@bongos/core 1.21.160 → 1.21.161

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.160",
-  "core_contract": "1.21.160",
-  "source_commit": "1bcfb94051a6677d8229e7bb71a985c535157b76",
+  "core_version": "1.21.161",
+  "core_contract": "1.21.161",
+  "source_commit": "e64f42fddc5215f1ebf72d0f143aaf67d433e442",
   "source_ref": "HEAD",
-  "built_at": "2026-10-23T12:29:32.420Z",
+  "built_at": "2026-10-23T12:50:53.542Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 608,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 3810,
-  "tree_sha256": "fd4663a838b4d7654fd94a62a93921ca209c7cc31f6b1a0cee64eb5fb5f5bfdb",
+  "tree_sha256": "c5ec67d9097deb5d728c387c268f13c7709e20bde587523b4951bd40d2a6a355",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2412,12 +2412,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "2cbf7bd83a2bac8a814fa7a13ffeb28a6eb65a8740c950020b74dd8e3df3511a"
+      "sha256": "3d30bfc179266419244b95eb511f6e4dc58e84ab11382046180e9f27f4379da6"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "ae2fd0177486f61a2a9b756762aa359797e8bcb528620bf4c31395d0e4fbdd2d"
+      "sha256": "7030248d1b8d761a3fc9326d4a4dac2da68ac36fb6f883674085c48aa2225fb9"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2927,7 +2927,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "169b8812c08a71eb64c027033eb1f087cbfb2cef155555072c9468cc48ac401b"
+      "sha256": "aec36c2bf3531d4235708b403593bb8bbb7cf6be21c83134e551d0655f8ca99e"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3017,7 +3017,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "3cc6f66c53c04483903ff684b3353f04d5dae863211c9519a8ccf4d6aa8139f2"
+      "sha256": "108301b0c166fe039f5b92c41b325d24b109658096f6b731939aab1555ae12c8"
     },
     {
       "path": "docs/project-context.template.md",
@@ -9722,7 +9722,7 @@
     {
       "path": "modules/public-landing/public/privacy.html",
       "mode": "0000644",
-      "sha256": "aebcc47c47b1ebce3a07e03249a06f01117695caa277071fc5a89b93f13333b4"
+      "sha256": "8ae86128735caa1961321c3fb7cdc91160638812298fb48e65bcaf72dbb2745f"
     },
     {
       "path": "modules/public-landing/public/projects-demo.states.json",
@@ -10557,12 +10557,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "414105d57e04847f630c29942e68a65ef4589e2982fd8f864e7c59e2ded7465d"
+      "sha256": "3a7e1b82fedd635425eb520d8a5665293a142683d18f567b1dc8c8b0d9480a0f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "54652bfcebb657685ef98b416ebbbb58357c455f356ff2ba6f0f70e18c52db1b"
+      "sha256": "4c12a4456e765b3671fc78b9dd354c527e1ae6ee4240accb5126e136349dedc4"
     },
     {
       "path": "public-docs/index.html",
@@ -10582,7 +10582,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "03651c500e57a259f8220383857e75005e8e8c1e0782554ef2bbb5109fad111c"
+      "sha256": "1dee5115bf44953aaa14689559704aae3e7876352fe63eea7f786d86636f8709"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -12967,7 +12967,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "18d92ce72522e812c4f5802a97b09c18a015333752dceece6c97d6f73d7edf2a"
+      "sha256": "36c04248fc8ef349fa92dbb4ddc66200cecd3e1859c3b1fe7d7b6ef30783553f"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -16237,7 +16237,7 @@
     {
       "path": "tests/landing_legal_pages.mjs",
       "mode": "0000644",
-      "sha256": "d7a3849e5e3b1ef889123db39cdc9375af33fd3353644e0326c3f3a237e3b6b1"
+      "sha256": "b5cd58d82b33912e2847b3816335183d0d89fb40f6b55118151a2f6b71f8746f"
     },
     {
       "path": "tests/landing_page.mjs",

