@bongos/core 1.21.63 → 1.21.65

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.63",
-  "core_contract": "1.21.63",
-  "source_commit": "d41368cb70cf813937608660b4f1ce0719e0523c",
+  "core_version": "1.21.65",
+  "core_contract": "1.21.65",
+  "source_commit": "bf961553e46095e169f2fb5218e409ff2ce03a8f",
   "source_ref": "HEAD",
-  "built_at": "2026-10-06T00:15:37.787Z",
+  "built_at": "2026-10-06T14:51:44.072Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 586,
+    "docs_redacted": 587,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 2951,
+    "functional_verbatim": 2954,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3566,
-  "tree_sha256": "739a2690a0bb3d598fab3a9c799e365ba82d2b41522a3c5e5fc89bb736b5afec",
+  "file_count": 3570,
+  "tree_sha256": "bbb40e44796d6e7f5f34f46813add3554ad9d3a8ec722731a46bf1fa2ea1022f",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2289,10 +2289,15 @@
       "mode": "0000644",
       "sha256": "29c841d193efa7b6f6479e14a6056057138574fcd7b526f667da6f219dece5a7"
     },
+    {
+      "path": "docs/adr/0367-the-support-bot-answers-from-public-docs-only.md",
+      "mode": "0000644",
+      "sha256": "6d02d69a8d1bc0378f143960b280e06b4d7777b0ef4d3e7aa8c2d5a4337f85b8"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "08f66fecefc58d9c09e45841dd9d47514e807934cfcd4621a8bfeaa390afb334"
+      "sha256": "2d9e4ea00f57234d18adc9a8b95b1ccabb3fca6b61b859d629eb8e8f533cc9f8"
     },
     {
       "path": "docs/api-reference.md",
@@ -2327,12 +2332,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "f6f91263fa72b1b421dd9c0868bfd750f8a65466b34e67b4305d1243fb6386a0"
+      "sha256": "73103f4bef4fcc8dca7b91dff1ae4cf5d4f3dd7e188efcef3a6a848633816cc5"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "d8483d26f99e8ad3b73bb4490e8fbcf78b0dd0b919d80bd5749bb87768b40687"
+      "sha256": "2c74dc77936690dbc7879a1b7bef5680555fdf2cb99dbe74de2ee5ee89e7035d"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2832,7 +2837,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "f9943f6b4d4859358b4d2d71af9f043d47b2f5a70532bbb9489f34423c596ff8"
+      "sha256": "30be6ac52963f8b85a7b608b21505279e0560f208aba36d52cfc42350be663b5"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2842,7 +2847,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "628a2c51dfe01f436ee3d1dbc8c79d731c4d2c8be8a7f32d0f4aaa8a649703a7"
+      "sha256": "3e70987df8e2ab36308b3ad31db5f3d8de001ee085b77c0093fb8962511cd07f"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2932,7 +2937,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "339badbdc838f18409778ace02e3e820e948be47fef16997c2ffd5d8b9b7149d"
+      "sha256": "e5649a86d502afffa3d71a744f49511bad2ceffdbfc1eecae1206a79761f53f6"
     },
     {
       "path": "docs/project-context.template.md",
@@ -4647,7 +4652,7 @@
     {
       "path": "modules/discord/db.js",
       "mode": "0000644",
-      "sha256": "e265e853cf153a76e7b84f304e6f4338bd2bbfc2098383c358a0df7ac02a6817"
+      "sha256": "130cdbc84ce8298c6dffd03bc125d5c3b102ccff11fb95d24d6e7e999ac2aaa7"
     },
     {
       "path": "modules/discord/discord-approvals.js",
@@ -4662,7 +4667,7 @@
     {
       "path": "modules/discord/discord-bot.js",
       "mode": "0000644",
-      "sha256": "15d3bf047731fa50cca8bc3b06ef1c2b27e9b8a0067f3151a00974f99eb2ac3d"
+      "sha256": "a96d9e55db1d66813fd552419bee6548edf2587e9510ae0c2e61640d1e80fc34"
     },
     {
       "path": "modules/discord/discord-bugs.js",
