@bongos/core 1.24.1 → 1.24.2

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.1",
-  "core_contract": "1.24.1",
-  "source_commit": "88fb96554d0a673aa7eeeb596b01216b01062092",
+  "core_version": "1.24.2",
+  "core_contract": "1.24.2",
+  "source_commit": "ee62d8bbc8ba5881c14529f59c7c4977cdd3d369",
   "source_ref": "HEAD",
-  "built_at": "2026-10-30T01:22:15.450Z",
+  "built_at": "2026-10-30T04:03:46.558Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 628,
     "agent_docs_stubbed": 32,
-    "functional_verbatim": 3702,
+    "functional_verbatim": 3707,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4363,
-  "tree_sha256": "d003b43f93bfa1a5dd38f6db57b7d5389419c6bddc72bddca88d9603231e09e5",
+  "file_count": 4368,
+  "tree_sha256": "fdbf473ba97bae610265a82edb99185a1d26c069f869004283746e7d404265dd",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -327,12 +327,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "32db59559c6f640117131c2203965c2227c29f3c522a7e2b535b72a40cce52b2"
+      "sha256": "0319fd50716b382de913d14dfb410b80f5e643a5c70f097dc2e803cd2c0b5031"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "dc87c1d068deb83d20b50eb887450e3a1649c162fea14872ad630ebbc5090e55"
+      "sha256": "5c8dbe02b7ca7bd995a90466cfc5537b2b0da806b379a4dd97a0af057879e444"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -342,17 +342,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "26e9909fd662f84aa7e6fbaa0b2af6caf2b7f6ef530a33011ec8b4050d96ded9"
+      "sha256": "c2243b18e2efcc5c6ea9971c6538d1f133697e8f1b2a3e6ae666b52e9c907e13"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "470fbdb467a187cadc7d735e927ca7280ed59b82c38248e54a7554adbb0dce18"
+      "sha256": "1f2d29a73adc57606eb48c63dc66164eb513723959d82addac836f8753616ebe"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "2a983306cd590fc977e1128548ba809466dd6b9b321efed58f98cdd0e605abab"
+      "sha256": "1778959cf9927f26cbce3f66fcdc69316fad5b93dd6baa5c8293114734191062"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2397,7 +2397,7 @@
     {
       "path": "docs/adr/0385-money-lives-with-a-processor-credits-stay-a-project-meter.md",
       "mode": "0000644",
-      "sha256": "990e06619c229f34a79c21abce9dd7301080aac89208e8eca48683d7f39c8c55"
+      "sha256": "b5d24f25bfccaab2ac39eaeb857690b52f00bc2c2bd04c0e270d5aff3e3f82c0"
     },
     {
       "path": "docs/adr/0386-the-funding-wall-is-a-per-project-rule-claim-time-hold-by-default.md",
@@ -2442,17 +2442,17 @@
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "9d2b7273066b367aa73a72dfa5d95584d0064010cff1289e6fb7822bf8a4541f"
+      "sha256": "9eb0ee56f15eeac199fb9a4d16f4d74de34fde7fabb84ddc788de868c8198022"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "d63d0a84136a8cc798da597c8cfd2b28d48e0400042144d7944fbcb64ae5b79b"
+      "sha256": "733b696bc7b7b25f795405bb9a37a3c2bd2dcbdc03e6eb9cb955eb1b994a95a8"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "93a5f0666d9ce1ff939c78bc73e3f830df857e555f91729a2e79358a60bd0665"
+      "sha256": "2b1e707d8da5061db5add81620faec6b5e101c77b780dbf7a840aa5bd2e881fb"
     },
     {
       "path": "docs/architecture.md",
@@ -2477,12 +2477,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "007327e09a1c89e11e78de20209dc35109f7c6fdbbeee30eaabd5cbd6178707f"
+      "sha256": "009f23a1c2a2601201ccb4d9ad91a6d16c4502ccf161dab99039f00d7f435bdf"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "b01ae97a596548f55d0926913c92877ea38adfa7dfd494db636046875c7c5004"
+      "sha256": "eeb481d009b4f1e2259022852ad084d81bec7d4461a72d5891473f00e12c5515"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2992,7 +2992,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "3b5173da0982a70697abecae13e93a222a1fabcdc3544d4cf72c50fa304f95f6"
+      "sha256": "7d908c8a090025c583b91a08ea9130918cb3157f768fc0db60a6ae1930c8e88d"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3077,12 +3077,12 @@
     {
       "path": "docs/page-inventory.json",
       "mode": "0000644",
-      "sha256": "2f474f45b88bfad44fc85abd91796b1a6968c6ae22cc1525bd14e00d4c25920a"
+      "sha256": "c01a06e925175fa20e8763e9892cc2431262b163e82a07ed7b0990e914a1d3c1"
     },
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "fb994a593ded8544a433ebb2bb137c29532b20b8435aa022e1f44053b2c944b1"
+      "sha256": "5f42ce17aec4f1cd6f50f4567657281a0427e3ad9c5ad3c05f938428b49bf1de"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5249,6 +5249,16 @@
       "mode": "0000644",