package/docs/copy-inventory.md

@@ -2301,7 +2301,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `8d812912c392` | certain | Don't use {{productName}} to break the law, to attack this site or other people's projects, to mine, spam or o | `modules/public-landing/public/terms.html:124` |
 | `d919980d2ca5` | certain | Download our core code and protocols, and build instantly with your team. | `modules/public-landing/public/index.html:877` |
 | `41c49e22002d` | certain | Download the CLI | `modules/public-landing/public/index.html:910` |
-| `18b6b56edc93` | certain | Each sign-in creates a session: a random token, whether it came from the browser or the command line, the brow | `modules/public-landing/public/privacy.html:104` |
+| `31881554ecb8` | certain | Each sign-in creates a session: a random token. A signed-out or expired session stays on record but can no lon | `modules/public-landing/public/privacy.html:104` |
 | `032693d19430` | certain | Each {{productName}} project you build in reports a summary of your work there to the platform: the {{currency | `modules/public-landing/public/terms.html:116` |
 | `9a4a940d2a56` | certain | Emersonian Circles | `modules/public-landing/public/index.html:768` |
 | `9150fa905ba4` | certain | Enough for a small version. Trim it to one shared list, voting and a winner reveal; accounts and notifications | `modules/public-landing/public/projects.html:1580` |
@@ -2348,14 +2348,13 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `978da2e651bd` | certain | Hosted projects | `modules/public-landing/public/terms.html:110` |
 | `980106c03cfe` | certain | Hours each | `modules/public-landing/public/projects.html:1569` |
 | `cf4220ce7bd8` | certain | How it’s run | `modules/public-landing/public/projects.html:1707` |
-| `3dad9ceda105` | certain | How long, and how to leave | `modules/public-landing/public/privacy.html:119` |
 | `97c0329fc07b` | certain | How much is run for you | `modules/public-landing/public/projects.html:1969` |
 | `485c565b5745` | certain | How people join | `modules/public-landing/public/projects.html:1269` |
 | `4b542b000afa` | certain | How this project is drawn: on the sky, in your list, at the top of this page and on its card. A planet is a | `modules/public-landing/public/projects.html:1402` |
 | `5a2650d439ce` | certain | How this project is listed — the kind shown beside its name on the map, in the table and on its card. It is a  | `modules/public-landing/public/projects.html:1314` |
 | `a86a02b0ded9` | certain | How your project’s own hall looks: its colours in light and dark mode, whether its dark mode takes a tint of y | `modules/public-landing/public/projects.html:1432` |
 | `23febbbd53e2` | certain | I can sign for this project, and I accept the | `modules/public-landing/public/projects.html:2043` |
-| `9f31eaed8252` | certain | If you grant repository access while creating a project, that permission is used to create or adopt your repos | `modules/public-landing/public/privacy.html:105` |
+| `915b187df57e` | certain | If you grant repository access while creating a project, that permission is used to create or adopt your repos | `modules/public-landing/public/privacy.html:105` |
 | `d37e2fbde8c6` | certain | If your account already existed when this version took effect, the platform accepted it on your behalf, rather | `modules/public-landing/public/terms.html:121` |
 | `fa123fc3eda3` | certain | In a sentence | `modules/public-landing/public/projects.html:1612` |
 | `4b4238c12e62` | certain | In this guild’s totals | `modules/public-landing/public/guild.html:214` |
@@ -2387,6 +2386,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `76fa2b236759` | certain | Learning and fun | `modules/public-landing/public/projects.html:1883` |
 | `8dad7d9edb99` | certain | Leave it as it is: a finished demo you can come back to until it goes offline. | `modules/public-landing/public/projects.html:1186` |
 | `4062e6d3db05` | certain | Leave them out | `modules/public-landing/public/guild.html:217` |
+| `de46dbb7219e` | certain | Linked Sign-ins (GitHub) | `modules/public-landing/public/privacy.html:102` |
