@bongos/core 1.21.13 → 1.21.15

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.13",
-  "core_contract": "1.21.13",
-  "source_commit": "a9ae955060881e54339da9d9cfb1cb1fa7d25671",
+  "core_version": "1.21.15",
+  "core_contract": "1.21.15",
+  "source_commit": "6eaaf19d1ca993da3dad86679b784335b42b4606",
   "source_ref": "HEAD",
-  "built_at": "2026-10-02T19:22:55.678Z",
+  "built_at": "2026-10-02T19:55:19.691Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 579,
     "agent_docs_stubbed": 27,
-    "functional_verbatim": 2891,
+    "functional_verbatim": 2892,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3498,
-  "tree_sha256": "1910703098217bf699609725a8605efbdcadc7aa035383cc6431a1c671e63734",
+  "file_count": 3499,
+  "tree_sha256": "983086f4cbaf9e7f16d4988ac3fdc8ee9c5cbafe1334749ef080e954cc149626",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -1867,7 +1867,7 @@
     {
       "path": "docs/adr/0281-an-instance-identity-is-its-own-unix-account-and-pg-role.md",
       "mode": "0000644",
-      "sha256": "d36d2333c07107c09d7431b4f49ceaafe51231dd4646dbb13bb081d0b2b63a33"
+      "sha256": "fb3ec0877c3b32437d93f59ca5ff92c5f970820f73ff6384a522f22aaf62e609"
     },
     {
       "path": "docs/adr/0282-a-module-that-spends-for-its-callers-declares-a-payer-and-the-core-refuses-it-without-one.md",
@@ -2317,12 +2317,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "396ad4725a37fe22b2a70124d1473a967184336e3b56ef9a2e9c385794590472"
+      "sha256": "e5e7bccc7173be6b072da99915ae674c6f4e78cead0e50c7884ed4442680c82d"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "5d824c5764939a14dc8f1da37c73e0e033def300ca73515d6672763dca352068"
+      "sha256": "b47709bcf92cb1df96f60765c32900619b722ad01001b232863b58d1e4d9f46b"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2827,7 +2827,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "b89b2eeef341e48e5bf816a53f97a91ac52317b14285a6e76af85a78bd079171"
+      "sha256": "bed517252e4971553bacbb9ae5e3b0e27a74f971424280e611a14f7d60e9ef8f"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2917,7 +2917,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "4ab499442182153f1adc90b9558a389ce231d539781f57f667ca643a530caafb"
+      "sha256": "8156033f7f4e8a6826b4d0f3d0130a00c9b3a888f15404a11f383b638296229a"
     },
     {
       "path": "docs/project-context.template.md",
@@ -3082,7 +3082,7 @@
     {
       "path": "docs/recipes/upgrading-the-core.md",
       "mode": "0000644",
-      "sha256": "db22c5d184e2eccffaca9ee17af76c3c716366fede40dc445001b213a0f3df4b"
+      "sha256": "cc1253d5b13243b04d343db140c557b9c78c9345b001be71f3c7b782e9982860"
     },
     {
       "path": "docs/recipes/windows-builders.md",
@@ -4152,7 +4152,7 @@
     {
       "path": "modules/autonomy/fence.js",
       "mode": "0000644",
-      "sha256": "9b320bd16414a0af957ee2a62f559cdd63cc196eceac7bcb9dca207547ed3606"
+      "sha256": "5c293c02e1c112185aaf3ed3d731a1d9c938d574624acae0b7e58d575a2f30d1"
     },
     {
       "path": "modules/autonomy/gauge.js",
@@ -5482,7 +5482,7 @@
     {
       "path": "modules/hall-ui/public/deploy.js",
       "mode": "0000644",
-      "sha256": "8819164c6be07064b83ad2da8c649a1f39fad1c5f92325be3c60b35dcc31b823"
+      "sha256": "5066ca5197fb8f01f41703911f9771c41f2dc21cdec20103614b8bc1df748ab6"
     },
     {
       "path": "modules/hall-ui/public/deploy.states.json",
@@ -9762,12 +9762,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "c7e6e6a89d48813975d7054be141a240197bbc5b045cf65fa41334311e639bc7"
+      "sha256": "acd457907dfe00c893f1aa353a2ddfb2e59c87497f3fac073a21e3070cb8aa2a"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "350bbabd5dd0fe70a82ca0dc837802afc1e0707ef5b3d6930ce5dba7e3511ee7"
+      "sha256": "795f3a45cc0ebac3cb53bcab01f6016cf2307de9e77d894fa6fb6deadefcd373"
     },
     {
       "path": "public-docs/index.html",
@@ -9787,7 +9787,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "020aad6b4b6684d47f115dd18cf1a41142f295eb94929bc290e7fb468699a0f3"
+      "sha256": "4bd2c47d345382b1a325bcf0dbc112222165da23a171abf63232f6360baf09ea"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -9952,7 +9952,7 @@
     {
       "path": "scripts/gds/autobongos-run.js",
       "mode": "0000644",
-      "sha256": "8fec3f44a9c19413efe549f0175e3568f614f9f31d885b43699475264480054f"
+      "sha256": "6c945bd585134f13e972f07225d8522c1ea045f77cffeb788e751377064d3166"
     },
     {
       "path": "scripts/gds/autobongos-service.cmd",
@@ -10792,7 +10792,7 @@
     {
       "path": "scripts/gds/provision-core-upgrade.js",
       "mode": "0000644",
-      "sha256": "ad4fc8a330126aa2887107bc58aab81a7d861482000717254ea1bc2b0ed3a0ef"
+      "sha256": "f872595e7333304012840de5f94a631a6c4105d2753104bfa02d5e68aae7fedc"
     },
     {
       "path": "scripts/gds/provision-disconnect.js",
@@ -11482,17 +11482,17 @@
     {
       "path": "scripts/gds/upgrade-migrate.js",
       "mode": "0000644",
-      "sha256": "1f0a8d52622328e29bd3bdbe0402f680f425480e37e29ee42ceee907368710af"
+      "sha256": "f13cdc8f5f55b76a28230b1d20ed5116159106ea66dcce8db1dcb37302a41fa7"
     },
     {
       "path": "scripts/gds/upgrade-outcome.js",
       "mode": "0000644",
-      "sha256": "7d728dee44116084f134072294ef90e25c92b9da50da8ee4b7f70b2232db4f6d"
+      "sha256": "c05a13867f1792cb6befee3bc3e8f6343c67372a32e14d769d49c8088d7035fa"
     },
     {
       "path": "scripts/gds/upgrade.js",
       "mode": "0000644",
-      "sha256": "dbf5d0114c77d4e8ff1d8f580b994112179fdd89ff5a98e56f6c336373fa0219"
+      "sha256": "5197985fef3098ca0f5ba49e84a3585815bfd24e33c889cc4708c76ef1bc1a64"
     },
     {
       "path": "scripts/gds/validate-design.js",
@@ -11522,7 +11522,7 @@
     {
       "path": "scripts/gds/wedge-remedy.js",
       "mode": "0000644",
-      "sha256": "abe6ecedc808f3f57ef2dc5e9f953792ae26f39625425952a8ce529dbf6de576"
+      "sha256": "611a04666351d8efc7ac5f32a5fef3e846bb087c3397ffd6e3c15a9d9a8dbacb"
     },
     {
       "path": "scripts/gds/worktree-claim-guard.js",
@@ -12012,7 +12012,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "40026259cc69c051470e03bde81e78b1daf4aaf7c336010ca85d11dd3103e352"
