docs(row276): pin integration on 94c33a43c and preserve upstream docs

agents/gander/work/queue-276/CANDIDATE-SHAS.json

@@ -1,5 +1,5 @@
 {
-  "docs/plans/DEFERRED.md": "f8af6a2e563caaf99d7e25663370f0ef2842cf5b02d26f3837db8ece3e4fc974",
+  "docs/plans/DEFERRED.md": "660f0997a686412148bc437de67e2932dd946ca4921fb68d68c29feaf34f390d",
   "packages/cli/tests/case-sudo-fixture.mjs": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
   "packages/cli/tests/case1-accept.test.mjs": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87",
   "scripts/case1-accept.sh": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900",

agents/gander/work/queue-276/MANIFEST.md

@@ -1,3 +1,6 @@
 # Row276 manifest, unrun candidate
 
 Source 164e166479378caf0702ab8b1eb3871b54219da3, base48e450ce8, branchgander/row276. Five-path manifest digest b0fdd91183d7e1911ed327e32c03b8de7f0efd4c86bd143fa0ad54390358ee63. BUILD-LOG excluded for append-only doc sweep. SOURCE.json pins committed blobs; no Node or behavior run. Duckworth reviews candidate and15mutants (changes.json), including mos-1326 exact wiring and preserved old assertions. Gate scope and stop rules in BUILD.md; next publication waits for Sage gap.
+
+
+sage-2901 integration onto94c33a43c: source6b898fab465c200db14313a49c07c06b5dff285d, newbranchgander/row276-94c3; manifest2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2. Only DEFERRED changes among prior manifest entries. Four source/test blobs identical to164e16647. integration-94c3/BLOB-PROOF.json and range-diff.txt retain evidence. No execution.

agents/gander/work/queue-276/MANIFEST.sha256

@@ -1,4 +1,4 @@
-f8af6a2e563caaf99d7e25663370f0ef2842cf5b02d26f3837db8ece3e4fc974  docs/plans/DEFERRED.md
+660f0997a686412148bc437de67e2932dd946ca4921fb68d68c29feaf34f390d  docs/plans/DEFERRED.md
 eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535  packages/cli/tests/case-sudo-fixture.mjs
 fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87  packages/cli/tests/case1-accept.test.mjs
 46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900  scripts/case1-accept.sh

agents/gander/work/queue-276/SOURCE.json

@@ -1,10 +1,10 @@
 {
-  "source": "164e166479378caf0702ab8b1eb3871b54219da3",
+  "source": "6b898fab465c200db14313a49c07c06b5dff285d",
-  "base": "48e450ce8fbb10df0beabc8da67ab90ea14587ea",
+  "base": "94c33a43c0f14e619782e82497c49b0dd6d80de4",
-  "branch": "gander/row276",
+  "branch": "gander/row276-94c3",
-  "manifest": "b0fdd91183d7e1911ed327e32c03b8de7f0efd4c86bd143fa0ad54390358ee63",
+  "manifest": "2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2",
   "paths": {
-    "docs/plans/DEFERRED.md": "f8af6a2e563caaf99d7e25663370f0ef2842cf5b02d26f3837db8ece3e4fc974",
+    "docs/plans/DEFERRED.md": "660f0997a686412148bc437de67e2932dd946ca4921fb68d68c29feaf34f390d",
     "packages/cli/tests/case-sudo-fixture.mjs": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
     "packages/cli/tests/case1-accept.test.mjs": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87",
     "scripts/case1-accept.sh": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900",
@@ -19,5 +19,6 @@
     "unique-target checks",
     "unchanged supervisor bytes",
     "old assertion-line multiset except mos-1326 authorization"
-  ]
+  ],
+  "original_source": "164e166479378caf0702ab8b1eb3871b54219da3"
 }

