbongos.com/builders#/task/1004268), goal 1000110). `POST /sso/activity/rollup` was last-writer-wins with no report timestamp, so a sign-in push read earlier and a ship push read later could land the older totals last. **D1:** the instance's read time rides a `Bongos-Report-As-Of` HEADER, not a body field, because the hub validates the body strictly and hub and instances upgrade independently: a body field from a newer instance would 400 on an older hub and lose the report, while an unknown header is ignored. **D2:** missing or unparseable = unstamped = last-writer-wins, never a 400. **D3:** the guard is a WHERE on the upsert's conflict branch (migration 026, `reported_as_of`, no backfill); a skipped update keeps the row lock, so the task 1004244 snapshot stays in step. **D4:** the stamp is compared only with the same client's, and clamped to the hub's `now()`.](0352-a-rollup-report-carries-its-as-of-in-a-header.md) | platform identity / federation |
 | 0353 | [**A hub invite is a notice of the project's own invite, and signing in accepts it** ([task 1002818](https://cloudbongos.com/builders#/task/1002818), goal 1000110 — R6 of the admin console wave). The hub's own invite wrote a `pending` membership that no project reads, so an "accepted" invite met a locked door (new projects default to `apply`). **D1:** that row is now a NOTICE the PROJECT writes: its invite route calls `POST /sso/invites/notify` and a dismissal that leaves no invited row calls `/sso/invites/clear` (client credentials, pending rows only, always `{ ok: true }` so no account oracle); core's `notifyHubOfInvite` is fire-and-forget. **D2:** the hub-side accept route is deleted; signing in to the project accepts, and the hub's own sign-in witness turns the row into a membership. **D3 (owner):** `POST /projects/invite` writes nothing and answers `{ invited: false, invite_url }`, the project's hall invite link (`/builders/watch?invite=<login>`, which only pre-fills); the signed-assertion relay is deferred. **D4:** new routes, so an older hub 404s and only the notice is lost (ADR 0352).](0353-a-hub-invite-is-a-notice-of-the-projects-own-invite.md) | platform identity / federation |
 | 0354 | [**A builder hosts one project for free, and more takes the fleet permission** ([task 1004412](https://cloudbongos.com/builders#/task/1004412), goal 1000106 — working area 1, the owner's ruling of 2026-09-30). The create wizard always asks for `cloud-host`, which task 1003370 had gated behind `provisioning.fleet.manage`, so every new (Xenos) user was refused at "Create my project" — against ADR 0345 decision 1. **D1:** a builder's first live `cloud-host` project needs no permission; a further one needs the fleet permission (a retry of your own slug is the same project; only `torn_down` frees the place; an unreadable count refuses). **D2:** one first-free request per builder at a time (409 `create_in_progress`), held as a Postgres advisory lock so it holds across processes. **D3:** the wizard states `permission_forbidden` and `box_full` in plain words. Nothing yet caps a hosted project's memory.](0354-a-builder-hosts-one-project-free-and-more-takes-the-fleet-permission.md) | provisioning / security / project creation |
+| 0355 | [**A soft limit is a rule with a reason, and nobody enforces it** ([task 1004416](https://cloudbongos.com/builders#/task/1004416), goal 1000121 — BV2.PS02). The startup flow's seven planet-physics answers and what they rule out. **D1:** the answers are more provisioning `detail` keys under `team_shape`'s contract (no defaults, refused loudly, `null` un-answers), with two new kinds — a list (`many`) and a whole number (`count`); the country is a closed ISO list. **D2:** answers must agree only within one request, so a merge patch's edit order never matters. **D3:** one declarative soft-limit table (`soft-limits.js`) — data conditions, `hide`/`grey`/`note`, a reason on every rule — and every resolution says `enforced: false`. **D4:** screening is a seam (`screening.js`) with a deliberately small rule set; a stop is 422 `screened_out` before anything exists. **D5:** the edit route screens a new description too.](0355-a-soft-limit-is-a-rule-with-a-reason-and-nobody-enforces-it.md) | provisioning / project startup |
+| 0356 | [**A recruit invite expires 30 days after it is sent, decided at read time** ([task 1002969](https://cloudbongos.com/builders#/task/1002969), goal 1000110 — privacy spec D4, owner-signed). **D1:** one definition, `src/bongos/invite-expiry.js` (`INVITE_EXPIRY_DAYS` + the SQL), read by the sign-in gate, the waiting-page probe, the onboarding routes and, through the doorway's `inviteExpiry`, the hub. Nothing is stored and nothing sweeps. **D2:** only `kind='invite'` rows expire; approved applications and goal invites do not. **D3:** amends ADR 0335 D2.5: the gate reads `kind` only inside the expiry unit, which can close a door and never open one. **D4:** an expired invite is refused, marked `expired` + `expires_at` in the queues, reported `expired` by the status probe (the CLI stops), and replaced by a re-invite's fresh row. **D5:** the hub hides a `pending` notice past 30 days and a re-invite restamps it. Split out: `seen_at` (task 1004443), the decline relay (task 1004444).](0356-a-recruit-invite-expires-30-days-after-it-is-sent-read-time.md) | platform identity / admission / invites |

package/docs/api/openapi.json

@@ -440,7 +440,7 @@
           "access-requests"
         ],
         "summary": "GET /access-requests/invites",
-        "description": "GET /access-requests/invites[?mine=1] — the outstanding invites: kind='invite', still 'invited' (not rescinded), and no builder row yet (not yet accepted by signing in), each naming its sender; ?mine=1 keeps only the caller's own (ADR 0335 D2; task 1002814). Rescind one with PATCH /access-requests/:id. rank: archon — it names logins that are not members yet.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `access_request.review` (all required).",
+        "description": "GET /access-requests/invites[?mine=1] — the outstanding invites: kind='invite', still 'invited' (not rescinded), and no builder row yet (not yet accepted by signing in), each naming its sender; ?mine=1 keeps only the caller's own (ADR 0335 D2; task 1002814). Rescind one with PATCH /access-requests/:id. Each carries `expires_at`, and `expired` once its 30 days are up (task 1002969): listed so the sender knows to invite again, and dropped once a newer invite for the same login is live, since that one already replaced it. rank: archon — it names logins that are not members yet.\n\n**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `access_request.review` (all required).",
