@bongos/core 1.21.177 → 1.21.179

package/modules/government/catalog.js

@@ -166,7 +166,11 @@ const PERMISSIONS = [
   { key: 'dependency.cross_tier.manage', system: true, floor: 'archon', guards: 'POST|DELETE /dependencies — cross-tier structural edges (ADR 0086)' },
   { key: 'goal.scope.manage', system: true, floor: 'archon', guards: 'cross-tier goal-scope edges + protected-scope admission (ADR 0086)' },
   { key: 'government.manage', system: true, floor: 'archon', guards: 'the Government tab routes (ranks/perms/assignments CRUD, reads included — R110) — meta-escalation' },
-  { key: 'gate_approval.decide', system: true, floor: 'archon', guards: 'POST /gate-approvals/:pr/approve — CI deploy-gate override' },
+  // RETIRED (task 1004859): both gate-approval routes and the held-PR list on the /gate
+  // page were removed, because the gate-review CI check they waited on never ran. The key stays only
+  // because grant rows may still name it; dropping it from this list needs a migration
+  // that deletes those rows (the government_019 precedent, task 1003894). It guards nothing.
+  { key: 'gate_approval.decide', system: true, floor: 'archon', guards: 'nothing since task 1004859 removed POST /gate-approvals/:pr/approve; the key is retired and awaits a grant-row cleanup' },
   { key: 'deploy.push_main', system: true, substrate: true, floor: 'archon', guards: 'git push origin main / the deploy — substrate-enforced (pre-push, main-audit)' },
   { key: 'path.protected.modify', system: true, substrate: true, floor: 'archon', guards: 'modifying a PROTECTED_GLOBS path below the Metic floor — substrate (ADR 0043)' },
   { key: 'infra.ssh', system: true, substrate: true, floor: 'archon', guards: 'ssh to the droplet / operator surface — substrate (credential placement)' },
@@ -305,11 +309,10 @@ const PERMISSIONS = [
   { key: 'session.search', system: false, floor: 'metic', guards: 'GET /sessions/search (ADR 0157, was archon)' },
   { key: 'memory.read.any', system: false, floor: 'metic', scope: 'any', resource: 'memory', verb: 'read', guards: 'GET /memory/builders/:id/file[s] — cross-builder memory read (ADR 0157, was archon)' },
   { key: 'audit_log.read', system: false, floor: 'metic', guards: 'GET /audit-log (ADR 0157, was archon)' },
-  // ADR 0157 §4. Split from `gate_approval.decide` (system, archon) so the Gate PAGE
-  // can open to Metic while APPROVING a held PR stays Archon. Without the split, a
-  // Metic could reach /gate via `page.view.government` and then 403 on its only data
-  // endpoint — a page that renders nothing but an error.
-  { key: 'gate_approval.read', system: false, floor: 'metic', guards: 'GET /gate-approvals — the Gate page read side (approve = gate_approval.decide, archon)' },
+  // RETIRED (task 1004859), with `gate_approval.decide` above: GET /gate-approvals and
+  // the held-PR list it fed are gone. Kept for the same reason — grant rows may name it,
+  // and removing the key needs a migration that deletes them. It guards nothing.
+  { key: 'gate_approval.read', system: false, floor: 'metic', guards: 'nothing since task 1004859 removed GET /gate-approvals and the held-PR list it fed; the key is retired and awaits a grant-row cleanup' },
 
   // ── ownership-scoped + baseline own-work (floor thetes / xenos) ───────────────
   { key: 'task.claim.any', system: false, floor: 'thetes', guards: 'claim the general queue (per-task requires_rank floor still applies)' },
@@ -391,7 +394,7 @@ const PERMISSIONS = [
   // `requireGovernmentPage`) once the floor moved. Viewing is all this grants: every
   // write those pages reach is its own atom, and `government.manage` (the
   // ranks/permissions tab) stayed archon.
-  { key: 'page.view.government', system: false, floor: 'metic', guards: 'the government/monitoring pages — /watch, /gate, /government (requireGovernmentPage; write = government.manage, archon)' },
+  { key: 'page.view.government', system: false, floor: 'metic', guards: 'the government/monitoring pages — /watch, /gate (the Autobongos panel), /government (requireGovernmentPage; write = government.manage, archon)' },
 ];
 