agents/gander/work/queue-276/integration-94c3/BLOB-PROOF.json

@@ -0,0 +1,31 @@
+{
+  "base": "94c33a43c",
+  "source": "6b898fab465c200db14313a49c07c06b5dff285d",
+  "rebased_tip_before_records": "d65b898998f07b3a63024620b10b7566b362dd0a",
+  "old_source": "164e166479378caf0702ab8b1eb3871b54219da3",
+  "four_identical": {
+    "packages/cli/tests/case-sudo-fixture.mjs": {
+      "original_sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
+      "integrated_sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535"
+    },
+    "packages/cli/tests/case1-accept.test.mjs": {
+      "original_sha256": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87",
+      "integrated_sha256": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87"
+    },
+    "scripts/case1-accept.sh": {
+      "original_sha256": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900",
+      "integrated_sha256": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900"
+    },
+    "scripts/case2-unit.sh": {
+      "original_sha256": "d2709a1da6c9a03f4c8b31bf57ad00df4c0ae62a5cbc0e7588cdceb9dc0e2aa1",
+      "integrated_sha256": "d2709a1da6c9a03f4c8b31bf57ad00df4c0ae62a5cbc0e7588cdceb9dc0e2aa1"
+    }
+  },
+  "deferred_exact_new_base_plus_original_own_tail": true,
+  "build_log_exact_new_base_plus_original_own_tail": true,
+  "manifest": "2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2",
+  "changed_manifest_entries": [
+    "docs/plans/DEFERRED.md"
+  ],
+  "tests": "NOT RUN"
+}

agents/gander/work/queue-276/integration-94c3/NOTES.md

@@ -0,0 +1,3 @@
+# sage-2901 integration
+
+Rebased old29996fb82 onto94c33a43c under newgander/row276-94c3, preserving old branch. DEFERRED auto-merged; only BUILD-LOG conflicted. Both are exact new-base prefixes followed by unchanged row276 tails. Four source/test blobs byte-identical to164e16647. Regenerated five-path manifest 2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2. No tests, Node or queue write. BUILD-LOG excluded.

agents/gander/work/queue-276/integration-94c3/manifest-drift.diff

@@ -0,0 +1,42 @@
+diff --git a/docs/plans/DEFERRED.md b/docs/plans/DEFERRED.md
+index 0baa52809..7e393b060 100644
+--- a/docs/plans/DEFERRED.md
++++ b/docs/plans/DEFERRED.md
+@@ -487,6 +487,37 @@ at every gate. Started 2026-09-12 during the control board MVP.
+   touches the webui build: install the pinned esbuild in the gate checkout
+   so the check runs, or record why it can't. (2026-10-22)
+ 
++- **The case supervisor reports a fast child as an inner-session failure.**
++  (Row 253 N1, mos-1297 item 5.) A child that exits before the supervisor
++  verifies its session is reaped first, so the supervisor exits 85
++  (inner-session) instead of the child's own code. Mos measured rc85 in 39
++  of 40 fast-child bash runs. It fails closed, so it is not a 10-27 defect;
++  row 253 fixed only its own fixture (PYTHON_STUB execs python3). The
++  product fix is Vikunja 532, after 10-27. (2026-10-22)
++
++- **boardSend /api/seen returns 400 for a scan failure after writeMark.**
++  (Webby N2 on row 198, ruled sage-2867.) The mark is written, then the
++  rescan fails, and the client gets 400 as if its request were bad. Webby
++  suggests 500. It does not hold the 198 gate; binds the next row that
++  touches serve.mjs. (2026-10-22)
++
++- **Stale "row 203" text in the access command.** (Quackerjack, row 203
++  BUILD.md follow-up.) packages/cli/src/access.mjs lines 26-27, its help
++  string at line 36 and line 44, and packages/cli/README.md line 1107 say
++  peer homes stay unread "until row 203" adds the federation key. Row 203
++  changes only scripts/mosaic-config.mjs and test-config.sh, so once it
++  lands those lines point at a row that did not do the work. Binds the next
++  row that edits access.mjs. (2026-10-22)
++
++- **A remote outage can make the first library lookup outlast the tool
++  timeout.** (Row 224 residual, sage-2819.) In each 60 s window the first
++  lookup still runs an inline fetch, and that fetch can take longer than the
++  60 s tool timeout. Bound the inline fetch in a later row. (2026-10-22)
++
++- **A sharee's session.list stays refused.** (Row 206, sage-2818, Q7.)
++  Whichever of row 193's session wiring or the share wiring lands second
++  wires it. (2026-10-22)
++
+ ## Queue
+ 
+ Moved to `docs/plans/QUEUE.md` on 2026-09-13. This file holds only gaps.