         "x-rank": "archon",
         "x-source": "modules/onboarding/routes/access-requests.js",
         "x-permissions": [
@@ -481,7 +481,7 @@
           "access-requests"
         ],
         "summary": "GET /access-requests/status",
-        "description": "GET /access-requests/status?github_login=X — PUBLIC. The `bongos login` CLI polls this after filing a request: the device flow's not_approved is TERMINAL (the device_code is spent), so the CLI can't re-poll the flow — it polls this instead, then restarts sign-in once admitted. Exposes nothing the public POST above doesn't already reveal through its 409s (already_member / already_approved). status ∈ member | invited | pending | dismissed | none; admitted = member||invited. rank: public — a would-be builder is by definition outside the system. Declared BEFORE `GET /access-requests` so the literal `/status` path is matched as its own route (not swallowed as a query on the list route). RATE-LIMITED (task 1003339 / ADR 0209). Public + unthrottled, this was a login→membership oracle an attacker could script at line rate to learn who builds here. accountExistenceReadRateLimit is the doorway's SHARED 120/60s per-IP budget: core's GET /auth/web/admission-status (the boolean twin of this answer) mounts the very same instance, so the two cannot be alternated for double the rate. The limiter runs before the queries, so a refused probe costs no DB work. Whether the ANSWER should also collapse — so a caller who is not the subject cannot tell pending/dismissed/none apart — is the owner's call and is filed as a blocker, not decided here.\n\n**Rank:** `public` — No authentication — any caller.",
+        "description": "GET /access-requests/status?github_login=X — PUBLIC. The `bongos login` CLI polls this after filing a request: the device flow's not_approved is TERMINAL (the device_code is spent), so the CLI can't re-poll the flow — it polls this instead, then restarts sign-in once admitted. Exposes nothing the public POST above doesn't already reveal through its 409s (already_member / already_approved). status ∈ member | invited | expired | pending | dismissed | none; admitted = member||invited. `expired` is an invite past its 30 days (task 1002969): the door is shut, and the CLI stops waiting rather than polling a door that will not open. rank: public — a would-be builder is by definition outside the system. Declared BEFORE `GET /access-requests` so the literal `/status` path is matched as its own route (not swallowed as a query on the list route). RATE-LIMITED (task 1003339 / ADR 0209). Public + unthrottled, this was a login→membership oracle an attacker could script at line rate to learn who builds here. accountExistenceReadRateLimit is the doorway's SHARED 120/60s per-IP budget: core's GET /auth/web/admission-status (the boolean twin of this answer) mounts the very same instance, so the two cannot be alternated for double the rate. The limiter runs before the queries, so a refused probe costs no DB work. Whether the ANSWER should also collapse — so a caller who is not the subject cannot tell pending/dismissed/none apart — is the owner's call and is filed as a blocker, not decided here.\n\n**Rank:** `public` — No authentication — any caller.",
         "x-rank": "public",
         "x-source": "modules/onboarding/routes/access-requests.js",
         "responses": {
@@ -7898,6 +7898,58 @@
         ]
       }
     },
+    "/government/board/charter": {
+      "post": {
+        "operationId": "post_government_board_charter",
+        "tags": [
+          "government"
+        ],
+        "summary": "POST /government/board/charter",
+        "description": "board.item.open — the genesis charter + legislation choice (task 1004427, spec D10): a form of government and/or its two live settings (franchise, pass rule), built into a whole constitution on top of the live one and filed through the SAME amendment path as the route above — the same atom, the same strict validation, the same self-removal guard. Nothing here changes the constitution; the sitting it opens is what decides.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `board.item.open` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "board.item.open"
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGovernmentBoardCharterRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGovernmentBoardCharterResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/government/board/genesis-stages": {
       "get": {
         "operationId": "get_government_board_genesis_stages",
@@ -24576,6 +24628,7 @@
           "description": {},
           "detail": {},
           "options": {},
+          "soft_limits": {},
           "publish": {},
           "modules": {},
           "type": {}
@@ -24585,6 +24638,7 @@
           "description",
           "detail",
           "options",
+          "soft_limits",
           "publish",
           "modules",
           "type"
@@ -26511,6 +26565,52 @@
         ],
         "additionalProperties": false
       },
+      "PostGovernmentBoardCharterRequest": {
+        "type": "object",
+        "properties": {
+          "form": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "franchise": {
+            "type": "string",
+            "maxLength": 32
+          },
+          "council_rank": {
+            "type": "string",
+            "maxLength": 64
+          },
+          "pass_rule": {
+            "type": "string",
+            "maxLength": 32
+          },
+          "rationale_md": {
+            "type": "string",
+            "maxLength": 5000
+          },
+          "acknowledge_self_removal": {
+            "type": "boolean"
+          }
+        },
+        "additionalProperties": false
+      },
+      "PostGovernmentBoardCharterResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "amendment": {},
+          "item": {},
+          "reads_as": {}
+        },
+        "required": [
+          "ok",
+          "amendment",
+          "item",
+          "reads_as"
+        ]
+      },
       "PostGovernmentBoardItemsItemIdVotesRequest": {
         "type": "object",
         "properties": {
@@ -29663,9 +29763,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 464,
-  "x-schema-count": 496,
+  "x-endpoint-count": 465,
+  "x-schema-count": 498,
   "x-undocumented-bodies": 12,
-  "x-response-schemas": 336,
+  "x-response-schemas": 337,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 464 endpoints across 83 route files.
