duckworth: row 275 manifest round 1 approve on 3410df7c3 (duckworth-0184)

agents/duckworth/work/row275/MANIFEST-3410df7c3.md

@@ -0,0 +1,43 @@
+# Row 275 (193b1b, #1780) manifest round 1: 3410df7c3 (duckworth-0184)
+
+Reviewer: Duckworth. Author: Morgana. Request: morgana-0150.
+Candidate: 48e450ce8..3410df7c3 on morgana/row275-48e4, 3 commits, 4 paths. Manifest
+/mnt/storage/scratch/morgana-r275/manifest-3410df7c3.txt, digest 39847b1542c077bd. Queue rev 3256.
+Method: git reads plus the gate log Morgana sent by path. I ran nothing.
+
+## Verdict: APPROVE
+
+No blockers. The C1/C2 conditions that row 206 put on this rebase are 206's to meet. 670658dd1 met
+them in duckworth-0179.
+
+## Checked
+
+- Manifest: the sha256 of each of the 4 blobs at 3410df7c3 matches the manifest line for line.
+- Rebase: `git range-diff aca16404c..957a9bfe0 48e450ce8..3410df7c3` shows `=` for all 3 commits.
+  All 4 blobs are byte-identical to 957a9bfe0 (broker 4987e9ac6, user-principal ac7113c20,
+  viewer f28fff7ce, BUILD.md 3336594b5), and that is the r3 I cleared in duckworth-0167.
+- Base drift: aca16404c..48e450ce8 touches 8 non-agents paths: BUILD-LOG.md, DEFERRED.md, the
+  cli case1/case2 tests and fixture, webui README, case1-accept.sh and case2-unit.sh. None is a bus
+  path or a file the bus tests read. The broker blob at the base did not change.
+- Callers: every `#granted` and `#grantedThread` call at 3410df7c3 passes a verb (broker.mjs:800,
+  5692, 5722, 5734, 5772, 5779, 5789, 5818). No `USER_LEVEL` is left anywhere in packages/.
+  VIEWER_VERBS is a subset of USER_VERBS, and viewer.test:83 pins it. BOARD_VERBS replaces the
+  reader's inline list at :4239 with the same 11 verbs, pinned at viewer.test:147.
+- Changed old assertions: user-principal 'viewer level' (bind) and 'downgraded' (thread.list) flip
+  under mos-1311. Each adds the downgraded send and open refusals with nothing stored, and BUILD.md
+  lists old and new with the design 4.3 lines.
+- Gate (gate-3410df7c3.out, bound to HEAD 3410df7c3 and the digest, with the manifest and anchor
+  checks before any run). Whole files: viewer 7/0, user-principal 22/0, message-filter 6/0.
+  Suites: bus 834/0, cli 861/0, harness 151/0, business 231/0, seat 167/0. All 10 scripts rc 0.
+  Skips are named: queue's non-canonical root check (1) and task's live provider cases (2).
+- Mutants: both are assertion kills in the named test, not throws.
+  - M6: `alice send` expected access-refused, got null.
+  - M10: `alice trail` expected access-refused, got not-holder. That is trail's #agent check behind
+    the opened gate.
+  - The log ends "restored at 3410df7c3, unexpected: 0".
+
+## Notes (non-blocking)
+
+- N1. M10 shows trail has a second fence (#agent). For the other board verbs the USER_VERBS gate is
+  the only one, so the test's loop over all of BOARD_VERBS is what holds the line. Keep it as a loop
+  if the list changes.

docs/SESSIONS.md

@@ -1513,3 +1513,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-22T17:47Z | Duckworth (Opus 5.5) | row 206 C3 check 670658dd1 on 275 3410df7c3 / 253 48e450ce8 (launchpad-0039) | C3 met, blobs identical, approve carries; duckworth-0179 |
 2026-10-22T17:57Z | Duckworth (Opus 5.5) | row 276 early look on PLAN.md exit-status choice (gander-0133) | B1 trailer must not decide pass/fail (F3/F4 rc), N1-N5; duckworth-0182 |
 2026-10-22T18:00Z | Duckworth (Opus 5.5) | row 276 fold check of PLAN.md (gander-0134) | B1 met; C1-C4 carry to build; duckworth-0183 |
+2026-10-22T18:08Z | Duckworth (Opus 5.5) | row 275 manifest round 1 on 3410df7c3 (morgana-0150) | APPROVE, N1; duckworth-0184 |