 | `5ceffa7b9d7e` | certain | Lowercase letters, numbers and hyphens, up to 39. You can change it once a week, and your old handle keeps lea | `modules/public-landing/public/account.html:198` |
 | `8b8f8a727291` | certain | Make a real project instead | `modules/public-landing/public/projects.html:1592` |
 | `7cb18ec86fd6` | certain | Make something. | `modules/public-landing/public/projects.html:1515` |
@@ -2511,7 +2511,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `0fbe47b01d2c` | certain | Reading the project… | `modules/public-landing/public/projects.html:1426` |
 | `0fbe47b01d2c` | certain | Reading the project… | `modules/public-landing/public/projects.html:1446` |
 | `0fbe47b01d2c` | certain | Reading the project… | `modules/public-landing/public/projects.html:1462` |
-| `a858e71476cc` | certain | Reading these pages signs you into nothing and sets no tracking cookie. There are no advertising or analytics  | `modules/public-landing/public/privacy.html:100` |
+| `3062251b6693` | certain | Reading these pages signs you into nothing and sets no tracking cookies. There are no advertising or analytics | `modules/public-landing/public/privacy.html:100` |
 | `c29882f28aa7` | certain | Reading this guild… | `modules/public-landing/public/guild.html:169` |
 | `53be603bd0ed` | certain | Reading your GitHub repositories… | `modules/public-landing/public/projects.html:1743` |
 | `fcb1f9139277` | certain | Reading your account… | `modules/public-landing/public/account.html:155` |
@@ -2536,6 +2536,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9cf0381737de` | certain | Search your repositories | `modules/public-landing/public/projects.html:1746` |
 | `3a0ba637acad` | certain | Search your repos… | `modules/public-landing/public/projects.html:1746` |
 | `67b61947244d` | certain | See what you did, by role, including every idea you filed and what became of it | `modules/public-landing/public/index.html:825` |
+| `3767ff9a83f6` | certain | Session length, and Leaving | `modules/public-landing/public/privacy.html:119` |
 | `960b894c0ea1` | certain | Show it | `modules/public-landing/public/account.html:249` |
 | `ef95fadbf697` | certain | Show me | `modules/public-landing/public/guild.html:208` |
 | `19ba62ca1ce4` | certain | Show my cross-project record | `modules/public-landing/public/account.html:247` |
@@ -2575,7 +2576,6 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `f9af2d90ce5b` | certain | Sign out | `modules/public-landing/public/terms.html:89` |
 | `f3b7d23a0f12` | certain | Sign out to end a session. Browser sessions expire on their own; command-line tokens last until you revoke the | `modules/public-landing/public/privacy.html:120` |
 | `5ddda2655109` | certain | Signing in asks GitHub for repository access. GitHub calls this access to | `modules/public-landing/public/projects.html:1529` |
-| `d2e2ea6a91e8` | certain | Signing in with GitHub | `modules/public-landing/public/privacy.html:102` |
 | `18072088a232` | certain | Single-owner LLC | `modules/public-landing/public/projects.html:1684` |
 | `a061df49e6cb` | certain | Skip to content | `modules/public-landing/public/account.html:95` |
 | `a061df49e6cb` | certain | Skip to content | `modules/public-landing/public/connections.html:66` |
@@ -2602,7 +2602,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `d75633cc707d` | certain | Take it offline | `modules/public-landing/public/projects.html:1467` |
 | `c160ff80c611` | certain | Take on a task | `modules/public-landing/public/index.html:785` |
 | `052e2da986c2` | certain | Task titles are write-once, no route can edit one, so a wrong title is permanent | `modules/public-landing/public/index.html:849` |
-| `fe9f362ab988` | certain | Tearing down a project stops its server and its backups. It does not erase the project: its database and exist | `modules/public-landing/public/privacy.html:122` |
+| `ffc4348c06f5` | certain | Tearing down a project stops its server and its backups, does not erase the project: its database and existing | `modules/public-landing/public/privacy.html:122` |