+> **Generated from the live route files** — the route file is authoritative. 465 endpoints across 83 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -310,13 +310,14 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/goals/rollups` | `any-builder` | — | GET /goals/rollups?version= — one small row per goal: readiness counters, the last-activity timestamp, the craft set, and the next claima… |
 | GET | `/api/bongos/goals/suggestions` | `any-builder` | — | GET /goals/suggestions — "which goal should this draft live in?", answered before anything is created (task 1003062 / R07). |
 
-## `government` (14)
+## `government` (15)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
 | GET | `/api/bongos/government/assignments` | `archon` | — | government.manage — every builder↔rank assignment row. |
 | POST | `/api/bongos/government/assignments` | `archon` | `builder_id`, `rank_key` | government.manage — assign a CUSTOM rank to a builder. |
 | DELETE | `/api/bongos/government/assignments/:builderId/:rankKey` | `archon` | — | government.manage — remove a custom-rank assignment. |
+| POST | `/api/bongos/government/board/charter` | `metic+archon` | `form`, `franchise`, `council_rank`, `pass_rule`, `rationale_md`, `acknowledge_self_removal` | board.item.open — the genesis charter + legislation choice (task 1004427, spec D10): a form of government and/or its two live settings (f… |
 | GET | `/api/bongos/government/board/genesis-stages` | `any-builder` | — | board.vote.cast — the founding band's read (task 1004429): each genesis stage's latest sitting, and who it is still waiting on under the … |
 | GET | `/api/bongos/government/board/items` | `any-builder` | — | board.vote.cast — the Board Room view: open items with their clock, the OPEN BALLOT, the closed history (R16 of goal 1000069). |
 | POST | `/api/bongos/government/board/items` | `metic+archon` | `subject_type`, `proposal`, `rationale_md`, `acknowledge_self_removal` | board.item.open — put an AMENDMENT to the board (R14 of goal 1000069, ADR 0175 §7). |

package/docs/copy-inventory.md

@@ -4,13 +4,13 @@
 > Deterministic on a given tree — regenerate and commit rather than hand-editing.
 > Machine-readable twin: [`copy-registry.json`](copy-registry.json).
 
-**2188 strings** across 3 surfaces · 1888 distinct pieces of copy · 2188 certain, 0 heuristic · 207 shown in more than one place.
+**2189 strings** across 3 surfaces · 1889 distinct pieces of copy · 2189 certain, 0 heuristic · 207 shown in more than one place.
 
 ## Surfaces
 
 | surface | lives at | files | strings |
 |---|---|---|---|
-| `builders-hall` | `modules/hall-ui/public` | 109 | 1617 |
+| `builders-hall` | `modules/hall-ui/public` | 109 | 1618 |
 | `status-dashboard` | `modules/status-ui/public` | 4 | 100 |
 | `landing` | `modules/public-landing/public` | 6 | 471 |
 
@@ -52,7 +52,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a5257c88eb07` | 4x | GitHub username | modules/public-landing/public/projects.html:1009, modules/public-landing/public/projects.html:1010, modules/public-landing/public/projects.html:1497 |
 | `971f3eb36342` | 4x | How to read the sky | modules/hall-ui/public/goal-map.html:69, modules/hall-ui/public/goal-map.html:108, modules/hall-ui/public/thinking.html:86 |
 | `3eb67b892dea` | 4x | Percy Jackson | modules/public-landing/public/index.html:806, modules/public-landing/public/index.html:824, modules/public-landing/public/index.html:830 |
-| `0887725744f2` | 4x | Restricted. | modules/hall-ui/public/board-room.js:526, modules/hall-ui/public/gate.js:234, modules/hall-ui/public/government.js:879 |
+| `0887725744f2` | 4x | Restricted. | modules/hall-ui/public/board-room.js:526, modules/hall-ui/public/gate.js:234, modules/hall-ui/public/government.js:890 |
 | `47b6199cc471` | 4x | Show or hide the clock | modules/hall-ui/public/goal-map.html:68, modules/hall-ui/public/goal-map.html:68, modules/hall-ui/public/thinking.html:85 |
 | `df38941b25a6` | 4x | Sign in with GitHub | modules/public-landing/public/account.html:106, modules/public-landing/public/projects.html:679, modules/public-landing/public/projects.html:781 |
 | `2ae36be1c531` | 4x | Start a project | modules/public-landing/public/index.html:730, modules/public-landing/public/index.html:894, modules/public-landing/public/projects.html:567 |
@@ -78,7 +78,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `064c72453555` | 3x | goals · | modules/hall-ui/public/roadmap.js:218, modules/hall-ui/public/sky-interaction.js:38, modules/hall-ui/public/sky-interaction.js:129 |
 | … | | _167 more in the JSON registry_ | |
 
-## `builders-hall` — 1617 strings
+## `builders-hall` — 1618 strings
 
 | id | conf | text | where |
 |---|---|---|---|
@@ -184,18 +184,18 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `206acb4467a2` | certain | Archive this goal? | `modules/hall-ui/public/goals-render.js:1008` |
 | `d9dd46194f35` | certain | Argue from mechanism, not vibes. Always name the assumption a number rests on. | `modules/hall-ui/public/settings.html:245` |
 | `4d3b1bcae3eb` | certain | Artist Review Status | `modules/hall-ui/public/studio.html:125` |
-| `5fcfdf8975cf` | certain | As configuration: | `modules/hall-ui/public/government.js:829` |
+| `5fcfdf8975cf` | certain | As configuration: | `modules/hall-ui/public/government.js:839` |
 | `01a0f29ff406` | certain | As first filed | `modules/hall-ui/public/idea.js:467` |
 | `9b02ba5e6d23` | certain | Asked of others | `modules/hall-ui/public/collab.html:131` |