 // ── invariants asserted at module load (fail loud on an authoring typo) ─────────

package/modules/government/decision-board.js

@@ -246,7 +246,6 @@ const MATTER_ACTIONS = Object.freeze({
   }),
   release: Object.freeze({
     approve_override: Object.freeze({ request_id: 'id' }),
-    approve_gate: Object.freeze({ pr: 'id' }),
   }),
   review: Object.freeze({
     satisfy_criterion: Object.freeze({ criterion_id: 'id' }),

package/modules/government/decision-rules.js

@@ -105,7 +105,6 @@ const AREAS = Object.freeze([
     ]) }),
   Object.freeze({ key: 'release', name: 'Release', gate: 'core.pin.move',
     today: 'whoever may put a release live', acts: Object.freeze([
-      'POST /gate-approvals/:pr/approve',
       'POST /override-requests/:id/decide',
       'POST /provisioning/instances/:id/core-upgrade',
       'POST /provisioning/instances/:id/update-channel',

package/modules/government/docket.js

@@ -108,7 +108,6 @@ const EXPECTED_SOURCES = Object.freeze([
   Object.freeze({ source: 'redteam_reports', building: 'disputes', label: 'red-team reports' }),
   Object.freeze({ source: 'criteria_uat', building: 'review', label: 'criteria awaiting UAT' }),
   Object.freeze({ source: 'core_update', building: 'release', label: 'core update' }),
-  Object.freeze({ source: 'gate_approvals', building: 'release', label: 'CI gate approvals' }),
   Object.freeze({ source: 'autobongos_fence', building: 'automation', label: 'the Autobongos fence' }),
   Object.freeze({ source: 'module_rechecks', building: 'release', label: 'module re-checks' }),
   // task 1004712: a dry pot's borrow from the reserve, a treasury matter (treasury.js)

package/modules/government/protected-surfaces.js

@@ -13,7 +13,7 @@
 //
 //   THE OUT-OF-BAND SUBSTRATE STAYS THE ENFORCER. Nothing here enforces
 //   anything. The enforcers are the git pre-push hook, the grader pre-pass, the
-//   post-push main audit, gate-review.js and the goal-scope check — they read
+//   post-push main audit and the goal-scope check — they read
 //   the registry with no DB, no server and no HTTP, and they are what actually
 //   blocks a sub-floor change (ADR 0043). Re-mapping a floor here changes what
 //   the substrate protects; it can never make the request path the authority.

package/modules/government/protected-surfaces.json

@@ -7,7 +7,7 @@
     "",
     "POLICY OWNS / SUBSTRATE ENFORCES. Editing this file re-maps POLICY. It does NOT move",
     "enforcement into the app: the pre-push git hook, the grader pre-pass, main-audit.js,",
-    "gate-review.js and the goal-scope check all read this registry OUT OF BAND (no DB, no",
+    "and the goal-scope check all read this registry OUT OF BAND (no DB, no",
     "server, no HTTP) and remain the enforcers (ADR 0043). A government-tab edit can widen or",
     "narrow the protected set and re-map a floor; it can never make the request path the",
     "authority.",
@@ -82,13 +82,12 @@
     { "glob": "scripts/bongos/ship-visual.js", "group": "pipeline", "why": "task 1004024. The 2026-08-23 carve of ship.js (task 1003205): the land path, the ship state machine, the grade gate steps, the merge and pushVia, about 6,200 lines behind a 373-line protected entry point." },
     { "glob": "scripts/bongos/confirm.js", "group": "pipeline", "why": "the confirm step" },
     { "glob": "scripts/bongos/merge-mode.js", "group": "pipeline", "why": "the manual land fallback" },
-    { "glob": "scripts/bongos/ci-grade.js", "group": "pipeline", "why": "CI grade-gate driver — steers the grade check (ADR 0058)" },
     { "glob": "scripts/bongos/grade-smoke.js", "group": "pipeline", "why": "grade-smoke driver (ADR 0058)" },
     { "glob": "scripts/bongos/conductor-dispatch.js", "group": "pipeline", "why": "mid-flight grader dispatch (ADR 0058)" },
     { "glob": "scripts/bongos/main-audit.js", "group": "pipeline", "why": "the post-push audit — the authoritative substrate layer (self-protect)" },
     { "glob": "scripts/bongos/push-main.js", "group": "pipeline", "why": "the sanctioned main-push (carries the override)" },
     { "glob": "scripts/bongos/run-unit-tests.js", "group": "pipeline", "why": "the unit-gate test SELECTOR — muting tests here blunts the CI gate (ADR 0058)" },
-    { "glob": "scripts/bongos/gate-review.js", "group": "pipeline", "why": "the automatic gatekeeper itself (self-protect, ADR 0058)" },
+    { "glob": "scripts/bongos/hard-floor.js", "group": "pipeline", "why": "task 1004859. The trust-boundary hard-floor list (self-protect). It moved here from scripts/bongos/gate-review.js when that never-run CI classifier was removed; publish-manifest.js and adopt-preflight.js read it." },
     { "glob": "scripts/bongos/setup.js", "group": "pipeline", "why": "/builder-setup — installs the pre-push hook" },
     { "glob": "scripts/bongos/install-git-hooks.js", "group": "pipeline", "why": "the hook installer (self-protect)" },
     { "glob": "scripts/bongos/hooks/", "group": "pipeline", "why": "the git hooks themselves (self-protect)" },