       "sha256": "7cb9dac9cb87b679e1ae50e4112b3a7928a38ebb9902c8947a74d17bec4d9009"
     },
+    {
+      "path": "modules/government/access-routes.js",
+      "mode": "0000644",
+      "sha256": "618ff14f00982dfae8ac7cedc69c586f2c6f2b352103be441e6c6a6a764b620a"
+    },
+    {
+      "path": "modules/government/access.js",
+      "mode": "0000644",
+      "sha256": "07da154636be47b083de5a93a5696ced209f449fbcbeec59f46d50ee5c6ba8b4"
+    },
     {
       "path": "modules/government/asks-db.js",
       "mode": "0000644",
@@ -5257,7 +5267,7 @@
     {
       "path": "modules/government/asks.js",
       "mode": "0000644",
-      "sha256": "59fce4e7b4f0514cd946db88a961a58633a33472965d4d6089ca1741c16e7cd6"
+      "sha256": "8d30db41c2e4a7d2642bcaf619ac7ec29f7303c9808098016ac421c5b05ce58a"
     },
     {
       "path": "modules/government/board-idea-reads.js",
@@ -5312,7 +5322,7 @@
     {
       "path": "modules/government/db.js",
       "mode": "0000644",
-      "sha256": "1b93b386528a0e4e23f76e6291044a2d4e2947481fc299bb2d4878f1c77f041a"
+      "sha256": "24bfa501fa90af1774b96441ef64d5a34f33ba70650e81acba08663cce13287b"
     },
     {
       "path": "modules/government/decision-board.js",
@@ -5337,7 +5347,7 @@
     {
       "path": "modules/government/docket.js",
       "mode": "0000644",
-      "sha256": "674fb84797d0482f8e6e4c186068886aa749372d71fa13ef9734db3f0f1d63e1"
+      "sha256": "2a0375da59110b28be9de75644ea9ff6db4c99dd1663b4e99d9273fbb324f19f"
     },
     {
       "path": "modules/government/law-board.js",
@@ -5569,6 +5579,11 @@
       "mode": "0000644",
       "sha256": "8b01c624e9277fb29b7c7a9b04dcc0612d0e52cdeaeff6f7cd7907acd8f9dba3"
     },
+    {
+      "path": "modules/government/migrations/government_036_access_holders.sql",
+      "mode": "0000644",
+      "sha256": "76f264f74a0b4a76658c2ebc717d008253e03ed4439bd4bd3e9856a1dcc2cb80"
+    },
     {
       "path": "modules/government/module.json",
       "mode": "0000644",
@@ -5617,7 +5632,7 @@
     {
       "path": "modules/government/routes/government.js",
       "mode": "0000644",
-      "sha256": "079d88c62a1ab31d46914613cf75e5c1284d7a4c8a7d45e77d0a3ecd50018a9d"
+      "sha256": "252253d401ee4f17ddad15da6c6bc35a054217953d451f429bf263e044063c86"
     },
     {
       "path": "modules/government/routes/rank-sync.js",
@@ -5627,7 +5642,7 @@
     {
       "path": "modules/government/routing.js",
       "mode": "0000644",
-      "sha256": "72f48d19894f1fd9ea855af5b6b94d0a0751a2e5f09283c4f2b5df7a48240fa4"
+      "sha256": "1283ff7b16acbccf9acb9fbca3fde97cbb13e93f7c633d9edf5983f1e204da25"
     },
     {
       "path": "modules/government/session-scopes.js",
@@ -5652,7 +5667,7 @@
     {
       "path": "modules/government/waiting.js",
       "mode": "0000644",
-      "sha256": "fcbf229d9b3aa3681d0683d1681b02beb4404f371f2fe281a154ab704816f234"
+      "sha256": "418a472525da6c9ae9837cf3cc9c6871fba393d97008dc4d2424827adcd6cb14"
     },
     {
       "path": "modules/grading/CLAUDE.md",
@@ -5872,7 +5887,7 @@
     {
       "path": "modules/hall-ui/public/blockers-by-person.js",
       "mode": "0000644",
-      "sha256": "c29b4fde5aea580c7d4ea150f24076615566e1d94821277b30d881463cc47677"
+      "sha256": "f542c67e508d4ee501bb6288cf4fe5190b300303a121a117c7c49bd080515d55"
     },
     {
       "path": "modules/hall-ui/public/blockers-lib.js",
@@ -6354,6 +6369,11 @@
       "mode": "0000644",
       "sha256": "2683d06cfad1bd17067c23094265e39a3be758d016971f77529c5155614b7c18"
     },
+    {
+      "path": "modules/hall-ui/public/government-access.js",
+      "mode": "0000644",
+      "sha256": "d902d33b0db1bfde9d47e819a4936ee03a2cc0c07ea52aa867c0a9279826fde0"
+    },
     {
       "path": "modules/hall-ui/public/government.css",
       "mode": "0000644",
@@ -6362,7 +6382,7 @@
     {
       "path": "modules/hall-ui/public/government.html",
       "mode": "0000644",
-      "sha256": "b7eabd54565ac2ef5baf2a12dddad1020d7c589e5e0ab4ea3fae770ba0037291"
+      "sha256": "3ecd77c2460fbc56bcef70de6fcdf0334ca374c13b59fc0ba298711182e9a40e"
     },
     {
       "path": "modules/hall-ui/public/government.js",
@@ -7147,7 +7167,7 @@
     {
       "path": "modules/hall-ui/records/blockers-people.md",
       "mode": "0000644",
-      "sha256": "3fdebc225eec539099d83715a1a2b3bb99e4b59d9853abda1cec9e5d13f9f360"
+      "sha256": "b311adc999ae2c57520d9481aca892a002ef6022bac8fc0ce88a4567abbb0421"
     },
     {
       "path": "modules/hall-ui/records/builders-roster.md",
