darkwing: re-pin windows 86f95bb27 and 84f53540d (row 264a, 3j to 3l). STATE.md, run notes, step scripts and transcripts, Mos's P3 rehearsal transcripts and the W11 comment bodies; Gitea comments 30668-30673 posted; docs and transcripts only (sage-2703, mos-1296, sage-2760)

2026-10-22 10:32:33 -05:00
182 changed files with 9612 additions and 0 deletions
@@ -0,0 +1,3 @@
+chief  rd0b8fdb4d62d  claude-code  since 2026-10-22T04:02:59.741Z
+pm  r2cf8536da2c3  claude-code  since 2026-10-22T04:26:06.891Z
+# exit 0
@@ -0,0 +1,6 @@
+ActiveState=active
+DropInPaths=
+MainPID=3634254
+ExecStart={ path=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/scripts/mosaic ; argv[]=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/scripts/mosaic bus start mosaic-stack --pm ; ignore_errors=no ; start_time=[Thu 2026-10-22 10:05:57 CDT] ; stop_time=[n/a] ; pid=3634254 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+# exit 0
@@ -0,0 +1,11 @@
+● jarvis-curation-gate.service                            loaded failed failed Jarvis curation-gate liveness check (wake the agent if staged pulls sit uncurated)
+● jarvis-retro-check.service                              loaded failed failed Jarvis weekly retrospective ARTIFACT check (did Sunday's tick produce a retro?)
+● jarvis-retro.service                                    loaded failed failed Jarvis weekly retrospective tick
+● mosaic-install-drift.service                            loaded failed failed Assert the installed Mosaic binaries still match the committed source (drift, not failure)
+● [email protected] loaded failed failed Escalate failed Mosaic unit jarvis-curation-gate.service to the local agent seat
+● [email protected]   loaded failed failed Escalate failed Mosaic unit jarvis-retro-check.service to the local agent seat
+● [email protected]         loaded failed failed Escalate failed Mosaic unit jarvis-retro.service to the local agent seat
+● [email protected] loaded failed failed Escalate failed Mosaic unit mosaic-install-drift.service to the local agent seat
+● [email protected]     loaded failed failed Escalate failed Mosaic unit mosaic-reconcile.service to the local agent seat
+● setspark-tmp-guard.service                              loaded failed failed SetSpark: /tmp and scratch guard
+# exit 0
@@ -0,0 +1,5 @@
+ActiveState=active
+SubState=running
+ActiveEnterTimestamp=Tue 2026-10-13 08:40:19 CDT
+MainPID=1317
+# exit 0
@@ -0,0 +1,6 @@
+ActiveState=active
+DropInPaths=
+MainPID=3634256
+ExecStart={ path=/usr/bin/node ; argv[]=/usr/bin/node /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/packages/webui/src/cli.mjs serve --checkout /mnt/storage/src/mosaic-stack --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket ; ignore_errors=no ; start_time=[Thu 2026-10-22 10:05:57 CDT] ; stop_time=[n/a] ; pid=3634256 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+# exit 0
@@ -0,0 +1,6 @@
+{"ts":1792681650040,"ev":"checked","clean":true,"entryId":"","charsChecked":166}
+{"ts":1792682643530,"ev":"checked","clean":true,"entryId":"","charsChecked":339}
+{"ts":1792682660681,"ev":"checked","clean":true,"entryId":"","charsChecked":267}
+{"ts":1792682664289,"ev":"flagged","clean":false,"entryId":"","charsChecked":119,"findings":[{"rule":"word","source":"ms-unslop:7","detail":"banned word \"additionally\" x1","count":1},{"rule":"word","source":"ms-unslop:7","detail":"banned word \"crucial\" x1","count":1},{"rule":"word","source":"ms-unslop:7","detail":"banned word \"testament\" x1","count":1},{"rule":"word","source":"ms-unslop:7","detail":"banned word \"vibrant\" x1","count":1}]}
+{"ts":1792682667295,"ev":"notice_injected","entryId":"963a1713-ce84-4612-aa70-ff7452d11a3b","findings":[{"rule":"word","source":"ms-unslop:7","detail":"banned word \"additionally\" x1","count":1},{"rule":"word","source":"ms-unslop:7","detail":"banned word \"crucial\" x1","count":1},{"rule":"word","source":"ms-unslop:7","detail":"banned word \"testament\" x1","count":1},{"rule":"word","source":"ms-unslop:7","detail":"banned word \"vibrant\" x1","count":1}]}
+{"ts":1792682668575,"ev":"checked","clean":true,"entryId":"","charsChecked":8}
@@ -0,0 +1 @@
+{"checked":5,"flagged":1,"patterns":{"ms-unslop:7":4},"notices":1,"broken":null}
@@ -0,0 +1,3 @@
+re6c69f1ec1f0  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T15:05:59.295Z  running
+r410293d04d3d  mosaic-stack/pm  claude-code claude-opus-5-5  by chief  since 2026-10-22T15:24:01.208Z  running
+# exit 0
@@ -0,0 +1,6 @@
+sent 7fbc611b to chief
+chief (RESULT, re 7fbc611b) 26f1395d:
+Additionally, it is crucial to note that the pm's matching answer stands as a testament to a vibrant requirements read.
+
+[unslop: 1 reply of this session flagged since the last note: banned word "additionally" x1; banned word "crucial" x1; banned word "testament" x1; banned word "vibrant" x1. The session gets a correction notice on its next turn.]
+# exit 0
@@ -0,0 +1,4 @@
+sent ba75eff6 to chief
+chief (RESULT, re ba75eff6) dc9dd22e:
+received
+# exit 0
@@ -0,0 +1,4 @@
+sent e7fef539 to chief
+chief (RESULT, re e7fef539) 8c807935:
+I passed your request to the pm in your own words (message 86371169-7c3f-4716-9e2b-7cca8cdd2856), marked as a tester's PM test that authorizes nothing. The pm had no session running, so I launched it (run r410293d04d3d) to receive the message. No answer has come back yet; when it does, I'll send you the PRD version and the number of ids.
+# exit 0
@@ -0,0 +1,4 @@
+sent 19bb87bb to pm
+pm (RESULT, re 19bb87bb) 4da5024b:
+Version 1.14, 85 ids.