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:48` |
 | `688cc6dd38ee` | certain | Asked of you | `modules/hall-ui/public/collab.html:122` |
 | `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/collab.js:91` |
-| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:511` |
+| `b2656d0b2402` | certain | Asked {…} | `modules/hall-ui/public/watch.js:517` |
 | `8c8ec2597036` | certain | Assigned {…} to builder {…}. | `modules/hall-ui/public/government.js:463` |
 | `46714066f2da` | certain | Audit log | `modules/hall-ui/public/watch.html:141` |
 | `d7c574ba6b2a` | certain | Autobongos runner | `modules/hall-ui/public/gate.html:53` |
 | `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/gate.js:237` |
-| `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/government.js:882` |
+| `1de02052abf2` | certain | Available from the {…} rank up. | `modules/hall-ui/public/government.js:893` |
 | `bdbe9ff6a177` | certain | Awaiting the grader, or a confirmation, before it can ship. | `modules/hall-ui/public/task.js:737` |
 | `ecfbb10d4ca9` | certain | Awaiting the owner/manager's approval | `modules/hall-ui/public/goals-render.js:943` |
 | `08afb1257b71` | certain | Back to home | `modules/hall-ui/public/drachmae.html:87` |
@@ -248,7 +248,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4b714191b423` | certain | Changes touching protected build surfaces, held for your approval. | `modules/hall-ui/public/gate.js:403` |
 | `55ad21bd03eb` | certain | Chart the routes | `modules/hall-ui/public/goal-map.html:91` |
 | `55ad21bd03eb` | certain | Chart the routes | `modules/hall-ui/public/thinking.html:108` |
-| `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:799` |
+| `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:809` |
 | `12db2eacb3f0` | certain | Check this line (Shift + Enter) | `modules/hall-ui/public/tweak-editor.js:226` |
 | `98e16fff6561` | certain | Check this {…} line | `modules/hall-ui/public/tweak-editor.js:226` |
 | `f66f5cdaa732` | certain | Checked against {…} — nothing blocks this move.{…} | `modules/hall-ui/public/deploy.js:294` |
@@ -309,8 +309,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e269ff7b3144` | certain | Could not add that builder just now. | `modules/hall-ui/public/goals-render.js:1311` |
 | `7bcaeffb742f` | certain | Could not approve: {…} | `modules/hall-ui/public/gate.js:123` |
 | `c922293e668c` | certain | Could not assign: {…} | `modules/hall-ui/public/government.js:468` |
-| `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:883` |
-| `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:909` |
+| `e1fc7cedf4e7` | certain | Could not change rank: {…} | `modules/hall-ui/public/watch.js:889` |
+| `b9e53fbd90e6` | certain | Could not change standing: {…} | `modules/hall-ui/public/watch.js:915` |
 | `1ef1efc15b6c` | certain | Could not change that just now. | `modules/hall-ui/public/goals-render.js:1357` |
 | `6214998a5ebe` | certain | Could not check for a newer version: {…}. | `modules/hall-ui/public/settings-software-update.js:135` |
 | `9ab613a308d6` | certain | Could not check for updates: {…}. | `modules/hall-ui/public/settings-software-update.js:180` |
@@ -334,7 +334,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8b69e445592a` | certain | Could not load the question labels; showing the answers as stored. | `modules/hall-ui/public/idea.js:458` |
 | `edd5bafbe075` | certain | Could not load the queue just now. | `modules/hall-ui/public/ideas.js:885` |
 | `02bb0570996a` | certain | Could not load the ranks. | `modules/hall-ui/public/ranks.js:197` |
-| `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1345` |
+| `2878778cf9f3` | certain | Could not load this page. | `modules/hall-ui/public/watch.js:1351` |
 | `df4c2f78a3f6` | certain | Could not load this project’s skills — {…} | `modules/hall-ui/public/settings-specialities.js:311` |
 | `4b0c8d94541c` | certain | Could not load your account. Reload the page to try again. | `modules/hall-ui/public/settings.js:1156` |
 | `2a9fb4046bc4` | certain | Could not load your rank. Return to the hall and try again. | `modules/hall-ui/public/ranks.js:196` |
@@ -343,7 +343,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `de244c45d916` | certain | Could not load {…} | `modules/hall-ui/public/task.js:1027` |
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:298` |
-| `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:663` |
+| `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:669` |
 | `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:449` |
 | `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:368` |
 | `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:977` |
@@ -375,7 +375,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e65b392144ac` | certain | Could not set up storage. Try again. | `modules/hall-ui/public/settings.js:956` |
 | `d4601887a058` | certain | Could not sign out everywhere: {…} | `modules/hall-ui/public/settings-sessions.js:102` |
 | `3db890b074a7` | certain | Could not update visibility just now. | `modules/hall-ui/public/goals-render.js:1341` |
-| `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:1344` |
+| `112d12b24879` | certain | Could not verify your access. Go back and try again. | `modules/hall-ui/public/watch.js:1350` |
 | `6bd74fd20311` | certain | Could not verify your access. Try again. | `modules/hall-ui/public/sessions.js:436` |
 | `278e8281c82f` | certain | Could not vote: {…} | `modules/hall-ui/public/board-room.js:396` |