@@ -11372,12 +11392,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "32eba41f99ee8a8c4d99334b20c980c453221f577550f7933b4adb9dd81c3356"
+      "sha256": "d54e9e0c5bbf39452f84da6adfcbb70db3083f841949f1395a90a09bb75a9c51"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ca60febdf4138fe1d1f43c8b146e4f5d6b744d5b28eca3a0a25e83719a4b5ce6"
+      "sha256": "3613bd5a007016140cadc02da91c0156995160ea2100b25d47b0453593320305"
     },
     {
       "path": "public-docs/index.html",
@@ -11397,7 +11417,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "64c7cb86936639d343f5e34cf8e6fc7fe35d8e092c13ce121b789b299580600e"
+      "sha256": "855871603a1664076bf302b341cd91e05c8ca2c51082cb66f3ba76f0ceb37ad4"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12037,7 +12057,7 @@
     {
       "path": "scripts/bongos/government-walk.js",
       "mode": "0000644",
-      "sha256": "8644798265c38b2eaa7cf515747d1a3bc92f11c094fc44d9470b55fef0857b54"
+      "sha256": "91a66046b7e4bf98b96fb848abfab1f1a27939f8b9efcf52dd489f56d5faa359"
     },
     {
       "path": "scripts/bongos/grade-correlation-audit.js",
@@ -15027,7 +15047,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "308dbfa1b93cec577b2da45f6ea167fa50c47f44a97e23b9f505d3a90a1f5368"
+      "sha256": "da1ce57cac0712b89a2269ba82b2b8a358ec37f0dbe9da05abd77184f6c173d7"
     },
     {
       "path": "src/bongos/routes.js",
@@ -15232,7 +15252,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "d63c584a931f52d5ee4606a9ad97cbab71b3cc1b4dcafda222d9821a7f06f130"
+      "sha256": "49d1cfec2aa19c29c98f5fc96c241bfb7f7815ea86e2fc42baccf715511e180b"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15319,6 +15339,11 @@
       "mode": "0000644",
       "sha256": "598f0ee6d3634dc23aeb391d2dc9644dc6a0e8287d47de7d6374cceebe9c96f3"
     },
+    {
+      "path": "tests/access_holders.mjs",
+      "mode": "0000644",
+      "sha256": "224991c325e5bdb69cfffd3c6e69e91a0dd3ce1ed6c248cd987c725580cc686f"
+    },
     {
       "path": "tests/access_requests_invite.mjs",
       "mode": "0000644",
@@ -17457,7 +17482,7 @@
     {
       "path": "tests/government_board_membership.mjs",
       "mode": "0000644",
-      "sha256": "aa36727bb3fe750783f0adb82235fa7b2e5b1013c01b773a12d2dff6f0c5ce78"
+      "sha256": "0e0899661d540ae6ef3d411bcc691f70c7333413eac41b4cce9e8d99fdaa0e9c"
     },
     {
       "path": "tests/government_board_membership_db.mjs",
@@ -17652,7 +17677,7 @@
     {
       "path": "tests/government_routes.mjs",
       "mode": "0000644",
-      "sha256": "19d0676b4c9584364fe0e29e19f0dbfb84ede9e349917f215fd13e937f93d4e8"
+      "sha256": "c7da57d62028ce95dd18db7b843ac5144cf71447bd5c247c25d646b40be8f14d"
     },
     {
       "path": "tests/government_routing.mjs",
@@ -17662,7 +17687,7 @@
     {
       "path": "tests/government_seed.mjs",
       "mode": "0000644",
-      "sha256": "26edc9b5cc102e00f42ac5720cfc59a60c13a7dfaed2dd33a53d636f91eae65b"
+      "sha256": "52cbded8e3e5eba04edc62facf4998b684a23db0080e8804a9754a7c01229300"
     },
     {
       "path": "tests/government_session_scope.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 631 operations across 79 resource groups
+- 634 operations across 79 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -541,6 +541,12 @@ function createClient(opts = {}) {
       getGoalsSuggestions: (args) => request("GET", "/goals/suggestions", { hasBody: false }, args),
     },
     "government": {
+      // GET /government/access — rank: any-builder — GET /government/access
+      getGovernmentAccess: (args) => request("GET", "/government/access", { hasBody: false }, args),
+      // POST /government/access/{accessKey}/holders — rank: archon — POST /government/access/:accessKey/holders
+      postGovernmentAccessAccessKeyHolders: (args) => request("POST", "/government/access/{accessKey}/holders", { hasBody: true }, args),
+      // DELETE /government/access/{accessKey}/holders/{builderId} — rank: archon — DELETE /government/access/:accessKey/holders/:builderId
+      deleteGovernmentAccessAccessKeyHoldersBuilderId: (args) => request("DELETE", "/government/access/{accessKey}/holders/{builderId}", { hasBody: false }, args),
       // PUT /government/asks/{matterId} — rank: any-builder — PUT /government/asks/:matterId
       putGovernmentAsksMatterId: (args) => request("PUT", "/government/asks/{matterId}", { hasBody: true }, args),
       // POST /government/asks/{matterId}/pass — rank: any-builder — POST /government/asks/:matterId/pass

