@bongos/core 1.24.21 → 1.24.23

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.21",
-  "core_contract": "1.24.21",
-  "source_commit": "7b027cf222baf3f5fdd12b802afdc14ad7c5747d",
+  "core_version": "1.24.23",
+  "core_contract": "1.24.23",
+  "source_commit": "1c3eeccc81e91b49ceb762dbe0f15c50db48d4c5",
   "source_ref": "HEAD",
-  "built_at": "2026-11-02T00:01:42.101Z",
+  "built_at": "2026-11-02T01:03:41.659Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 632,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 4468,
-  "tree_sha256": "b017a6fd8efa5ec4e886e0f2877b6d50acec7e1febd611464b0f6c7c2975f8b5",
+  "tree_sha256": "08764542a326ca67a7bd4cb22c5eb65f3d618c7e0bee04031fe0c4b3bfe6f77d",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -352,7 +352,7 @@
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "0e60eb71a4c912b79c2cac3bc338403883667da5c6f871ed811f21dec58d33f9"
+      "sha256": "3c301345609619337a39f6385a735722d54552a8e2c4496bc1ab923cd9a65ca5"
     },
     {
       "path": "clients/bongos-client/index.mjs",
@@ -2457,12 +2457,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "57e77a6ffdbe2d558c088fce69e154b3b595b4d6d10b5053ad4ba0043cb00c46"
+      "sha256": "391006a66d14634cfdc2333d95a9e4aab90376f679b6d4e5b9ff58cd33cec51f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "d2e12182597058030c086d3283f652f8d8e2b2e62900c9babed2eba71a97996a"
+      "sha256": "a143477b8f8b9bb1facc61bd0c79f638981c498da2cd04b58997a2cc112df1d8"
     },
     {
       "path": "docs/architecture.md",
@@ -3002,7 +3002,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "f7f4cdac07096ec9cfe4f08041687ef307af195bc58edc60ae7a248d922e9bbb"
+      "sha256": "afa5a90dd4c0277bf47e5f4c9be826088e1e03f533ba548db0ab46f40629d829"
     },
     {
       "path": "docs/modules-contract.md",
@@ -8802,7 +8802,7 @@
     {
       "path": "modules/onboarding/founding-birth.js",
       "mode": "0000644",
-      "sha256": "0477341f98578088d22f7bef85bdeff5a83ab4f680a7edfeac2d4fe2ee8f4e3c"
+      "sha256": "af17a3f63c31e32ccd863a4ce0a6622673642fa1119796c4b555b8b2696bad94"
     },
     {
       "path": "modules/onboarding/founding-builders.js",
@@ -8812,12 +8812,12 @@
     {
       "path": "modules/onboarding/founding-mode.js",
       "mode": "0000644",
-      "sha256": "986b71918aba76f55ed303f74314928129f5b4e71f96a342240d8ddff1deb10f"
+      "sha256": "9fd376d97133479cebf4c8f8e26696b44c238cead34df335b8c1aa0b4af107e1"
     },
     {
       "path": "modules/onboarding/genesis-home.js",
       "mode": "0000644",
-      "sha256": "22904d8c06daabb634b55f240b895c906e90ba4c6ed81e7a41cdbbb78635ace8"
+      "sha256": "79a712a6dc1ed7633f25b9558ddca0ca75ee5eba0b996dc5a4a57bb57cfc5356"
     },
     {
       "path": "modules/onboarding/howto-guide.js",
@@ -9417,7 +9417,7 @@
     {
       "path": "modules/provisioning/birth.js",
       "mode": "0000644",
-      "sha256": "0cec3216e114c185dd536e2ecec9dc2ccf91c4ae4562b33ed022eab3206578cf"
+      "sha256": "e148bfa6918bf5b6a805d6323de91ab99ab81d9c2a796747e17d31dde2db72a2"
     },
     {
       "path": "modules/provisioning/capacity-gate.js",
@@ -9817,7 +9817,7 @@
     {
       "path": "modules/provisioning/routes/provisioning.js",
       "mode": "0000644",
-      "sha256": "e59a56ad8551052b8d9087f9a1c8015f8dcd0e50ff94a47070400f08141d6b80"
+      "sha256": "c72d11bef0a5fd0f8bbf070dbc28152caac1b1babbdfc9de101172c4fc99d33d"
     },
     {
       "path": "modules/provisioning/routes/render-standup.js",
@@ -11697,12 +11697,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "2fd9cac0d64f6c35f9d9e86fc9fea8ebcb261e49247cc1ef8d1efa5a69b85433"
+      "sha256": "419d4d1ad165101fd9a1017dfc7dbef2905e54d2374ca0c751bfc13f9f14bf7e"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "c622f574c6c57132b0bf851323d45f64c35dd5672466216dabc5268b5eaf15d6"
+      "sha256": "bb1cca3496a3ea2dcc2422d08c342a7afcf7023eebee2f176e51fd8884514bb4"
     },
     {
       "path": "public-docs/index.html",
@@ -11722,7 +11722,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "40836a48667cc62b5d077e56aee4b721cf462a93ec57ea6a40988213cc283c7c"
+      "sha256": "d027a083157c960a3a8825087b912dc021de55417f406bbed603c3907e352c32"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -15567,7 +15567,7 @@
     {
       "path": "src/branding.js",
       "mode": "0000644",
-      "sha256": "746468968253bdca892997acf10e0d50bece2788d27ea0c2a3b82c52d128ba23"
+      "sha256": "8bb8aebce8394eedabcbdf4d11fc5f190b7e03d2ef8b7d902d80d530f117a35f"
     },
     {
       "path": "src/build-info.js",
@@ -15592,7 +15592,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c5adfcce9c4c9e69692d36fc7af8035af773ec75c3c774532087a0acc8600b3b"
+      "sha256": "acfad6615c99259d2b6ffc0d3ed7f23f83a527f5d281937e236378f913c4a8a5"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -17457,7 +17457,7 @@
     {
       "path": "tests/founding_birth.mjs",
       "mode": "0000644",
-      "sha256": "086308833bfbf52a07e04d0c831ee9685822d05da9cbdeff6766a743e42f5113"
+      "sha256": "0a5bcb5742bf1d2fc5fbbd03180f8542ce1557b4616783ba3751cf6ba43abd8e"
     },
     {
       "path": "tests/founding_builders.mjs",
@@ -17467,7 +17467,7 @@
     {
       "path": "tests/founding_mode.mjs",
       "mode": "0000644",
-      "sha256": "40dc19d63b81964f699247709ad91bb70f13f6d562863d1ca2f13c16933f76de"
+      "sha256": "76b3892dc8e9811f454778a997dbe3930a991524b0929f89f608d9fba38d80f7"
     },
     {
       "path": "tests/gating_review_retired.mjs",
@@ -17487,7 +17487,7 @@
     {
       "path": "tests/genesis_home.mjs",
       "mode": "0000644",
-      "sha256": "0d4fcb7bdc41561fb1fd969739460a06098fca615a97f210080e75300fc6533d"
+      "sha256": "6cadbdc1c3e1a276f2d381f7256d483fda6e07d8cfab1d7ac89837f2b0d64ffd"
     },
     {
       "path": "tests/genesis_life_plates.mjs",
@@ -20522,7 +20522,7 @@
     {
       "path": "tests/provision_settings_apply.mjs",
       "mode": "0000644",
-      "sha256": "d18b3b00b10f9b581a3b768906decc6be6f17ccfb3f4e535f228d4014fa90675"
+      "sha256": "cc5a5c1eabf6bf4ebbda9726798393114c543b49d5df533a8e3c6f9d0c800295"
     },
     {
       "path": "tests/provision_teardown_address.mjs",
@@ -20677,7 +20677,7 @@
     {
       "path": "tests/provisioning_settings_env.mjs",
       "mode": "0000644",
-      "sha256": "1e67e9d4bd4b2fdc89e3712f3eba4c07467be3e0ecc10b1ffdd08a202106e013"
+      "sha256": "26c91fde2113a2dff3dd5b9d14ab3609839f69b1f27b768b5028ddee003c737a"
     },
     {
       "path": "tests/provisioning_slug_available.mjs",
@@ -22267,7 +22267,7 @@
     {
       "path": "tests/wizard_demo.mjs",
       "mode": "0000644",
-      "sha256": "cde0f1f967f8f6c8fa270fb08a77207764dce9cdedca9de6a3de1f61fa32a80a"
+      "sha256": "d65fcde85566b1cd0d9ded2c267273d6b8717595348c92953803f54485e04c49"
     },
     {
       "path": "tests/wizard_draft_resume.mjs",

