docs(records): row 25 live check passed, SetSpark approver gap has no owner

Co-Authored-By: Claude Opus 5.5 <[email protected]>

BUILD-LOG.md

@@ -3180,3 +3180,15 @@ an extra parameter 400 and POST 405. The Console that shows it is next.
 
 Gate F (136958c9) was committed after this, on Filbert's approval of
 Darkwing's build; Darkwing's two entries above record it.
+
+## 2026-09-26: row 25 live check passed (#1509, Sage, Jason)
+
+Jason reran the approval check against 20ea5a0b and reported success. The
+approvals log has the full sequence for DEC-010 v1, approval request 2,
+with one approver. The request opened and was bound to its Discord message
+at 21:33:36Z. Jason's button approval was recorded at 21:38:58Z, intent
+then done. The connector did not restart (PID 954332). DEC-009's request 1
+never opened on the Discord side, as expected. Row 25 is live: records,
+approval request, button, and the approval recorded in SetSpark. The
+service-side approver validation gap went to the SetSpark lead (see
+DEFERRED).

docs/SESSIONS.md

@@ -400,3 +400,4 @@ are never rewritten or removed; corrections are new entries.
 2026-09-26T21:37:07Z | Sage (T3 Claude Code, thread 1ef1e4f8) | #1507 CHAT-02 backend commit and board restart | a5beb6d9 pushed (Filbert R2 3b14d66c, Darkwing routes R2 b9d92003); board PID 1042473 from 21:36:29Z, new routes live and guarded.
 2026-09-26T21:37:18Z | Filbert (T3 Claude Code, thread 9cb9731e) | #1506 Gate F build code review | Manifest ba73a163 (five pins and build.patch dc4cf73e verified in a clean 1c5f6bc3 worktree): approve, U+2028 reader fix approved separately. Ledger 47/47; live read exit 0, 1.6 s, no conflict. Four nonblocking notes (U+2029 and line counts, two untested diagnostic paths, catch-all label, snapshot test). Review e47ec6da. Reported to Darkwing and Sage. No commit or push.
 2026-09-26T21:40:23Z | Sage (T3 Claude Code, thread 1ef1e4f8) | #1506 Gate F commit | 136958c9 pushed (Darkwing build ba73a163, Filbert e47ec6da); follow-up notes 1-3 to Darkwing, then A1.
+2026-09-26T21:42:17Z | Sage (T3 Claude Code, thread 1ef1e4f8) | #1509 row 25 live check | Jason's button approval passed (DEC-010 request 2, 21:38:58Z). Approver validation gap sent to the SetSpark lead (ac03938d), who does not own shared-signals; owner and DEC-009 go to Jason. Lead decision 19.

docs/plans/2026-09-26_lead-decisions.md

@@ -218,3 +218,8 @@ which stay with him. Each item names who decided it and what happened.
     had been refusing on HEAD because of that line split, and it reads
     again. Darkwing does Filbert's notes 1 to 3 as a small reviewed
     follow-up, then queue-as-data A1. Note 4 is in DEFERRED.
+19. **Row 25 live check passed.** Jason reported the button approval
+    worked: DEC-010, request 2, approved at 21:38:58Z, confirmed in the
+    approvals log. Jason named the SetSpark lead (T3 thread ac03938d), and
+    Sage sent the approver validation request there. Mosaic needs no
+    further change.

docs/plans/DEFERRED.md

@@ -121,6 +121,19 @@ at every gate. Started 2026-09-12 during the control board MVP.
   an approval is tried. Mosaic's connector now writes only `discord:<id>`
   (20ea5a0b), but the service should refuse other shapes. This belongs to
   shared-signals, not Mosaic. Reported to Jason. (2026-09-26, #1509)
+  2026-09-26, before 21:41Z: at Jason's word, Sage sent it to the SetSpark lead
+  (T3 thread ac03938d). The message covers validating approvers on create
+  and update, what to do with DEC-009 and its open request 1, and a notice
+  before any change to the approver contract. The SetSpark lead replied:
+  they do not own it. setspark-api is built from shared-signals
+  `stack/api` and runs on VM 1022, and their rules keep them out of both.
+  Their read-only pointers: `setspark_api/service.py` 353 (the create and
+  update check, using `evidence()` at 152) is where the `discord:` plus
+  17 to 20 digits rule and the 1 to 16 bound go, with a 422
+  `invalid_record`. `add_approval` compares at 645, and `_discord_ids` at
+  567 strips the prefix for the view. Stored rows such as DEC-009 need a
+  check too. They passed the owner question and DEC-009 to Jason. No owner
+  yet.
 - **Index-export suite runs leave Docker networks behind.** Each export
   directory becomes a compose project, and its `<dir>_default` network
   stays after the run. On 2026-09-26 the host ran out of address pools. The