 | `a48e9f098392` | certain | Could not {…} just now. | `modules/hall-ui/public/goals-render.js:1327` |
@@ -432,7 +432,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c15d1f0ddfb6` | certain | Estimation accuracy | `modules/hall-ui/public/watch.html:148` |
 | `44f928d13699` | certain | Event sounds | `modules/hall-ui/public/settings.html:351` |
 | `8690c6424585` | certain | Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims. | `modules/hall-ui/public/watch.html:69` |
-| `a97b064db76f` | certain | Every closed amendment sitting, ratified and returned alike, with the rule it was decided under. | `modules/hall-ui/public/government.js:839` |
+| `a97b064db76f` | certain | Every closed amendment sitting, ratified and returned alike, with the rule it was decided under. | `modules/hall-ui/public/government.js:850` |
 | `2ae1eb35611e` | certain | Every done-when criterion for this goal, with its full detail. | `modules/hall-ui/public/goals.html:225` |
 | `8825f1d90dd1` | certain | Every idea this builder captured — promoted, discarded, merged, or still open. | `modules/hall-ui/public/profile.html:153` |
 | `25b6c0f9e74e` | certain | Every page is taken or on its way to the site right now. Come back soon. | `modules/hall-ui/public/studio.js:679` |
@@ -529,7 +529,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0469a83cf1e8` | certain | How Claude talks to you | `modules/hall-ui/public/settings.html:303` |
 | `68382894d8f9` | certain | How a planning session seeds each version's task pool, and how a version closes and archives its scope. | `modules/hall-ui/public/diagrams.html:85` |
 | `0bab9286ea38` | certain | How each builder's shipped work has been graded over the past thirty days. | `modules/hall-ui/public/watch.html:76` |
-| `fb7489e8b67c` | certain | How it has changed | `modules/hall-ui/public/government.js:839` |
+| `fb7489e8b67c` | certain | How it has changed | `modules/hall-ui/public/government.js:850` |
 | `d76a5fcbde7c` | certain | How much the claim and ship cards show. Richer cards explain more and cost more tokens; the confirmation line  | `modules/hall-ui/public/settings-render.js:84` |
 | `160adde1e398` | certain | How much your session cards — what | `modules/hall-ui/public/settings.html:298` |
 | `ec3f26ff8137` | certain | How planning sessions feed each version's task pool and how a version closes. | `modules/hall-ui/public/diagrams.html:84` |
@@ -541,7 +541,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `06cb721a03e1` | certain | How the system works — {{worldName}} | `modules/hall-ui/public/diagrams.html:6` |
 | `06cb721a03e1` | certain | How the system works — {{worldName}} | `modules/hall-ui/public/diagrams.html:6` |
 | `4f3802e6c81e` | certain | How the whole build is doing — the program at a glance, then each version. Shipped work stays out of the way. | `modules/hall-ui/public/roadmap.js:433` |
-| `b536897de6a3` | certain | How this project is governed. | `modules/hall-ui/public/government.js:920` |
+| `b536897de6a3` | certain | How this project is governed. | `modules/hall-ui/public/government.js:931` |
 | `971f3eb36342` | certain | How to read the sky | `modules/hall-ui/public/goal-map.html:69` |
 | `971f3eb36342` | certain | How to read the sky | `modules/hall-ui/public/goal-map.html:108` |
 | `971f3eb36342` | certain | How to read the sky | `modules/hall-ui/public/thinking.html:86` |
@@ -574,6 +574,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `dad3388b49c9` | certain | Invitation rescinded. | `modules/hall-ui/public/goals-page.js:689` |
 | `12561be47da9` | certain | Invitation sent — they join once they accept. | `modules/hall-ui/public/goals-render.js:1270` |
 | `24f9e88c21f6` | certain | Invite by GitHub username | `modules/hall-ui/public/watch.js:295` |
+| `33a35c77d372` | certain | Invite expired {…} — invite them again to reopen the door | `modules/hall-ui/public/watch.js:501` |
 | `b9cb720ad5d1` | certain | Invited? Sign in | `modules/hall-ui/public/hall-render.js:286` |
 | `0e48bb2c8c94` | certain | Island index | `modules/hall-ui/public/atlas.html:76` |
 | `2170b74c6526` | certain | Isometric map of the repository | `modules/hall-ui/public/atlas.html:54` |
@@ -801,7 +802,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a2bd76ae030d` | certain | Opens this project's upgrade{…}: you see what would move, confirm it, and it installs, checks itself, and roll | `modules/hall-ui/public/settings-software-update.js:85` |
 | `569980a263ae` | certain | Optional. This is the ledger link — a copy change ships as a task like every other change. | `modules/hall-ui/public/copy-desk.html:130` |
 | `f2e9e8f21e8e` | certain | Or add someone without asking… | `modules/hall-ui/public/goals-render.js:1234` |
-| `d89d1923ecf9` | certain | Over the last {…} days | `modules/hall-ui/public/watch.js:1182` |
+| `d89d1923ecf9` | certain | Over the last {…} days | `modules/hall-ui/public/watch.js:1188` |
 | `695ffff13730` | certain | Over time | `modules/hall-ui/public/profile.html:72` |
 | `5ded44da0cc5` | certain | Override requests | `modules/hall-ui/public/watch.html:136` |
 | `0046e08db06a` | certain | Owner’s bill / month (est.) | `modules/hall-ui/public/fleet-costs.js:70` |
@@ -814,7 +815,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `47d609ece51c` | certain | Pending invitations | `modules/hall-ui/public/goals-render.js:1412` |
 | `a69aff719f1a` | certain | People asking to join. Approve or dismiss each request, re-read the ones you already decided, and take back an | `modules/hall-ui/public/watch.html:62` |