+      "sha256": "98f9d1e3cac0f4306b1395ad5291c14d22da7294407497251523672d415fae66"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12479,6 +12479,11 @@
       "mode": "0000644",
       "sha256": "f750e0978dc811420e61ac2ae7be4abd896631447c47004b1ab662e742ec3ac3"
     },
+    {
+      "path": "tests/autobongos_host_access.mjs",
+      "mode": "0000644",
+      "sha256": "49c40df38ea622fc5adbb2128619f75b808694a309180cc5ab200c1f2b8387f4"
+    },
     {
       "path": "tests/autobongos_loop.mjs",
       "mode": "0000644",
@@ -13002,7 +13007,7 @@
     {
       "path": "tests/core_upgrade_runner.mjs",
       "mode": "0000644",
-      "sha256": "aacd126e1ee75e8c9bb3fab5e8a39fc419c2a905f10a4c56af1b1f7a0d240c65"
+      "sha256": "1c6e820ed45b489749f68f0cc00615fe2c4d6a4b08312316897cd1777c82b4dc"
     },
     {
       "path": "tests/cosmos_token_contrast.mjs",
@@ -14747,7 +14752,7 @@
     {
       "path": "tests/instance_db_migrated_on_code_move.mjs",
       "mode": "0000644",
-      "sha256": "32318b6eeadd00990144857aa9b1bbffef5cd941bdeb5578b3621e62f7b0f3a7"
+      "sha256": "cf92e51be46c5b0e2edab94cd1e269f69c324bacb4f512adf5c23881ca810704"
     },
     {
       "path": "tests/instance_feedback.mjs",
@@ -17292,7 +17297,7 @@
     {
       "path": "tests/upgrade.mjs",
       "mode": "0000644",
-      "sha256": "a4cf3fc9076f07424a62e1a620e14063f51378e99850f77614ed38d6dc9d82d4"
+      "sha256": "18174c07c227e872d210cf65e0ebd52a39eb1987d05e7e0eacdb077179380712"
     },
     {
       "path": "tests/upgrade_artist_gate.mjs",
@@ -17312,7 +17317,7 @@
     {
       "path": "tests/upgrade_outcome.mjs",
       "mode": "0000644",
-      "sha256": "cec960e84573efe77003beb324c0679900f321249148418e7a04daf7a7a40215"
+      "sha256": "b09c536651f8f2305451b96c2a182bbe1dd0cc8950d13ba2570cec03be4e4ff2"
     },
     {
       "path": "tests/upgrade_persist_pin.mjs",
@@ -17422,7 +17427,7 @@
     {
       "path": "tests/wedge_remedy.mjs",
       "mode": "0000644",
-      "sha256": "9810e6b2cf5ec77fad5af12b195a3ff4919143b146ff43f106c67c4090c61c25"
+      "sha256": "dfb1683e7654269be0c92fce88954aa25146027373581d3b8bfcc6fbdf11f2b0"
     },
     {
       "path": "tests/wizard_born_first_board.mjs",

package/docs/adr/0281-an-instance-identity-is-its-own-unix-account-and-pg-role.md

@@ -48,6 +48,9 @@ ADR 0128 anticipated the DB half in its own alternatives: *"Do createdb/migrate
 
 > **Amended by task 1002719 — the app user is resolved, not named.** The account whose group every instance joins (and which owns the backup dir and runs the backup timers) was the founder's own account as a literal, so a standup on any other host died `invalid user` at the backup step. `appUser()` in `provision-repo.js` now answers it: `PROVISION_APP_USER`, else the account the runner runs as — which on a plane *is* the app user, so the founder box resolves exactly what the literal said. **root is refused, not resolved**: instance accounts join this account's group, and group root is not a read grant to hand a tenant. The name is validated before it reaches a shell command or a unit file, and the refusal is a preflight: it fires before the status flip, never midway through a standup. Its **group** is the account's primary group looked up on the box (`$(id -gn …)`; the backup unit carries no `Group=`), never the account name spelled twice — an admin-made service account need not have a group of its own name. `audit-authorship.sh` now flags the founder's unix account in account position (`-o`/`-u`, `User=`, `*user = '…'`) in runtime code, because the GitHub-login grep never could.
 
+> **Amended by task 1004512 — the read-only grant is a ceiling, so an operation that WRITES the checkout cannot run as the instance account.** The partial stated above ("file-level co-tenant separation is not what this change delivers") has a sharp edge the design did not name: the instance account has *read* on the checkout and nothing more, so any operation given to it that writes there fails. `bongos upgrade` was given to it whole (task 1004128) and died at its first step — `git status` refused with `fatal: detected dubious ownership in repository`, because the repository is owned by the app user and the asking euid is not. The clean-tree pre-flight read that as a dirty tree, the self-heal chain committed a tree nobody had touched, and every core move on a project provisioned under this ADR ended in a blocker reporting dirt that did not exist. Had git been appeased with a `safe.directory` entry, `npm install`, the pin commit and the `.claude/` materialization would each have failed next, for the same reason and with less legible errors.
+>
+> **So a core move now runs as two accounts, split along what each one owns.** Everything touching the CHECKOUT (the clean-tree pre-flight, the pin, `npm install`, materialize, the pin commit) runs as the app user, which owns it — the same account `pushUpgradePin` and the wedge remedy already used for their own `git` calls. Everything touching the DATABASE (the identity pre-check, migrate, the ledger insert) runs as the instance account through `sudo -n -u`, because that is where this ADR's isolation actually lives: the role owns the database and `PUBLIC` holds no `CONNECT`, so no other account can reach it. `resolveRunAs` answers both (`runAs`, `migrateAs`) and the runner passes `--migrate-as` only when they differ, so a control plane and a project predating this ADR emit the command they always did. **Nothing in this decision is relaxed** — the `/proc` and database boundaries are untouched; what changed is that work needing write access stopped being handed to an account deliberately denied it.
 ## Alternatives considered
 
 - **A `DATABASE_URL` in `web.env` instead of discrete `PG*` vars.** `pool.js` already prefers it, so it would have needed no pool change at all. Rejected: the socket path has to ride as `?host=…` or a percent-encoded authority, and the exact parse is `pg-connection-string`'s business rather than something the test could pin — trading a stated, assertable identity for a URL whose behavior we would be trusting.