package/modules/hall-ui/public/atlas.html

@@ -91,7 +91,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/atlas.js?v=2026-09-02-index" defer></script>

package/modules/hall-ui/public/blockers.html

@@ -53,7 +53,7 @@
      chrome exists before the page script runs. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/board-room.html

@@ -60,7 +60,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-board"></script>

package/modules/hall-ui/public/city.html

@@ -107,7 +107,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/collab.html

@@ -150,7 +150,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/collab-lib.js?v=2026-09-24-archive"></script>

package/modules/hall-ui/public/commands.html

@@ -53,7 +53,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/copy-desk.html

@@ -179,7 +179,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/deploy.html

@@ -78,7 +78,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/diagrams.html

@@ -96,7 +96,7 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/diagram-viewer.js?v=2026-06-14-diagviewer-1" defer></script>

package/modules/hall-ui/public/drachmae.html

@@ -96,7 +96,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/md-reader.js?v=2026-09-02-mdreader-2"></script>

package/modules/hall-ui/public/fleet.html

@@ -57,7 +57,7 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>

package/modules/hall-ui/public/gate.css

@@ -1,30 +1,8 @@
-/* gate.css — Page-local styles for the Gate (task 1003469 rebuild).
-   One panel of oversight rows, one held pull request per row, over the shell's
-   glass summary strip; everything structural is oversight.css. What is the
-   gate's own: the hold reasons (a hard floor reads in the danger ink), and the
-   changed-file run. The ?v= cache-bust is stamped from this file's content hash
-   at boot (src/asset-version.js). */
+/* gate.css — Page-local styles for the Autobongos panel, still served at /gate
+   (task 1004859 removed the held-PR list that used to share this page). The ?v=
+   cache-bust is stamped from this file's content hash at boot (src/asset-version.js). */
 
-/* A hold reason: the path in the machine's face, the reason beside it. A hard
-   floor is the danger ink on the path and a name on the line, never a flag glyph. */
-.gate-reason .ov-key { max-width: 40%; }
-.gate-reason--floor .ov-key { color: var(--danger); }
-.gate-reason__floor { font-family: var(--label-face); font-size: 10.5px; letter-spacing: var(--label-space); text-transform: var(--label-case); color: var(--danger); white-space: nowrap; }
-
-/* The changed files: one chip per path, wrapping, the overflow named as a count. */
-.gate-files { display: flex; flex-wrap: wrap; gap: 6px 8px; margin: 12px 0 0; }
-.gate-files .fact-chip { text-transform: none; letter-spacing: normal; max-width: 100%; overflow: hidden; text-overflow: ellipsis; }
-.gate-files__more { align-self: center; font-size: 12px; color: var(--ink-faint); }
-
-/* On a phone the path takes the line with its floor label at the right, and the
-   reason drops under it in full width. */
-@media (max-width: 640px) {
-  .gate-reason .ov-key { max-width: none; }
-  .gate-reason > span:nth-of-type(2) { flex: 1 1 100%; order: 3; }
-  .gate-reason__floor { margin-left: auto; }
-}
-
-/* The Autobongos runner panel (task 1004509): a status line with the switch,
+/* The runner panel (task 1004509): a status line with the switch,
    a checklist only while something is missing, goals as chips, and the
    machine facts folded under Details. */
 .rn-head { display: flex; align-items: center; gap: 12px; }