+# exit 0
@@ -0,0 +1,2 @@
+chief  re6c69f1ec1f0  claude-code  since 2026-10-22T15:05:59.297Z
+# exit 0
@@ -0,0 +1,7 @@
+PASS markdown-preview.js is served and equals the copy's
+PASS /api/config on loopback: send=false edit=false
+PASS project.files through the Console: head=ae0b17c9586e51da7bc1b7e548c6acf913a55665 files=2 spec=true error=none
+PASS project.file spec/north-star.md through the Console: commit=ae0b17c9586e51da7bc1b7e548c6acf913a55665 length=99 error=none
+PASS loopback save refused: HTTP 403 error=read-only sent=false
+CONSOLE_PASS
+# exit 0
@@ -0,0 +1,19 @@
+[
+  {
+    "business": "mosaic-stack",
+    "instance": "chief",
+    "run": "re6c69f1ec1f0",
+    "launchedBy": "jason",
+    "harness": "claude-code",
+    "model": "claude-opus-5-5",
+    "provider": "anthropic",
+    "modelKey": "opus",
+    "pid": 3634625,
+    "startTime": "78274945",
+    "runnerPid": 3634626,
+    "runnerStartTime": "78274945",
+    "runDir": "/home/jwoltje/.mosaic-dev/launches/mosaic-stack/re6c69f1ec1f0",
+    "startedAt": "2026-10-22T15:05:59.295Z",
+    "live": true
+  }
+]
@@ -0,0 +1,2 @@
+re6c69f1ec1f0  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T15:05:59.295Z  running
+# exit 0
@@ -0,0 +1,2 @@
+[]
+# exit 0
@@ -0,0 +1,2 @@
+created project window-20261022-1507  id b38453f8-6768-42e1-bea5-eb227b16fb0b
+# exit 0
@@ -0,0 +1 @@
+1792681660
@@ -0,0 +1,21 @@
+pointer: /home/jwoltje/.mosaic-dev/state/stack-active.json
+  {"copy":"84f53540dd0d21ef179ca29697e172b0246e78d1","business":"mosaic-stack","pm":true,"claude":"/home/jwoltje/.local/bin/claude","console":["--port","7332","--public-host","mosaic.woltje.com","--auth-header","X-authentik-username","--allow-user","jason.woltje","--tester-socket"],"schema":"3l","activation":"20261022T150555Z-84f53540dd0d","at":"2026-10-22T15:06:00Z"}
+log (last five lines):
+  {"at":"2026-10-21T21:59:31Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":"20261021T215926Z-7247d80c7af7","activation":"20261021T215926Z-7247d80c7af7","result":"ok"}
+  {"at":"2026-10-22T04:02:56Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":null,"activation":"20261022T040256Z-86f95bb27f6c","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T04:03:00Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":"20261022T040256Z-86f95bb27f6c","activation":"20261022T040256Z-86f95bb27f6c","result":"ok"}
+  {"at":"2026-10-22T15:05:55Z","op":"activate","from":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","to":"84f53540dd0d21ef179ca29697e172b0246e78d1","backup":null,"activation":"20261022T150555Z-84f53540dd0d","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T15:06:00Z","op":"activate","from":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","to":"84f53540dd0d21ef179ca29697e172b0246e78d1","backup":"20261022T150555Z-84f53540dd0d","activation":"20261022T150555Z-84f53540dd0d","result":"ok"}
+check:
+  bus: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  Console: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  CLI: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  result: pass
+bus status:
+  host: mosaic-stack, pid 3634254, running, since 2026-10-22T15:05:57.441Z, notifier off
+  socket: present
+  writer.lock: pid 3634311
+  boot: organization file loaded at 2026-10-22T15:05:57.439Z
+unit flags: match the pointer
+drift: 3 commit(s) on refactor since the pointer's copy
+# exit 0
@@ -0,0 +1,4 @@
+sent 12a8fa42 to chief
+chief (RESULT, re 12a8fa42) 41049b67:
+Received the re-pin test note for commit 84f53540dd0d21ef179ca29697e172b0246e78d1; I took no action and launched nothing, because a tester message authorizes nothing.
+# exit 0
@@ -0,0 +1,2 @@
+mosaic: pm isn't running, so the tester's message was refused and nothing was stored
+# exit 3
@@ -0,0 +1,4 @@
+sent d0e15a80 to window-20261022-1507/w9
+assistant (RESULT, re d0e15a80) ccd50dc6:
+Assistant (run r2c62e02f8371) got the [mos test] message and is replying in one line, as asked; nothing was done.
+# exit 0
@@ -0,0 +1,32 @@
+[
+  {
+    "seq": 623,
+    "id": "d0e15a80-b9ed-473d-b4d0-37f1456277da",
+    "at": "2026-10-22T15:07:33.285Z",
+    "business": "mosaic-stack",
+    "from_role": "tester",
+    "from_run": "tester-cli",
+    "to_role": "assistant",
+    "class": "REQUEST",
+    "in_reply_to": null,
+    "decision": null,
+    "corrects": null,
+    "body": "[mos test] reply with one line, then stop",
+    "to_name": null
+  },
+  {
+    "seq": 624,
+    "id": "ccd50dc6-61af-43da-96b1-f85f552256c9",
+    "at": "2026-10-22T15:07:39.737Z",
+    "business": "mosaic-stack",
+    "from_role": "assistant",
+    "from_run": "r2c62e02f8371",
+    "to_role": "tester",
+    "class": "RESULT",
+    "in_reply_to": "d0e15a80-b9ed-473d-b4d0-37f1456277da",
+    "decision": null,
+    "corrects": null,
+    "body": "Assistant (run r2c62e02f8371) got the [mos test] message and is replying in one line, as asked; nothing was done.",
+    "to_name": null
+  }
+]
@@ -0,0 +1,2 @@
+created window-20261022-1507/w9  id b85a57fe-84f9-4785-a596-135af39e334a  instance assistant
+# exit 0
@@ -0,0 +1,6 @@
+window-20261020-0801/w9  assistant  d0ba7a66
+window-20261020-2205/w9  assistant  446201de
+window-20261021-2202/w9  assistant  b89fcca4
+window-20261022-0403/w9  assistant  d9bb7ff3
+window-20261022-1507/w9  assistant  b85a57fe
+# exit 0
@@ -0,0 +1 @@
+b85a57fe-84f9-4785-a596-135af39e334a
@@ -0,0 +1,229 @@
+{
+  "total": {
+    "input": 156,
+    "output": 23567,
+    "cacheWrite": 427567,
+    "cacheRead": 1347169,
+    "unknownTurns": 1
+  },
+  "byRun": [
+    {
+      "run": "r8fba7e598156",
+      "input": 0,
+      "output": 0,
+      "cacheWrite": 0,
+      "cacheRead": 0,
+      "unknownTurns": 1
+    },
+    {
+      "run": "r4a96e2142e4d",
+      "input": 2,
+      "output": 52,
+      "cacheWrite": 11750,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc78c9700c8e9",
+      "input": 14,
+      "output": 1519,
+      "cacheWrite": 18187,
+      "cacheRead": 89559,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r293f33bcbc63",
+      "input": 2,
+      "output": 44,
+      "cacheWrite": 18595,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r34520a581318",
+      "input": 6,
+      "output": 323,
+      "cacheWrite": 26349,
+      "cacheRead": 14307,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r7e99838f9f93",
+      "input": 2,
+      "output": 44,
+      "cacheWrite": 9858,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc964611b2092",
+      "input": 4,
+      "output": 120,
+      "cacheWrite": 26138,
+      "cacheRead": 23870,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rbb708846b605",
+      "input": 12,
+      "output": 2089,
+      "cacheWrite": 17285,
+      "cacheRead": 73823,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc36b17ef3788",
+      "input": 16,
+      "output": 5221,
+      "cacheWrite": 36717,
+      "cacheRead": 202573,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r097436c91816",
+      "input": 16,
+      "output": 3340,
+      "cacheWrite": 43923,
+      "cacheRead": 102022,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r497f1c817d4d",
+      "input": 2,
+      "output": 80,
+      "cacheWrite": 9856,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc9e993da24cf",
+      "input": 30,
+      "output": 5871,
+      "cacheWrite": 80018,
+      "cacheRead": 475283,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r7646a7a4a2bd",