package/docs/copy-inventory.md

@@ -88,7 +88,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `66cea7cefa4e` | certain | '; for (const row of bodyRows) { html += ' | `modules/hall-ui/public/md-reader.js:220` |
 | `53e4ac514458` | certain | '; out.push(html); continue; } // Lists (unordered '- ' or ordered '1. '); consecutive items collapse. if (/^( | `modules/hall-ui/public/md-reader.js:224` |
 | `87fa099f5068` | certain | '; } html += ' | `modules/hall-ui/public/md-reader.js:224` |
-| `af615fa9f404` | certain | (checked {…}) | `modules/hall-ui/public/deploy.js:457` |
+| `af615fa9f404` | certain | (checked {…}) | `modules/hall-ui/public/deploy.js:460` |
 | `3ac2eb36ba97` | certain | (no sections) | `modules/hall-ui/public/drachmae.js:260` |
 | `a4614c0b8eb5` | certain | (or use the Claude Code CLI) and open the project. | `modules/hall-ui/public/hall-render.js:810` |
 | `c7aecadc8133` | certain | (with {…}) | `modules/hall-ui/public/goals-render.js:592` |
@@ -120,9 +120,9 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a22df5ebbd5e` | certain | A flag needs a reason an artist can act on. What is wrong with it, and what would better look like? | `modules/hall-ui/public/copy-desk.js:372` |
 | `b8f70e36c7f9` | certain | A goal may only be added to a version that is still in planning. These were added after this version started b | `modules/hall-ui/public/roadmap.js:95` |
 | `df5eb70b5a05` | certain | A higher rank. Its details are hidden until you reach the rank directly below it. | `modules/hall-ui/public/ranks.js:125` |
-| `0150152ea9ec` | certain | A known snag stopped the move to core {…}: | `modules/hall-ui/public/deploy.js:206` |
+| `0150152ea9ec` | certain | A known snag stopped the move to core {…}: | `modules/hall-ui/public/deploy.js:209` |
 | `2e17d7e236d9` | certain | A module built here can be submitted upstream for review, so it can join the shared catalog with your name and | `modules/hall-ui/public/modules.html:74` |
-| `0c611f5a76af` | certain | A move to core {…} failed{…} — this project has moved on since, and is serving {…} now. Whatever stopped that  | `modules/hall-ui/public/deploy.js:366` |
+| `0c611f5a76af` | certain | A move to core {…} failed{…} — this project has moved on since, and is serving {…} now. Whatever stopped that  | `modules/hall-ui/public/deploy.js:369` |
 | `a07c7b335a66` | certain | A protected-scope goal requires a Metic+ member. | `modules/hall-ui/public/goals-render.js:1316` |
 | `a07c7b335a66` | certain | A protected-scope goal requires a Metic+ member. | `modules/hall-ui/public/goals-render.js:1338` |
 | `5723baf26b2d` | certain | A quick idea is a thought filed fast. It is not an unfinished Full Idea — only its author can offer it up for  | `modules/hall-ui/public/idea.js:475` |
@@ -159,12 +159,12 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `bea7817e57a4` | certain | All surfaces | `modules/hall-ui/public/copy-desk.js:301` |
 | `627c683a5e5d` | certain | All time | `modules/hall-ui/public/hall-widgets.js:161` |
 | `b38c01691857` | certain | All your work → | `modules/hall-ui/public/hall-widgets.js:110` |
-| `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:249` |
-| `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:677` |
+| `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:252` |
+| `375b0e67bc30` | certain | Allow new releases and move to {…} | `modules/hall-ui/public/deploy.js:680` |
 | `e99cc5d37404` | certain | Already a member? | `modules/hall-ui/public/hall-render.js:370` |
 | `70ffbebe42fd` | certain | Also available as a Claude page | `modules/hall-ui/public/modules.html:87` |
 | `da5368d10f85` | certain | Amendment {…} passed{…}, and the constitution below is not the one it decided: | `modules/hall-ui/public/government.js:633` |
-| `2ca420e19dbb` | certain | An earlier attempt did not land. | `modules/hall-ui/public/deploy.js:366` |
+| `2ca420e19dbb` | certain | An earlier attempt did not land. | `modules/hall-ui/public/deploy.js:369` |
 | `69f0ca4a4d84` | certain | Analytics scope | `modules/hall-ui/public/hall-render.js:1179` |
 | `1571577d39f0` | certain | Answer the five questions | `modules/hall-ui/public/ideas.html:154` |
 | `14bdceaac078` | certain | Answer the five questions and this spark becomes a Full Idea. | `modules/hall-ui/public/ideas.js:921` |
@@ -243,23 +243,23 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a974494e44f3` | certain | Catalog at a glance | `modules/hall-ui/public/modules.html:53` |
 | `c1c7158e0a43` | certain | Category saved. | `modules/hall-ui/public/project-settings.js:214` |
 | `0279db21e29a` | certain | Change in Settings → | `modules/hall-ui/public/hall-render.js:581` |
-| `2637480ee2b8` | certain | Change to | `modules/hall-ui/public/deploy.js:294` |
+| `2637480ee2b8` | certain | Change to | `modules/hall-ui/public/deploy.js:297` |
 | `f040fb66f250` | certain | Changed files | `modules/hall-ui/public/gate.js:151` |
 | `906c2947dfc1` | certain | Changes save at once and take effect the next time you start a session on this machine. | `modules/hall-ui/public/settings.html:371` |
 | `52384bdc035c` | certain | Changes save at once. Your new choice plays the next time that event fires. | `modules/hall-ui/public/settings.html:384` |
 | `cab7a9526ca1` | certain | Changes save the moment you pick. “Default” clears your override and falls back to the system's choice. | `modules/hall-ui/public/settings.html:354` |
 | `4b714191b423` | certain | Changes touching protected build surfaces, held for your approval. | `modules/hall-ui/public/gate.js:612` |
-| `864503935eca` | certain | Changing the rule… | `modules/hall-ui/public/deploy.js:671` |
+| `864503935eca` | certain | Changing the rule… | `modules/hall-ui/public/deploy.js:674` |
 | `55ad21bd03eb` | certain | Chart the routes | `modules/hall-ui/public/goal-map.html:100` |
 | `55ad21bd03eb` | certain | Chart the routes | `modules/hall-ui/public/thinking.html:108` |
 | `e6982a9ff948` | certain | Charter library | `modules/hall-ui/public/government.js:809` |
 | `12db2eacb3f0` | certain | Check this line (Shift + Enter) | `modules/hall-ui/public/tweak-editor.js:226` |
 | `98e16fff6561` | certain | Check this {…} line | `modules/hall-ui/public/tweak-editor.js:226` |
-| `f66f5cdaa732` | certain | Checked against {…} — nothing blocks this move.{…} | `modules/hall-ui/public/deploy.js:460` |