@@ -4694,6 +4699,11 @@
       "mode": "0000644",
       "sha256": "852abc58bdec011b6d3bf222a35e198c6ea98a761d57a76be85477ef85ae54f5"
     },
+    {
+      "path": "modules/discord/discord-support.js",
+      "mode": "0000644",
+      "sha256": "68c32e054d07133f685ce9dd80a4b6d53fada4b1e97939491b958b1bb8994a9e"
+    },
     {
       "path": "modules/discord/lifecycle-port.js",
       "mode": "0000644",
@@ -4707,7 +4717,7 @@
     {
       "path": "modules/discord/module.json",
       "mode": "0000644",
-      "sha256": "3d9e8fc9dd7991b3636904bb4680a92be08f1dfc698d1f87452581412048911f"
+      "sha256": "f3b7314eaea0977841d71a02fdc032c2fea7f4cf242450161b2d17824409b7f7"
     },
     {
       "path": "modules/discord/pollers/discord-bot.js",
@@ -6382,17 +6392,17 @@
     {
       "path": "modules/hall-ui/public/watch.css",
       "mode": "0000644",
-      "sha256": "f11f73ec3649c7547cb59b7d5fdf090a1e52ad96f6fb28bdb3b5a14691153de1"
+      "sha256": "45b811f469be853704dfb9f66da96cd3be7b04c41a99de0ee77e54b9b352bf2c"
     },
     {
       "path": "modules/hall-ui/public/watch.html",
       "mode": "0000644",
-      "sha256": "43e2a20dc01c2f577e9307557a08a8e826143273275515f4570e14f07ccaa066"
+      "sha256": "19d3e14184d3b649e08eef88d436370abb546568482d1a5930870ae8e02c14d8"
     },
     {
       "path": "modules/hall-ui/public/watch.js",
       "mode": "0000644",
-      "sha256": "6746170acdd097b14bdccce236ac236b4962bdd1679de2c5624ca1a10cf784d0"
+      "sha256": "e919ccc5d8edfae77f699efed5d98fd19f793b857c827c6b09b8333612abc231"
     },
     {
       "path": "modules/hall-ui/public/watch.states.json",
@@ -6497,7 +6507,7 @@
     {
       "path": "modules/hall-ui/records/oversight-family.md",
       "mode": "0000644",
-      "sha256": "1c3288b390de98be0c7eabd377d27631d7873f748e42378da848e9c64ba02de7"
+      "sha256": "42ae5b5f51c636c5d7e09e09e4ab25e417229799bc8db4a80e9c5082a23e5151"
     },
     {
       "path": "modules/hall-ui/records/page-notes.md",
@@ -7447,7 +7457,7 @@
     {
       "path": "modules/memory/module.json",
       "mode": "0000644",
-      "sha256": "997d6c1ce5707c64f8ab74ae51b34234ecf975fbf62ee7160e9e6750233cbf96"
+      "sha256": "f04e13545b12ef46a1233bf295cc696f64bad72866207b6be9c8166528bf8208"
     },
     {
       "path": "modules/memory/pollers/search-index.js",
@@ -7467,7 +7477,7 @@
     {
       "path": "modules/memory/routes/search.js",
       "mode": "0000644",
-      "sha256": "a79f61f7906393fcb0bffb67f224c47b7129223e3a6806357de091a9339fa42e"
+      "sha256": "3b8fffea8e90c461c9fdc2957ca60300734b44257f9b3d5aca49e73d04019b0e"
     },
     {
       "path": "modules/memory/search-chunker.js",
@@ -7477,7 +7487,7 @@
     {
       "path": "modules/memory/search.js",
       "mode": "0000644",
-      "sha256": "43ede2e90d0124c42f6f9dfc3695898b83c8e876c01f70b0ae6e9d2f61d41085"
+      "sha256": "0540c9034480a9ee78159449b9cbc86b8415a9c70b9d108f1d4fafa66bd997a5"
     },
     {
       "path": "modules/npm-release/module.json",
@@ -7627,7 +7637,7 @@
     {
       "path": "modules/onboarding/routes/access-requests.js",
       "mode": "0000644",
-      "sha256": "a48c44be60f77d3b8734beb203fb895a26d26d63666a2516032c10eea1ebf576"
+      "sha256": "5a498b7b0a5f5b67fdfce415eeafbc54426752360c716451d22d180e3f6e8c54"
     },
     {
       "path": "modules/onboarding/routes/onboarding.js",
@@ -9967,12 +9977,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "420432c580d464d69a8e202ef34d471ca361e48a9ba41bc2db2c0d4cad874f58"