package/clients/bongos-client/index.d.ts

@@ -577,7 +577,7 @@ export interface PostProvisioningInstancesIdRenderResponse { ok: boolean; queued
 export interface PostProvisioningInstancesIdRepoPrivateResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdRestartResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; message: unknown }
 export interface PostProvisioningInstancesIdTeardownResponse { ok: boolean; queued: unknown; action: unknown; status: unknown; superseded: unknown; message: unknown }
-export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[]; terms_acknowledged?: boolean; demo?: Record<string, unknown>; ship_mode?: "auto" | "manual" }
+export interface PostProvisioningInstancesRequest { slug: string; target_ref?: string; hosting_shape?: string; domain?: string; no_address?: boolean; tier?: string; onboard_mode?: string; type?: string; description?: string; detail?: Record<string, unknown>; modules?: string[]; terms_acknowledged?: boolean; demo?: Record<string, unknown>; ship_mode?: "auto" | "manual"; genesis?: boolean }
 export interface PostProvisioningPhysicsCheckRequest { description?: string; detail?: Record<string, unknown> }
 export interface PostProvisioningPhysicsCheckResponse { stop: boolean; message: unknown; soft_limits: unknown }
 export interface PostProvisioningRenderLookupRequest { key: string; owner_id?: string }

package/docs/api/openapi.json

@@ -39404,6 +39404,9 @@
               "auto",
               "manual"
             ]
+          },
+          "genesis": {
+            "type": "boolean"
           }
         },
         "required": [