 | `d3ce1efd0e67` | certain | Tearing down stops the project’s server and its nightly backups. It does | `modules/public-landing/public/projects.html:1453` |
 | `0c4169ff6883` | certain | The AI model provider | `modules/public-landing/public/privacy.html:114` |
 | `28be59585de3` | certain | The AI ships finished work on its own. You don’t run any commands. | `modules/public-landing/public/projects.html:2009` |
@@ -2684,7 +2684,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `75c051ff8da1` | certain | What this removes — and what it keeps | `modules/public-landing/public/projects.html:1452` |
 | `d0160e86c2bf` | certain | What you build, and what you would like to build next. | `modules/public-landing/public/account.html:171` |
 | `6130dcb60532` | certain | What you control. | `modules/public-landing/public/terms.html:119` |
-| `b938baf0f723` | certain | What {{productName}} keeps about you and your project, who else sees it, and how long it stays — in plain word | `modules/public-landing/public/privacy.html:96` |
+| `598e0c002d23` | certain | What {{productName}} keeps on you in regards to data, and the terms and conditions thereof. | `modules/public-landing/public/privacy.html:96` |
 | `6833e88a3744` | certain | What “only signed-in members” changes | `modules/public-landing/public/projects.html:1257` |
 | `61346f5e6ac1` | certain | When the AI finishes a task | `modules/public-landing/public/projects.html:2005` |
 | `118eb0e9a664` | certain | Where People Live :) | `modules/public-landing/public/contact.html:105` |
@@ -2708,7 +2708,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `ee4b8cc687f7` | certain | Works shipped | `modules/public-landing/public/guild.html:250` |
 | `8a4892d03781` | certain | World round: PRODUCT.md and four style candidates across landing, hall and status | `modules/public-landing/public/index.html:837` |
 | `3ca8811b40cd` | certain | You don’t own or build on anything here yet. | `modules/public-landing/public/projects.html:908` |
-| `af11ac12fd91` | certain | You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric Gi | `modules/public-landing/public/privacy.html:103` |
+| `5a99da1b7cf3` | certain | You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric Gi | `modules/public-landing/public/privacy.html:103` |
 | `23a75f39643e` | certain | You sign in with GitHub and are responsible for that account. Who may join {{productName}}, and at what rank,  | `modules/public-landing/public/terms.html:103` |
 | `a04abf2797c7` | certain | You stay a member, and the public page doesn’t list you. | `modules/public-landing/public/guild.html:209` |
 | `af2177106d7c` | certain | You stay out of the recruiting directory and a recruiter’s look-up. | `modules/public-landing/public/account.html:226` |
@@ -2879,7 +2879,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `9ac56aa4e540` | certain | — projects hosted by the platform run on servers rented from DigitalOcean, with their web address and traffic  | `modules/public-landing/public/privacy.html:115` |
 | `013f0e214b89` | certain | — the map shows only that something is there; its name, and everything else about it, stay yours, and nobody c | `modules/public-landing/public/projects.html:1292` |
 | `b5bac008ba11` | certain | — the project is on the map under its name, and anyone who finds it can join. | `modules/public-landing/public/projects.html:1292` |
-| `728661ec4c4a` | certain | — when a shipped task is graded, the change it made (the code diff) is sent to the model the grader runs on, A | `modules/public-landing/public/privacy.html:114` |
+| `730a1fc1d839` | certain | — when a shipped task is graded, the change it made is sent to the model the grader runs on, Anthropic's Claud | `modules/public-landing/public/privacy.html:114` |
 | `ff1318762145` | certain | — whoever signs in with GitHub becomes a member at once, at the newcomer rank. | `modules/public-landing/public/projects.html:1273` |
 | `b675934f9d39` | certain | ← Your projects | `modules/public-landing/public/projects.html:1094` |
 