+| `f66f5cdaa732` | certain | Checked against {…} — nothing blocks this move.{…} | `modules/hall-ui/public/deploy.js:463` |
 | `f8725cf3ba62` | certain | Checking dependency order… | `modules/hall-ui/public/bulk-toolbar.js:217` |
 | `5f8b267e47e5` | certain | Checking for a newer version… | `modules/hall-ui/public/settings-software-update.js:170` |
 | `7a41b18c0de8` | certain | Checking for conflicts… | `modules/hall-ui/public/bulk-toolbar.js:196` |
-| `ac7cf27bd7de` | certain | Checking what this would do, and what it would bring in. The answer comes from the machine itself, so it can t | `modules/hall-ui/public/deploy.js:449` |
+| `ac7cf27bd7de` | certain | Checking what this would do, and what it would bring in. The answer comes from the machine itself, so it can t | `modules/hall-ui/public/deploy.js:452` |
 | `aa3ba7d28a76` | certain | Checking your key… | `modules/hall-ui/public/settings.js:936` |
 | `834f8c6f3b72` | certain | Choose a builder… | `modules/hall-ui/public/goals-render.js:1255` |
 | `b3d0e2af5176` | certain | Choose a goal first. | `modules/hall-ui/public/task.js:1002` |
@@ -359,8 +359,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2366356926b4` | certain | Could not mark the primer just now. Try again. | `modules/hall-ui/public/primer.js:259` |
 | `753987b5da13` | certain | Could not reach the submit endpoint. | `modules/hall-ui/public/modules.js:307` |
 | `6f500726f0ac` | certain | Could not read the report: {…} | `modules/hall-ui/public/watch.js:669` |
-| `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:616` |
-| `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:534` |
+| `21c2f33168a3` | certain | Could not read this project's deploy state: {…} | `modules/hall-ui/public/deploy.js:619` |
+| `21a782f1af26` | certain | Could not read what this would bring in: {…}. The check below still applies. | `modules/hall-ui/public/deploy.js:537` |
 | `8b470cebf53d` | certain | Could not remove your key. Try again. | `modules/hall-ui/public/settings.js:1016` |
 | `4cf6bc8b377b` | certain | Could not remove. Try again. | `modules/hall-ui/public/settings.js:1015` |
 | `7a778d188e87` | certain | Could not remove: {…} | `modules/hall-ui/public/government.js:369` |
@@ -408,7 +408,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e91a4d2e3e1c` | certain | Created rank {…}. | `modules/hall-ui/public/government.js:442` |
 | `a55e423263f0` | certain | Cross-project record | `modules/hall-ui/public/profile.html:98` |
 | `24013a074724` | certain | Custom rank | `modules/hall-ui/public/government.html:113` |
-| `cf7d7d5d5e83` | certain | Database behind. | `modules/hall-ui/public/deploy.js:579` |
+| `cf7d7d5d5e83` | certain | Database behind. | `modules/hall-ui/public/deploy.js:582` |
 | `6744aed3d15e` | certain | Dated exploit-detail engagement reports — kept out of the repo (threat-model §6.3) and served only to Archons. | `modules/hall-ui/public/watch.html:131` |
 | `d388906f550b` | certain | Declared files overlap: {…} (advisory) | `modules/hall-ui/public/task-lib.js:74` |
 | `7c6891813679` | certain | Default ({…}) | `modules/hall-ui/public/settings.js:63` |
@@ -601,7 +601,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ef224c9de7c8` | certain | Ideas — {{worldName}} | `modules/hall-ui/public/ideas.html:6` |
 | `9e9f8a44276b` | certain | Identity vouched | `modules/hall-ui/public/watch.js:396` |
 | `7d6a7de7a69e` | certain | If the {…} has invited you, sign in with GitHub and you're in. If not, ask them for an invite — this project d | `modules/hall-ui/public/hall-render.js:289` |
-| `4ef9f2a4df3b` | certain | If you own this project, | `modules/hall-ui/public/deploy.js:416` |
+| `4ef9f2a4df3b` | certain | If you own this project, | `modules/hall-ui/public/deploy.js:419` |
 | `b6c47d4ee42c` | certain | Image key removed. | `modules/hall-ui/public/settings.js:1012` |
 | `783853467d52` | certain | Image-generation key | `modules/hall-ui/public/settings.html:198` |
 | `5c2e2bcbd5fb` | certain | In Progress | `modules/hall-ui/public/work.html:115` |
@@ -713,10 +713,10 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1ae18e58fead` | certain | Most recent first. Each load of this page is itself recorded in the audit log. | `modules/hall-ui/public/sessions.js:340` |
 | `f14a91b3f625` | certain | Most recent first. Each row is one recorded work session; every id on it opens its record. | `modules/hall-ui/public/sessions.html:56` |
 | `e52ae74f0052` | certain | Move to goal | `modules/hall-ui/public/task.js:599` |
-| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:561` |
-| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:723` |
-| `a851e4dc141b` | certain | Moved {…}, and the box confirmed it. The project’s repository on GitHub still names the old core, so changes p | `modules/hall-ui/public/deploy.js:382` |
-| `393139f648b8` | certain | Moving to core | `modules/hall-ui/public/deploy.js:330` |
+| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:564` |
+| `e77d5f3beaef` | certain | Move to {…} | `modules/hall-ui/public/deploy.js:726` |
+| `a851e4dc141b` | certain | Moved {…}, and the box confirmed it. The project’s repository on GitHub still names the old core, so changes p | `modules/hall-ui/public/deploy.js:385` |
+| `393139f648b8` | certain | Moving to core | `modules/hall-ui/public/deploy.js:333` |
 | `3d0d554cd684` | certain | Name (optional) | `modules/hall-ui/public/gate.js:367` |
 | `ae84ebe1d735` | certain | Name cannot be blank. | `modules/hall-ui/public/settings.js:644` |
 | `31e91ee6ce03` | certain | Name must be {…} characters or fewer. | `modules/hall-ui/public/settings.js:649` |
@@ -761,11 +761,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9f73b3f3dad0` | certain | No rank floor — any builder can claim this task | `modules/hall-ui/public/task-lib.js:82` |
 | `722d107d7a90` | certain | No render is attached to this page yet. /tweak attaches them when it applies a page; until then there is nothi | `modules/hall-ui/public/approval-queue.js:135` |
 | `3fd0c6fcb92e` | certain | No request and no invite needed. Sign in with GitHub, and a step-by-step guide takes you the rest of the way. | `modules/hall-ui/public/hall-render.js:280` |
-| `2947c1ddea9a` | certain | No running box to deploy. | `modules/hall-ui/public/deploy.js:700` |
