diff --git a/agents/megavolt/work/queue-287/BUILD.md b/agents/megavolt/work/queue-287/BUILD.md
index bb148f78e..ff5b64de8 100644
--- a/agents/megavolt/work/queue-287/BUILD.md
+++ b/agents/megavolt/work/queue-287/BUILD.md
@@ -106,6 +106,11 @@ notes for 285, not for this row:
 - Settled (sage-2950, 19:06Z 10-22): 285's gate runs the bus suite whole (sage-2946), and Scrooge has the
   role.mjs no-scopes check. Dewey withdrew dewey-0865 (dewey-0867). Mos withdrew the mos-1332 item 3 publish
   fence (mos-1333), so business.mjs stays out of 285's files and sage-2916 stands as written.
+- Correction (sage-2958, Scrooge): role.mjs refuses `{"service": "gitea"}` with no scopes
+  (checkGiteaScopes :100-111, util.mjs:42); only a host entry may omit them (:134). So 285's entries name
+  their scopes, equal to SEAT_SCOPES (sage-2915). The chief-of-staff.json readers are seven, not five: add
+  host-run and reload. 287's tests that build definitions give gitea entries `scopes: ["read:user",
+  "write:repository"]`.
 
 ## 2. The change (proposed)