package/clients/bongos-client/index.cjs

@@ -540,6 +540,12 @@ function createClient(opts = {}) {
       getGoalsSuggestions: (args) => request("GET", "/goals/suggestions", { hasBody: false }, args),
     },
     "government": {
+      // GET /government/access — rank: any-builder — GET /government/access
+      getGovernmentAccess: (args) => request("GET", "/government/access", { hasBody: false }, args),
+      // POST /government/access/{accessKey}/holders — rank: archon — POST /government/access/:accessKey/holders
+      postGovernmentAccessAccessKeyHolders: (args) => request("POST", "/government/access/{accessKey}/holders", { hasBody: true }, args),
+      // DELETE /government/access/{accessKey}/holders/{builderId} — rank: archon — DELETE /government/access/:accessKey/holders/:builderId
+      deleteGovernmentAccessAccessKeyHoldersBuilderId: (args) => request("DELETE", "/government/access/{accessKey}/holders/{builderId}", { hasBody: false }, args),
       // PUT /government/asks/{matterId} — rank: any-builder — PUT /government/asks/:matterId
       putGovernmentAsksMatterId: (args) => request("PUT", "/government/asks/{matterId}", { hasBody: true }, args),
       // POST /government/asks/{matterId}/pass — rank: any-builder — POST /government/asks/:matterId/pass