+      "sha256": "f74efc3baf5ed890ece42d60d96e89fcaf6a798f44558b400c079839ff46e3e8"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "046e83692e6f67d76f0724f15fdd0b0848a27df4c72a931f794e644bed628257"
+      "sha256": "33e94ab67e0bf024b19d2a59ac82e00a76e2878e28e5d962c5222fbec419cbb9"
     },
     {
       "path": "public-docs/index.html",
@@ -9992,7 +10002,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "d967b31f93314c9df18eb5346bb761835cbf1bd69a69443e515f4adad9fe5ea9"
+      "sha256": "f5e7adc2ee05b1a16498418766dba9f6ca27c708c750ba9dfbb501a899d476c1"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -10372,7 +10382,7 @@
     {
       "path": "scripts/gds/credential-presence.js",
       "mode": "0000644",
-      "sha256": "9b78c4d3459474fe4b89355a0d3fe0aa67e4fabfe7ef10b4bf061abdcb339b63"
+      "sha256": "36ecef8da86e9905c8c3e8431881828aba0ecca7e10b63db014f86658c5bf58b"
     },
     {
       "path": "scripts/gds/cutover-codemod.js",
@@ -11847,7 +11857,7 @@
     {
       "path": "src/bongos/auth-admission.js",
       "mode": "0000644",
-      "sha256": "213c008fbb81f403a2f4acad34af3ad8cd27c3299efce0cc96d714be6d9424ca"
+      "sha256": "e0e8a5b10571aa0248486e8ae6f556439e385938ca5cee9255a93df69f8ba549"
     },
     {
       "path": "src/bongos/auth-config.js",
@@ -11872,7 +11882,7 @@
     {
       "path": "src/bongos/auth.js",
       "mode": "0000644",
-      "sha256": "fad15cdbd6652b2a699f48769baaaed0e59314ac6bef326e663d6c7b06b1eaae"
+      "sha256": "f09f297371563a361002d1443414aa5ab65da36ad5e68bfadb634c659aeda6f3"
     },
     {
       "path": "src/bongos/cascade-dispatch.js",
@@ -12212,7 +12222,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "abc57062eb654fff799c6a526b21509943ac0b70c3e500680c139ac20b115f6b"
+      "sha256": "be6c5f14da4c58d5449936a2c21aa984d00db13cb51c804e26dcdc25e36a18e3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12504,6 +12514,11 @@
       "mode": "0000644",
       "sha256": "185fed67d8b3e65121af637e37392c21d4bcd892bb2b305704479f42ff5987c7"
     },
+    {
+      "path": "tests/applicant_view_guild.mjs",
+      "mode": "0000644",
+      "sha256": "2f9f15d2191efe8a4d572afcc819ae3bf6e1ee52f9d6e36157669d58ece9ab8a"
+    },
     {
       "path": "tests/application_echo.mjs",
       "mode": "0000644",
@@ -12512,7 +12527,7 @@
     {
       "path": "tests/application_lifecycle.mjs",
       "mode": "0000644",
-      "sha256": "f84e1b46315e57514f00545038eaa94a9617a83ebb8b5e4b55814fa3b063e155"
+      "sha256": "7b711002b5ffe53c8246e115b60dd648cfe7768e39079b935eba0a31c402b8f7"
     },
     {
       "path": "tests/architect.mjs",
@@ -13534,6 +13549,11 @@
       "mode": "0000644",
       "sha256": "858e20374f392b3444ea6ef65253eb6563425ab772c4988a33434f350effac54"
     },
+    {
+      "path": "tests/discord_support.mjs",
+      "mode": "0000644",
+      "sha256": "3823845cfaf33c108d96f23d2f652a51df0ae859aff827fb18556a2cd7110cca"
+    },
     {
       "path": "tests/display_name.mjs",
       "mode": "0000644",
@@ -15427,7 +15447,7 @@
     {
       "path": "tests/module_api.mjs",
       "mode": "0000644",
-      "sha256": "35a7e4c2e2afe2cd61e51318e7e3300e7629acd24683b515287aa9dcbe8501ae"
+      "sha256": "9244fee28297a30d3effb01db58772ccb4ab234d180beaaf14a4bded5f9841f1"
     },
     {
       "path": "tests/module_api_lazy.mjs",
@@ -16772,7 +16792,7 @@
     {
       "path": "tests/search_isolation.mjs",
       "mode": "0000644",
-      "sha256": "6bc8729f739c83383c859b464c1cde2e7cfc3d148b09ea6478017ee135089267"