package/modules/hall-ui/public/gate.html

@@ -3,17 +3,16 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Gate — {{worldName}}</title>
-  <meta name="description" content="Archon approvals — pull requests touching protected build surfaces, held until an owner approves. Approve a held change with one click.">
+  <title>Autobongos — {{worldName}}</title>
+  <meta name="description" content="The Autobongos runner: switch unattended building on or off, choose the goals it may work, and pause any builder's runner.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
   <link rel="stylesheet" href="/builders/oversight.css">
-  <link rel="stylesheet" href="/builders/hall-ask.css">
   <link rel="stylesheet" href="/builders/gate.css">
 </head>
-<body data-page="gate" data-page-title="Gate">
+<body data-page="gate" data-page-title="Autobongos">
 
 <div class="app">
   <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
@@ -24,7 +23,7 @@
       <!-- The page's one h1, for screen readers: no page shows its head (task
            1004836), so its sub-line went in task 1004829. -->
       <div class="page-head page-head--board">
-        <h1 class="page-head__h">Gate</h1>
+        <h1 class="page-head__h">Autobongos</h1>
       </div>
 
       <main id="hall-main">
@@ -37,17 +36,12 @@
         </section>
 
         <section id="gate-body" hidden>
-          <!-- The glass summary strip (the shell's .stat-row), then ONE panel of
-               oversight rows, one held pull request each — the bordered crate
-               with a verdict band along its top is gone (task 1003469). -->
-          <div class="stat-row ov-summary" id="gate-summary" aria-label="Held changes summary"></div>
-
-          <!-- The Autobongos fence (task 1003908, ADR 0307 §6). It lives on THIS
-               page because the Gate is already the owner's protected-surface
-               surface, and because the switch and the held PRs answer the same
-               question from two ends: what is allowed to reach main unattended.
-               Archon-only — the panel stays hidden for a Metic, and the routes
-               behind it are system:true/archon server-side regardless. -->
+          <!-- The Autobongos fence (task 1003908, ADR 0307 §6): what is allowed to
+               reach main unattended. This page held the held-PR list too until task
+               1004859 removed it; the URL stays /gate so bookmarks keep working.
+               Archon-only — a Metic gets the note below instead, and the routes
+               behind the panel are system:true/archon server-side regardless. -->
+          <p class="scroll__lede" id="gate-archon-only" hidden></p>
           <section class="scroll" id="fence-panel" aria-labelledby="fence-h" hidden>
             <h2 class="scroll__h" id="fence-h">Autobongos runner</h2>
             <!-- One panel (task 1004509): a checklist while anything the runner
@@ -58,13 +52,6 @@
                  work, whether you paused it, and whether it is checking in. -->
             <div id="fence-builders"></div>
           </section>
-
-          <section class="scroll" aria-labelledby="gate-list-h">
-            <h2 class="scroll__h" id="gate-list-h">Held pull requests</h2>
-            <p class="scroll__lede">Each one touched a protected surface and stopped at the gate check.</p>
-            <div id="gate-list"><span class="kit-skel"></span></div>
-            <p class="ov-foot" id="gate-checking" hidden></p>
-          </section>
         </section>
       </main>
 