+| `2947c1ddea9a` | certain | No running box to deploy. | `modules/hall-ui/public/deploy.js:703` |
 | `b67c628da0c1` | certain | No screen to record: this is signed off without a video | `modules/hall-ui/public/criterion-uat-ui.js:64` |
 | `9fb9f766450d` | certain | No sections yet | `modules/hall-ui/public/primer.js:130` |
 | `bef9fe43ba84` | certain | No sessions recorded yet. They land here as builders ship and end sessions. | `modules/hall-ui/public/sessions.js:146` |
-| `084748fd85b4` | certain | No shipped work is recorded between core {…} and {…}. | `modules/hall-ui/public/deploy.js:541` |
+| `084748fd85b4` | certain | No shipped work is recorded between core {…} and {…}. | `modules/hall-ui/public/deploy.js:544` |
 | `4485497d87bb` | certain | No specialities yet. Create one below — it takes a name and a craft, and you can train it afterwards. | `modules/hall-ui/public/settings-specialities.js:416` |
 | `545dc44ad427` | certain | No task in this goal depends on another task in this goal. | `modules/hall-ui/public/goal-forest-render.js:126` |
 | `da838f6056b1` | certain | No tasks for this stage yet. | `modules/hall-ui/public/genesis-home.js:181` |
@@ -784,7 +784,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `91c409a4aea5` | certain | Nobody vouched for this name — anyone can file a request naming anyone. Confirm who is asking before you admit | `modules/hall-ui/public/watch.js:397` |
 | `4016b9cf8d57` | certain | None of your asks have been settled yet. | `modules/hall-ui/public/collab.html:134` |
 | `fdfceec7ff97` | certain | Not backend-only | `modules/hall-ui/public/criterion-uat-ui.js:84` |
-| `428a62539050` | certain | Not checked yet — the runner takes this reading on its own tick. | `modules/hall-ui/public/deploy.js:455` |
+| `428a62539050` | certain | Not checked yet — the runner takes this reading on its own tick. | `modules/hall-ui/public/deploy.js:458` |
 | `c72e0bdb834a` | certain | Not declared in module.json — this is who ships the module. | `modules/hall-ui/public/modules.js:62` |
 | `361b353ded5e` | certain | Not enough shipped work yet to chart. | `modules/hall-ui/public/hall-widgets.js:215` |
 | `90230572d017` | certain | Not found | `modules/hall-ui/public/task.js:1045` |
@@ -806,13 +806,13 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `905e99f158c2` | certain | Nothing is discarded by omission: every task needs a decision before this can be submitted. Abandoning stamps  | `modules/hall-ui/public/goals-render.js:1042` |
 | `8edb2116af0d` | certain | Nothing is on your desk yet. The Tweak/CopyWrite Flow has a page ready for you. | `modules/hall-ui/public/studio.html:96` |
 | `2ec0fbb20a42` | certain | Nothing is waiting. A spark appears here when its author offers a quick idea up for development. | `modules/hall-ui/public/ideas.js:863` |
-| `9ac63d97239a` | certain | Nothing newer is published that this box can take. There is nothing to deploy. | `modules/hall-ui/public/deploy.js:596` |
+| `9ac63d97239a` | certain | Nothing newer is published that this box can take. There is nothing to deploy. | `modules/hall-ui/public/deploy.js:599` |
 | `43626cff7071` | certain | Nothing of that kind in your sky. | `modules/hall-ui/public/sky-panel.js:123` |
 | `ad9a17a8a5eb` | certain | Nothing shipped yet. | `modules/hall-ui/public/profile.js:297` |
 | `f326632f2013` | certain | Nothing to submit — every module here ships with the core. | `modules/hall-ui/public/modules.js:268` |
 | `27c0d872db2d` | certain | Nothing you have typed above is lost by opening this. | `modules/hall-ui/public/ideas.html:155` |
-| `26a07b64f49d` | certain | Now running core {…} | `modules/hall-ui/public/deploy.js:392` |
-| `21cb60a8a96a` | certain | Now running core {…} — but GitHub was not updated. | `modules/hall-ui/public/deploy.js:382` |
+| `26a07b64f49d` | certain | Now running core {…} | `modules/hall-ui/public/deploy.js:395` |
+| `21cb60a8a96a` | certain | Now running core {…} — but GitHub was not updated. | `modules/hall-ui/public/deploy.js:385` |
 | `9d25ba1d2f17` | certain | Off voice — says it in the wrong register | `modules/hall-ui/public/copy-desk.html:89` |
 | `3d5d0f81eeac` | certain | Offering a skill turns nothing on. Everyone who uses this speciality is shown each one and chooses for themsel | `modules/hall-ui/public/settings-specialities.js:242` |
 | `b89ad49770e7` | certain | On Windows, run | `modules/hall-ui/public/hall-render.js:833` |
@@ -999,7 +999,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ce046dcbd8e1` | certain | Save as PDF | `modules/hall-ui/public/modules.html:88` |
 | `0c79b504aebe` | certain | Save key | `modules/hall-ui/public/settings.js:871` |
 | `b3d55c8c765a` | certain | Save my choices | `modules/hall-ui/public/settings-specialities.js:163` |
-| `13ca64ad2498` | certain | Save rule | `modules/hall-ui/public/deploy.js:294` |
+| `13ca64ad2498` | certain | Save rule | `modules/hall-ui/public/deploy.js:297` |
 | `a98b96e49388` | certain | Save what it offers | `modules/hall-ui/public/settings-specialities.js:276` |
 | `e5e50cc034d6` | certain | Saved — {…} of {…} skill{…} on. | `modules/hall-ui/public/settings-specialities.js:204` |
 | `72f24fcbe9e0` | certain | Saves the moment you choose; applies from your next session. | `modules/hall-ui/public/settings.html:332` |
@@ -1020,7 +1020,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `00473a773fd7` | certain | See the UAT | `modules/hall-ui/public/criterion-uat-ui.js:80` |
 | `a9c398651862` | certain | See the cross-project record | `modules/hall-ui/public/profile-canonical.js:114` |
 | `17d5b5739f46` | certain | See the work board → | `modules/hall-ui/public/hall-render.js:946` |
-| `55cde0774831` | certain | See what would change | `modules/hall-ui/public/deploy.js:422` |
+| `55cde0774831` | certain | See what would change | `modules/hall-ui/public/deploy.js:425` |
 | `292761c89fae` | certain | See which goals wait on each other → | `modules/hall-ui/public/goals.html:39` |
 | `75dc5463facc` | certain | Select at least 2 waiting tasks to copy a parallel-session prompt. | `modules/hall-ui/public/bulk-toolbar.js:181` |
 | `a98882faa482` | certain | Select at least 2 waiting tasks to copy a sequential prompt. | `modules/hall-ui/public/bulk-toolbar.js:206` |
@@ -1030,7 +1030,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `7e1d54119e08` | certain | Select task {…} for bulk release | `modules/hall-ui/public/work.js:258` |