package/docs/api-reference.md

@@ -789,7 +789,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | GET | `/api/bongos/provisioning/github-app/status` | `public` | — | GET /provisioning/github-app/status?state=<> — the PUBLIC progress read (task 1004548; the checklist since task 1004649). |
 | GET | `/api/bongos/provisioning/health` | `public` | — | GET /provisioning/health — liveness + the core version this module mounted against. |
 | GET | `/api/bongos/provisioning/instances` | `any-builder` | — | GET /provisioning/instances — the caller's own instances + each open intent. |
-| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged`, `demo`, `ship_mode` | POST /provisioning/instances — request a new instance. |
+| POST | `/api/bongos/provisioning/instances` | `any-builder` | `slug`, `target_ref`, `hosting_shape`, `domain`, `no_address`, `tier`, `onboard_mode`, `type`, `description`, `detail`, `modules`, `terms_acknowledged`, `demo`, `ship_mode`, `genesis` | POST /provisioning/instances — request a new instance. |
 | GET | `/api/bongos/provisioning/instances/:id` | `any-builder` | — | GET /provisioning/instances/:id — read one instance (the manage page's read). |
 | GET | `/api/bongos/provisioning/instances/:id/core-upgrade` | `archon` | — | GET the same path — step ONE of the two-step (ADR 0293 D4): what a move would do. |
 | POST | `/api/bongos/provisioning/instances/:id/core-upgrade` | `archon` | — | POST /provisioning/instances/:id/core-upgrade — move the core pin. |

package/docs/module-api-changelog.md

@@ -3298,5 +3298,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.19 with no explicit bump. run 41141610027. (task 1002620)
   1.24.21 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.20 with no explicit bump. run 41364831803. (task 1002620)
+  1.24.22 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.21 with no explicit bump. run 41366737579. (task 1002620)
+  1.24.23 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.22 with no explicit bump. run 41370306880. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/onboarding/founding-birth.js

@@ -50,11 +50,13 @@ const { DEMO_PEOPLE, DEMO_HOURS, intIn } = genesis;
 function birthMarker(founding) {
   const f = founding && typeof founding === 'object' ? founding : {};
   const born = typeof f.birth === 'string' && Number.isFinite(new Date(f.birth).getTime());
-  if (!born) return { born: false, demo: null };
+  if (!born) return { born: false, demo: null, genesis: false };
   const people = Number(f.demoPeople);
   const hours = Number(f.demoHours);
   const demo = intIn(people, DEMO_PEOPLE[0], DEMO_PEOPLE[1]) && intIn(hours, DEMO_HOURS[0], DEMO_HOURS[1]) ? { people, hours_each: hours } : null;
-  return { born: true, demo };
+  // Genesis is paused (owner, 2026-11-01): only a birth stamped with the genesis companion starts it, so a
+  // project born before the pause, carrying a marker alone, never does.
+  return { born: true, demo, genesis: f.genesis === 'on' };
 }
 
 function markerFrom(deps) {
@@ -71,6 +73,7 @@ function markerFrom(deps) {
 async function bornFounding(deps = {}) {
   const marker = markerFrom(deps);
   if (!marker.born) return { ran: false, reason: 'no_marker' };
+  if (!marker.genesis) return { ran: false, reason: 'genesis_paused' };
   const get = deps.getSetting || require('../../src/module-api').projectSettings.get;
   const [started, ended] = await Promise.all([get(fm.KEYS.STARTED_AT), get(fm.KEYS.ENDED_AT)]);
   if (ended && ended.value) return { ran: false, reason: 'already_alive' };

package/modules/onboarding/founding-mode.js

@@ -50,6 +50,11 @@ const KEYS = Object.freeze({
   // When the planet came alive (founding switched off). With STARTED_AT it bounds the
   // window a builder must have joined in to carry the founding mark (task 1004424).
   ENDED_AT: 'founding.ended_at',
+  // Genesis is OFF unless a project turns it on (owner, 2026-11-01: not polished enough, so every
+  // project opens as the full hall). Read as ordinary 'true'; absent or anything else is OFF, which is
+  // also what pauses a project that was already mid-founding. A demo, or a project born with genesis,
+  // turns it on once at birth (founding-birth.js); the owner's own switch can follow it.
+  ENABLED: 'genesis.enabled',
 });
 