package/clients/bongos-client/index.d.ts

@@ -1158,6 +1158,12 @@ export interface BongosClient {
     getGoalsSuggestions(args?: RequestArgs): Promise<ApiResponse>;
   };
   "government": {
+    /** GET /government/access — rank: any-builder */
+    getGovernmentAccess(args?: RequestArgs): Promise<ApiResponse>;
+    /** POST /government/access/{accessKey}/holders — rank: archon */
+    postGovernmentAccessAccessKeyHolders(args?: RequestArgs): Promise<ApiResponse>;
+    /** DELETE /government/access/{accessKey}/holders/{builderId} — rank: archon */
+    deleteGovernmentAccessAccessKeyHoldersBuilderId(args?: RequestArgs): Promise<ApiResponse>;
     /** PUT /government/asks/{matterId} — rank: any-builder */
     putGovernmentAsksMatterId(args?: RequestArgs): Promise<PutGovernmentAsksMatterIdResponse>;
     /** POST /government/asks/{matterId}/pass — rank: any-builder */

package/clients/bongos-client/index.mjs

@@ -537,6 +537,12 @@ export function createClient(opts = {}) {
       getGoalsSuggestions: (args) => request("GET", "/goals/suggestions", { hasBody: false }, args),
     },
     "government": {
+      // GET /government/access — rank: any-builder — GET /government/access
+      getGovernmentAccess: (args) => request("GET", "/government/access", { hasBody: false }, args),
+      // POST /government/access/{accessKey}/holders — rank: archon — POST /government/access/:accessKey/holders
+      postGovernmentAccessAccessKeyHolders: (args) => request("POST", "/government/access/{accessKey}/holders", { hasBody: true }, args),
+      // DELETE /government/access/{accessKey}/holders/{builderId} — rank: archon — DELETE /government/access/:accessKey/holders/:builderId
+      deleteGovernmentAccessAccessKeyHoldersBuilderId: (args) => request("DELETE", "/government/access/{accessKey}/holders/{builderId}", { hasBody: false }, args),
       // PUT /government/asks/{matterId} — rank: any-builder — PUT /government/asks/:matterId
       putGovernmentAsksMatterId: (args) => request("PUT", "/government/asks/{matterId}", { hasBody: true }, args),
       // POST /government/asks/{matterId}/pass — rank: any-builder — POST /government/asks/:matterId/pass

package/docs/adr/0385-money-lives-with-a-processor-credits-stay-a-project-meter.md

@@ -60,7 +60,18 @@ A pay type becomes switchable only after its gate is cleared and recorded.
 | Credit-weighted pool | Cash rules plus Art. III | Project | Decision 9 in force, model inputs visible, signed rule |
 | Non-monetary tracks | Volunteer and learner rules; Art. VII | Project | Guardian consent for ages 13 to 15, no cash redemption of any credit |
 | Self-managed payout | The project's own obligations | Project alone | A label saying Bongos moves and guarantees nothing |
-| EU labour payments | EU Platform Work Directive | Project; Verro | Not enabled until the per-country analysis is complete (Art. IV) |
+| EU labour payments | EU Platform Work Directive | Project; Verro Labs (the planned holding company of Cloud Bongos LLC) | Not enabled until the per-country analysis is complete (Art. IV) |
+
+## Amendment, 2026-10-29: the owner's answers to the open questions
+
+The owner answered the questions left open by the payments build plan ([task 1004970](https://cloudbongos.com/builders#/task/1004970)). Where an answer narrows a decision above, the answer wins.
+
+- **Decision 2, "a project may change or replace it", is narrowed.** For now a project may change and tune the Bongos Standard Credit System's settings. It may not switch credits off, and there is no plug-in formula.
+- **The credit reward stays required by default.** [ADR 0096](0096-require-reward-before-workable.md)'s rule stays on for every new project, not only for projects that pick the standard system.
+- **Decision 3: a project's pay policy lives in the database.** It is changed on the project's settings page, and every change is kept in an audit trail (who, when, what). It does not live in the branding pack. [Task 1004990](https://cloudbongos.com/builders#/task/1004990) builds to this.
+- **Modules already priced in credits are not hidden.** Each author is asked to set a cash price, and the listing stays up meanwhile. [Task 1004989](https://cloudbongos.com/builders#/task/1004989) builds to this. One question is still open. Decision 2 says credits are not spendable as money, so whether an interim listing may still be bought *with credits* (rather than only shown) needs the owner's word before that task ships.
+- **"Verro" is Verro Labs**, the planned holding company of Cloud Bongos LLC and related entities, as now named in the EU labour row above.
+- **ADR 0054's "credits are equity" framing is formally superseded**, as recorded in ADR 0054 itself ([task 1004967](https://cloudbongos.com/builders#/task/1004967)).
 