@@ -77,13 +64,11 @@
 
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
 <script src="/builders/craft-mode.js?v=2026-10-09-living3"></script>
-<script src="/builders/shell.js?v=2026-10-25-logo1"></script>
+<script src="/builders/shell.js?v=2026-10-25-autobongos"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>
 <script src="/builders/hall-kit.js"></script>
-<!-- the shared ask card a held PR is drawn with (task 1004829) -->
-<script src="/builders/hall-ask.js"></script>
-<script src="/builders/gate.js?v=2026-10-01-runner-checklist"></script>
+<script src="/builders/gate.js?v=2026-10-25-autobongos"></script>
 </body>
 </html>

package/modules/hall-ui/public/gate.js

@@ -1,18 +1,15 @@
-// public-builders/gate.js — The Gate (/builders/gate).
+// public-builders/gate.js — Autobongos, the owner's runner panel (/builders/gate).
 //
-// The approval view for gate-surface PRs (task 1179, ADR 0058 amendment).
-// A pull request that touches the build's protected machinery is held by the
-// gate-review CI check until the owner approves. This page lists every such PR
-// as one oversight row (task 1003469) with WHY it was stopped (the same
-// classifier the CI runs). Approving records the owner's seal (a server-set
-// gate-owner-approved status) and re-runs the check so the PR merges. It is the
-// page's one real decision, so a held PR is the hall's ask card (task 1004829) —
-// drawn only for a viewer the approve route would let through.
+// The page is still served at /gate so bookmarks keep working, but it no longer
+// holds pull requests: task 1004859 removed the held-PR list (and GET/POST
+// /gate-approvals behind it), because the gate-review CI check it waited on never
+// ran. The owner chose to keep the page for what else it held — the Autobongos
+// fence: the switch, the allowed goals, the priority, each builder's runner.
 //
-// Like The Watch, this reads /api/bongos/me to show a Sealed notice for
-// non-Archons — DEFENCE IN DEPTH only. GET /gate-approvals + POST
-// /gate-approvals/:pr/approve are ALSO archon-gated server-side (ADR 0016), and
-// the page itself is gated by server.js requireGovernmentPage. On 401 → web sign-in.
+// Like The Watch, this reads /api/bongos/me to show a Sealed notice for a viewer
+// the panel is not for — DEFENCE IN DEPTH only. Every route behind the panel is
+// gated server-side (ADR 0016), and the page itself is gated by
+// requireGovernmentPage. On 401 → web sign-in.
 
 (() => {
   'use strict';
@@ -22,7 +19,7 @@
   // /lib/bongos-client.js. baseUrl:'' passes the full `${API}${path}` URLs below
   // through unchanged; result-mode ({ status, ok, data }) preserves control flow 1:1.
   const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
-  const { escapeHtml, fmtInt } = window.OTB;
+  const { escapeHtml } = window.OTB;
   const { emptyStateHtml } = window.OTBKit;
   const rankLabel = (rank) => window.OTB.rankLabel(rank, { empty: '' });
   const toast = (msg) => window.OTB.toast(msg);
@@ -60,157 +57,6 @@
     return `${path} → ${status}`;
   }
 