+      "input": 12,
+      "output": 1448,
+      "cacheWrite": 22601,
+      "cacheRead": 80758,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r4004e5e09433",
+      "input": 2,
+      "output": 61,
+      "cacheWrite": 9874,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rd0b8fdb4d62d",
+      "input": 18,
+      "output": 1714,
+      "cacheWrite": 25459,
+      "cacheRead": 135284,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r62b31aae5852",
+      "input": 2,
+      "output": 31,
+      "cacheWrite": 9881,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r2cf8536da2c3",
+      "input": 12,
+      "output": 1420,
+      "cacheWrite": 38495,
+      "cacheRead": 149690,
+      "unknownTurns": 0
+    },
+    {
+      "run": "re6c69f1ec1f0",
+      "input": 2,
+      "output": 122,
+      "cacheWrite": 12695,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r2c62e02f8371",
+      "input": 2,
+      "output": 68,
+      "cacheWrite": 9886,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    }
+  ],
+  "byInstance": [
+    {
+      "instance": "chief",
+      "input": 82,
+      "output": 10607,
+      "cacheWrite": 178249,
+      "cacheRead": 495753,
+      "unknownTurns": 1
+    },
+    {
+      "instance": "coder",
+      "input": 2,
+      "output": 44,
+      "cacheWrite": 18595,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "instance": "assistant",
+      "input": 10,
+      "output": 284,
+      "cacheWrite": 49355,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "instance": "pm",
+      "input": 62,
+      "output": 12632,
+      "cacheWrite": 181368,
+      "cacheRead": 851416,
+      "unknownTurns": 0
+    }
+  ],
+  "byProvider": [
+    {
+      "provider": "anthropic",
+      "input": 156,
+      "output": 23567,
+      "cacheWrite": 427567,
+      "cacheRead": 1347169,
+      "unknownTurns": 1
+    }
+  ],
+  "byModel": [
+    {
+      "provider": "anthropic",
+      "model": "claude-opus-5-5",
+      "input": 156,
+      "output": 23567,
+      "cacheWrite": 427567,
+      "cacheRead": 1347169,
+      "unknownTurns": 1
+    }
+  ],
+  "byAccount": [
+    {
+      "account": null,
+      "input": 156,
+      "output": 23567,
+      "cacheWrite": 427567,
+      "cacheRead": 1347169,
+      "unknownTurns": 1
+    }
+  ]
+}
+# exit 0
@@ -0,0 +1,2 @@
+re6c69f1ec1f0  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T15:05:59.295Z  running
+# exit 0
@@ -0,0 +1,19 @@
+[
+  {
+    "business": "mosaic-stack",
+    "instance": "chief",
+    "run": "re6c69f1ec1f0",
+    "launchedBy": "jason",
+    "harness": "claude-code",
+    "model": "claude-opus-5-5",
+    "provider": "anthropic",
+    "modelKey": "opus",
+    "pid": 3634625,
+    "startTime": "78274945",
+    "runnerPid": 3634626,
+    "runnerStartTime": "78274945",
+    "runDir": "/home/jwoltje/.mosaic-dev/launches/mosaic-stack/re6c69f1ec1f0",
+    "startedAt": "2026-10-22T15:05:59.295Z",
+    "live": true
+  }
+]
@@ -0,0 +1,65 @@
+# P1 start 2026-10-22T14:45:52.038Z, REPO HEAD aca16404cf522b03f39acaf140e4f6185a507b88
+# plan sha256 d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c (P0 mos-1281, amended 69b48863 mos-1283, then d7b380ef sage-2718)
+# business-check.mjs sha256 eece4d4671e1ce15ba81e1654c641925ac4988b343687b062897392285a8a1a7; SCRIPTS.sha256 line: eece4d4671e1ce15ba81e1654c641925ac4988b343687b062897392285a8a1a7  business-check.mjs
+# business file sha256 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93, mtime 2026-10-19 20:39:58.506635141 -0500
+
+## P1 status
+# start 2026-10-22T14:45:52.055Z
+# command: (cd $REPO && <clean env> scripts/stack-release.sh status mosaic-stack)
+pointer: /home/jwoltje/.mosaic-dev/state/stack-active.json
+  {"copy":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","business":"mosaic-stack","pm":true,"claude":"/home/jwoltje/.local/bin/claude","console":["--port","7332","--public-host","mosaic.woltje.com","--auth-header","X-authentik-username","--allow-user","jason.woltje","--tester-socket"],"schema":"3j","activation":"20261022T040256Z-86f95bb27f6c","at":"2026-10-22T04:03:00Z"}
+log (last five lines):
+  {"at":"2026-10-20T22:02:09Z","op":"activate","from":"490e2771d3d057ab76991e2c7859cd251857e64c","to":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","backup":"20261020T220206Z-4429a104f6d6","activation":"20261020T220206Z-4429a104f6d6","result":"ok"}
+  {"at":"2026-10-21T21:59:26Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":null,"activation":"20261021T215926Z-7247d80c7af7","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-21T21:59:31Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":"20261021T215926Z-7247d80c7af7","activation":"20261021T215926Z-7247d80c7af7","result":"ok"}
+  {"at":"2026-10-22T04:02:56Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":null,"activation":"20261022T040256Z-86f95bb27f6c","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T04:03:00Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":"20261022T040256Z-86f95bb27f6c","activation":"20261022T040256Z-86f95bb27f6c","result":"ok"}
+check:
+  bus: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  Console: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  CLI: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  result: pass
+bus status:
+  host: mosaic-stack, pid 828746, running, since 2026-10-22T04:02:58.133Z, notifier off
+  socket: present
+  writer.lock: pid 828808
+  boot: organization file loaded at 2026-10-22T04:02:58.132Z
+unit flags: match the pointer
+drift: 135 commit(s) on refactor since the pointer's copy
+# exit 0, end 2026-10-22T14:45:52.360Z
+
+## P1 values
+# start 2026-10-22T14:45:52.361Z
+# command: (cd $REPO && <clean env> node /mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d/p1.mjs)
+bus.tester true
+plugins kinds ["channel","harness","usage-source"]
+plugins usage-source ["transcript"]
+plugins channel ["cli","webui"]
+plugins harness ["claude-code"]
+launch.by "chief"
+launch.instances includes assistant true
+role assistant vars.harness "claude-code"
+role chief vars.harness "claude-code"
+role coder vars.harness "claude-code"
+role cto vars.harness "claude-code"
+role pm vars.harness "claude-code"
+role reviewer vars.harness "claude-code"
+roles naming pi 0
+# exit 0, end 2026-10-22T14:45:52.386Z
+
+## P1 business-check OLD
+# start 2026-10-22T14:45:52.411Z
+# command: (cd $REPO && <clean env> node /mnt/storage/src/mosaic-stack/agents/sage/work/window-plan/repin-de352dfaf/business-check.mjs 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b)
+copy 86f95bb27: roles 6, projects 1, arbiters 2
+HOLDS chief instance.name yes
+HOLDS pm instance.name no
+LOAD_OK
+# exit 0, end 2026-10-22T14:45:52.450Z
+
+## P1 data console
+# dataRoot /home/jwoltje/.mosaic-dev
+# ls -ld $DATA/console:
+drwx------ 2 jwoltje jwoltje 4096 Oct 21 23:02 /home/jwoltje/.mosaic-dev/console
+# ls rc=0
+# tester.sock path length 45 bytes (limit 107)
+# P1 end 2026-10-22T14:45:52.475Z
@@ -0,0 +1,133 @@
+# Re-pin 86f95bb27 to 84f53540d (rows 191, 194, 205a, 236, 256, 264a, 268, 277, 278, 281, FED R3), migrate 3j to 3l
+
+Darkwing operates this window. Sage assigned it in sage-2703 under DECISIONS Q173, and Mos gave the go in mos-1280
+item 2. The layout follows `agents/sage/work/window-plan/repin-86f95bb27.md` with `--migrate` restored.
