docs(plans): lead decision 43, Jason's first foundation rulings

Vikunja integrate, first roles agreed, Pocket ID recorded as an SSO
candidate, row 32 parking advised.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

docs/plans/2026-09-26_lead-decisions.md

@@ -614,3 +614,27 @@ which stay with him. Each item names who decided it and what happened.
     Queue ops ran on the working tree's `queue.mjs`, which carries Rocko's
     unreviewed row 31 change. That change only adds refusals, and none of
     these ops hit them.
+43. **Jason's first rulings on the foundation direction (2026-10-04).**
+    Sage proposed `docs/plans/2026-10-04_foundation-direction.md` after
+    Jason rejected the KPI line of work. Jason's answers in thread
+    1ef1e4f8:
+    1. Ratifying the direction: "Where are these located? I will review.
+       Or you grill me with intelligent suggestions." Not ratified yet.
+       Sage put the choices inside it to him as lettered questions.
+    2. Vikunja: "integrate". Mosaic Stack reaches Vikunja through its API
+       behind a task interface. No Vikunja code enters the repository.
+    3. Row 32 (ledger guideposts): "advise or grill me". Sage advised
+       parking it. Only Jason parks, so the row stays queued until he
+       says so.
+    4. First roles: "agreed". PM, CTO, coder and reviewer for Mosaic
+       Stack. The role schema can declare CEO, CFO and the others, but
+       none is instantiated until a business needs it.
+    Jason also named Pocket ID as a candidate for integrated SSO ("working
+    very well for SSO for my SetSpark project"). Facts Sage checked: Pocket
+    ID is an OpenID Connect provider with passkey-only sign-in, under the
+    BSD 2-Clause license. That makes it a fit for people signing in. Agents
+    can't use passkeys, so roles still need their own service tokens.
+    Recorded as a candidate, not adopted.
+    On measuring, Jason: "Good metrics. We can measure against that. The
+    failures cause introspection and repair." That refers to slice 1's
+    logged events taking the place of hand tagging.

docs/plans/2026-10-04_foundation-direction.md

@@ -238,3 +238,14 @@ a time, which is what Jason described.
   invariant question for later, and it doesn't block the PRD interview.
 - Which roles a business must declare, and which are optional.
 - Whether Sage holds PM or CTO for Mosaic Stack once roles exist.
+
+## Rulings so far
+
+Recorded in full as lead decision 43, 2026-10-04.
+- Vikunja: integrate through its API. No code annexed.
+- First roles: PM, CTO, coder and reviewer.
+- Row 32: Sage advised parking it. That waits on Jason's word.
+- Pocket ID: candidate for people's SSO. Agents still use service tokens
+  per role.
+- The direction itself isn't ratified yet. Sage put its choices to Jason
+  as lettered questions.