+      "sha256": "5833e5642257d933a7245e44a8dd9b8365d4e050df2deb0bde7a1456901cbcd2"
     },
     {
       "path": "tests/search_route.mjs",
@@ -17732,7 +17752,7 @@
     {
       "path": "tests/watch_applications_queue.mjs",
       "mode": "0000644",
-      "sha256": "6f0dc184d552c4db4048894286cff96ade91e44c8070fae66fdeef324ba09a7d"
+      "sha256": "faf5965df0ad69873aae07333890adc63193664f57659f3a6259e39edd5d892b"
     },
     {
       "path": "tests/watch_roster_self_row.mjs",

package/docs/adr/0367-the-support-bot-answers-from-public-docs-only.md

@@ -0,0 +1,69 @@
+# ADR 0367 — The Discord support bot answers from public docs only, under a monthly cap that fails closed
+
+- **Status:** accepted
+- **Date:** 2026-10-06
+- **Task:** [task 1002534](https://cloudbongos.com/builders#/task/1002534) (goal 1000110, BONGOS-V2), promoted from idea 1000440
+- **Builds on:** [ADR 0033](0033-discord-bot-service-principal.md) (the bot is a service principal and a mirror, never authority; every bot action is audited), [ADR 0060](0060-gds-retrieval-layer.md) (recall: `search_chunks`, scoped in SQL), [ADR 0080](0080-llm-cache-api-transport-and-trust-model.md) (anything a stranger can type is untrusted input to a model), [ADR 0083](0083-modular-architecture-strangler-build-plan.md) (modules talk through ports, never a require)
+- **Decided with:** the owner. Scope at the 2026-07-29 inbox triage: read-only, public docs only, one support channel, no writes. The rest on 2026-10-06, all five the recommended option: a $5/month cap, `claude-haiku-4-5`, answer only when @-mentioned, the newcomer docs as the corpus, and ship it switched off until a key is on the server.
+
+## Context
+
+Support questions in Discord are answered by whoever happens to be around. The answers mostly already exist in the docs. A bot can point people at them, but it sits outside the trust boundary in a channel anyone can read and type into. That raises three risks the triage named: leaking rank-gated content into a public channel, prompt injection from channel text, and per-message model spend on a bootstrapped budget.
+
+Two facts shaped the design. First, `search_chunks` at `min_rank='xenos'` is not "public". Every tracked `.md` is ingested at xenos unless it is in the protected set: session logs, every ADR, `.claude/` skills, `docs/credentials.md`, `docs/architecture.md`, the red-team recipe. Xenos is still a signed-in builder, and `#support` is visible to everyone. Second, nothing on the server calls a model today. The Claude login lives on builders' machines (`docs/credentials.md`), never on the host.
+
+## Decision
+
+**D1 — Where and when.** The bot answers in ONE channel (`DISCORD_SUPPORT_CHANNEL_ID`, the guild's existing `support` channel) and only when a message @-mentions it. A reply ping does not count. Bots, webhooks and DMs are ignored. This is the first feature that replies through the gateway (every other post is a webhook), so the bot needs Send Messages in that channel.
+
+**D2 — What it may read: an allowlist, enforced in SQL.** The corpus is `SUPPORT_DOC_REFS` in `modules/discord/discord-support.js`: `README.md`, `docs/onboarding/`, and `docs/api-reference.md`. The memory module serves it through a new port, `memory.searchPublicDocs`, whose scope is fixed inside the function and never taken from the caller:
+- `source_kind='doc'`;
+- `min_rank='xenos'`;
+- no owner;
+- `source_ref` on the allowlist.