-  // ---- formatters ----------------------------------------------------------
-
-  const shortSha = (s) => (typeof s === 'string' ? s.slice(0, 7) : '');
-  const VERDICT_LABEL = { escalate: 'Hard floor', needs_trust: 'Needs trust', pass: 'Clear' };
-  const verdictLabel = (v) => VERDICT_LABEL[v] || (v || 'held');
-  // How many files a row shows before it names the rest as a count.
-  const FILES_SHOWN = 12;
-
-  // ---- actions -------------------------------------------------------------
-
-  // The card IS the confirmation (task 1004829): its question names the PR and
-  // its answer's result line says what approving does, so the old modal that
-  // repeated both is gone. A failed press gives the chip back.
-  async function approve(pr, btn) {
-    if (btn) btn.disabled = true;
-    try {
-      const r = await sendJson('POST', `/gate-approvals/${pr.number}/approve`, {});
-      toast(r.message || 'Approval recorded.');
-      load();
-    } catch (err) {
-      if (err && err.kind === '401') return;
-      if (btn) btn.disabled = false;
-      toast(`Could not approve: ${err.message || err}`);
-    }
-  }
-
-  // ---- render --------------------------------------------------------------
-
-  // One held PR, one oversight row (oversight.css .ov-row). This is the page
-  // that shows the most facts in the hall — title, verdict, trust, task, PR,
-  // author, sha, diff, every hold reason and the changed files — and every one
-  // of them survives the rebuild: the verdict is a state pill instead of a band,
-  // the reasons are hairline detail lines, the files are chips.
-  function renderRow(pr, mayApprove) {
-    const floor = pr.verdict !== 'needs_trust';
-    const reasons = (pr.reasons || []).map((r) =>
-      `<li class="gate-reason${r.hard_floor ? ' gate-reason--floor' : ''}">` +
-      `<span class="ov-key">${escapeHtml(r.path)}</span>` +
-      `<span>${escapeHtml(r.reason)}</span>` +
-      (r.hard_floor ? '<span class="gate-reason__floor">hard floor</span>' : '') +
-      '</li>').join('')
-      || '<li><span>Held by the gate check.</span></li>';
-
-    const files = pr.files || [];
-    const chips = files.slice(0, FILES_SHOWN).map((f) =>
-      `<span class="fact-chip" title="${escapeHtml(f.path)}">${escapeHtml(f.path)}</span>`).join('');
-    const more = files.length > FILES_SHOWN ? `<span class="gate-files__more">+${files.length - FILES_SHOWN} more</span>` : '';
-    const filesHtml = files.length
-      ? `<div class="gate-files" aria-label="Changed files"><span class="ov-fact">${fmtInt(files.length)} file${files.length === 1 ? '' : 's'}</span>${chips}${more}</div>`
-      : '';
-
-    const facts = [
-      `<span class="fact-pill fact-pill--${floor ? 'danger' : 'warn'}">${escapeHtml(verdictLabel(pr.verdict))}</span>`,
-      pr.author_trusted ? '<span class="fact-pill fact-pill--info">author trusted</span>' : '',
-      pr.task ? `<span class="ov-fact"><a href="/#/task/${encodeURIComponent(pr.task)}">task ${escapeHtml(String(pr.task))}</a></span>` : '',
-      `<span class="ov-fact">by <b>${escapeHtml(pr.author || 'unknown')}</b></span>`,
-      `<span class="ov-mono">${escapeHtml(shortSha(pr.head_sha))}</span>`,
-      `<span class="ov-fact"><a href="${escapeHtml(pr.url)}/files" target="_blank" rel="noopener">view diff</a></span>`,
-    ].filter(Boolean).join('');
-
-    const title = `<a class="ov-row__title" href="${escapeHtml(pr.url)}" target="_blank" rel="noopener">${escapeHtml(pr.title || `PR #${pr.number}`)}<span class="ov-mono">#${escapeHtml(String(pr.number))}</span></a>`;
-    const detail = `<div class="ov-row__facts">${facts}</div>
-         <ul class="ov-lines">${reasons}</ul>
-         ${filesHtml}`;
-
-    // The decision, as the ask card — only where the server said this viewer's
-    // approval would be let through (`viewer_may_approve`: the approve route's
-    // permission AND the release building's act-alone rule). Everyone else reads
-    // the same facts as a plain row.
-    if (mayApprove && !pr.already_approved && window.OTBAsk) {
-      const holder = document.createElement('ul');
-      holder.innerHTML = window.OTBAsk.html({
-        q: `Let PR #${pr.number} through?`,
-        saidHtml: title + detail,
-        row: true,
-        opts: [{
-          label: 'Approve',
-          result: `Clears the hold on ${shortSha(pr.head_sha)}; it merges once the check passes`,
-          rec: true,
-          attrs: { 'data-act': 'approve' },
-        }],
-      });
-      const card = holder.firstElementChild;
-      const btn = card.querySelector('[data-act=approve]');
-      if (btn) btn.addEventListener('click', () => approve(pr, btn));
-      return card;
-    }
-
-    const action = pr.already_approved
-      ? '<span class="ov-fact ov-ok">Approved. Re-check pending.</span>'
-      : '<span class="ov-fact">Waiting for approval</span>';
-
-    const el = document.createElement('li');
-    el.className = 'ov-row';
-    el.innerHTML =
-      `<div class="ov-row__main">
-         ${title}
-         ${detail}
-       </div>
-       <div class="ov-row__right">${action}</div>`;
-    return el;
-  }
-
-  // The glass strip above the panel: the shell's .stat-row, each tile a figure
-  // with the one clause that makes it a fact rather than a number.
-  function renderSummary(awaiting) {
-    const floors = awaiting.filter((p) => p.verdict === 'escalate').length;
-    const trust = awaiting.filter((p) => p.verdict === 'needs_trust').length;
-    const tiles = [
-      ['Held', fmtInt(awaiting.length), 'at the gate check'],
-      ['Hard floor', fmtInt(floors), 'only an owner may clear'],
-      ['Needs trust', fmtInt(trust), 'an author not yet trusted'],
-    ];
-    document.getElementById('gate-summary').innerHTML = tiles.map(([label, num, sub]) =>
-      `<div class="stat-tile"><span class="stat-tile__label">${escapeHtml(label)}</span><span class="stat-tile__num">${num}</span><span class="stat-tile__sub">${escapeHtml(sub)}</span></div>`).join('');
-  }
-
-  async function load() {
-    const list = document.getElementById('gate-list');
-    const checkingEl = document.getElementById('gate-checking');
-    let resp;
-    try {
-      resp = await fetchJson('/gate-approvals');
-    } catch (err) {
-      if (err && err.kind === '401') return;
-      if (err && err.kind === '403') { showSealed(); return; }
-      list.innerHTML = emptyStateHtml('Could not load held pull requests just now.');
-      return;
-    }
-
-    const awaiting = resp.awaiting || [];
-    renderSummary(awaiting);
-
-    if (awaiting.length === 0) {
-      list.innerHTML = emptyStateHtml('Nothing is held.');
-    } else {
-      list.innerHTML = '';
-      const rows = document.createElement('ul');
-      rows.className = 'ov-rows';
-      for (const pr of awaiting) rows.appendChild(renderRow(pr, resp.viewer_may_approve === true));
-      list.appendChild(rows);
-    }
-
-    if (resp.checking > 0) {
-      checkingEl.hidden = false;
-      checkingEl.textContent = `${resp.checking} more PR${resp.checking === 1 ? ' is' : 's are'} still being checked.`;
-    } else {
-      checkingEl.hidden = true;
-    }
-  }
-
   function showSealed() {
     document.getElementById('gate-sealed').hidden = false;
     document.getElementById('gate-body').hidden = true;
@@ -219,12 +65,18 @@
     if (body) body.textContent = `Available from the ${rankLabel('metic')} rank up.`;
   }
 