 | `ae43a132699b` | certain | Selectable today | `modules/hall-ui/public/government.js:809` |
 | `53cc6d8dd23c` | certain | Send invitation | `modules/hall-ui/public/goals-render.js:1244` |
-| `a39b0f9d86e5` | certain | Serving {…} — read from the box itself, {…}. | `modules/hall-ui/public/deploy.js:599` |
+| `a39b0f9d86e5` | certain | Serving {…} — read from the box itself, {…}. | `modules/hall-ui/public/deploy.js:602` |
 | `64a1f055129e` | certain | Session card richness | `modules/hall-ui/public/settings-render.js:83` |
 | `d14e8e9acaff` | certain | Session ended. | `modules/hall-ui/public/settings-sessions.js:81` |
 | `55e0a34bafed` | certain | Session log{…} | `modules/hall-ui/public/task.js:505` |
@@ -1098,7 +1098,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `eaad12cacb9d` | certain | Start over | `modules/hall-ui/public/studio.js:264` |
 | `b01258e8242a` | certain | Starting government | `modules/hall-ui/public/genesis-home.js:131` |
 | `efe530c0e3a7` | certain | Still open | `modules/hall-ui/public/profile.js:568` |
-| `490a3cbb8c1c` | certain | Still working on core {…}. It keeps going without this page — reload to see where it got to. | `modules/hall-ui/public/deploy.js:761` |
+| `490a3cbb8c1c` | certain | Still working on core {…}. It keeps going without this page — reload to see where it got to. | `modules/hall-ui/public/deploy.js:764` |
 | `9a4ced1afb6c` | certain | Stop waiting on task {…} | `modules/hall-ui/public/task.js:287` |
 | `b0861c874a2f` | certain | Stopped using it. | `modules/hall-ui/public/settings-specialities.js:457` |
 | `6c6544f5c011` | certain | Stored encrypted; never shown again after saving — only its last four digits. | `modules/hall-ui/public/settings.html:207` |
@@ -1132,7 +1132,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2fc66e722e33` | certain | Tasks open once you have read the builder primer. | `modules/hall-ui/public/work.html:43` |
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
 | `44579eef0c8d` | certain | Tasks — {{worldName}} | `modules/hall-ui/public/work.html:6` |
-| `c4b62de31830` | certain | Technical detail — what the upgrade said | `modules/hall-ui/public/deploy.js:362` |
+| `c4b62de31830` | certain | Technical detail — what the upgrade said | `modules/hall-ui/public/deploy.js:365` |
 | `1e4285bdfaef` | certain | Terminal commands (bongos) | `modules/hall-ui/public/commands.html:44` |
 | `8584832c348f` | certain | Test and sign off | `modules/hall-ui/public/criterion-uat-ui.js:76` |
 | `2f4f047dc1b4` | certain | Text size | `modules/hall-ui/public/shell.js:498` |
@@ -1232,7 +1232,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `599fd0e82d1c` | certain | The task board — all work | `modules/hall-ui/public/studio.html:166` |
 | `198ba9353bf6` | certain | The task feed did not answer. Nothing on the record has changed, only the read failed. Try again in a moment,  | `modules/hall-ui/public/task.js:1050` |
 | `34555793f33e` | certain | The task list could not be loaded right now. | `modules/hall-ui/public/work.js:999` |
-| `8c991355687d` | certain | The upgrade checked {…} and refused:{…} | `modules/hall-ui/public/deploy.js:465` |
+| `8c991355687d` | certain | The upgrade checked {…} and refused:{…} | `modules/hall-ui/public/deploy.js:468` |
 | `a42a37c43bfb` | certain | The words this project shows people — what has been flagged, and what nobody has looked at. | `modules/hall-ui/public/copy-desk.js:328` |
 | `d51b954e0aa9` | certain | The words you changed | `modules/hall-ui/public/approval-queue.js:198` |
 | `bcdbded93d4e` | certain | The work board failed to load. Reload to try again. | `modules/hall-ui/public/work.js:1185` |
@@ -1271,8 +1271,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `e7a289134dc3` | certain | This page shows no words the reader could find. | `modules/hall-ui/public/tweak-editor.js:246` |
 | `5bdcbec770dd` | certain | This project has no slash commands yet. | `modules/hall-ui/public/commands.js:38` |
 | `fcd43f045614` | certain | This project is upgraded on the server that runs it: | `modules/hall-ui/public/settings-software-update.js:76` |
-| `3c8aaec39c40` | certain | This project's code expects {…} database change{…} that its database has not applied yet. Anything that relies | `modules/hall-ui/public/deploy.js:579` |
-| `6e9dfe1fb903` | certain | This restarts {…} onto core | `modules/hall-ui/public/deploy.js:561` |
+| `3c8aaec39c40` | certain | This project's code expects {…} database change{…} that its database has not applied yet. Anything that relies | `modules/hall-ui/public/deploy.js:582` |
+| `6e9dfe1fb903` | certain | This restarts {…} onto core | `modules/hall-ui/public/deploy.js:564` |
 | `b9ed9a5f38dd` | certain | This round changed no lines. | `modules/hall-ui/public/approval-queue.js:149` |
 | `69e8beced2ff` | certain | This sends the idea back to its author. Say why, and which section. | `modules/hall-ui/public/board-room.js:377` |
 | `09256febc32d` | certain | This sentence has {…} {…} where a value is dropped in when it is shown. | `modules/hall-ui/public/copy-desk.js:422` |
@@ -1280,14 +1280,14 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `c9e50a67988a` | certain | This task has shipped and its credits have landed. Neither Ship it nor Confirm is available. | `modules/hall-ui/public/task.js:765` |
 | `62b0940efd7d` | certain | This task is already retired. Promote restores it to the backlog. | `modules/hall-ui/public/task.js:801` |
 | `fe992d25f60a` | certain | This task is waiting on {…} {…}. It cannot be claimed until {…} — see Blocked by above. | `modules/hall-ui/public/task.js:754` |
-| `4301ecd67891` | certain | This would fail. | `modules/hall-ui/public/deploy.js:465` |
+| `4301ecd67891` | certain | This would fail. | `modules/hall-ui/public/deploy.js:468` |
 | `2ad5823d2cd7` | certain | Three dials, all settings rather than code: | `modules/hall-ui/public/government.html:55` |
 | `f158ed1c24a2` | certain | Toggle fullscreen | `modules/hall-ui/public/diagram-viewer.js:101` |
 | `7dfdc26f9f79` | certain | Tokens refresh on use; re-issuing never signs you out anywhere else. | `modules/hall-ui/public/settings.html:152` |
 | `8f38bbae750b` | certain | Tool errors | `modules/hall-ui/public/sessions.html:76` |
 | `becc35640e42` | certain | Trained on | `modules/hall-ui/public/settings-specialities.js:322` |