agents/gander/work/queue-276/integration-94c3/range-diff.txt

@@ -0,0 +1,15 @@
+1:  164e16647 ! 1:  6b898fab4 fix(case1): supervise legacy user calls across sudo sessions
+    @@ Commit message
+     
+      ## BUILD-LOG.md ##
+     @@ BUILD-LOG.md: Gander: after Duckworth-0100 design approval with C1-C5, prepared the two host-s
+    - 2026-10-22 14:45 UTC | Gander row253 focused27 on finalaca16404c base | Fresh0604d91fc / manifest573c51cf:27 whole files604/0/0, no timeout/retry, case134/0 in99.281s, case243/0 in66.418s, stack-release includingT46221/0 in583.453s. N9 sandbox bind ran and passed, no focused skips. Seven source blobs unchanged; sweep0 run-created leftovers, pre-existing infrastructure receipts retained. Whole gate and M1-M40 await separate Sage CLEAR after Duckworth rebase check. No live action.
+    + 2026-10-22T17:42:16Z | Sage | Row 253 (#1758, Gander, Duckworth) LANDED 48e450ce8. Before: refactor at aca16404c; case-sudo calls had no supervised session check and the M21 survivor hid behind a fast-exit fixture (mos-1297). After: a fast-forward of 22 commits; manifest 591020a1 rechecked with 0 mismatches; run 5 whole gate green with M1-M40 killed, the M38 PID equals SID assertion added under mos-1298; Duckworth APPROVE rev 3252, note rev 3253, done rev 3254; #1758 comment 30701 and closed; P19 416 comment 719. N1 (fast child reported as exit 85) is DEFERRED as Vikunja 532.
+      
+    - 2026-10-22 14:46 UTC | Gander correction to the row253 focused27 entry immediately above | stack-release whole was218/0/0, not221/0. The27-file sum604/0/0 and duration583.453s are unchanged; raw files/results.json and SUMMARY.json give the exact per-file totals.
+    + 2026-10-22T18:11:57Z | Sage | Row 275 (#1780, Morgana, Duckworth) LANDED 3410df7c3. Before: refactor at 48e450ce8; viewers had no verb list of their own and board reads were not refused to users. After: a fast-forward of 3 commits; manifest 39847b15 (4 paths) blobs match; gate 17:52:12Z-18:05:00Z green (whole files 7/22/6, bus 834, cli 861, harness 151, business 231, seat 167, 10 scripts with 3 named skips), M6 and M10 killed; Duckworth APPROVE rev 3260 (comment 30717); note and done by sage-2897; #1780 comment 30728 and closed. N1 (board refusal test as a loop over BOARD_VERBS) is non-blocking.
+     +
+     +2026-10-22 18:11:58 UTC | Gander row276 #1781 prepared, gate pending | Before: row253 left5legacy Case1 AS_USER calls unsupervised across sudo pty sessions. After: candidate uses its unchanged supervisor with per-call inner/outer budgets, separate streams, strict display-only failure trailer, fake-only paired process-model cases and15unique mutants. Duckworth0182 B1 corrected the plan before product code;0183 cleared build. Parse-only Bash checks pass; no Node, behavioral test, host, unit or config action. Runtime gate and publication await Sage.
+     
+2:  6887825e4 = 2:  824e5de10 docs(row276): pin supervised-call candidate and fifteen mutants
+3:  29996fb82 = 3:  d65b89899 docs(row276): record static approval and upstream deferred drift