webby: row 288 manifest review round 1 on 21bf30db6; and session line

agents/webby/work/queue-288/REVIEW-manifest-21bf30db6.md

@@ -0,0 +1,43 @@
+# Row 288 (C2-02, #1793) manifest review, round 1 on 21bf30db6
+
+Webby, 2026-10-25. In-review rev 4104. Candidate: manifest digest
+5bc9345d185fa41dfc982d7143c250c2438d711fd7d124a659a0eff1bcccb621, 23 paths at
+21bf30db6709f280ed8cc8684aa81354ed19a25b, base 78b69e1e6. Brief `docs/plans/2026-10-20_case2-rows.md`
+C2-02 (blob 85e6fe2e). Git only: I ran nothing and read nothing from Bubba's worktree or scratch.
+
+## Verdict: APPROVE
+
+## What I checked
+- **Manifest.** I recomputed it from git: `sha256(blob)  path` for each file, in
+  `git diff --name-only 78b69e1e6 21bf30db6` order. That gives 23 lines and digest 5bc9345d…, the same as
+  Bubba's. 21bf30db6 adds receipts only: `git diff 2848d832e 21bf30db6` touches BUILD-LOG.md, BUILD.md,
+  the gate TSV and summary, and SESSIONS.md.
+- **Code.** The r3 conflict resolutions are covered by the early look
+  (`EARLY-r3-8a47c462a.md`, no blocker, N1-N3). The three gate fixes are read in
+  `PREP-r6-21bf30db6.md`:
+  - 7932c979a: bare delete through `update-index -z --index-info`. Correct.
+  - 4fb11e74a: `bare.context.dataRoot` replaces `bare.dataRoot`, which was undefined. Adds the
+    `gitea_users` fixture row and tightens the `lines` assertion.
+  - 2848d832e: fixture only, the creative `credentials.gitea` that row 285 requires.
+- **Gate receipts against the brief's Gate.** Summary: 2605 tests, 2604 pass, 0 fail, 1 skip. The skip is
+  the FED R7 test, covered by its dedicated runner. Per-package file counts match the tree at 21bf30db6:
+  library 13, bus 116, harness 16. All 12 `scripts/test-*.sh` in the tree are listed at rc 0. Six mutants
+  were killed (rc 1) and their restored controls are rc 0. The brief names two of them: the missing
+  supporting check (M1) and a push with `+` (M2). Both are present. BUILD.md:487 records 0 fixture-token
+  hits over the captured logs.
+- **Contract names.** The typed write tools are `library_doc_write` and `library_doc_delete`, the names
+  the six creative contracts already use (`roles/companion.md:44`), so no role change is needed.
+- **Drift to refactor 775bbe236** (row 214 and the 193 design docs). Only BUILD-LOG.md and
+  docs/SESSIONS.md are shared, and they're the only merge-tree conflicts. Both are append-only, so keep
+  both sides. No 214 test, pin or measure script names a 288 path.
+
+## Notes (none blocks)
+- N1-N3 from the early look stand, as Bubba's request states them:
+  - N1: the stale baseline title, under mos-1523's narrow +4/-4.
+  - N2: librarySave is the adapter only; the route belongs to C2-11b.
+  - N3: the omitted sync comment.
+- N4: `write.mjs` writes the removal with a 40-zero object id, which assumes SHA-1. The mirror is
+  `init --bare` with no `--object-format`. Deriving the id length from `rev-parse --show-object-format`
+  would remove that dependency.
+- I took the gate receipts as recorded. The brief puts the run on Sage's gate, so whether Bubba's
+  slot-run counts as that is Sage's call.

docs/SESSIONS.md

@@ -1552,3 +1552,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-25T04:49:49Z | Webby (Opus 5.5, reviewer seat) | row 255 design review round 1 on c8f2bc723 (#1760, comment 31688) | APPROVE; N1 /setup closure and N2 terminal-only link bind P4; N3-N8 notes; agents/webby/work/queue-255/REVIEW-design-c8f2bc723.md
 2026-10-25T04:54:45Z | Webby (Opus 5.5, reviewer seat) | row 288 r6 manifest prep on 21bf30db6 (bubba-0035) | digest 5bc9345d reproduced from git; 214 drift is append-only logs only; formal round waits for the request
 2026-10-25T04:55:22Z | Webby (Opus 5.5, reviewer seat) | row 288 r6 gate-fix delta static read (7932c979a, 4fb11e74a, 2848d832e) | no blocker; SHA-1 zero-id note; appended to PREP-r6-21bf30db6.md
+2026-10-25T05:00:46Z | Webby (Opus 5.5, reviewer seat) | row 288 manifest review round 1 on 21bf30db6 (manifest 5bc9345d, rev 4104) | APPROVE; N1-N4 notes; git only