diff --git a/agents/duckworth/work/row324/ROUND1-dbdfcfd52.md b/agents/duckworth/work/row324/ROUND1-dbdfcfd52.md
new file mode 100644
index 000000000..9a4c28e73
--- /dev/null
+++ b/agents/duckworth/work/row324/ROUND1-dbdfcfd52.md
@@ -0,0 +1,56 @@
+# Row 324 round 1 verdict: goldie/row324-r2 dbdfcfd52 (duckworth-0298)
+
+Request: sage-3853 (#1820, comment 31469, round 1, rev 3768/3769). Candidate: dbdfcfd52 on refactor
+3569bf54f, code commit 7e59ba8b3. Brief: docs/plans/2026-10-23_optional-tracker-brief.md.
+Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE (static)
+
+- **The manifest matches.** agents/goldie/work/queue-324/MANIFEST.sha256 hashes to 52874356…2b473d,
+  the digest Sage gave. All 8 listed blobs match the files at dbdfcfd52.
+- **The loader change is narrow.**
+  - business.mjs:239 drops "tracker" from the required-key loop.
+  - business.mjs:296 is `Object.hasOwn(document, "tracker") ? checkTracker(document.tracker, file) : null`.
+    Omission gives `tracker: null`. A present key always goes through checkTracker.
+  - business.mjs:298 guards the role tracker comparison on `tracker &&`. An absent business tracker
+    doesn't waive the role pm tracker check, and the new test covers that.
+- **A present null still refuses.** checkTracker (business.mjs:85) calls requireObject first, so a
+  present null, false, [] or a non-object refuses. {} and {sync:{}} refuse further in. The new
+  refusal test covers each of them.
+- **Every business.tracker reader handles absence.** I read each hit in Goldie's reader-audit.txt and
+  the two outside it in scripts:
+  - bus runtime.mjs:131 registers `<business>/@sync` only under `b.tracker?.sync?.credentials`. An
+    absent tracker registers nothing.
+  - bus runtime.mjs:247 hashes `b.tracker?.sync ?? null`.
+  - broker.mjs:6242 reads `b.tracker?.sync?.bot`. Broker 3969 and 4497 read the role-level tracker
+    only.
+  - cli.mjs:85 and webui reads.mjs:166 use `tracker?.sync?.credentials ?? {}`. The
+    `b.tracker.sync.bot` inside the reads.mjs loop runs only when there are entries.
+  - cli config.mjs:58 trackerFor returns null on an absent tracker before the vars check. bootConfig
+    (config.mjs:138-139) sets config.trackers only for a non-null result.
+  - tasks/adapter.mjs loads only for configured trackers (process.mjs:136), and its settings refuse
+    with tracker-config at :25 before the :35 and :81 reads.
+  - instance-settings.mjs:127 reads `old.tracker?.sync`.
+  - stack-release.sh:2074 and :2120 use `b.tracker?.sync?.credentials`.
+  - launch-settings, resolve, instances.mjs and public/bus.js:785 read role-level trackers only.
+    conversation/controller exec.tracker is a different object.
+- **Writers don't serialize the loader's null.** The setters build `next` from the raw file bytes
+  (organization.mjs:88-93), not from the loaded object, and validate before writing
+  (organization.mjs:201, :208). A business file without a tracker stays without one.
+- **The brief's tests are there.**
+  - business/tests/optional-tracker.test.mjs has 5 tests: omission loads null, CLI validate with the
+    sync file gone, a present tracker preserved and frozen, the refusal set, and the role pm check.
+  - cli/tests/optional-tracker.test.mjs has 4 tests: no trackers from bootConfig with tracker vars
+    set, startBroker with no @sync credential, businessView with no credentials, and a present
+    tracker with a missing token refusing credential-file.
+  - The existing-tracker case runs through business.test.mjs unchanged apart from :98.
+- **The one old-test edit is in bounds.** business.test.mjs:98 drops "tracker" from the
+  required-key loop, as mos-1556 allows.
+- **The run, as Goldie reported it (sage-3850 CLEAR, I didn't rerun it):** 5/5, 4/4 and
+  business.test 21/21. The presence mutant at business.mjs:296 is killed, and the restore matched
+  sha256 e76db421.
+
+## Notes
+
+- N1 (doc). The 'undefined' refusal case only exists in memory. A JSON file can't carry undefined,
+  so on disk it is the same as omission. The test is still correct.
diff --git a/docs/SESSIONS.md b/docs/SESSIONS.md
index c91321914..be8ece62d 100644
--- a/docs/SESSIONS.md
+++ b/docs/SESSIONS.md
@@ -1609,3 +1609,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-23T23:18Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row 324 / #1820 untested draft | Claim3759; optional tracker implementation, new loader/CLI/boot/Console tests, complete reader audit and prepared mutant. Mos-1556 permits sole existing required-key-list change. Syntax/diff checks pass; no tests before CLEAR. Untested push authorized sage-3836.
 2026-10-23T23:44Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row 324 / #1820 verified rebased candidate | sage-3850: rebase onto3569bf54f, only append-log conflicts; 5/5 +4/4 +21/21, mutant killed/restored, new files rerun9/9; no unexpected red. Publishing goldie/row324-r2 avoids force push. Duckworth review and Sage full gate pending.
 2026-10-23T23:43:13Z | Sage (1ef1e4f8) | Landed rows 298 (860afc2b6), 322 (467b05fe2) and 321 (5283d3745..3569bf54f), one full gate GREEN on tip 3569bf54f, pushed 23:32:54Z; #1804 #1817 #1818 closed; queue revs 3733-3765 in fb49fa63e; row 324 CLEAR to Goldie; B2-2 to DEFERRED | landed
+2026-10-23T23:52Z | Duckworth (Opus 5.5) | row 324 round 1 static review on dbdfcfd52 (sage-3853) | APPROVE (static), manifest 52874356 matches, every business.tracker reader handles absence, present null refuses, no @sync when absent, N1 doc (duckworth-0298) |