Governance

HOURLY-BILLING-1: three named queries, capped, under CAP-1

SEED-INDEX-1, the two-object public bucket, and ONE-PLACE-1 across all families

STAMP-RENDER-1 and RETAIN-1: the line lands in an existing column, and no crawler keeps a body again

TD-MM-135 ratified as narrowed with the one-token limb restored on a CITED list; TRAILER-1; the standing word extended to image rebuilds; TD-MM-125 assigned with a deadline

STALE-EVIDENCE-1: the copyright year is admissible as one line; the Last-Modified pass is not run; and the JSON-LD conditional resolves NO

LEDGER-PUBLIC-1: the estate's governance publishes as a redacted projection, and the redaction gate is a refusal

FRESHNESS-1: date evidence is admissible, the HEAD sample is authorised, and an old stamp says the PAGE is unmaintained and not that the BUSINESS is

BRAND-DIRECTION-1: ENGINE-ROOM-1 is the brand; the theme is re-skinned to it

SECRET-EXCEPTION-1: option D is ruled, and the way in is hardened

VITALS-2 amended: ABSENT means only "never measured"; a dead producer HOLDS

BATCH-ONE-1580 and VARIANT-MAP-1: batch one is 1,580, and the version map is ruled rather than inferred

VITALS-2

DEMO-HOLD-1, the two ruling closures, and the pre-cutover rollback target

R1-STATE-1: NULL is "not measured"; PASS B is RUN; hostnames are normalised before any fetch

OWN-HOST-1: one place per host or the place does not enter a campaign; register writes go through a keyed helper

SHARED-HOST-1: pass B probes own-host targets only; a shared host is a directory_page, not a website

REDIRECT-1, and TD-MM-119's label

NUMBERS-1 WITHDRAWN IN FULL

INCIDENT-STATUS-1 and NUMBERS-1 (re-issued)

IDENTICAL-1 amended, and UNIT-SPAN-1

nothing screens the screener: 1 of 9 control inputs asserts its own integrity

NON-BLOCKING · governance · control-integrity

I verified a shared artefact by comparing it to my own upload, and reported the result as convergence

NON-BLOCKING · measurement method

SEED-INDEX-1 says rebuild when seed_v2 changes, and has no branch for the RULE changing — both seats rebuilt independently today

NON-BLOCKING · governance · cross-seat

the shared redaction index was not byte-reproducible across seats, and its header carried another machine's home path into cloud storage

NON-BLOCKING · instrument · cross-seat

the tranche proof cannot run: SEND-CADENCE-1 does not exist and neither does a pause mechanism

BLOCKS-SEND · send-class

IDENTICAL-1 could not run at all, and it exited 2 rather than lying about it

NON-BLOCKING · instrument · release-gate

three crawls in a row discarded the page body, and the third was measured against a ruling that asked for it

NON-BLOCKING · data retention

IDENTITY-1's Seat line is not a git trailer, and 83% of them are invisible to any tool that asks git for one

NON-BLOCKING · governance · instrument

the seed-name limb is narrower than D-MM-085 says, by measurement, and the narrowing is declared not hidden

NON-BLOCKING · governance · gate-honesty

vitals.json publishes a filesystem path on purpose, and the redaction gate will refuse it the day a repo goes missing

NON-BLOCKING · instrument · publish-surface

the birth budget is the one figure a session sizes birth by, and it is 2.9x low

NON-BLOCKING · instrument · context-economy

eight BigQuery tables have no creator in git, and one of them is load-bearing in 18 files

NON-BLOCKING · data · provenance

the net line cannot see 76% of this estate's closures, and it was built to see them

NON-BLOCKING · instrument · register-honesty

I changed a function's return arity, updated one caller, and broke the send interlock

NON-BLOCKING · tooling · regression

deploy.sh raced Cloud Run against Firebase and produced a half-deploy, twice

NON-BLOCKING · tooling · deploy

`design_tokens.py` serves the RETIRED doorway's palette, and the live theme is still the vendor's

BLOCKS-SITE · design · brand-integrity

the vendor's social card shipped for a week and reached a real prospect

BLOCKS-SITE · website · vendor-fiction

the producer's first execution succeeded and silently downgraded the estate's own instrument

NON-BLOCKING · producer · gate-honesty

resolving an append-only register conflict by slicing the markers orphaned a status line

NON-BLOCKING · governance · merge

I reported an unmeasured NULL as a measured zero, in the report that carried the thesis number

NON-BLOCKING · reporting · honesty

a missing input column made 4,298 crawl rows that look exactly like 4,298 dead businesses

NON-BLOCKING · tooling · silent-miss

one file, three writers: two fixes looked like enough and the door stayed shadowed

NON-BLOCKING · build · provenance

no seat can read or write Search Console: the ADC token has no `webmasters` scope

NON-BLOCKING · access · measurement

the live-only code paths have no control, and cannot get one without deploying

NON-BLOCKING · control · positive-control

deploy.sh's LIVE branch was broken and had never been executed; it failed on Charlie's word