+The migrate wording comes from `repin-1024-draft1.md`. Where a step is unchanged I name it and only say what
+differs. Mos checks this file's sha256 at P0, and any change after that needs a new check (mos-0849/0850).
+The file stays uncommitted until Sage says refactor can take it.
+
+## Who, and what nobody does
+
+- I operate. Mos checks each step's output before the next one, runs P3 and gives the W5 go. Row 253's gate
+  has first claim on the slot (sage-2703 item 6). P2 and P3 start node processes that a busy check counts,
+  so they run only in a slot gap and only after Sage's CLEAR. P1, W0, B0, P4, P5, P6 and W1-W4 start no test
+  or stub, so they run alongside the slot.
+- Jason has no step. Nothing gets pruned. Nobody acts as Jason: no `--by jason`, no human shell or tmux pane,
+  every bus read and write carries `--tester`, and `bus.tester` stays as it is. If it isn't `true`, stop at P1.
+- No pi (#383). No Save in the human Console, no `mosaic name`.
+- Nothing new goes on (sage-2703 item 4): no `mosaic access`, no Gitea grant run (#436b Approve stays Jason's,
+  Q190), no `--send`, no `--sso`, no proof pair. The tunnel forwards 7332 only.
+- dragon-lin only. .53 and .54 take nothing.
+- Decision 96 condition 2 asks for Jason present at a migrating activate, and NEW's `--plan` prints
+  `needs: Jason present for this run (decision 96 condition 2)` (`scripts/stack-release.sh:1413` at NEW).
+  Q173 overrides that condition for this business, as Mos ruled at the 7247d80c7 window (sage-2703 item 2).
+  The line is expected in W3 and doesn't stop the window.
+
+## Names
+
+- OLD, live: `86f95bb27f6cb237bf9fa9ba53320bace6c4de0b`, schema 3j, pointer `pm: true`, activation
+  `20261022T040256Z-86f95bb27f6c`. The pointer's Console flags are `--port 7332 --public-host
+  mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket`. P1 reads
+  them again from `status`; nothing copies them from this file.
+- NEW: `84f53540dd0d21ef179ca29697e172b0246e78d1`, the row 264a landing, 132 commits past OLD
+  (`git rev-list --count`), OLD its ancestor. The last commit that changes a non-test path is f3e9b6512
+  (264a r7). The commits after it, up to NEW, change tests and BUILD.md only. Row 253 isn't in NEW and goes
+  in the next re-pin.
+- `WIN=agents/darkwing/work/window-repin-84f53540d/`. The scripts adapt my 86f95bb27 window's, including
+  its DEVIATIONS items 1-6 (socket tester reads, the copy mode pattern, the plan sha check, the W3
+  no-commits grep, W1 open pm work, the full tool blob). `--migrate` comes back from
+  `agents/sage/work/window-repin-7247d80c7/`.
+
+## What NEW carries over OLD
+
+These are the non-test paths changed from OLD to NEW (`git diff --name-only`), without tests, READMEs and
+`.md` files. Commits are first-parent.
+
+| Row | Commits | Paths | Live effect |
+|---|---|---|---|
+| 264a | d6301dffc, 72fc5a330, f3e9b6512 | packages/bus/schema.sql, src/migrations/3k-3l.sql, src/store.mjs, src/broker.mjs, scripts/stack-release.sh | Schema 3l. Each thread gets a default session whose id is the thread id. thread_claims, message_threads and thread_opens are rebuilt to name it. Thread runs carry a generation fence: a retired generation's approval, delivery and read refuse. `thread.claims` reads each session's latest claim. stack-release.sh's restore guard COUNTED adds sessions and session_defaults; that's the only stack-release.sh change. W9's thread read is the live check. W9's `thread create` is the window's only thread.create. Once row 269 (264b) lands, a thread made by thread.create on a 264a store is refused as legacy-store-unmapped; the 4 existing threads map as legacy defaults and aren't affected. W9's thread is test data that 264b will refuse, which Q173 accepts (sage-2718). |
+| 236 | d87483d68, 97bbe7fd3, 5e5ba94b1, ce74477e1 | packages/bus/schema.sql, src/migrations/3j-3k.sql, src/store.mjs, broker, credentials, gitea-grant, human-cli, runtime, server; packages/cli/src/cli.mjs, grants.mjs; scripts/mosaic | Schema 3k adds gitea_users and gitea_grants, both empty after the migration. `mosaic grants` and the grant executor are in the copy, but nobody runs a grant (Q190). grants.status is a read under the kill switch. |
+| FED R3 (#414) | d20c92bf6, 618fe0f0b, cee3f25a3, f58cfc361 | broker, client, runtime, packages/bus/src/user-cli.mjs; packages/harness/src/runner.mjs; packages/business/src/access.mjs, instance-settings.mjs, vocabulary.mjs | A user principal on the bus, with a grant read per request. No user is granted (no `mosaic access`, Q188), so no user path runs. runner.mjs's only change adds a granted-user line to a message from role `user`. unslopCounts doesn't change, so W12's counts read the same way. |
+| 191 | 4bdc7e0e8, 0fa7bf421, 93d211c29, ad6020754, f1267e49a; f5611c937 after the landing | packages/processing-control/** (new; stack-copy.sh adds it to the copy); packages/bus/src/broker, client, runtime, server, web; packages/cli/src/cli, git-socket, launcher, notifier, notifier-process; packages/webui/src/cli, serve, processing-http and public/index.html, processing.css, processing.js; packages/discord/src/*; packages/seat/src/*; packages/project/src/git.mjs; packages/tasks/src/adapter.mjs, vikunja.mjs; Containerfile, compose.yaml; scripts/agent.sh, common.sh, hello.sh, mosaic, mosaic-task.mjs, run-task.sh, stack-copy.sh, verify.sh, testing/lane-image.mjs; src/run-agent.sh | The kill switch. The Console gets the processing panel and `GET /api/processing`. `POST /api/processing` refuses 403 `read-only` while the Console runs without `--send` (`processing-http.mjs:26`); W10 checks that. Halt and fire stop runs through stopRun, and nobody halts or fires in this window. The launcher change runs at W5's pm launch. The Discord connector runs from the checkout (`scripts/discord.sh` in its unit), not from a copy, so this re-pin doesn't move it. The image, run-task and run-agent paths take no worker run here. |