 // The key that records when a stage first became current, so a builder's join time
@@ -121,6 +126,11 @@ async function foundingModeFor(deps = {}) {
   const get = deps.getSetting || require('../../src/module-api').projectSettings.get;
   let shaped;
   try {
+    // Paused unless the project turned genesis on: the hall opens full, whatever founding.active says.
+    // Asked FIRST and alone, because this is the answer for nearly every project and every /me, so the
+    // common case is one read, not four.
+    const enabled = await get(KEYS.ENABLED);
+    if (!parseActive(enabled && enabled.value)) return null;
     const [active, stage, startedAt] = await Promise.all([
       get(KEYS.ACTIVE), get(KEYS.STAGE), get(KEYS.STARTED_AT),
     ]);

package/modules/onboarding/genesis-home.js

@@ -264,6 +264,9 @@ async function startFounding(builderId, deps = {}) {
   const s = seams(deps);
   const ended = await s.get(fm.KEYS.ENDED_AT);
   if (ended && ended.value) return { ok: false, reason: 'already_alive' };
+  // Genesis is off unless a project turns it on (task 1005035): starting it IS turning it on, whether the
+  // birth does it or the owner's own start route does, so the mode read below never answers null for it.
+  await s.set(fm.KEYS.ENABLED, 'true', builderId);
   const mode = await fm.setFoundingMode({ active: true }, builderId, modeDeps(s));
   return { ok: true, mode };
 }

package/modules/provisioning/birth.js

@@ -21,6 +21,9 @@
 // that came and went would leave a stale line behind.
 
 const BIRTH_KEY = 'founding_birth';
+// Genesis is paused (owner, 2026-11-01): only a birth stamped with this key starts it. Reserved like the
+// birth itself; a row born before the pause carries the birth alone, so it never founds.
+const GENESIS_KEY = 'founding_genesis';
 // The wizard's ship-mode answer (task 1004629): auto | manual, stamped beside the birth on
 // the row the create route just made. Reserved like the birth (out of SETTINGS_VOCAB): the
 // instance's own project_settings['ship.mode'] is where the setting LIVES and where the
@@ -36,6 +39,11 @@ function bornAt(row) {
   return ISO.test(v) && Number.isFinite(new Date(v).getTime()) ? v : '';
 }
 
+// genesisOn(row) — PURE. 'on' only for a born row stamped with genesis, else ''.
+function genesisOn(row) {
+  return bornAt(row) && storedOf(row)[GENESIS_KEY] === 'on' ? 'on' : '';
+}
+
 // demoBox(row) — PURE. A born demo's { people, hours_each }, or null. Only a row that is
 // both born and a demo carries one: an older demo has no marker and founds nothing.
 function demoBox(row) {
@@ -57,6 +65,7 @@ const bornShipMode = (row) => parseShipMode(storedOf(row)[SHIP_MODE_KEY]).mode |
 // The companion env (SETTINGS_COMPANION_ENV). src/branding.js maps them onto founding.*.
 const BIRTH_COMPANION_ENV = Object.freeze({
   FOUNDING_BIRTH: bornAt,
+  FOUNDING_GENESIS: genesisOn,
   DEMO_PEOPLE: (row) => { const d = demoBox(row); return d ? String(d.people) : ''; },
   DEMO_HOURS: (row) => { const d = demoBox(row); return d ? String(d.hours_each) : ''; },
   SHIP_MODE: bornShipMode,
@@ -67,9 +76,9 @@ const BIRTH_COMPANION_ENV = Object.freeze({
 async function stampBirth(db, instanceId, now = new Date()) {
   await db.query(
     `UPDATE provisioning_instances
-        SET settings = COALESCE(settings, '{}'::jsonb) || jsonb_build_object($2::text, $3::text)
+        SET settings = COALESCE(settings, '{}'::jsonb) || jsonb_build_object($2::text, $3::text, $4::text, 'on')
       WHERE id = $1 AND NOT (COALESCE(settings, '{}'::jsonb) ? $2::text)`,
-    [instanceId, BIRTH_KEY, now.toISOString()],
+    [instanceId, BIRTH_KEY, now.toISOString(), GENESIS_KEY],
   );
 }
 

package/modules/provisioning/routes/provisioning.js

@@ -357,7 +357,7 @@ module.exports = function provisioningRoutes() {
       // exactly the set the panel preselected. An explicit [] is the different
       // answer "none of them". maxItems is a sanity ceiling well above a catalog
       // that is three modules wide today.
-      modules: { type: 'array', itemsType: 'string', maxItems: 50 }, terms_acknowledged: { type: 'boolean' }, demo: { type: 'object' }, ship_mode: { type: 'string', enum: ['auto', 'manual'] },   // the wizard's terms tick (task 1004417, ../terms-ack.js); the demo route's { people, hours_each } (task 1004420, ../demo.js)
+      modules: { type: 'array', itemsType: 'string', maxItems: 50 }, terms_acknowledged: { type: 'boolean' }, demo: { type: 'object' }, ship_mode: { type: 'string', enum: ['auto', 'manual'] }, genesis: { type: 'boolean' },   // the wizard's terms tick (task 1004417, ../terms-ack.js); the demo route's { people, hours_each } (task 1004420, ../demo.js)
     })) return;
     const body = req.body || {};
     const detailFault = badProjectDetail(body.detail);
@@ -472,7 +472,9 @@ module.exports = function provisioningRoutes() {
       // Born into genesis (task 1004506, ../birth.js): only the row this request MADE, and before the
       // provision intent exists, so the runner's web.env already carries the marker and the demo's box.
       // Best-effort: a project that misses its marker opens as an ordinary hall; the create still stands.
-      if (created) await birth.stampBirth(pool, instance.id).catch((err) => log.error('[provisioning] birth marker not stamped', err));
+      // Genesis is OFF by default (owner, 2026-11-01): a new project opens as the full hall. Only a demo (its
+      // time box lives on the birth marker) or an explicit `genesis: true` (the test toggle) is born into it.
+      if (created && (demoAsk.demo || body.genesis === true)) await birth.stampBirth(pool, instance.id).catch((err) => log.error('[provisioning] birth marker not stamped', err));
       // The wizard's ship mode (task 1004629) rides beside it; a miss means the project asks at its first ship.
       if (created) await birth.stampShipMode(pool, instance.id, body.ship_mode).catch((err) => log.error('[provisioning] ship mode not stamped', err));
       const demoRow = created && demoAsk.demo ? await demo.startDemoProject(pool, provisioning, instance.id, demoAsk.demo) : null;