 | `4a46b478edaf` | certain | Per page | `modules/hall-ui/public/hall-kit.js:74` |
-| `e1e10dc5e357` | certain | Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read. | `modules/hall-ui/public/government.js:896` |
+| `e1e10dc5e357` | certain | Permissions is the Archon administration surface. The Constitution and the Board Room are yours to read. | `modules/hall-ui/public/government.js:907` |
 | `6bc03d97457b` | certain | Pick a priority first. | `modules/hall-ui/public/task.js:913` |
 | `fcf996d77050` | certain | Pick a rank to see what it may do. The four ladder ranks ship with the platform; a custom rank is yours to sha | `modules/hall-ui/public/government.html:76` |
 | `45378ea261f6` | certain | Pick one… | `modules/hall-ui/public/settings.html:232` |
@@ -852,7 +853,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3f85bdc47099` | certain | Protected module scope — join by request; an Archon admits members | `modules/hall-ui/public/goals-render.js:856` |
 | `e5c292c8b361` | certain | Provides (seams) | `modules/hall-ui/public/atlas.js:288` |
 | `4de232a05888` | certain | Raise after | `modules/hall-ui/public/project-settings.js:113` |
-| `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:877` |
+| `b9c6def6b120` | certain | Rank set to {…}. | `modules/hall-ui/public/watch.js:883` |
 | `ff50a1395cbc` | certain | Rank: {…} | `modules/hall-ui/public/profile.js:50` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
 | `6824ec470f99` | certain | Ranks — {{worldName}} | `modules/hall-ui/public/ranks.html:6` |
@@ -860,7 +861,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `101a51902f53` | certain | Re-issue failed: {…} | `modules/hall-ui/public/settings.js:780` |
 | `fae2f90927bd` | certain | Read an idea, then decide. An objection needs a reason and the section it faults. | `modules/hall-ui/public/board-room.html:51` |
 | `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/drachmae.js:148` |
-| `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1155` |
+| `b03e17693dcd` | certain | Read it as a table | `modules/hall-ui/public/watch.js:1161` |
 | `b6fcfdd652a7` | certain | Read it here | `modules/hall-ui/public/work.html:45` |
 | `053df132e22c` | certain | Read the full ask | `modules/hall-ui/public/collab.js:133` |
 | `c5f19a888a15` | certain | Read the handoff notes | `modules/hall-ui/public/task.js:490` |
@@ -897,7 +898,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7d4149cee474` | certain | Repo Atlas — a self-drawing map of the codebase | `modules/hall-ui/public/atlas.html:6` |
 | `4d40a68605e1` | certain | Repo atlas | `modules/hall-ui/public/atlas.html:30` |
 | `52d7d4309540` | certain | Repo health | `modules/hall-ui/public/watch.html:104` |
-| `e6629398d47c` | certain | Report {…}. | `modules/hall-ui/public/watch.js:597` |
+| `e6629398d47c` | certain | Report {…}. | `modules/hall-ui/public/watch.js:603` |
 | `ab456f09c0f6` | certain | Request access | `modules/hall-ui/public/hall-render.js:294` |
 | `ab456f09c0f6` | certain | Request access | `modules/hall-ui/public/hall-render.js:470` |
 | `820f47ce5f16` | certain | Request sent | `modules/hall-ui/public/profile-connections.js:95` |
@@ -915,8 +916,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `60d8790ebce8` | certain | Restore the page's words for this {…} line | `modules/hall-ui/public/tweak-editor.js:225` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/board-room.js:526` |
 | `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/gate.js:234` |
-| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/government.js:879` |
-| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/watch.js:1294` |
+| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/government.js:890` |
+| `0887725744f2` | certain | Restricted. | `modules/hall-ui/public/watch.js:1300` |
 | `b99a71747432` | certain | Retire task {…}? It leaves the claimable queue. Promote restores it to the backlog. | `modules/hall-ui/public/task.js:966` |
 | `b33dde402434` | certain | Retire this goal — you will be asked what happens to any unfinished work | `modules/hall-ui/public/goals-render.js:936` |
 | `d0d5b4300f28` | certain | Retire this task | `modules/hall-ui/public/task.js:802` |
@@ -957,7 +958,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `582bdd9435eb` | certain | Select task {…} for bulk actions | `modules/hall-ui/public/work.js:480` |
 | `d91c8e9be76c` | certain | Select task {…} for bulk claim | `modules/hall-ui/public/goals-render.js:353` |
 | `7e1d54119e08` | certain | Select task {…} for bulk release | `modules/hall-ui/public/work.js:258` |
-| `ae43a132699b` | certain | Selectable today | `modules/hall-ui/public/government.js:799` |
+| `ae43a132699b` | certain | Selectable today | `modules/hall-ui/public/government.js:809` |
 | `53cc6d8dd23c` | certain | Send invitation | `modules/hall-ui/public/goals-render.js:1214` |
 | `a39b0f9d86e5` | certain | Serving {…} — read from the box itself, {…}. | `modules/hall-ui/public/deploy.js:433` |
 | `64a1f055129e` | certain | Session card richness | `modules/hall-ui/public/settings-render.js:83` |
@@ -1030,7 +1031,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a1482eff4ead` | certain | Suggested for you | `modules/hall-ui/public/settings-specialities.js:384` |
 | `1e40f33483eb` | certain | Switch theme | `modules/hall-ui/public/shell.js:491` |
 | `93fa2e97dd35` | certain | System default for this skill | `modules/hall-ui/public/settings.js:72` |