+| 194 | e7fb59f22, 14124d96d, b8c3d0036, 29daebf54, 2311a50e1, 3521c23c3, 939356a1c, 5d2c27442, 4f6848527, 5fd178e44 | packages/bus/src/broker, process, runtime; packages/business/src/business, credentials, index, instance-settings, launch-settings, organization, role, vocabulary; packages/cli/src/cli, instances, launcher; packages/harness/src/tools.mjs; packages/webui/src/cli, serve, bus.mjs, public/agents.js, bus.js, index.html; roles/chief-of-staff.json; scripts/mosaic | The instance writer verbs (hire, fire, delete, routes, limits) answer restart, and fire and delete revoke credentials before the write. roles/chief-of-staff.json adds `role.hire` and `role.fire` to the chief's withinRole and an empty `hireable` list, so a chief hire refuses `definition-not-hireable` (`broker.mjs:4402`). Nobody hires, fires, deletes or sets a route here, and W12's turns ask for none. The Console Agents page changes. |
+| 281 | 7c2c87631 | packages/bus/src/broker.mjs | Fire and delete jobs, the grant set and lock, and boot's interrupted check. The check runs at every bus start, W5's included. With no fire or delete job, it finds nothing. |
+| 277 | eccd6e276, bda4ee613 | broker; packages/cli/src/cli.mjs, format.mjs | A `thread.claims` verb. `mosaic agents` prints thread lines without `--tester` or `--json`. W1 and W10 read `agents --tester`, and any changed line gets named in STATE.md. |
+| 278 | e7d21b91b | packages/webui/src/cli.mjs, serve.mjs, public/bus.js | The Console Agents page shows thread claims separately. |
+| 205a | 59f708ca2 | broker | Trail and replies hide other users' thread messages. With no user granted, tester reads see what they saw before. |
+| 256 | e617543b8, f12441d4f | packages/bus/src/runtime.mjs; packages/business/src/instance-settings.mjs; packages/webui/src/public/agents.js | Only the human deletes a creative instance. Nobody deletes one here. |
+| 268 | c27207f6e | packages/library/src/mapping.mjs, scope.mjs | No library entry is live, so neither path runs. |
+
+The four service scripts (bus-service.sh, webui-service.sh, discord-service.sh, case2-unit.sh),
+package.json and package-lock.json haven't changed from OLD (`git diff --stat` is empty).
+
+## Schema and backups
+
+- `SCHEMA_VERSION` is 3l at NEW (`packages/bus/src/store.mjs:17`), and 3j at OLD and in the live store.
+  The chain runs two steps, 3j to 3k (row 236) and 3k to 3l (row 264a). W3's plan must show
+  `migration: 3j to 3l`, `migration steps: 3j to 3k, 3k to 3l`, `needs: --migrate (given)` and the Jason
+  line above. Any other migration text stops at W3.
+- B0 comes first (sage-2703 item 3). It's the 86f95bb27 window's b0.sh with WIN changed: an online copy of
+  the live store through sqlite's backup API, read-only on the source, laid out the way `rehearse --backup PATH`
+  reads it: `$DATA/backups/b0-<STAMP>/bus/bus.sqlite`, then `SHA256SUMS` written from inside `bus/`,
+  `SCHEMA` (must say 3j) and `CHECK` (integrity_check, event count, maxSeq). I send Mos the path and the
+  SHA256SUMS sha256 before P3.
+- The grant look-alike count from draft 1 comes back. 3j-3k makes the Gitea grant tables. P3 and S1 count
+  action.allowed events whose body.action or body.operation starts with `grant.`, or whose body holds
+  `hostLineLeft`, and any event whose action or operation starts with `grant.`. Expected: 0 and 0, as at
+  the 7247d80c7 window.
+- W5 takes the stopped-store backup every migrating activate takes, before the migration. That backup is
+  the rollback point. If W5's gate fails after the migration, the in-run rollback restores that backup by
+  itself (`TAKEN`, `stack-release.sh:1477` and `:698`), with the bus still stopped and no new event
+  written. That still counts as a restore, so it ends the window.
+- Restore guard at NEW counts events plus 13 tables (`stack-release.sh:420`). sessions and session_defaults are
+  new, and the 3k Gitea tables aren't counted because their writers write an event in the same transaction.
+
+## Before the window (nothing stopped)
+
+| # | Who | Step |
+|---|-----|------|
+| P0 | Mos | Check NEW's sha and this file's sha256. |
+| B0 | operator | The backup above. Path and SHA256SUMS sha256 go to Mos. |
+| P1 | operator | `status`: pointer, activation, 3j, Console flags, unit flags match. Business file sha256 and `business-check.mjs` LOAD_OK for OLD now and for NEW after W0. `$DATA/console` is 0700, `tester.sock` 0600. `bus.tester` is `true`. |
+| W0 | operator | `scripts/stack-copy.sh copy $NEW`. The copy carries `packages/processing-control`, `tools/unslop-hook`, and `packages/library/bin/askpass` with NEW's mode. |
+| P2 | operator, on Sage's CLEAR | The two stub runs against NEW's copy, then both units rendered from REPO's service scripts and diffed against the live units. The copy path is the only difference allowed. |
+| P3 | Mos, on Sage's CLEAR | `stack-release.sh rehearse $NEW mosaic-stack --backup <B0 path> --port <scratch>`. At NEW, rehearse takes no `--migrate` flag (`stack-release.sh:138`): when the backup's schema differs from the copy's, it migrates by itself (`r_migration`, `:2136`). P3 must show `PASS new-refuses-old-store`, `PASS migrate: 3j to 3l`, `PASS new-opens-migrated`, `PASS migrate-again` and `PASS old-refuses-migrated` (86f95bb27's copy refusing the 3l store), the interpreter preflight passing, one receipt line, no `library:` line and one pm reply. Then counts on B0 and on the rehearsal's `data/bus/bus.sqlite`, with the 7247d80c7 window's `p3/counts.py` (copied to `$WIN/p3/`): every 3j table equal, gitea_users 0 and gitea_grants 0 (step 3k), sessions and session_defaults each equal to the threads count (step 3l), and any sqlite_sequence change named row by row against the migration's own writes (the AUTOINCREMENT backfills of sessions and session_defaults, and `3k-3l.sql:85-86` for the rebuilt thread_claims and thread_opens). `migrate.log` prints only `bus schema 3l ready`, because neither step has a report. The two step tables and `schema_version` 3l show both steps ran, and each step checks its own digest before it commits. Mos also reads healthz, `/api/config` and the two tester-http reads on NEW's rehearsal Console, as in mos-1107. |
+| P4 | operator | The tunnel read. |
+| P5 | operator | The four service scripts are held at NEW, with empty porcelain on them. |