package/docs/copy-registry.json

@@ -21608,9 +21608,9 @@
       "confidence": "certain"
     },
     {
-      "id": "18b6b56edc93",
+      "id": "31881554ecb8",
       "surface": "landing",
-      "text": "Each sign-in creates a session: a random token, whether it came from the browser or the command line, the browser's identification string, and when it was created, last used, expires or was signed out. A signed-out or expired session stays on record but can no longer be used.",
+      "text": "Each sign-in creates a session: a random token. A signed-out or expired session stays on record but can no longer be used.",
       "file": "modules/public-landing/public/privacy.html",
       "line": 104,
       "origin": "html-text",
@@ -22030,15 +22030,6 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "3dad9ceda105",
-      "surface": "landing",
-      "text": "How long, and how to leave",
-      "file": "modules/public-landing/public/privacy.html",
-      "line": 119,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "97c0329fc07b",
       "surface": "landing",
@@ -22094,9 +22085,9 @@
       "confidence": "certain"
     },
     {
-      "id": "9f31eaed8252",
+      "id": "915b187df57e",
       "surface": "landing",
-      "text": "If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.",
+      "text": "If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Current Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.",
       "file": "modules/public-landing/public/privacy.html",
       "line": 105,
       "origin": "html-text",
@@ -22381,6 +22372,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "de46dbb7219e",
+      "surface": "landing",
+      "text": "Linked Sign-ins (GitHub)",
+      "file": "modules/public-landing/public/privacy.html",
+      "line": 102,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "5ceffa7b9d7e",
       "surface": "landing",
@@ -23498,9 +23498,9 @@
       "confidence": "certain"
     },
     {
-      "id": "a858e71476cc",
+      "id": "3062251b6693",
       "surface": "landing",
-      "text": "Reading these pages signs you into nothing and sets no tracking cookie. There are no advertising or analytics trackers on this site. Your browser keeps one preference locally — light or dark mode — and nothing here reads it back to a server.",
+      "text": "Reading these pages signs you into nothing and sets no tracking cookies. There are no advertising or analytics trackers on this site.",
       "file": "modules/public-landing/public/privacy.html",
       "line": 100,
       "origin": "html-text",
@@ -23722,6 +23722,15 @@
       "origin": "html-text",
       "confidence": "certain"
     },
+    {
+      "id": "3767ff9a83f6",
+      "surface": "landing",
+      "text": "Session length, and Leaving",
+      "file": "modules/public-landing/public/privacy.html",
+      "line": 119,
+      "origin": "html-text",
+      "confidence": "certain"
+    },
     {
       "id": "960b894c0ea1",
       "surface": "landing",
@@ -24073,15 +24082,6 @@
       "origin": "html-text",
       "confidence": "certain"
     },
-    {
-      "id": "d2e2ea6a91e8",
-      "surface": "landing",
-      "text": "Signing in with GitHub",
-      "file": "modules/public-landing/public/privacy.html",
-      "line": 102,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "18072088a232",
       "surface": "landing",
@@ -24317,9 +24317,9 @@
       "confidence": "certain"
     },
     {
-      "id": "fe9f362ab988",
+      "id": "ffc4348c06f5",
       "surface": "landing",
-      "text": "Tearing down a project stops its server and its backups. It does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the",
+      "text": "Tearing down a project stops its server and its backups, does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the",
       "file": "modules/public-landing/public/privacy.html",
       "line": 122,
       "origin": "html-text",
@@ -25055,9 +25055,9 @@
       "confidence": "certain"
     },
     {
-      "id": "b938baf0f723",
+      "id": "598e0c002d23",
       "surface": "landing",
-      "text": "What {{productName}} keeps about you and your project, who else sees it, and how long it stays — in plain words. The code that does all of this is open, so every sentence here can be checked.",
+      "text": "What {{productName}} keeps on you in regards to data, and the terms and conditions thereof.",
       "file": "modules/public-landing/public/privacy.html",
       "line": 96,
       "origin": "html-text",
@@ -25271,9 +25271,9 @@
       "confidence": "certain"
     },
     {
-      "id": "af11ac12fd91",
+      "id": "5a99da1b7cf3",
       "surface": "landing",
-      "text": "You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. On top of that, {{productName}} keeps what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.",
+      "text": "You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. {{productName}} DOES keep what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.",
       "file": "modules/public-landing/public/privacy.html",
       "line": 103,
       "origin": "html-text",
@@ -26810,9 +26810,9 @@
       "confidence": "certain"
     },
     {
-      "id": "728661ec4c4a",
+      "id": "730a1fc1d839",
       "surface": "landing",
-      "text": "— when a shipped task is graded, the change it made (the code diff) is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance. That is how a ship earns its grade.",
+      "text": "— when a shipped task is graded, the change it made is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance.",
       "file": "modules/public-landing/public/privacy.html",
       "line": 114,
       "origin": "html-text",