+
+The allowlist predicate rides into the same scoped CTE as the rank predicate, never a post-filter, and the body read re-applies the whole scope. An empty allowlist returns nothing. Widening the corpus is a code change reviewed by merge, because the list *is* the privacy boundary. The asker is never looked up: who they are cannot change what the bot reads.
+
+**D3 — What it may write: nothing but the reply and its audit row.** It does not file an idea, a bug, a task or a blocker, and it requires no port that does. Each answer writes one `audit_log` row:
+- `route='discord:support'`, `surface='discord_bot'`;
+- booked to the bot's own principal (migration 067);
+- carrying the cost, token counts, message and channel ids, and the doc refs.
+
+ADR 0033 already audits every bot action, and the `discord:bugs` rate cap reads audit_log the same way. That row is also the spend ledger (D5), so the feature needs no migration.
+
+**D4 — Untrusted text.**
+- The question and the passages are fenced with a per-call random marker, and any fence-shaped run in either is rewritten first (the page-notes split's posture).
+- The model gets no tools, so a jailbroken reply can only be one wrong message.
+- That message cannot ping anyone. Mentions are rewritten in the text, and the reply is sent with `allowedMentions: { parse: [] }`.
+- An injection's most useful payload is a link under the bot's name ("reset your account here"). So a masked link is rewritten to show its address, any URL not found verbatim in the passages the model was given is replaced with `[link removed]`, and the reply goes out with embeds suppressed.
+- A rate limit (D5) applies before every reply, including the fixed lines, so repeating a bare mention cannot farm a reply flood.
+- The model never sees anything private, so there is nothing for an injection to extract.
+
+**D5 — Spend: Haiku, a monthly cap, fail closed.**
+- **Model and price.** The model is `claude-haiku-4-5` (about $0.008 an answer at ≤600 output tokens), called through the official SDK. The SDK is lazily required, so an instance with the feature off never loads it.
+- **The cap.** `DISCORD_SUPPORT_MONTHLY_CAP_USD`, default $5, is read before every call from month-to-date spend: the sum of the D3 rows in the current UTC month.
+- **Failing closed.** No answer is given when the cap is set to anything but a positive number, when the ledger read fails, or when there is no bot principal to book against. The rule is the agents spend-ceiling's (task 1001393).
+- **The ledger read is indexed.** Its `route = 'discord:support' AND recorded_at >= <month start>` is the shape of migration 033's `idx_audit_log_route (route, recorded_at DESC)`, so it reads one month of one route, not the whole log.
+- **Concurrency.** Answers in flight are reserved at a worst case derived from the price table, and at most two run at once, so concurrency cannot overshoot. The reservation is per process, which holds because there is one: a bot token is one gateway connection, run in the single web process. A second answering process would need a shared reservation first.
+- **Unbooked spend.** A cost that could not be booked counts in memory until the month turns. So does a call that died after it may have been billed (a timeout or a 5xx). A 4xx costs nothing.
+- **Reaching the cap.** The bot posts one "out of answers for this month" line, then stays quiet until the month turns.
+- **Per-asker limit.** A silent in-memory rate limit (4 per 10 minutes) bounds a burst. It is not the bill.
+
+**D6 — Off by default, with its own switch and its own key.**
+- **The switch.** `DISCORD_SUPPORT_ENABLED` must be exactly `true`, on top of `DISCORD_BOT_ENABLED`.
+- **The key.** `DISCORD_SUPPORT_ANTHROPIC_API_KEY` is read from env only and namespaced on purpose. A host-wide `ANTHROPIC_API_KEY` would also be picked up by the `claude` CLI the grader spawns, and bill that key for grading.
+- **Inert states.** Missing the switch, the channel or the key makes the feature inert, and the boot log says which one.
+
+**D7 — Who reviews wrong answers.** The humans in the channel, as before. Each answer names its sources and has an audit row with the message id. The fix for a wrong answer is the doc it was drawn from, not the bot.
+
+## Consequences
+
+- On cloudbongos.com it does nothing until the bot itself runs there ([task 1002506](https://cloudbongos.com/builders#/task/1002506)) and the owner sets the switch, the channel and the key (`docs/discord/support.md`).
+- A question the newcomer docs do not cover gets "I couldn't find that". That is the intended answer, not a gap to fill by widening the corpus to internal docs.