+| P6 | operator | The 7332 matrix (a)-(g) on OLD as `$WIN/matrix-old.txt`, plus the two tester-http reads over the socket, for W10. |
+
+## The window
+
+| # | Who | Step |
+|---|-----|------|
+| W0b | operator | The business file copy. |
+| W1 | operator | Idle check, start stamp from `date -u`, S1 with `$SNAP --held`. Open pm work goes on record: `agents --tester` and `launches list`. pm run r2cf8536da2c3 (the chief's launch at 04:26:06Z) has no idle timer, since the launcher's idle stop covers thread sessions only. If it's still live, W.txt records it as crossing the window, as mos-1265 said. Stopping it is Mos's call. |
+| W2 | operator | `status`: pointer on OLD, `pm: true`, 3j, unit flags match. |
+| W3 | operator | `stack-release.sh activate $NEW mosaic-stack --pm --migrate --tester-socket --plan`. It must show OLD to NEW, the migration lines above, the backup line, and a Console line with exactly OLD's flags: `--tester-socket`, no `--send`, no `--sso`, no proof pair, no drop line. Any other difference stops here. The no-flag greps read the plan with its commit lines taken out, as last window. |
+| W4 | operator | The unit reads, as last window. W3 and W4 go to Mos for the W5 go. |
+| W5 | operator, on Mos's go | The same command without `--plan`. Exit 0, `result ok`, `stopped store schema: 3j`, `migrated the store to 3l`, every gate check passing, `pm_launched` included. Record the activation id, backup path, STAMP and the backup's SHA256SUMS sha256. Then `status` (schema 3l). Then `rollback mosaic-stack --restore <W5 activation> --plan`, which only reads, to record the guard's post-backup count. W5's own start writes events, so I expect it to be nonzero. |
+| W9 | operator, after Mos checks W5 | The 86f95bb27 window's W9 list: no `Sign-in:` line in the webui journal since the W5 stamp (with `UTC`), `/proc/<Console pid>/cwd` names NEW's copy, `tester.sock` 0600 in a 0700 `console/`, one new `peercred-starts.jsonl` line, no `library:` line in the bus journal. The pm's requirements read gives 1.14 with 85 ids. The thread read is the same as last window's. It now runs through each thread's 3l default session, and a refusal stops the step. |
+| W10 | operator | The matrix again as `$WIN/matrix-new.txt`, identical to `matrix-old.txt` apart from named lines. The two tester-http reads match P6's. No listener on 7333 (`ss -ltn`). P4 again. A Console POST on the main port with no signed-in session is refused (the mos-1195 baseline). `POST /api/processing` is refused 403 `read-only`. |
+| W11 | operator | STATE report in `$WIN/STATE.md`, posted on P19 386, 412 and 435 and on the Gitea issues for rows 264a (#1769), 236 (#1742), 194 (#1692), 191 (#1689), 277 (#1782) and 278 (#1783). |
+| W12 | operator, after W11 | Row 66's live check by the 86f95bb27 window's w12c.sh route (backup first, one relay try to the pm, two chief turns, PASS by delta). The script changes only in NEW, WIN and the chief run id read at W1. It needs Mos's go for its sha256, as before. Pi isn't run (#383). |
+
+## Steps skipped, and why
+
+None. The 86f95bb27 window skipped gate repeats because stack-release.sh's blob was the same at the gated
+commit and at NEW. That isn't true now: d6301dffc changed COUNTED, and 4bdc7e0e8 changed stack-copy.sh and
+common.sh. The `--send`/`--no-sso` walk stays unrun because those flags stay off, not because a gate covered
+it.
+
+## Stop conditions and rollback
+
+- As in draft 1. The first failure stops the step and goes to Mos. A second failure, or any restore, ends
+  the window (mos-0823). Before W5 there's nothing to undo. Keep every copy and prune nothing.
+- After W5, a pointer flip alone can't roll back: 86f95bb27's copy refuses a 3l store (P3's
+  old-refuses-migrated). Rollback is `rollback mosaic-stack --restore <W5 activation> --plan`, then the real
+  run, from W5's stopped-store backup (sage-2703 item 5).
+- After W5, any restore goes to Mos for the go, with `rollback --plan`'s guard count and the event types
+  written after the backup. It doesn't wait for Jason: Q173 overrides decision 96 condition 3 for this
+  business (mos-1281 item 4). Since W5's own start writes events, expect a nonzero count and `--events N`.
+- Before the real restore, I take an online copy of the 3l store by B0's method, so the rows the restore
+  drops are kept. Its path and SHA256SUMS sha256 go to Mos with the request.
+- A restore still ends the window. The in-run `TAKEN` restore under "Schema and backups" stays as written.
@@ -0,0 +1,94 @@
+# Run notes, re-pin 86f95bb27 to 84f53540d
+
+Darkwing. PLAN.md (sha256 6d474b73490ef6cdca3362703353600f1d4e1d8c004a8fc0444830b5fbd0d6f1, sent for P0 in
+darkwing-0163) stays unedited, because an edit would need a new P0. Run notes and deviations go here.
+Times come from `date -u`, or from the step's own output.
+
+1. B0 timing (sage-2713). B0 was taken at 2026-10-22T14:32:43.352Z, inside Gander's row 253 slot (from
+   14:29:21Z), and I ran no busy check first. Sage's hold (sage-2712, 14:32:45Z) reached me after B0 had run.
+   Three things ran in the slot. At about 14:31Z, `scripts/mosaic queue show` (repo node, reads only) for rows
+   194, 236, 264, 191, 278 and 277. Then B0's python3 sqlite backup-API read of the live store, read-only
+   source, from 14:32:43.352Z to .481Z. Then python3 `p3/counts.py` on the B0 copy, which opens no live store.
+   I reported this in darkwing-0165 and darkwing-0166. Sage kept B0 (sage-2713): it's a backup-API copy that
+   passed integrity_check, P3 rehearses on a copy, and the rollback point is W5's backup, not B0.
+   B0 is /home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z, SHA256SUMS sha256
+   7a7cb6c8565ba6db96fb3669ebbcc76a64b85bedb9937ea144daa98f14cd0f3e, CHECK "ok events 1940 maxSeq 1940
+   schema 3j". Counts are in p3/b0-counts.txt.
+2. P3 flag (darkwing-0163, sage-2712). NEW's `rehearse` refuses `--migrate` (stack-release.sh:138). PLAN.md's
+   P3 row already runs it without the flag. Mos rules on the difference from sage-2703 item 3.
+3. From here on, every step that reads the store or runs repo node waits for Sage's CLEAR, and the busy check
+   (`grep -q '^CLEAR'`) runs first.