-| `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1358` |
+| `4894b1d9b0de` | certain | System oversight: people, operations and security. | `modules/hall-ui/public/watch.js:1364` |
 | `aa8da34fe237` | certain | Take the next page, or pick one from the studio. | `modules/hall-ui/public/tweak-editor.js:564` |
 | `e604fc3ace79` | certain | Task # | `modules/hall-ui/public/blockers.js:139` |
 | `a0f384b022fd` | certain | Task dependencies | `modules/hall-ui/public/goals.html:140` |
@@ -1057,7 +1058,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c0e28f30524d` | certain | That project's own standing, as reported by that project. | `modules/hall-ui/public/profile.js:314` |
 | `e99d4a811e92` | certain | That request is no longer available. | `modules/hall-ui/public/profile-connections.js:314` |
 | `34017119ce22` | certain | That work is genuinely gone | `modules/hall-ui/public/goal-inbox.js:374` |
-| `6e5a324b2972` | certain | That's you | `modules/hall-ui/public/watch.js:826` |
+| `6e5a324b2972` | certain | That's you | `modules/hall-ui/public/watch.js:832` |
 | `50198c465225` | certain | The 16-value rank enum in three bands, which ranks are live, and the permissions each rank holds. | `modules/hall-ui/public/diagrams.html:59` |
 | `c5e6bdd32fe3` | certain | The Board Room is open to the builders this project’s constitution seats on its board. | `modules/hall-ui/public/board-room.js:529` |
 | `6e93ef49d63f` | certain | The adversarial panel. Each worker reports pass, concerns or fail on its own; the gating workers must all pass | `modules/hall-ui/public/task.js:440` |
@@ -1069,7 +1070,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2dc061096c48` | certain | The copy desk — every flagged string | `modules/hall-ui/public/studio.html:165` |
 | `325daac25a9a` | certain | The day the sky is drawn for | `modules/hall-ui/public/goal-map.html:118` |
 | `325daac25a9a` | certain | The day the sky is drawn for | `modules/hall-ui/public/thinking.html:128` |
-| `bac12faf3328` | certain | The developmental ladder: {…}. Formality is adopted only where informal coordination breaks. | `modules/hall-ui/public/government.js:806` |
+| `bac12faf3328` | certain | The developmental ladder: {…}. Formality is adopted only where informal coordination breaks. | `modules/hall-ui/public/government.js:816` |
 | `239d641c20fa` | certain | The document | `modules/hall-ui/public/settings-specialities.js:354` |
 | `ffaa4df90f66` | certain | The editor could not load. | `modules/hall-ui/public/tweak-editor.js:712` |
 | `6e2554615883` | certain | The event sounds could not be loaded. Reload the page to try again. | `modules/hall-ui/public/settings.js:391` |
@@ -1117,7 +1118,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d01d36a596b0` | certain | The session log could not be loaded. Try again. | `modules/hall-ui/public/sessions.js:398` |
 | `d01d36a596b0` | certain | The session log could not be loaded. Try again. | `modules/hall-ui/public/sessions.js:450` |
 | `e48a9b77d91b` | certain | The session log opens from a higher rank. | `modules/hall-ui/public/sessions.html:41` |
-| `af664a644b13` | certain | The seven government structures, for getting a team up to speed before deciding when to flip a switch. | `modules/hall-ui/public/government.js:799` |
+| `af664a644b13` | certain | The seven government structures, for getting a team up to speed before deciding when to flip a switch. | `modules/hall-ui/public/government.js:809` |
 | `6360a5988f26` | certain | The shape and health of the codebase. | `modules/hall-ui/public/watch.html:105` |
 | `fc422cced9e3` | certain | The shared goals you’ve joined. Browse, join, and leave goals — and read their criteria — on the | `modules/hall-ui/public/goals.js:94` |
 | `ac46dc53d95f` | certain | The shared repository the core ships and the modules this project built for itself, each credited to its autho | `modules/hall-ui/public/modules.html:47` |
@@ -1313,7 +1314,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `6dadadffa36e` | certain | Your name cannot be blank. | `modules/hall-ui/public/settings.js:606` |
 | `bd77210a8c90` | certain | Your name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:611` |
 | `c0a01a95e97e` | certain | Your own idea. You may vote, but it can’t be decided by your vote alone, and a vote on your own idea earns no  | `modules/hall-ui/public/board-room.js:366` |
-| `5e0ec4cd1cfe` | certain | Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the  | `modules/hall-ui/public/watch.js:858` |
+| `5e0ec4cd1cfe` | certain | Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the  | `modules/hall-ui/public/watch.js:864` |
 | `8fc605026acf` | certain | Your pending join {…}: {…} — awaiting approval. | `modules/hall-ui/public/goal-inbox.js:88` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:630` |
 | `e91418db3962` | certain | Your preferences, {…}. | `modules/hall-ui/public/settings.js:1173` |
@@ -1337,7 +1338,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a02616e47d11` | certain | a year of qualifying ships, in your timezone \u00b7 only you see this one | `modules/hall-ui/public/profile-charts.js:288` |
 | `5070ebfedc48` | certain | access: the hub keeps a key of its own for this repository, so this change and every later upgrade are saved t | `modules/hall-ui/public/deploy.js:250` |
 | `9612c983451f` | certain | achieved · | `modules/hall-ui/public/roadmap.js:288` |
-| `dbfc9e6e921b` | certain | active builder{…}: {…} | `modules/hall-ui/public/government.js:799` |