-| `1bb6c792ceb9` | certain | Try again | `modules/hall-ui/public/deploy.js:265` |
-| `b50089eda0a4` | certain | Try now | `modules/hall-ui/public/deploy.js:214` |
+| `1bb6c792ceb9` | certain | Try again | `modules/hall-ui/public/deploy.js:268` |
+| `b50089eda0a4` | certain | Try now | `modules/hall-ui/public/deploy.js:217` |
 | `26ec8100bc6f` | certain | Turn it on | `modules/hall-ui/public/settings-specialities.js:138` |
 | `72a29648399b` | certain | Tweak a page | `modules/hall-ui/public/tweak-editor.html:32` |
 | `72a29648399b` | certain | Tweak a page | `modules/hall-ui/public/tweak-editor.html:32` |
@@ -1308,7 +1308,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `aa445f06cc5e` | certain | Unlink failed: {…} | `modules/hall-ui/public/settings.js:739` |
 | `4a716d7d8d46` | certain | Up to date | `modules/hall-ui/public/settings-software-update.js:142` |
 | `13ced9b2fa12` | certain | Update ready | `modules/hall-ui/public/settings-software-update.js:145` |
-| `1e091df06692` | certain | Update rule: {…} | `modules/hall-ui/public/deploy.js:294` |
+| `1e091df06692` | certain | Update rule: {…} | `modules/hall-ui/public/deploy.js:297` |
 | `55fde21d907b` | certain | Update to {…}{…} | `modules/hall-ui/public/settings-software-update.js:85` |
 | `67fbc770b3b3` | certain | Upvote (+1) | `modules/hall-ui/public/builders.js:777` |
 | `16d7f809be8a` | certain | Use the control below to take it. | `modules/hall-ui/public/shell.js:848` |
@@ -1328,8 +1328,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `411b2ff58094` | certain | Wait for task | `modules/hall-ui/public/task.js:629` |
 | `b18832e219dc` | certain | Waiting on {…} | `modules/hall-ui/public/goals-lib.js:91` |
 | `f2e019bfdbe8` | certain | Waiting to be developed | `modules/hall-ui/public/ideas.html:126` |
-| `9bc8f6bb1d47` | certain | Waiting to try core {…} again at {…}. | `modules/hall-ui/public/deploy.js:209` |
 | `9bc8f6bb1d47` | certain | Waiting to try core {…} again at {…}. | `modules/hall-ui/public/deploy.js:212` |
+| `9bc8f6bb1d47` | certain | Waiting to try core {…} again at {…}. | `modules/hall-ui/public/deploy.js:215` |
 | `8e4f0179e1d3` | certain | Waits on | `modules/hall-ui/public/goal-forest-render.js:146` |
 | `3a9cd9a27a84` | certain | Walk the full ladder → | `modules/hall-ui/public/hall-render.js:84` |
 | `18f2f54de2a8` | certain | Watch sections | `modules/hall-ui/public/watch.html:54` |
@@ -1357,7 +1357,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `2dd116d2d817` | certain | What the current wording gets wrong, and what yours does about it. | `modules/hall-ui/public/copy-desk.html:166` |
 | `e179870922a3` | certain | What the session did, derived from its own transcript: whether it wrote files, used tools, and how many prompt | `modules/hall-ui/public/sessions.html:74` |
 | `868cf4bbe616` | certain | What the start-it markers mean | `modules/hall-ui/public/commands.html:35` |
-| `5a58392783fd` | certain | What this brings in | `modules/hall-ui/public/deploy.js:550` |
+| `5a58392783fd` | certain | What this brings in | `modules/hall-ui/public/deploy.js:553` |
 | `a444ad812e4f` | certain | What this builder has done, seen one role at a time. | `modules/hall-ui/public/profile.html:138` |
 | `32d675a2b022` | certain | What this rank is for (optional) | `modules/hall-ui/public/government.html:90` |
 | `04b3ff4c4f4c` | certain | What users can see | `modules/hall-ui/public/deploy.html:47` |
@@ -1399,7 +1399,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `b6b0fcb2bcee` | certain | You already have a pending request or invitation for this goal. | `modules/hall-ui/public/goals-render.js:1398` |
 | `52e93bbc07a6` | certain | You are already a member of this goal. | `modules/hall-ui/public/goals-render.js:1399` |
 | `46b1265ef172` | certain | You are not a member of this goal. | `modules/hall-ui/public/goals-render.js:1355` |
-| `921cb15a8188` | certain | You can still press Move — the runner will refuse it the same way, and the box is left where it is. | `modules/hall-ui/public/deploy.js:465` |
+| `921cb15a8188` | certain | You can still press Move — the runner will refuse it the same way, and the box is left where it is. | `modules/hall-ui/public/deploy.js:468` |
 | `bcf33947aff6` | certain | You created this task and it is already retired. | `modules/hall-ui/public/task.js:817` |
 | `23c68db6db4e` | certain | You created this task, but it has already moved past planning. Retiring it now is a change to the record, so i | `modules/hall-ui/public/task.js:822` |
 | `cf0c107a39fc` | certain | You created this task, but it has shipped. Shipped work is immutable history — nobody can retire it, whatever  | `modules/hall-ui/public/task.js:815` |
@@ -1452,7 +1452,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `cc361cc7333a` | certain | \s?/.test(raw)) { const quoteLines = []; while (i | `modules/hall-ui/public/md-reader.js:189` |
 | `8fdcb0439d2f` | certain | a sentence of context | `modules/hall-ui/public/blockers.js:309` |
 | `a02616e47d11` | certain | a year of qualifying ships, in your timezone \u00b7 only you see this one | `modules/hall-ui/public/profile-charts.js:358` |
-| `5070ebfedc48` | certain | access: the hub keeps a key of its own for this repository, so this change and every later upgrade are saved t | `modules/hall-ui/public/deploy.js:416` |
+| `5070ebfedc48` | certain | access: the hub keeps a key of its own for this repository, so this change and every later upgrade are saved t | `modules/hall-ui/public/deploy.js:419` |
 | `9612c983451f` | certain | achieved · | `modules/hall-ui/public/roadmap.js:288` |
 | `dbfc9e6e921b` | certain | active builder{…}: {…} | `modules/hall-ui/public/government.js:809` |
 | `6ea7c97a6583` | certain | alive · | `modules/hall-ui/public/sky-interaction.js:129` |
@@ -1541,7 +1541,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `01ae1a45baff` | certain | invited by {…} | `modules/hall-ui/public/goal-inbox.js:53` |
 | `77ad318bb546` | certain | invited — awaiting their response | `modules/hall-ui/public/goals-render.js:1433` |
 | `6cfd7c0e0db6` | certain | is both the authority and production; | `modules/hall-ui/public/diagrams.html:74` |
-| `d0e722302840` | certain | is published and this box is not on it yet. | `modules/hall-ui/public/deploy.js:422` |