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.21",
+  "version": "1.24.23",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.21",
+      "version": "1.24.23",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.21",
+  "version": "1.24.23",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11015,5 +11015,17 @@
       "id": "1005013",
       "text": "Every card in the city now says what it is. Under each question sits a short plain explanation: what kind of thing it is, which goal, task, person or module it belongs to, and what answering does. A Review card used to show a"
     }
+  ],
+  "1.24.22": [
+    {
+      "id": "1005034",
+      "text": "New projects now open as the full hall instead of starting in the guided setup (genesis and founding mode). The guided setup is paused for now and stays available for demo projects and for test projects that ask for it. Projec"
+    }
+  ],
+  "1.24.23": [
+    {
+      "id": "1005035",
+      "text": "Projects that were still in the guided setup now open as the full project instead, and no project starts the guided setup unless it is switched on for that project. Hosted projects pick this up when their version is moved forw"
+    }
   ]
 }

package/src/branding.js

@@ -101,6 +101,9 @@ const ENV_OVERRIDES = [
   // start genesis (modules/onboarding/founding-birth.js). SERVER-ONLY: clientBranding
   // publishes no `founding` block.
   ['FOUNDING_BIRTH', ['founding', 'birth']],
+  // FOUNDING_GENESIS is 'on' only when the platform stamped the birth with genesis (a demo, or a
+  // test project asking for it); empty on every project born before the pause.
+  ['FOUNDING_GENESIS', ['founding', 'genesis']],
   ['DEMO_PEOPLE', ['founding', 'demoPeople']],
   ['DEMO_HOURS', ['founding', 'demoHours']],
   // The ship mode the founder picked in the wizard (task 1004629), empty when none was.

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.21'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.23'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/founding_birth.mjs

@@ -21,8 +21,8 @@ const birth = require('../modules/onboarding/founding-birth.js');
 const gh = require('../modules/onboarding/genesis-home.js');
 const fm = require('../modules/onboarding/founding-mode.js');
 
-const BORN = { born: true, demo: null };
-const BORN_DEMO = { born: true, demo: { people: 3, hours_each: 4 } };
+const BORN = { born: true, demo: null, genesis: true };
+const BORN_DEMO = { born: true, demo: { people: 3, hours_each: 4 }, genesis: true };
 
 function world({ marker = BORN, settings = {}, withLifecycle = true } = {}) {
   const store = new Map(Object.entries(settings));
@@ -43,19 +43,59 @@ function world({ marker = BORN, settings = {}, withLifecycle = true } = {}) {
 
 // ── the marker ───────────────────────────────────────────────────────────────
 
-test('the marker: born only with a readable birth stamp; a demo box only inside its limits', () => {
-  assert.deepEqual(birth.birthMarker(undefined), { born: false, demo: null });
-  assert.deepEqual(birth.birthMarker({}), { born: false, demo: null });
-  assert.deepEqual(birth.birthMarker({ birth: 'whenever' }), { born: false, demo: null });
-  assert.deepEqual(birth.birthMarker({ birth: '2026-10-01T00:00:00.000Z' }), { born: true, demo: null });
-  assert.deepEqual(birth.birthMarker({ birth: '2026-10-01T00:00:00.000Z', demoPeople: '3', demoHours: '4' }),
-    { born: true, demo: { people: 3, hours_each: 4 } });
-  assert.deepEqual(birth.birthMarker({ birth: '2026-10-01T00:00:00.000Z', demoPeople: '99', demoHours: '4' }),
-    { born: true, demo: null }, 'a malformed box still founds, with the ordinary plan');
-  assert.deepEqual(birth.birthMarker({ demoPeople: '3', demoHours: '4' }), { born: false, demo: null },
+test('the marker: born only with a readable birth stamp; a demo box only inside its limits; genesis only when stamped', () => {
+  const AT = '2026-10-01T00:00:00.000Z';
+  assert.deepEqual(birth.birthMarker(undefined), { born: false, demo: null, genesis: false });
+  assert.deepEqual(birth.birthMarker({}), { born: false, demo: null, genesis: false });
+  assert.deepEqual(birth.birthMarker({ birth: 'whenever' }), { born: false, demo: null, genesis: false });
+  assert.deepEqual(birth.birthMarker({ birth: AT }), { born: true, demo: null, genesis: false }, 'a birth alone (every project born before the pause) never founds');
+  assert.deepEqual(birth.birthMarker({ birth: AT, genesis: 'on' }), { born: true, demo: null, genesis: true });
+  assert.deepEqual(birth.birthMarker({ birth: AT, genesis: 'yes' }), { born: true, demo: null, genesis: false }, 'only the stamped spelling counts');
+  assert.deepEqual(birth.birthMarker({ birth: AT, genesis: 'on', demoPeople: '3', demoHours: '4' }),
+    { born: true, demo: { people: 3, hours_each: 4 }, genesis: true });
+  assert.deepEqual(birth.birthMarker({ birth: AT, genesis: 'on', demoPeople: '99', demoHours: '4' }),
+    { born: true, demo: null, genesis: true }, 'a malformed box still founds, with the ordinary plan');
+  assert.deepEqual(birth.birthMarker({ demoPeople: '3', demoHours: '4' }), { born: false, demo: null, genesis: false },
     'a demo box without a birth is not a birth');
 });
 