+- The memory module now provides a port. A future public surface that wants recall must go through `searchPublicDocs` and bring its own allowlist; there is still no unauthenticated HTTP search route.
+- The audit-log ledger is approximate in one direction only: a lost booking undercounts until a restart forgets it. The in-flight reservation and the small per-answer cost keep that inside cents.
+
+## Reproduce / verify
+
+- `node tests/discord_support.mjs`: config and kill switch, the message guard, the fence, mention-proofing, the cap, the reservation and fail-closed paths, the model request (no tools), read-only by source, and the port's fixed SQL scope.
+- `node tests/search_isolation.mjs`, Layer C (needs a Postgres): the public port never returns a metic chunk, an owned chunk, a DB-prose row, or a doc off the allowlist.

package/docs/adr/README.md

@@ -485,3 +485,4 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0364 | [**Repo access is asked at sign-in on the hub, and held for as long as the builder stays signed in** ([task 1004549](https://cloudbongos.com/builders#/task/1004549)). Amends ADR 0143 and 0155. **D1:** every sign-in door on the hub's own pages carries `repos=1`; the hall and CLI stay identity-only. **D2:** the repo token's TTL is the web session's remaining life; a web sign-out deletes it, a CLI logout does not. **D3:** a draft at a wizard step beside a stored create keeps its place on a reload or a GitHub round-trip.](0364-repo-access-is-asked-at-sign-in-and-held-for-the-session.md) | auth / GitHub / create wizard |
 | 0365 | [**A guild engages a project through each member's own door** ([task 1002303](https://cloudbongos.com/builders#/task/1002303)). Amends ADR 0336 D7's invite half after ADR 0353. **D1:** the engagement row as D7 specified, plus `guild_id` on the echo (the latest application decides the label). **D2:** a guild applies = each member applies as themselves through the relay, naming the engagement. **D3:** a project invites a guild = the hub records it and returns one hall hand-off link per public-roster member; no hub-written invites, the one-step relay stays deferred. **D4:** a project is named only when on the map and public, for both kinds. **D5:** the label rides the applicant-profile read; the queue is R28's. **D6:** the D4.4 guild cards are their own task.](0365-a-guild-engages-a-project-through-each-members-own-door.md) | guilds / invites / applications |
 | 0366 | [**Hall planning is forms; a goal made there carries its own spec task, and the interviews stay in the CLI** ([task 1003461](https://cloudbongos.com/builders#/task/1003461), goal 1000089). Spike answer. **D1:** form-shaped, build in the hall: create a task under a goal, create a goal (name + subtitle, version, category, no scope field), attach a criterion to a goal you hold; every server refusal rendered as copy. **D2:** interview-shaped, deliberately absent from the hall: version planning, scope inference, drafting criteria and seed tasks, reuse-vs-create judgement, carry-forward. **D3 (owner):** a hall-made goal is created with a "Spec goal N" task (`POST /goals` `spec_task: true`, `source_ref goal-<id>-spec`) and every task in the goal depends on it until it ships; no new permission, no migration. **D4:** an optional "Plan with Claude" hand-off button.](0366-hall-planning-is-forms-and-a-goal-made-there-carries-its-own-spec-task.md) | lifecycle / planning |
+| 0367 | [**The Discord support bot answers from public docs only, under a monthly cap that fails closed** ([task 1002534](https://cloudbongos.com/builders#/task/1002534), goal 1000110). **D1:** one pinned channel, only when @-mentioned; the first gateway reply. **D2:** the corpus is an allowlist (`README.md`, `docs/onboarding/`, `docs/api-reference.md`) served by a new `memory.searchPublicDocs` port whose scope (doc, xenos, no owner, allowlisted ref) is fixed in SQL; the asker is never looked up. **D3:** no writes but the reply and one `audit_log` row per answer, which is also the spend ledger, so no migration. **D4:** a nonce-fenced prompt, no tools, mentions disabled. **D5:** `claude-haiku-4-5`, `DISCORD_SUPPORT_MONTHLY_CAP_USD` default $5, fail closed, with in-flight answers reserved at worst case. **D6:** off by default; its own switch and an env-only, namespaced key. **D7:** the channel's humans review wrong answers; the fix is the doc.](0367-the-support-bot-answers-from-public-docs-only.md) | discord / support / spend |