+| `dbfc9e6e921b` | certain | active builder{…}: {…} | `modules/hall-ui/public/government.js:809` |
 | `6ea7c97a6583` | certain | alive · | `modules/hall-ui/public/sky-interaction.js:129` |
 | `754babaae931` | certain | and ask in | `modules/hall-ui/public/hall-render.js:804` |
 | `bc960f460250` | certain | and install dependencies ( | `modules/hall-ui/public/hall-render.js:806` |
@@ -1347,7 +1348,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9bf4d3cabf80` | certain | approval queue | `modules/hall-ui/public/approval-queue.js:192` |
 | `ac37199ccdbb` | certain | approve and ship | `modules/hall-ui/public/approval-queue.js:172` |
 | `b4033000c537` | certain | as a table | `modules/hall-ui/public/profile-charts.js:205` |
-| `d7c511423bc0` | certain | as configuration: {…} | `modules/hall-ui/public/government.js:785` |
+| `d7c511423bc0` | certain | as configuration: {…} | `modules/hall-ui/public/government.js:795` |
 | `6d91bea9b24e` | certain | as of {…} | `modules/hall-ui/public/sky-interaction.js:122` |
 | `a756e47632cd` | certain | at {…} — {…}. The timer above is the fallback that is actually in force. | `modules/hall-ui/public/project-settings.js:103` |
 | `63bd14f73960` | certain | author trusted | `modules/hall-ui/public/gate.js:156` |
@@ -1432,7 +1433,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `754bdec368ed` | certain | lowest credits | `modules/hall-ui/public/hall-widgets.js:136` |
 | `bc7923324b96` | certain | manage its visibility in Settings → Profile and privacy | `modules/hall-ui/public/profile.js:290` |
 | `359768b007ee` | certain | map every route in the sky | `modules/hall-ui/public/sky-interaction.js:45` |
-| `5c3fdd34cd02` | certain | means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code | `modules/hall-ui/public/government.js:799` |
+| `5c3fdd34cd02` | certain | means expressible through the real configuration — a rank-based membership plus a pass rule — with no new code | `modules/hall-ui/public/government.js:809` |
 | `0eefd625d954` | certain | merged into | `modules/hall-ui/public/idea.js:237` |
 | `70c234985d42` | certain | most recent first | `modules/hall-ui/public/hall-widgets.js:134` |
 | `e7213f35cd9a` | certain | move → #{…} {…} | `modules/hall-ui/public/goals-render.js:978` |
@@ -1526,7 +1527,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/idea.js:234` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/ideas.js:201` |
 | `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/ideas.js:782` |
-| `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/watch.js:1265` |
+| `4d8ee7d68974` | certain | task {…} | `modules/hall-ui/public/watch.js:1271` |
 | `e4e423344746` | certain | task · {…} | `modules/hall-ui/public/sky-interaction.js:36` |
 | `e4e423344746` | certain | task · {…} | `modules/hall-ui/public/sky-panel.js:95` |
 | `a41659dc2bee` | certain | tasks remaining | `modules/hall-ui/public/roadmap.js:298` |
@@ -1620,7 +1621,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f5e456c3aaf6` | certain | {…} of {…} turned on. Each one, in a line: | `modules/hall-ui/public/settings-specialities.js:152` |
 | `60743fe1e40d` | certain | {…} per page | `modules/hall-ui/public/hall-kit.js:74` |
 | `771bef3d31b5` | certain | {…} project{…} | `modules/hall-ui/public/fleet.js:39` |
-| `154bc518bab4` | certain | {…} proposed | `modules/hall-ui/public/government.js:695` |
+| `154bc518bab4` | certain | {…} proposed | `modules/hall-ui/public/government.js:705` |
 | `275f3565c78b` | certain | {…} reset to its default {…} permissions. | `modules/hall-ui/public/government.js:297` |
 | `33afba17ee0f` | certain | {…} seeded | `modules/hall-ui/public/roadmap.js:207` |
 | `732b4c935e36` | certain | {…} sessions | `modules/hall-ui/public/task.js:495` |
@@ -1634,7 +1635,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a8a6267e490` | certain | {…} unfinished task{…} — say what happens to each | `modules/hall-ui/public/goals-render.js:1015` |
 | `3ad8f32dd43b` | certain | {…} you have sent | `modules/hall-ui/public/profile-connections.js:146` |
 | `8186b562553a` | certain | {…} {…} waiting | `modules/hall-ui/public/work.js:432` |
-| `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:497` |
+| `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/watch.js:503` |
 | `0d4016a5531c` | certain | {…} {…}{…} | `modules/hall-ui/public/work.js:265` |
 | `b3757ba3bb46` | certain | {…} · Stored encrypted; never shown again after saving. | `modules/hall-ui/public/settings.js:834` |
 | `a6e4ed98fbea` | certain | {…} · revoke it any time under Active sessions. | `modules/hall-ui/public/settings.js:766` |
@@ -1651,7 +1652,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c43050b62297` | certain | {…}/100 complete | `modules/hall-ui/public/idea.js:87` |
 | `cbc5a8c686b2` | certain | {…}We store only your GitHub login, avatar, and the work you ship. | `modules/hall-ui/public/hall-render.js:392` |
 | `8e8c7da4f7f5` | certain | {…}criteria met · awaiting review | `modules/hall-ui/public/goals-render.js:163` |
-| `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:896` |
+| `1e275ee0299c` | certain | {…}s only | `modules/hall-ui/public/government.js:907` |
 | `499916045b19` | certain | {…}{…} asks to join | `modules/hall-ui/public/goal-inbox.js:69` |
 | `97e27ab169ae` | certain | {…}{…} session{…} across {…} builder{…}. | `modules/hall-ui/public/sessions.js:338` |
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:667` |