 ## Held for counsel (these block building the money-moving tasks)
 

package/docs/adr/README.md

@@ -503,7 +503,7 @@ These 20 numbers are each shared by exactly two files. They are **accepted histo
 | 0382 | [**A hardware card is a passkey step-up check, switched on per builder by an Archon** ([task 1004676](https://cloudbongos.com/builders#/task/1004676), proposed). No WebAuthn exists today; sign-in is GitHub OAuth or the hub IdP. **D1:** WebAuthn via a vetted library. **D2:** the card is a second factor, a server-recorded step-up, never the first. **D3:** register first; the requirement needs a registered card. **D4:** an Archon switches it on per builder, default off. **D5:** guards rank changes, deploy, session revoke, payouts. No PC/SC reader needed. Rejected: PC/SC middleware, card as sole login.](0382-a-hardware-card-is-a-passkey-step-up-an-archon-switches-on-per-builder.md) | auth / security |
 | 0383 | [**Sessions end after ten idle days, CLI included** ([task 1004830](https://cloudbongos.com/builders#/task/1004830)). Supersedes ADR 0294. Any session unused for 10 days stops authenticating and drops off the Active sessions list; measured on last_used_at, so it is an idle limit, not a ceiling. Rejected: hiding old sessions while they stay live; browser-only.](0383-sessions-end-after-ten-idle-days.md) | auth / security |
 | 0384 | [**The /raise investor page is a hub module that builders edit in place** ([task 1004847](https://cloudbongos.com/builders#/task/1004847)). A `raise` module, enabled only on the hub: every write is an audited `/api/bongos/raise/*` route, the page itself a GET-only `raise.web` port core mounts at /raise; team editing rides the ordinary builder session (any active builder, owner 2026-10-25); investors get a hashed-token session; /raise is exempt from the pre-launch gate. Everything, copy included, publishes with the core (owner's call); only the password hash stays in env.](0384-the-raise-page-is-a-hub-module-builders-edit-in-place.md) | modules / pages |
-| 0385 | [**Money lives with a licensed processor, credits stay a project-scoped meter, and each project sets its own pay** ([task 1004905](https://cloudbongos.com/builders#/task/1004905) · goal 1000092; also records tasks 1003180, 1003181 and 1004909). Bongos holds no user money and never redeems credits for cash; projects choose pay form and funding rule; payouts run under a project-signed rule; module sales carry a buyer-paid platform fee (processing cost plus 1 percent, per ADR 0392); crypto stays out. Six legal items are held for counsel and block the money-moving tasks.](0385-money-lives-with-a-processor-credits-stay-a-project-meter.md) | economy / legal |
+| 0385 | [**Money lives with a licensed processor, credits stay a project-scoped meter, and each project sets its own pay** ([task 1004905](https://cloudbongos.com/builders#/task/1004905) · goal 1000092; also records tasks 1003180, 1003181 and 1004909). Bongos holds no user money and never redeems credits for cash; projects choose pay form and funding rule; payouts run under a project-signed rule; module sales carry a buyer-paid platform fee (processing cost plus 1 percent, per ADR 0392); crypto stays out. Six legal items are held for counsel and block the money-moving tasks.](0385-money-lives-with-a-processor-credits-stay-a-project-meter.md) _(amended 2026-10-29 with the owner's answers, task 1004970: credits tuned not switched off, credit reward required by default, pay policy in the database, Verro = Verro Labs)_ | economy / legal |
 | 0386 | [**The funding wall is a per-project rule: hold at claim, refuse at completion, or carry on and record the shortfall** ([task 1003181](https://cloudbongos.com/builders#/task/1003181) · goal 1000092). Bongos sets no wall of its own; a project that sets nothing gets the claim-time hold, which refuses before any work is spent and holds the estimate so claims cannot over-commit the balance.](0386-the-funding-wall-is-a-per-project-rule-claim-time-hold-by-default.md) | economy |
 | 0387 | [**Two ledgers: credits measure work, money stays with the processor** ([task 1003180](https://cloudbongos.com/builders#/task/1003180) · goal 1000092). Resolves ADR 0054's double denomination by splitting, not by re-denominating credits into cents: `credit_log` stays a work meter with no money column, money gets its own cents record tied to the processor, no dollar value is read off a credit, and historic rows are neither rewritten nor classified.](0387-two-ledgers-credits-measure-work-money-stays-with-the-processor.md) | economy |
 | 0388 | [**A module sale is split by the project's own rule, and the buyer pays the platform fee on top** ([task 1004909](https://cloudbongos.com/builders#/task/1004909) · goal 1000092). The platform fee is the processor's cost plus 1 percent of the price, collected for Cloud Bongos LLC and never deducted from contributors; the project sets the seller share and contributor pool, the pool is divided by recorded contribution, and no paid module lists without a split rule.](0388-a-module-sale-is-split-by-the-project-the-buyer-pays-the-platform-fee.md) | economy / marketplace |

