Row 287: record first-review documentation corrections

BUILD-LOG.md

@@ -5536,3 +5536,5 @@ claim. Receipts and limitations in agents/lena/work/queue-296/BUILD.md and run-r
 - 2026-10-24 — steelbeak — #1792 / row 287 C2-21 before: library grants still fork; creative and chief grants refuse. Recovered Megavolt's binding design on 18334d713 and documented current-code delta in agents/steelbeak/work/queue-287/BUILD.md. No tests or implementation yet; Sage holds test clearance, scope delta reported in steelbeak-0001.
 
 - 2026-10-24 — steelbeak — #1792 / row 287 C2-21 after: library grants use admin collaborator PUT, creative write/chief read levels, definition scopes, exact publish-wide reach and kind/level binding; business fence and chief install identity/publish updated; T7/T9 seeds replaced by real minting. Scratch Gitea F-A/F-B pass, F-C owner control negative recorded, F-D normal/force control positive. Verified bus 998, business 283, CLI 989 plus dedicated FED 1 (one expected CLI skip), Docker 2, install 27, all 12 shell gates, M1-M11 killed and restored; token audit hits0 and owned-process/container cleanup clean. Test fixture corrections approved under mos-1590/sage-4139; non-executable land-work launcher rc126 resolved by sage-4141 bash invocation. Evidence and manifest at agents/steelbeak/work/queue-287/; handing off to Boyd, then Dewey, with no live change or landing.
+
+- 2026-10-24 — steelbeak — #1792 / row 287 first-review correction, boyd-0034: frozen candidate c2338ed58 approved, no blocking code findings. Product/test diff-check is clean; the full committed diff has trailing whitespace in preserved raw RED/mutant logs, correcting the earlier unqualified claim. Added verified old-test numstats in BUILD.md as a separate doc-only follow-up under lead137. Queue round1 opened at rev3963; automatic request failed at rev3964 for missing Steelbeak credential, reported to Sage without workaround. No product edits, tests or slot use.

agents/steelbeak/work/queue-287/BUILD.md

@@ -394,3 +394,34 @@ recorded above; F-D force-push observation is positive. No live Gitea or host ch
 Review handoff: Boyd first, Dewey landing review, Sage gate. Base 18334d713; branch steelbeak/row287.
 The review manifest freezes all changed code, tests, logs and these notes (excluding only the
 manifest itself). Commit/push are authorized by sage-4130; review/landing remain separate stages.
+
+## First-review doc-only follow-up (Boyd boyd-0034)
+
+Boyd approved the frozen product candidate c2338ed588b9d54e35ebf628f514cfd8d7321b52 and manifest
+3683b40a32b68163c3ab0430ee0d6a4603c97882bf62e982d33a40058507c2b6 (56 entries), static review,
+no tests or slot use. Dewey received the Q210 landing-review handoff.
+
+Correction to the earlier diff-check claims: plain `git diff --check` checked the then-current
+unstaged changes only. The complete base 18334d713 → frozen candidate diff-check returns rc2 because
+raw RED/mutant evidence logs retain Node assertion formatting with trailing whitespace. The complete
+product/test diff-check returns rc0. Raw evidence is preserved; do not claim the entire committed diff
+is whitespace-clean. This correction changes documentation only and does not rerun or weaken a test.
+
+Old-test numstats, verified with `git diff --numstat 18334d713 c2338ed58` (added/deleted lines):
+
+| Existing test file | Added | Deleted |
+| --- | ---: | ---: |
+| packages/bus/tests/fake-gitea-api.mjs | 13 | 3 |
+| packages/bus/tests/gitea-grant-docker.test.mjs | 127 | 2 |
+| packages/bus/tests/gitea-grant.test.mjs | 155 | 0 |
+| packages/bus/tests/library-credential.test.mjs | 24 | 35 |
+| packages/business/tests/business.test.mjs | 25 | 0 |
+| packages/cli/tests/case2-install.test.mjs | 13 | 0 |
+
+Canonical queue move steelbeak-287-r1-review succeeded at rev3963, round1 on #1792. Its automatic
+review request failed at rev3964 because MOSAIC_GITEA_CREDENTIAL_FILE is unset; this seat has no
+Gitea credential. No substitution or secret access attempted. Sage received the precise boundary
+in steelbeak-0016 and handles the normal lead request/comment route. The test slot was returned.
+
+Per lead decision137, this is a separate doc-only follow-up to the approved candidate. The frozen
+manifest and product/test bytes remain unchanged; the follow-up is not a new product review round.

docs/SESSIONS.md

@@ -1670,3 +1670,4 @@ are never rewritten or removed; corrections are new entries.
 - 2026-10-24 — steelbeak — row 287 C2-21 (#1792), steelbeak/row287 at 18334d713: recovered inherited design and current code; canonical start initially refused assign lock; tests held pending Sage CLEAR, implementation not yet started.
 - 2026-10-24 — steelbeak — row 287 C2-21 (#1792): canonical start steelbeak-287-start succeeded at queue rev 3955; inherited design and sage-4125 recorded, local root/webui npm ci passed, test drafts prepared, production untouched and all tests held pending Sage CLEAR.
 - 2026-10-24 — steelbeak — row 287 C2-21 (#1792), builder complete under sage-4130: collaborator library grants and chief real read mint built; bus 998/business 283/CLI 989+FED1/Docker2/install27/all12 shell gates green, M1-M11 killed/restored, token/cleanup audits clean; preparing steelbeak/row287 push and manifest handoff to Boyd then Dewey, no live change or landing.
+- 2026-10-24 — steelbeak — row 287 first-review follow-up: Boyd approved c2338ed58/3683b40... with two doc-only corrections; append-only BUILD correction distinguishes clean product/test diff from raw-log whitespace and records old-test numstats. Queue round1 open; missing-seat-credential request failure reported to Sage. Frozen product and manifest preserved; no tests or slot use.