package/docs/module-api-changelog.md

@@ -3157,5 +3157,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.158 with no explicit bump. run 39950957911. (task 1002620)
   1.21.160 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.159 with no explicit bump. run 39953635168. (task 1002620)
+  1.21.161 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.160 with no explicit bump. run 39956327980. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-readings.json

@@ -5,7 +5,7 @@
   "adr": "0341 D3",
   "reread": "node scripts/gds/page-reader.js --stale",
   "how": ["Generated by node scripts/gds/page-reader.js (BV2.TW04, task 1004315; ADR 0341 D3). Do not hand-edit.","One entry per page of docs/page-inventory.json. Lines are in page order: the default state first, and a line only another state shows sits where that state shows it, with its state named.","placement: placed = a docs/copy-registry.json row renders it (file, line, string_id); shared = shell text every page of the surface carries (top bar, sidebar, footer), with its row when the registry has one; unplaced = the registry cannot place it (a rewrite becomes an engineer task, ADR 0341 D4).","text keeps {…} where the registry row has a hole, or where a value the page read from its API was filled in. A string that is only such data is counted under omitted.data, not listed.","reading_hash is over the non-shared lines (key, section, text); files_hash is over the page's inventory files. --check compares files_hash only and never opens a browser.","Rendered through the hall-preview harness (hall) and the ui-design kit stub (landing, status), at 1280x800 with the clock pinned, so a reading is the fixture world's page."],
-  "counts": {"pages":46,"lines":5569,"placed":1710,"shared":398,"unplaced":3461,"omitted_data":3606},
+  "counts": {"pages":46,"lines":5569,"placed":1711,"shared":398,"unplaced":3460,"omitted_data":3606},
   "pages": [
     {
       "id": "builders:atlas",
@@ -5112,38 +5112,38 @@
       "surface": "landing",
       "title": "{{productName}} — Privacy",
       "states_read": ["default"],
-      "files_hash": "7bff62f11cd7c9c3",
-      "reading_hash": "c3d505834ca009e3",
-      "counts": {"lines":37,"placed":22,"shared":10,"unplaced":5},
+      "files_hash": "8e6293f5acf188b7",
+      "reading_hash": "cee4f41ecf55d6a7",
+      "counts": {"lines":37,"placed":23,"shared":10,"unplaced":4},
       "omitted": {"data":1},
       "notes": [],
       "lines": [
         {"key":"L0001","section":"top bar","text":"Projects","placement":"shared"},
         {"key":"L0002","section":"top bar","text":"Sign in","placement":"shared","file":"modules/public-landing/public/privacy.html","line":66,"string_id":"ad80586f802a"},
         {"key":"L0003","section":"Privacy","text":"Privacy","placement":"unplaced"},
-        {"key":"L0004","section":"Privacy","text":"What {{productName}} keeps about you and your project, who else sees it, and how long it stays — in plain words. The code that does all of this is open, so every sentence here can be checked.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":96,"string_id":"b938baf0f723"},
+        {"key":"L0004","section":"Privacy","text":"What {{productName}} keeps on you in regards to data, and the terms and conditions thereof.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":96,"string_id":"598e0c002d23"},
         {"key":"L0005","section":"Visiting","text":"Visiting","placement":"unplaced"},
-        {"key":"L0006","section":"Visiting","text":"Reading these pages signs you into nothing and sets no tracking cookie. There are no advertising or analytics trackers on this site. Your browser keeps one preference locally — light or dark mode — and nothing here reads it back to a server.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":100,"string_id":"a858e71476cc"},
-        {"key":"L0007","section":"Signing in with GitHub","text":"Signing in with GitHub","placement":"placed","file":"modules/public-landing/public/privacy.html","line":102,"string_id":"d2e2ea6a91e8"},
-        {"key":"L0008","section":"Signing in with GitHub","text":"You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. On top of that, {{productName}} keeps what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":103,"string_id":"af11ac12fd91"},
-        {"key":"L0009","section":"Signing in with GitHub","text":"Each sign-in creates a session: a random token, whether it came from the browser or the command line, the browser's identification string, and when it was created, last used, expires or was signed out. A signed-out or expired session stays on record but can no longer be used.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":104,"string_id":"18b6b56edc93"},
-        {"key":"L0010","section":"Signing in with GitHub","text":"If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":105,"string_id":"9f31eaed8252"},
+        {"key":"L0006","section":"Visiting","text":"Reading these pages signs you into nothing and sets no tracking cookies. There are no advertising or analytics trackers on this site.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":100,"string_id":"3062251b6693"},
+        {"key":"L0007","section":"Linked Sign-ins (GitHub)","text":"Linked Sign-ins (GitHub)","placement":"placed","file":"modules/public-landing/public/privacy.html","line":102,"string_id":"de46dbb7219e"},
+        {"key":"L0008","section":"Linked Sign-ins (GitHub)","text":"You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. {{productName}} DOES keep what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":103,"string_id":"5a99da1b7cf3"},
+        {"key":"L0009","section":"Linked Sign-ins (GitHub)","text":"Each sign-in creates a session: a random token. A signed-out or expired session stays on record but can no longer be used.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":104,"string_id":"31881554ecb8"},
+        {"key":"L0010","section":"Linked Sign-ins (GitHub)","text":"If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Current Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":105,"string_id":"915b187df57e"},
         {"key":"L0011","section":"A project you create","text":"A project you create","placement":"placed","file":"modules/public-landing/public/privacy.html","line":107,"string_id":"6cb796f01882"},