+test('genesis is paused: a birth without the genesis stamp starts nothing and writes nothing', async () => {
+  const w = world({ marker: { born: true, demo: null, genesis: false } });
+  const r = await birth.bornFounding(w.deps());
+  assert.deepEqual(r, { ran: false, reason: 'genesis_paused' });
+  assert.deepEqual(w.writes, [], 'no setting is touched');
+});
+
+test('the switch: founding.active alone reads as not founding; the switch makes it read', async () => {
+  const store = new Map([[fm.KEYS.ACTIVE, 'true'], [fm.KEYS.STAGE, 'charter']]);
+  const getSetting = async (k) => (store.has(k) ? { key: k, value: store.get(k) } : null);
+  assert.equal(await fm.foundingModeFor({ getSetting, government: null }), null, 'a project already mid-founding opens as the full hall');
+  store.set(fm.KEYS.ENABLED, 'true');
+  assert.equal((await fm.foundingModeFor({ getSetting, government: null })).stage, 'charter');
+});
+
+test('an owner starting genesis turns the switch on, so a started genesis is never invisible', async () => {
+  const w = world();
+  const r = await gh.startFounding('7', w.deps());
+  assert.equal(r.ok, true);
+  assert.equal(w.store.get(fm.KEYS.ENABLED), 'true');
+  assert.equal(r.mode.active, true, 'the mode it answers with reads, not null');
+});
+
+test('a paused project costs ONE settings read, not four', async () => {
+  let reads = 0;
+  const getSetting = async () => { reads += 1; return null; };
+  assert.equal(await fm.foundingModeFor({ getSetting }), null);
+  assert.equal(reads, 1, 'the switch is asked first and alone');
+});
+
+test('a birth with genesis turns the switch on, once, before founding starts', async () => {
+  const w = world();
+  await birth.bornFounding(w.deps());
+  assert.equal(w.store.get(fm.KEYS.ENABLED), 'true');
+  assert.ok(w.writes.indexOf(fm.KEYS.ENABLED) < w.writes.indexOf(fm.KEYS.ACTIVE), 'the switch is on before founding is');
+});
+
 // ── the birth hook ───────────────────────────────────────────────────────────
 
 test('no marker: nothing runs, and the database is never read (a pre-existing hall is unchanged)', async () => {

package/tests/founding_mode.mjs

@@ -70,7 +70,7 @@ test('foundingModeFor fails closed when the settings read throws', async () => {
 });
 
 test('setFoundingMode refuses an unknown stage and stamps started_at once', async () => {
-  const store = new Map();
+  const store = new Map([[fm.KEYS.ENABLED, 'true']]);
   const deps = {
     getSetting: async (k) => (store.has(k) ? { key: k, value: store.get(k) } : null),
     setSetting: async (k, v) => { store.set(k, String(v)); return { key: k, value: String(v) }; },
@@ -227,7 +227,7 @@ test('the band escapes what it prints — a project name cannot inject markup',
 
 test('who the stage close is waiting on shows in the band when the server sends it', async () => {
   const f = await fm.foundingModeFor({
-    getSetting: async (k) => ({ [fm.KEYS.ACTIVE]: { value: 'true' }, [fm.KEYS.STAGE]: { value: 'charter' } }[k] || null),
+    getSetting: async (k) => ({ [fm.KEYS.ENABLED]: { value: 'true' }, [fm.KEYS.ACTIVE]: { value: 'true' }, [fm.KEYS.STAGE]: { value: 'charter' } }[k] || null),
     waitingOnFor: async (stage) => (stage === 'charter' ? ['Avery', 'Jordan'] : []),
   });
   assert.deepEqual(f.waiting_on, ['Avery', 'Jordan']);
@@ -245,20 +245,20 @@ test('waiting-on reads the government port\'s genesis-stage status, sitting stag
     ] }),
   };
   const read = (stage) => fm.foundingModeFor({
-    getSetting: async (k) => ({ [fm.KEYS.ACTIVE]: { value: 'true' }, [fm.KEYS.STAGE]: { value: stage } }[k] || null),
+    getSetting: async (k) => ({ [fm.KEYS.ENABLED]: { value: 'true' }, [fm.KEYS.ACTIVE]: { value: 'true' }, [fm.KEYS.STAGE]: { value: stage } }[k] || null),
     government: gov,
   });
   assert.deepEqual((await read('charter')).waiting_on, ['Avery', 'jordan']);
   assert.equal((await read('scope')).waiting_on, null, 'a passed stage waits on nobody');
   assert.equal(fm.waitingOnFromGovernment({}), null, 'a port without the read offers none');
   assert.equal((await fm.foundingModeFor({
-    getSetting: async (k) => ({ [fm.KEYS.ACTIVE]: { value: 'true' } }[k] || null), government: null,
+    getSetting: async (k) => ({ [fm.KEYS.ENABLED]: { value: 'true' }, [fm.KEYS.ACTIVE]: { value: 'true' } }[k] || null), government: null,
   })).waiting_on, null, 'no government module: the mode still reads, without names');
 });
 