NON-BLOCKING · tooling · deploy

Neither crawl can evidence R1's first two states: no form discovery was ever recorded

BLOCKS-SEND · measurement · send-class

the crawler crashes on a URL containing a zero-width space, and writes it as a crawl verdict

NON-BLOCKING · tooling · data quality

the same test SHARED-HOST-1 rules on finds 255,341 places estate-wide, and the ruling is scoped to 4,298

BLOCKS-SEND · send-class · data truth

a closure appended to the end of the ledger closed the wrong record, and the census reported identical totals either way

NON-BLOCKING · governance instrument

550 of the 4,298 probe targets share a host, so a contact-path probe asks the platform and not the business

BLOCKS-SEND · send-class · data quality

TD-MM-090 REOPENED: closed 2026-09-03, fired three times today, and a linter cannot reach it

TD-MM-141: the site-check signing key has one copy, and this project already has a ruled home

TD-MM-140: nothing screens the screener — 1 of 9 control inputs asserts its integrity

TD-MB-141: my verification compared my own upload to my own file, passed, and was worthless

Merge remote-tracking branch 'origin/main'

The shared index carried another machine's home path into a bucket (TD-MM-138 closed)

The index converged, the Mini fixed two defects in my code, and a fourth ask arrived after the reduction

Merge origin/main — third append collision today, same deliberate resolution

STAMP-RENDER-1 (D-MB-084): the line renders, and IDENTICAL-1 could not run until today

FLOW-1: campaign_view gains both held classes; live gate PASSES; item 3 REFUSED, its premises do not exist

Merge origin/main — SEED-INDEX-1 and the rule stamp are ONE control, not two

TD-MM-125 CURED — and the row had the cause wrong

D-MM-086: the index carries the rule it was built under, and a stale one now REFUSES

SEED-INDEX-1 built and fetched; both vitals objects land; the gate caught a producer defect

D-MM-086: the cited-list limb, TRAILER-1, and the real TD-MM-125 cure

D-MB-084 filed; the 9 named and the premise corrected; RETAIN-1 built with controls

Untrack the generated projection — its sibling is ignored and it must match

LEDGER-PUBLIC-1: final staging state after the merge

Merge origin/main — TD-MM-127's exact shape, resolved deliberately and verified

LEDGER-PUBLIC-1: live run staged, staging receipt filed, TD-MM-125 annotated

LEDGER-PUBLIC-1 item 7: date-order the projection, screenshots, staging proven

LEDGER-PUBLIC-1 item 5: the door — and the staged job did NOT already carry it

D-MB-083 STALE-EVIDENCE-1 filed; the conditional in it resolves NO; the gate is now a pour step

LEDGER-PUBLIC-1 items 3-6: /governance/, the feed, the door, and the gates green

LEDGER-PUBLIC-1 items 1+2: the projection and the redaction gate, proven both ways

D-MM-085 filed verbatim: LEDGER-PUBLIC-1 + its directive, relayed 2026-09-05

TD-MM-133 filed at birth: the context budget is 2.9x low and does not count itself

HANDOVER step 6: four lines rewritten until they stand alone

HANDOVER step 5b: the census anchor, read after the push

HANDOVER 2026-09-05 · Mac mini — the website is live, and two instruments were found lying

FRESHNESS-1: the copyright stamp is the evidence, Last-Modified is not, and the honest check is now a gate

Four render tests sent and QC'd by Charlie; TD-031 half-satisfied, not closed; TD-MB-138 filed

TD-MB-133 and TD-MB-137 closed with controls; TD-MB-134's MacBook half built and proven

TD-MB-105 CLOSED — the crawl it asked for exists, and it was run

TD-MM-129 CLOSED: origin measured against every preview crawler; the cache is Charlie's word

The chosen card is live on callcharlie.io

The card: option 3's text and portrait on Signal's bled gauge (Charlie's pick)

D-MM-084: social-card canvas — four directions in the ruled language, each carrying the Author

D-MM-084 BRAND-DIRECTION-1: ENGINE-ROOM-1 ruled the brand; both agreed fixes built

TD-MM-130: design_tokens serves the retired doorway, and the live theme is still the vendor's

TD-MM-129: the vendor social card is off the apex, and a gate now looks inside images

IMAGE-FICTION-1: the vendor's social card has been shipping since the theme import

VITALS-2 producer is live in GCP: hourly, keyed from Secret Manager, guard proven both ways

VITALS-2 producer: run the CLONE's tooling, and guard against a poorer snapshot

D-MM-083 executed on Charlie's delegation: two keys, two secrets, audit proven

D-MM-083 SECRET-EXCEPTION-1: option D ruled, and the way in is hardened rather than claimed safe

VITALS-2 IS LIVE — /vitals.json served from the bucket on the apex, proven two ways

deploy.sh: the retry was on the preview branch only, and the LIVE branch is where it matters

D-MM-082 reaffirmed; pre-cutover rollback target recorded for the VITALS-2 live run

Merge origin/main (14 commits) — resolved by record, and the census caught what I broke