-        {"key":"L0012","section":"A project you create","text":"A project is a record here and a database of its own. The record holds its name, the GitHub repository it ships to, its web address, how it is hosted, who owns it, when it was created, what state it is in, and its settings — who can see it and how people join. The project's own database holds the same kinds of records as above for the people who build on it: accounts, sessions, tasks, grades, {…}.","placement":"unplaced"},
+        {"key":"L0012","section":"A project you create","text":"A project is a record here and a database of its own. The record holds its name, the GitHub repository it ships to, its web address, how it is hosted, who owns it, when it was created, what state it is in, and its settings — who can see it and how people join. The project's own database holds the same kinds of records as above for the people who build on it: accounts, sessions, tasks, grades, {{currency}}.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":108,"string_id":"437ddce8e760"},
         {"key":"L0013","section":"A project you create","text":"Your code is not kept here as the source of truth. It lives in your GitHub repository; the project's server holds a working copy so it can run and ship.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":109,"string_id":"28e8cc65790f"},
         {"key":"L0014","section":"Who else sees it","text":"Who else sees it","placement":"placed","file":"modules/public-landing/public/privacy.html","line":111,"string_id":"866831e633ea"},
         {"key":"L0015","section":"Who else sees it","text":"GitHub","placement":"unplaced"},
         {"key":"L0016","section":"Who else sees it","text":"— for signing in, and for the repositories your projects ship to.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":113,"string_id":"5ee1b494eec3"},
         {"key":"L0017","section":"Who else sees it","text":"The AI model provider","placement":"placed","file":"modules/public-landing/public/privacy.html","line":114,"string_id":"0c4169ff6883"},
-        {"key":"L0018","section":"Who else sees it","text":"— when a shipped task is graded, the change it made (the code diff) is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance. That is how a ship earns its grade.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":114,"string_id":"728661ec4c4a"},
+        {"key":"L0018","section":"Who else sees it","text":"— when a shipped task is graded, the change it made is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":114,"string_id":"730a1fc1d839"},
         {"key":"L0019","section":"Who else sees it","text":"Hosting","placement":"unplaced"},
         {"key":"L0020","section":"Who else sees it","text":"— projects hosted by the platform run on servers rented from DigitalOcean, with their web address and traffic passing through Cloudflare.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":115,"string_id":"9ac56aa4e540"},
         {"key":"L0021","section":"Who else sees it","text":"Nothing is sold, and nothing is shared for advertising.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":117,"string_id":"f8665480baf6"},
-        {"key":"L0022","section":"How long, and how to leave","text":"How long, and how to leave","placement":"placed","file":"modules/public-landing/public/privacy.html","line":119,"string_id":"3dad9ceda105"},
-        {"key":"L0023","section":"How long, and how to leave","text":"Sign out to end a session. Browser sessions expire on their own; command-line tokens last until you revoke them from your settings.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":120,"string_id":"f3b7d23a0f12"},
-        {"key":"L0024","section":"How long, and how to leave","text":"Your builder record and your shipped work stay attributed to you after you leave — the ledger of who built what is the point of the platform. The owner can deactivate a builder: that ends their sessions and releases their claims, and keeps the record.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":121,"string_id":"3b85c9182b9d"},
-        {"key":"L0025","section":"How long, and how to leave","text":"Tearing down a project stops its server and its backups. It does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the","placement":"placed","file":"modules/public-landing/public/privacy.html","line":122,"string_id":"fe9f362ab988"},
-        {"key":"L0026","section":"How long, and how to leave","text":"contact page","placement":"placed","file":"modules/public-landing/public/privacy.html","line":122,"string_id":"c9435fd3a8c0"},
+        {"key":"L0022","section":"Session length, and Leaving","text":"Session length, and Leaving","placement":"placed","file":"modules/public-landing/public/privacy.html","line":119,"string_id":"3767ff9a83f6"},
+        {"key":"L0023","section":"Session length, and Leaving","text":"Sign out to end a session. Browser sessions expire on their own; command-line tokens last until you revoke them from your settings.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":120,"string_id":"f3b7d23a0f12"},
+        {"key":"L0024","section":"Session length, and Leaving","text":"Your builder record and your shipped work stay attributed to you after you leave — the ledger of who built what is the point of the platform. The owner can deactivate a builder: that ends their sessions and releases their claims, and keeps the record.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":121,"string_id":"3b85c9182b9d"},
+        {"key":"L0025","section":"Session length, and Leaving","text":"Tearing down a project stops its server and its backups, does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the","placement":"placed","file":"modules/public-landing/public/privacy.html","line":122,"string_id":"ffc4348c06f5"},
+        {"key":"L0026","section":"Session length, and Leaving","text":"contact page","placement":"placed","file":"modules/public-landing/public/privacy.html","line":122,"string_id":"c9435fd3a8c0"},
         {"key":"L0027","section":"The code is open","text":"The code is open","placement":"placed","file":"modules/public-landing/public/privacy.html","line":124,"string_id":"183c89fecb58"},
         {"key":"L0028","section":"The code is open","text":"Every part of this — what is stored, where, and for how long — is public. This site runs Cloud Bongos, free software under the AGPL-3.0.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":125,"string_id":"78611d18f54b"},
         {"key":"L0029","section":"The code is open","text":"This statement describes the software as it ships and changes when the software does. Revised August 2026.","placement":"placed","file":"modules/public-landing/public/privacy.html","line":126,"string_id":"11c244aec5c3"},