+4. W10's processing check (how, not a plan change). PLAN.md's W10 row asks for `POST /api/processing` refused 403
+   `read-only`. At NEW, a main-port POST with no session gets 401 `sign-in required` from serve.mjs before
+   processingHTTP runs, and sending the proxy header would be acting as Jason. So w10.sh sends the POST through the
+   tester socket (tester-http.mjs), where serve.mjs refuses a tester POST outside its list with 403 `read-only`,
+   `sent: false`. The main-port loop also takes /api/processing, and there 401 or 403 counts as refused.
+5. Plan amendments after P0 (mos-1281). Mos passed P0 on 6d474b73 at 14:34:11Z and asked for the restore rule
+   change (item 4). The amended plan, sha256 69b48863721b998e7fab1499050882d6e6d29a82a94ffe3125db61d4cdcabb9b, was
+   rechecked by Mos in mos-1283. sage-2718 then asked the plan to name W9's thread.create as test data row 269 (264b)
+   will refuse. That edit touches only the row 264a line. Its sha256 is
+   d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c, sent to Mos as darkwing-0169 for a diff recheck.
+   The scripts check d7b380ef.
+6. Scripts adapted from window-repin-86f95bb27, by sed for OLD, NEW, WIN, plan path and sha, and tool blob
+   45e36eab4605ae010a482f146817b9e15ff2c512 (NEW's stack-release.sh). Hand edits:
+   - wsteps.sh W3 runs with --migrate. It checks target schema 3l, the migration and steps lines, `needs: --migrate
+     (given)`, the decision 96 line (expected, Q173), exactly two needs: and two migration lines, no restore or note
+     line, and 132 commits.
+   - w5.sh takes Mos's go label as its argument and runs with --migrate. It requires "stopped store schema: 3j",
+     "migrated the store to 3l", backup SCHEMA 3j and status 3l. Then it records `rollback --restore <ACT> --plan`
+     (read only).
+   - w9.sh checks status 3l and records the W9 thread's sessions and session_defaults row counts.
+   - w10.sh adds the processing refusals (item 4).
+   - p456.sh's tester reads go through OLD's tester-http.mjs on the socket.
+   - w0.sh checks for packages/processing-control.
+   - snapshot.mjs is copied byte for byte (639fd28a).
+   - BIZ_SHA in wsteps.sh and w11.sh is still the last window's 1e49bdf0. It changes to P1's value once P1 runs.
+7. Prep results (busy check CLEAR before each). P1 at 14:45:52Z passed (p1.txt): the business file sha256 is still
+   1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93, so BIZ_SHA in wsteps.sh and w11.sh needs no
+   change. W0 ran 14:46:02Z-14:46:04Z with fail=0 (w0.txt): LOCK_MATCH, processing-control and unslop-hook present,
+   ASKPASS_MODE_OK, IMPORT_OK, LOAD_OK. The copy is 164M, and /home is 97% full with 14G free. P4, P5, P6 and the
+   tester reads ran at 14:46:17Z, all exit 0. P4 and P5 PASS. matrix-old.txt matches last window's a-g line for
+   line, and tester-old.txt holds /api/config 200 and /api/bus/agents 200 with 2 agents.
+8. Slot gap from sage-2726 (CLEAR 14:47:40Z). darkwing-0173 sent Mos B0's path and SHA256SUMS sha (7a7cb6c8,
+   rechecked 14:47:52Z) for P3. P2 ran 14:48:07Z-14:48:08Z with TMPDIR /mnt/storage/scratch/tmp/gYT2z0y: p2.txt
+   P2_STUBS_PASS (both stubs CALLS [], socket 600, dir 700, save refused 403 read-only), p2-units.txt
+   P2_UNITS_PASS (webui and bus normalized diffs empty). wsteps.sh waits for Mos's P3 result.
+9. P3 passed (Mos, mos-1286, 14:52:45Z; transcripts in p3/). wsteps.sh W0b-W4 ran 14:53:09Z-14:53:10Z, rc 0
+   (wsteps.out, W.txt). W1 found pm r2cf8536da2c3 running; W.txt records it as crossing (mos-1281). Slot returned to
+   Sage 14:53:19Z (darkwing-0174). W3 and W4 sent to Mos for the W5 go (darkwing-0175).
+10. W5 go mos-1288 (14:55:25Z): run `w5.sh mos-1288` in W5's own slot after row 253's whole gate. w5.sh sha256
+    4cc7673d (Mos checked it). Known cosmetic gap: a stack backup dir has no STAMP file (the 040256Z backup holds
+    bus/, DATA_ROOT, LISTING.txt, MODES.txt, ROLLBACK_SET, SCHEMA, SHA256SUMS), so the STAMP field in w5.sh's note and
+    backups.txt line prints empty. It isn't a check and doesn't stop the script; the script is unchanged because Mos
+    checked its sha.
+11. W5 and W9 notes.
+    - W5 passed 15:05:55Z-15:06:00Z (go mos-1288, CLEAR sage-2740). Correcting item 10, the backup does carry a STAMP file
+      (2026-10-22T15:05:56.138Z). The 040256Z backup I listed has none, because that run made no migration.
+    - `rollback --restore --plan` prints no guard count, since sr:1564 exits before restore_checks. guard.mjs
+      (5f32a576) runs heldcount's query read-only and gives 2: 1 session.launched event and 1 role_claims row
+      (W5-guard.txt). Mos has it in darkwing-0178.
+    - The crossing pm r2cf8536da2c3 ended "stopped" in the bus journal when W5 restarted the bus, together with the
+      old chief rd0b8fdb4d62d. W5's restart did that; nobody stopped it by hand.
+    - w9.sh's "none was live at W1" note text is wrong for this window, because the pm was live at W1. The script
+      only prints that line; it doesn't check it.
+    - The W9 pm read exited 3 ("pm isn't running"), the same as last window (86f95bb27 W.txt:779). W12's relay
+      through the chief covers the pm read.
+12. mos-1291 (15:08:42Z) verified W5 and accepted W9. The crossing pm ending at W5's bus restart is fine: the activate
+    ended it, and nobody stopped it by hand. W11 records it as the pm piece that crossed and ended at the restart. The pm
+    read moves to W12's chief relay. w12c.sh now names the new chief re6c69f1ec1f0 on line 23 and in the line 10
+    comment, in place of rd0b8fdb4d62d, which W5's restart ended. Nothing else changed. sha256
+    6f8a5445fe20a882adb2401b11a941275565348af72f51934268e9494daa1635, sent to Mos before W12 runs (mos-1281).
+13. W9b to W12.
+    - mos-1295 (15:10:37Z) accepted w12c.sh at 6f8a5445, to run after W11. sage-2748 (15:11:16Z) let me keep the slot
+      through W12.
+    - W9b ran 15:08:11Z-15:22:45Z, rc 0. The launcher logged thread-idle for r2c62e02f8371 at 15:22:40.377Z and ended it
+      at .402Z (reason stopped, exitCode 0). Nobody stopped it by hand. S2.json sha256 bcc01f481acca09b.
+    - W10 ran at 15:23:15Z and gave W10_PASS. /api/bus/agents shows 1 agent, where prep showed 2, because the pm ended at
+      W5's restart.