 test('a failing waiting-on source never turns the mode off', async () => {
   const f = await fm.foundingModeFor({
-    getSetting: async (k) => ({ [fm.KEYS.ACTIVE]: { value: 'true' }, [fm.KEYS.STAGE]: { value: 'scope' } }[k] || null),
+    getSetting: async (k) => ({ [fm.KEYS.ENABLED]: { value: 'true' }, [fm.KEYS.ACTIVE]: { value: 'true' }, [fm.KEYS.STAGE]: { value: 'scope' } }[k] || null),
     waitingOnFor: async () => { throw new Error('government down'); },
   });
   assert.equal(f.active, true);

package/tests/genesis_home.mjs

@@ -146,7 +146,7 @@ test('a demo genesis reads in minutes: each stage due minutes after it began', (
 // ── the flow, end to end over fakes ──────────────────────────────────────────
 
 function world({ withGovernment = true } = {}) {
-  const store = new Map();
+  const store = new Map([['genesis.enabled', 'true']]);
   const tasks = {};
   const board = {};
   let now = new Date('2026-10-01T00:00:00Z');

package/tests/provision_settings_apply.mjs

@@ -76,6 +76,7 @@ ${NEUTRAL_PREFIX}_ARTIST_GATE_SINCE=
 ${NEUTRAL_PREFIX}_LOOK_ACCENT=
 ${NEUTRAL_PREFIX}_LOGO_URL=
 ${NEUTRAL_PREFIX}_FOUNDING_BIRTH=
+${NEUTRAL_PREFIX}_FOUNDING_GENESIS=
 ${NEUTRAL_PREFIX}_DEMO_PEOPLE=
 ${NEUTRAL_PREFIX}_DEMO_HOURS=
 ${NEUTRAL_PREFIX}_SHIP_MODE=
@@ -148,7 +149,7 @@ t('settingsEnvVarsFor: the runner pushes the SAME pair webEnvBody writes at stan
     [`${NEUTRAL_PREFIX}_LOOK`]: 'own', [`${NEUTRAL_PREFIX}_NIGHT_TINT`]: 'on',
     [`${NEUTRAL_PREFIX}_LOOK_ACCENT`]: '', [`${NEUTRAL_PREFIX}_LOGO_URL`]: '',
     // the birth marker and a demo's box (task 1004506), empty on an un-stamped row
-    [`${NEUTRAL_PREFIX}_FOUNDING_BIRTH`]: '', [`${NEUTRAL_PREFIX}_DEMO_PEOPLE`]: '', [`${NEUTRAL_PREFIX}_DEMO_HOURS`]: '',
+    [`${NEUTRAL_PREFIX}_FOUNDING_BIRTH`]: '', [`${NEUTRAL_PREFIX}_FOUNDING_GENESIS`]: '', [`${NEUTRAL_PREFIX}_DEMO_PEOPLE`]: '', [`${NEUTRAL_PREFIX}_DEMO_HOURS`]: '',
     // the wizard's ship mode (task 1004629), empty when none was picked
     [`${NEUTRAL_PREFIX}_SHIP_MODE`]: '',
     // where the hall's Update button goes (task 1004608), empty when no hub origin resolves