package/modules/public-landing/public/privacy.html

@@ -93,16 +93,16 @@
 
 <main class="legal" id="legal">
   <h1>Privacy</h1>
-  <p class="lede">What {{productName}} keeps about you and your project, who else sees it, and how long it stays — in plain words. The code that does all of this is open, so every sentence here can be checked.</p>
+  <p class="lede">What {{productName}} keeps on you in regards to data, and the terms and conditions thereof.</p>
 
   <section class="card">
     <h2>Visiting</h2>
-    <p>Reading these pages signs you into nothing and sets no tracking cookie. There are no advertising or analytics trackers on this site. Your browser keeps one preference locally — light or dark mode — and nothing here reads it back to a server.</p>
+    <p>Reading these pages signs you into nothing and sets no tracking cookies. There are no advertising or analytics trackers on this site.</p>
 
-    <h2>Signing in with GitHub</h2>
-    <p>You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. On top of that, {{productName}} keeps what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.</p>
-    <p>Each sign-in creates a session: a random token, whether it came from the browser or the command line, the browser's identification string, and when it was created, last used, expires or was signed out. A signed-out or expired session stays on record but can no longer be used.</p>
-    <p>If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.</p>
+    <h2>Linked Sign-ins (GitHub)</h2>
+    <p>You sign in through GitHub; we never see your GitHub password. From GitHub we receive and keep your numeric GitHub id, your username, your display name and your avatar. {{productName}} DOES keep what you do here: your rank, the tasks you claim and ship, your session logs, the grades your shipped work receives, and the {{currency}} and costs recorded against your sessions.</p>
+    <p>Each sign-in creates a session: a random token. A signed-out or expired session stays on record but can no longer be used.</p>
+    <p>If you grant repository access while creating a project, that permission is used to create or adopt your repository. The token is kept encrypted for the few minutes the setup needs and is used for nothing else. Current Optional links you make yourself — a Discord account, an Anthropic account for attribution — are kept only when you make them, and only as the identifier needed to recognise the link.</p>
 
     <h2>A project you create</h2>
     <p>A project is a record here and a database of its own. The record holds its name, the GitHub repository it ships to, its web address, how it is hosted, who owns it, when it was created, what state it is in, and its settings — who can see it and how people join. The project's own database holds the same kinds of records as above for the people who build on it: accounts, sessions, tasks, grades, {{currency}}.</p>
@@ -111,15 +111,15 @@
     <h2>Who else sees it</h2>
     <ul>
       <li><b>GitHub</b> — for signing in, and for the repositories your projects ship to.</li>
-      <li><b>The AI model provider</b> — when a shipped task is graded, the change it made (the code diff) is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance. That is how a ship earns its grade.</li>
+      <li><b>The AI model provider</b> — when a shipped task is graded, the change it made is sent to the model the grader runs on, Anthropic's Claude, under the key of the builder or the instance.</li>
       <!--apex-only:start--><li><b>Hosting</b> — projects hosted by the platform run on servers rented from DigitalOcean, with their web address and traffic passing through Cloudflare.</li><!--apex-only:end-->
     </ul>
     <p>Nothing is sold, and nothing is shared for advertising.</p>
 
-    <h2>How long, and how to leave</h2>
+    <h2>Session length, and Leaving</h2>
     <p>Sign out to end a session. Browser sessions expire on their own; command-line tokens last until you revoke them from your settings.</p>
     <p>Your builder record and your shipped work stay attributed to you after you leave — the ledger of who built what is the point of the platform. The owner can deactivate a builder: that ends their sessions and releases their claims, and keeps the record.</p>
-    <p>Tearing down a project stops its server and its backups. It does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the <a href="/contact">contact page</a>.</p>
+    <p>Tearing down a project stops its server and its backups, does not erase the project: its database and existing backups are kept on purpose so it can be brought back. Clearing them for good is done by hand — ask through the <a href="/contact">contact page</a>.</p>
 
     <h2>The code is open</h2>
     <p>Every part of this — what is stored, where, and for how long — is public. This site runs Cloud Bongos, free software under the AGPL-3.0. <a href="{{sourceRepoUrl}}">Read the source.</a></p>

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.160",
+  "version": "1.21.161",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.160",
+      "version": "1.21.161",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.160",
+  "version": "1.21.161",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9998,5 +9998,15 @@
       "id": "1004378",
       "text": "The projects page's filter toggle now carries the artist's new label, ready for the artist to approve before it goes live."
     }
+  ],
+  "1.21.161": [
+    {
+      "id": "1004373",
+      "text": "The Studio now shows where every page you have submitted actually is: waiting to be applied, being applied, waiting for your review, or approved and going live, with how long it has sat there and a \"stuck\" mark when it has sat"
+    },
+    {
+      "id": "1004373",
+      "text": "The privacy page now reads the way the artist rewrote it: shorter, plainer sentences and two renamed headings. It waits for the artist to approve it."
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.160'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.161'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/landing_legal_pages.mjs

@@ -36,7 +36,7 @@ const { buildPlatformApp, stripApexOnly } = platformMod;
 const { applyBrandTokens } = require('../src/bongos/serve-internal.js');
 
 const PAGES = [
-  { route: '/privacy', file: 'privacy.html', title: 'Privacy', spine: ['Signing in with GitHub', 'How long, and how to leave'], platformOnly: ['DigitalOcean', 'Cloudflare'] },
+  { route: '/privacy', file: 'privacy.html', title: 'Privacy', spine: ['Linked Sign-ins (GitHub)', 'Session length, and Leaving'], platformOnly: ['DigitalOcean', 'Cloudflare'] },
   { route: '/terms', file: 'terms.html', title: 'Terms', spine: ['Fair use', 'Your projects and your code'], platformOnly: ['non-profit', 'Hosted projects'] },
   { route: '/contact', file: 'contact.html', title: 'Contact', spine: ['The Repository (repo)', 'Security'], platformOnly: ['the platform these projects run on'] },
 ];