+  // A Metic is admitted to the page (page.view.government) but the runner controls
+  // are the Archon's (autonomy.fence.manage). Say so rather than draw an empty page.
+  function showArchonOnly() {
+    const note = document.getElementById('gate-archon-only');
+    note.hidden = false;
+    note.textContent = `The Autobongos controls are for the ${rankLabel('archon')}.`;
+  }
+
   // ---- the Autobongos fence (task 1003908, ADR 0307 §6) --------------------
   //
-  // The kill switch and the goal allowlist for the unattended runner. On this page
-  // because the Gate is already where the owner decides what reaches main without
-  // a person in the loop; the held-PR list and this panel are the same question
-  // from two ends.
+  // The kill switch and the goal allowlist for the unattended runner — what may
+  // reach main without a person in the loop.
   //
   // ARCHON ONLY, and the panel simply is not rendered for anyone else. That is
   // cosmetic: POST /autonomy/fence and the two allowlist routes carry
@@ -585,19 +437,17 @@
       me = null;
     }
     const rank = (me && (me.builder || me).rank || '').toLowerCase();
-    // ADR 0157: the Gate page sits at the `page.view.government` floor (metic). The
+    // ADR 0157: this page sits at the `page.view.government` floor (metic). The
     // server's requireGovernmentPage is the wall — this only decides whether to render the
     // body or the sealed notice, so it must agree or a Metic sees "sealed" on a page
     // they were just admitted to.
     if (rank !== 'metic' && rank !== 'archon') { showSealed(); return; }
 
     document.getElementById('gate-body').hidden = false;
-    if (rank === 'archon') {
-      document.getElementById('fence-panel').hidden = false;
-      // Independent reads, so one round trip rather than three.
-      await Promise.all([loadRunners(), loadFence(), loadBuilderRunners()]);
-    }
-    await load();
+    if (rank !== 'archon') { showArchonOnly(); return; }
+    document.getElementById('fence-panel').hidden = false;
+    // Independent reads, so one round trip rather than three.
+    await Promise.all([loadRunners(), loadFence(), loadBuilderRunners()]);
   }
 
   init();