package/tests/provisioning_settings_env.mjs

@@ -126,7 +126,7 @@ t('settingsEnvVars is the single source both legs derive from — same keys, sam
     CLOUDBONGOS_LOOK: 'own', CLOUDBONGOS_NIGHT_TINT: 'on', CLOUDBONGOS_LOOK_ACCENT: '', CLOUDBONGOS_LOGO_URL: '',
     // The birth marker and a demo's box (task 1004506): empty on a row the create
     // route never stamped, which is every row made before it shipped (spec D8).
-    CLOUDBONGOS_FOUNDING_BIRTH: '', CLOUDBONGOS_DEMO_PEOPLE: '', CLOUDBONGOS_DEMO_HOURS: '',
+    CLOUDBONGOS_FOUNDING_BIRTH: '', CLOUDBONGOS_FOUNDING_GENESIS: '', CLOUDBONGOS_DEMO_PEOPLE: '', CLOUDBONGOS_DEMO_HOURS: '',
     // The wizard's ship mode (task 1004629): empty when none was picked.
     CLOUDBONGOS_SHIP_MODE: '',
   });
@@ -137,7 +137,7 @@ t('settingsEnvVars is the single source both legs derive from — same keys, sam
     X_PLATFORM_VISIBILITY: 'public', X_JOINABILITY: 'apply', X_VISIBILITY: 'public', X_JOIN_GRANT: 'full',
     X_ARTIST_GATE: 'strict', X_ARTIST_GATE_SINCE: '', X_SPEND_PAYER: 'none',
     X_LOOK: 'own', X_NIGHT_TINT: 'on', X_LOOK_ACCENT: '', X_LOGO_URL: '',
-    X_FOUNDING_BIRTH: '', X_DEMO_PEOPLE: '', X_DEMO_HOURS: '', X_SHIP_MODE: '',
+    X_FOUNDING_BIRTH: '', X_FOUNDING_GENESIS: '', X_DEMO_PEOPLE: '', X_DEMO_HOURS: '', X_SHIP_MODE: '',
   }, 'defaults, explicitly');
 });
 
@@ -155,6 +155,10 @@ t('a stamped row carries its birth; only a stamped DEMO carries the box', () =>
   assert.deepEqual([oldDemo.X_FOUNDING_BIRTH, oldDemo.X_DEMO_PEOPLE, oldDemo.X_DEMO_HOURS], ['', '', ''],
     'a demo made before the birth shipped is not born into anything, box and all');
   assert.equal(provisioning.settingsEnvVars({ settings: { founding_birth: 'yesterday' } }, 'X').X_FOUNDING_BIRTH, '', 'a mangled stamp reads as none');
+  // Genesis is paused: only a birth stamped with the genesis key carries the companion (owner, 2026-11-01).
+  assert.equal(provisioning.settingsEnvVars({ settings: { founding_birth: at, founding_genesis: 'on' } }, 'X').X_FOUNDING_GENESIS, 'on');
+  assert.equal(real.X_FOUNDING_GENESIS, '', 'a birth alone, the shape of every project before the pause, does not found');
+  assert.equal(provisioning.settingsEnvVars({ settings: { founding_genesis: 'on' } }, 'X').X_FOUNDING_GENESIS, '', 'the genesis key without a birth is nothing');
 });
 
 t('the stamp can neither leak as a setting nor be written by a client patch', () => {
@@ -172,7 +176,7 @@ t('stampBirth writes the row it is given, once: an existing stamp is kept', () =
   assert.equal(seen.length, 1);
   assert.match(seen[0].sql, /UPDATE provisioning_instances/);
   assert.match(seen[0].sql, /WHERE id = \$1 AND NOT \(COALESCE\(settings, '\{\}'::jsonb\) \? \$2::text\)/, 'write-once');
-  assert.deepEqual(seen[0].params, [41, BIRTH_KEY, '2026-10-01T00:00:00.000Z']);
+  assert.deepEqual(seen[0].params, [41, BIRTH_KEY, '2026-10-01T00:00:00.000Z', 'founding_genesis']);
 });
 
 t('the instance reads the marker into founding.*, and never publishes it to the client', () => {

package/tests/wizard_demo.mjs

@@ -171,7 +171,10 @@ test('a new project is stamped born, once, before its provision intent; an exist
   assert.deepEqual(order, ['birth:41', 'demo:41', 'enqueue:provision'], 'the marker and the demo box are on the row before the runner can read it');
   order.length = 0;
   assert.equal((await post('/provisioning/instances', { slug: 'born-real', hosting_shape: 'byo-host' })).status, 201);
-  assert.deepEqual(order, ['birth:41', 'enqueue:provision'], 'a real project is born too, with no demo box');
+  assert.deepEqual(order, ['enqueue:provision'], 'a real project opens as the full hall: genesis is off by default (owner, 2026-11-01)');
+  order.length = 0;
+  assert.equal((await post('/provisioning/instances', { slug: 'born-test', hosting_shape: 'byo-host', genesis: true })).status, 201);
+  assert.deepEqual(order, ['birth:41', 'enqueue:provision'], 'the genesis toggle still births a test project, with no demo box');
   order.length = 0;
   const again = await post('/provisioning/instances', { slug: 'old-one', hosting_shape: 'byo-host' });
   assert.ok(again.status < 300, JSON.stringify(again.body));
@@ -179,7 +182,7 @@ test('a new project is stamped born, once, before its provision intent; an exist
   const keep = birth.stampBirth;
   birth.stampBirth = async () => { throw new Error('db hiccup'); };
   try {
-    assert.equal((await post('/provisioning/instances', { slug: 'unlucky', hosting_shape: 'byo-host' })).status, 201,
+    assert.equal((await post('/provisioning/instances', { slug: 'unlucky', hosting_shape: 'byo-host', genesis: true })).status, 201,
       'a missed marker costs the project its genesis, never its creation');
   } finally { birth.stampBirth = keep; }
 });