package/docs/api/openapi.json

@@ -9395,6 +9395,145 @@
         ]
       }
     },
+    "/government/access": {
+      "get": {
+        "operationId": "get_government_access",
+        "tags": [
+          "government"
+        ],
+        "summary": "GET /government/access",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).\n\n**Permissions:** `board.vote.cast` (all required).",
+        "x-rank": "any-builder",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "board.vote.cast"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/government/access/{accessKey}/holders": {
+      "post": {
+        "operationId": "post_government_access_accessKey_holders",
+        "tags": [
+          "government"
+        ],
+        "summary": "POST /government/access/:accessKey/holders",
+        "description": "**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "government.manage"
+        ],
+        "parameters": [
+          {
+            "name": "accessKey",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `accessKey`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/government/access/{accessKey}/holders/{builderId}": {
+      "delete": {
+        "operationId": "delete_government_access_accessKey_holders_builderId",
+        "tags": [
+          "government"
+        ],
+        "summary": "DELETE /government/access/:accessKey/holders/:builderId",
+        "description": "**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `government.manage` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/government/routes/government.js",
+        "x-permissions": [
+          "government.manage"
+        ],
+        "parameters": [
+          {
+            "name": "accessKey",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `accessKey`."
+          },
+          {
+            "name": "builderId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `builderId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/government/asks/check": {
       "post": {
         "operationId": "post_government_asks_check",
@@ -40180,7 +40319,7 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 631,
+  "x-endpoint-count": 634,
   "x-schema-count": 684,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 440,

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 631 endpoints across 104 route files.
+> **Generated from the live route files** — the route file is authoritative. 634 endpoints across 104 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -363,10 +363,13 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/goals/rollups` | `any-builder` | — | GET /goals/rollups?version= — one small row per goal: readiness counters, the last-activity timestamp, the craft set, and the next claima… |
 | GET | `/api/bongos/goals/suggestions` | `any-builder` | — | GET /goals/suggestions — "which goal should this draft live in?", answered before anything is created (task 1003062 / R07). |
 
-## `government` (38)
+## `government` (41)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
+| GET | `/api/bongos/government/access` | `any-builder` | — |  |
+| POST | `/api/bongos/government/access/:accessKey/holders` | `archon` | — |  |
+| DELETE | `/api/bongos/government/access/:accessKey/holders/:builderId` | `archon` | — |  |
 | PUT | `/api/bongos/government/asks/:matterId` | `any-builder` | — | board.vote.cast — put an ASK on a docket matter (task 1004703): the one shape every request from an agent to a person takes. |
 | POST | `/api/bongos/government/asks/:matterId/pass` | `any-builder` | `seat` | board.vote.cast — PASS AN ASK ON to another seat (task 1004705, the direction desk). |
 | POST | `/api/bongos/government/asks/:matterId/unclear` | `any-builder` | `note` | board.vote.cast — "I DON'T UNDERSTAND THIS" (the "?" on a city card, owner 2026-10-23): puts a matter the flagger can see on the reword l… |