deferred: Filbert's row 240 N1 and N2 (29945, #1746); 10-24 window draft Q1 takes the mos-1161 ruling

agents/sage/work/window-plan/repin-1024-draft0.md

@@ -76,8 +76,11 @@ history unless the window fails.
 
 ## Open before draft 1
 
-- Q1: NEW is c771a36f4 (234 landed). 237 landed and is in. Does 194 go in if it lands first? I'd ask Mos,
-  since 194 changes the lifecycle verbs and roles/chief-of-staff.*.
+- Q1, ruled by mos-1161: draft 1 doesn't wait for 194. NEW is the latest code landing when I cut draft 1. If
+  194 has landed with a green full gate (15 packages, ten script suites), NEW is the 194 landing and P3 also runs
+  the lifecycle verbs once on the backup copy and gets one pm reply under the new roles/chief-of-staff files. A
+  P3 failure that traces to 194 drops NEW back to c771a36f4 before anything touches live, and the window goes on.
+  Otherwise NEW is c771a36f4 and 194 rides a later window.
 - Q2, settled by mos-1148: phase 2 is its own window on 10-23. Draft 1 takes OLD and the Console flags,
   `--sso` included, from `status` after that window.
 - Q3: who operates. If Darkwing is free, Darkwing operates and I check. Otherwise I operate as in the last

docs/plans/DEFERRED.md

@@ -238,6 +238,27 @@ at every gate. Started 2026-09-12 during the control board MVP.
   lands, as a follow-up row or in the next row that edits role.mjs.
   Webby N1 on row 213 r3 (REVIEW-r3.md, 3ab3c010b), mos-1160.
   (2026-10-21)
+- **The boot host check orders only one business's bus.**
+  `mosaic-hostcheck.service` (row 240) has
+  `[email protected]`. `case2-unit.sh` enables the
+  bus as `mosaic-bus@<business>.service`, so on a host whose business id
+  isn't `mosaic-stack` nothing orders the two. The bus can start before
+  the boot stop runs, and after a boot-time drift role sessions can use
+  bwrap until it does. The fix: `After=mosaic-hostcheck.service` in
+  `packages/cli/systemd/mosaic-bus.service.in`, which orders every
+  instance and does nothing where the unit isn't installed. It goes in
+  before the first install whose business id isn't `mosaic-stack`.
+  Filbert N1 on row 240 (29945, #1746). (2026-10-21)
+- **The run sheet writes the apt hook before the first `--check`.**
+  Section 4 installs `80mosaic-hostcheck`, then runs
+  `hostcheck.sh --check`. If that check fails, the next package run
+  closes bwrap before anyone has read the failure. It fails closed, but
+  it surprises an installer. The fix: run `--check` first, or say what a
+  failure at that step means. Doc-only, for the next row that edits
+  `docs/guides/host-run-sheet.md`. Filbert N2 on row 240 (29945, #1746).
+  Filbert's N3, that a closed bwrap appends to `DRIFT` on every later
+  apt run and boot, is by design; ops-01's STATE read should expect the
+  repeats. (2026-10-21)
 
 ## Queue