+| `d0e722302840` | certain | is published and this box is not on it yet. | `modules/hall-ui/public/deploy.js:425` |
 | `6b530a7007bc` | certain | jump to a goal or a thought | `modules/hall-ui/public/goal-map.html:84` |
 | `6b530a7007bc` | certain | jump to a goal or a thought | `modules/hall-ui/public/thinking.html:92` |
 | `9328033a890a` | certain | land every shuttle | `modules/hall-ui/public/sky-interaction.js:45` |
@@ -1607,8 +1607,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3b22c5af029b` | certain | rank or above, or that it is your own. | `modules/hall-ui/public/copy-desk.html:47` |
 | `80ddf28baee7` | certain | rank-key (kebab-case) | `modules/hall-ui/public/government.html:82` |
 | `40c1e4f0376f` | certain | reading the docket | `modules/hall-ui/public/city.html:64` |
-| `41a4b66c21e5` | certain | reads the control plane's own observation · ADR 0293 · every move is recorded with who asked | `modules/hall-ui/public/deploy.js:704` |
-| `8d810f134b7b` | certain | reconnect GitHub with repository access | `modules/hall-ui/public/deploy.js:416` |
+| `41a4b66c21e5` | certain | reads the control plane's own observation · ADR 0293 · every move is recorded with who asked | `modules/hall-ui/public/deploy.js:707` |
+| `8d810f134b7b` | certain | reconnect GitHub with repository access | `modules/hall-ui/public/deploy.js:419` |
 | `f83f0a9d6b6a` | certain | recorded, on the Operations tab | `modules/hall-ui/public/watch.html:49` |
 | `26da1df6fd4a` | certain | reflects it. | `modules/hall-ui/public/settings.html:133` |
 | `9eca058c6ad2` | certain | release a thought — one line | `modules/hall-ui/public/goal-map.html:90` |
@@ -1664,7 +1664,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `436506f4bc94` | certain | the live page | `modules/hall-ui/public/tweak-editor.html:84` |
 | `abddfb2b1022` | certain | the newest {…} only | `modules/hall-ui/public/sky-interaction.js:124` |
 | `4ad74172c874` | certain | the next page to tweak | `modules/hall-ui/public/studio.html:118` |
-| `2be732b11690` | certain | the owner’s blockers | `modules/hall-ui/public/deploy.js:226` |
+| `2be732b11690` | certain | the owner’s blockers | `modules/hall-ui/public/deploy.js:229` |
 | `95854f8315ca` | certain | the page everyone else reads | `modules/hall-ui/public/profile.html:33` |
 | `2f48995206d4` | certain | the pages /tweak has applied | `modules/hall-ui/public/studio.html:122` |
 | `4bde7b562cf4` | certain | the record | `modules/hall-ui/public/sky-panel.js:51` |
@@ -1727,7 +1727,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `50d4a70a2eb2` | certain | {…} Access is invite-based: an Archon approves each new builder. To begin, request access below. | `modules/hall-ui/public/hall-render.js:297` |
 | `9aac280c89ec` | certain | {…} Anyone with a GitHub account can join: sign in and you're in, starting at the newcomer rank. | `modules/hall-ui/public/hall-render.js:280` |
 | `de5b58a187c6` | certain | {…} Change that profile and this follows it. | `modules/hall-ui/public/settings-render.js:65` |
-| `e4b36621d4f1` | certain | {…} Nothing needs doing — this page shows the result when it lands. | `modules/hall-ui/public/deploy.js:214` |
+| `e4b36621d4f1` | certain | {…} Nothing needs doing — this page shows the result when it lands. | `modules/hall-ui/public/deploy.js:217` |
 | `6c08bfe92e2b` | certain | {…} This project is invite-only: the {…} invites each builder, and there is nothing to apply for here. | `modules/hall-ui/public/hall-render.js:289` |
 | `c5623d60015d` | certain | {…} Your standing is {…}. | `modules/hall-ui/public/hall-render.js:845` |
 | `a91e1e702d4d` | certain | {…} achieved, {…} in progress, {…} not started of {…} goals | `modules/hall-ui/public/roadmap.js:73` |
@@ -1798,7 +1798,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:711` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:163` |
 | `d2c30a1ee74e` | certain | — decide — | `modules/hall-ui/public/goals-render.js:1006` |
-| `e31a588bb9e1` | certain | — moved {…}, and the box confirmed it. | `modules/hall-ui/public/deploy.js:392` |
+| `e31a588bb9e1` | certain | — moved {…}, and the box confirmed it. | `modules/hall-ui/public/deploy.js:395` |
 | `417adabd1a00` | certain | — no goal suggested — open the goal board and pick one — | `modules/hall-ui/public/task-detail.js:412` |
 | `da9962dc1729` | certain | — or open any diagram fullscreen. | `modules/hall-ui/public/diagrams.html:33` |
 | `e5c5e94152b3` | certain | — that's all the tooling you need up front. | `modules/hall-ui/public/hall-render.js:833` |
@@ -1807,11 +1807,11 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8f1d0e229725` | certain | — your thinking | `modules/hall-ui/public/thinking.html:72` |
 | `d3afa6d6dd9e` | certain | — your words, in your voice. Needed for a note or a follow-up. | `modules/hall-ui/public/studio.js:191` |
 | `68b547166d48` | certain | — {…} confirmed {…} can't land yet, so {…} reward is pending (it lands on ship). Rebase + re-ship or release { | `modules/hall-ui/public/hall-render.js:561` |
-| `8f2eba6e0da8` | certain | — {…} {…} of work landed between core {…} and {…}{…}: | `modules/hall-ui/public/deploy.js:550` |
-| `28fef677706c` | certain | — {…}. The project restarts as part of this, and puts itself back on {…} if the new core does not answer. This | `modules/hall-ui/public/deploy.js:330` |
+| `8f2eba6e0da8` | certain | — {…} {…} of work landed between core {…} and {…}{…}: | `modules/hall-ui/public/deploy.js:553` |
+| `28fef677706c` | certain | — {…}. The project restarts as part of this, and puts itself back on {…} if the new core does not answer. This | `modules/hall-ui/public/deploy.js:333` |
 | `9a1cef2da08d` | certain | …and {…} more goals — | `modules/hall-ui/public/goal-inbox.js:127` |
 | `5b9fa7cb4fb0` | certain | …and {…} more waiting — | `modules/hall-ui/public/goal-inbox.js:158` |
-| `b797996b2e4f` | certain | …and {…} more, not listed. | `modules/hall-ui/public/deploy.js:548` |
+| `b797996b2e4f` | certain | …and {…} more, not listed. | `modules/hall-ui/public/deploy.js:551` |
 | `9132930284c4` | certain | …and {…} older version{…}, also in this update. | `modules/hall-ui/public/settings-software-update.js:120` |
 | `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:316` |
 | `f16717b3e122` | certain | …{…} more awaiting an answer. | `modules/hall-ui/public/goal-inbox.js:396` |