+    - W11's reads ran at 15:23:22Z, W11_READS_OK. The business file is still 1e49bdf0. The failed user units match last
+      window's, except psd-resync, which isn't failed now.
+    - W12 ran 15:23:49Z-15:24:29Z with W12_PASS, before STATE.md was written, the same order as last window, whose
+      STATE.md covers W12. The backup is w12-20261022T152349Z (events 1951, 3l, SHA256SUMS e5d656df). The relay launched
+      pm r410293d04d3d, which answered "Version 1.14, 85 ids". The counts went from 1/0/0 to checked 5, flagged 1,
+      notices 1, broken null.
+    - The STATE posts go through gitea-api.sh's node and the Vikunja .mjs, so they wait for a slot gap from Sage.
@@ -0,0 +1,221 @@
+{
+  "schema": "3j",
+  "tables": {
+    "decision_events": {
+      "rows": 22,
+      "maxSeq": 22,
+      "sha256": "b016d2a7cb0116252166016822c472af1cc520435a6538ecb7be5db62c6cb4b3"
+    },
+    "decisions": {
+      "rows": 22,
+      "maxSeq": 22,
+      "sha256": "eafcd57d3531f7ac7c768e512632a3975df372c49ffd95abe7d858fd05ce93a8"
+    },
+    "deliveries": {
+      "rows": 1889,
+      "maxSeq": 1889,
+      "sha256": "78793a0fe3798312578ee11e52c23494c7e0410851360e1b602e186f691f6a37"
+    },
+    "events": {
+      "rows": 1940,
+      "maxSeq": 1940,
+      "sha256": "1af6f3bdb6b0303c941c510d64f348ae46b0dbb92cb01f3b7d0b1c1229cbb67d"
+    },
+    "host_grants": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "hosts": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "instance_names": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "message_threads": {
+      "rows": 8,
+      "maxSeq": null
+    },
+    "messages": {
+      "rows": 620,
+      "maxSeq": 620
+    },
+    "meta": {
+      "rows": 3,
+      "maxSeq": null,
+      "sha256": "3d1adf63d62c70add4a5f0b10cbcd4c8641417aca02915c40a64b30016168398"
+    },
+    "projects": {
+      "rows": 4,
+      "maxSeq": 4,
+      "sha256": "2c0086df88a406b5bbbaaafb511afa11c62fc529d45c968cee73c7498ca29073"
+    },
+    "role_claims": {
+      "rows": 108,
+      "maxSeq": 108,
+      "sha256": "2ce891685b2ea3ed37a206d9011bdb9c1cf9c9316503d9b7c98983e458e76283"
+    },
+    "task_comment_cursors": {
+      "rows": 476,
+      "maxSeq": 476,
+      "sha256": "2f9e5183959bdfc3c67531addd3381e61eb8023cae6739ad26f948aba349296f"
+    },
+    "task_snapshots": {
+      "rows": 515,
+      "maxSeq": 515,
+      "sha256": "dda1fc3c78ead392b1850f290534cc32bacf1818d096fa5ea560912f14bf5288"
+    },
+    "thread_claims": {
+      "rows": 8,
+      "maxSeq": 8,
+      "sha256": "1190e96d1ffb58605774f885b246ba4b147dac6c6fd808a0e58053de0d8e9fd0"
+    },
+    "thread_opens": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "threads": {
+      "rows": 4,
+      "maxSeq": 4,
+      "sha256": "f93a8a30dc51ae9a8a7d5e3a94c4a524d6833ca2980e5ae5e8d3ff6dbc734a43"
+    },
+    "usage_records": {
+      "rows": 88,
+      "maxSeq": 88,
+      "sha256": "706bf6af633b75ad4d26ae66124f5ce5e33276cf73a195786ab0e4885a6a72ff",
+      "byRun": [
+        {
+          "business": "mosaic-stack",
+          "run": "r8fba7e598156",
+          "input": "0",
+          "output": "0",
+          "unknownTurns": 1
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r4a96e2142e4d",
+          "input": "2",
+          "output": "52",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc78c9700c8e9",
+          "input": "14",
+          "output": "1519",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r293f33bcbc63",
+          "input": "2",
+          "output": "44",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r34520a581318",
+          "input": "6",
+          "output": "323",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r7e99838f9f93",
+          "input": "2",
+          "output": "44",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc964611b2092",
+          "input": "4",
+          "output": "120",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rbb708846b605",
+          "input": "12",
+          "output": "2089",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc36b17ef3788",
+          "input": "16",
+          "output": "5221",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r097436c91816",
+          "input": "16",
+          "output": "3340",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r497f1c817d4d",
+          "input": "2",
+          "output": "80",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc9e993da24cf",
+          "input": "30",
+          "output": "5871",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r7646a7a4a2bd",
+          "input": "12",
+          "output": "1448",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r4004e5e09433",
+          "input": "2",
+          "output": "61",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rd0b8fdb4d62d",
+          "input": "18",
+          "output": "1714",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r62b31aae5852",
+          "input": "2",
+          "output": "31",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r2cf8536da2c3",
+          "input": "12",
+          "output": "1420",
+          "unknownTurns": 0
+        }
+      ]
+    }
+  },
+  "untimed": [
+    "host_grants",
+    "hosts",
+    "message_threads",
+    "meta",
+    "task_comment_cursors"
+  ]
+}
@@ -0,0 +1,257 @@
+{
+  "schema": "3l",
+  "tables": {
+    "decision_events": {
+      "rows": 22,
+      "maxSeq": 22,
+      "sha256": "b016d2a7cb0116252166016822c472af1cc520435a6538ecb7be5db62c6cb4b3"
+    },
+    "decisions": {
+      "rows": 22,
+      "maxSeq": 22,
+      "sha256": "eafcd57d3531f7ac7c768e512632a3975df372c49ffd95abe7d858fd05ce93a8"
+    },
+    "deliveries": {
+      "rows": 1902,
+      "maxSeq": 1902,
+      "sha256": "57a4b389d83e257a31a9d56c29a924ae2b4e34eba1ed9024231c153aec594c8e"
+    },
+    "events": {
+      "rows": 1951,
+      "maxSeq": 1951,
+      "sha256": "f0bde96021a1fc667a346db2b8b743fc2f4563db5370b7612f0fc64497f946ce"
+    },
+    "gitea_grants": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "gitea_users": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "host_grants": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "hosts": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "instance_names": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "message_threads": {
+      "rows": 10,
+      "maxSeq": null
+    },
+    "messages": {
+      "rows": 624,
+      "maxSeq": 624
+    },
+    "meta": {
+      "rows": 3,
+      "maxSeq": null,
+      "sha256": "207b2ec9fa84801ef8a85a29f06d52bc8c4606ab7fd43e95560874f87c173f02"
+    },
+    "projects": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "cdf87b72ef95a2f988c242d35f1050f9e3e310637f84a645b51694daa924650f"
+    },
+    "role_claims": {
+      "rows": 111,
+      "maxSeq": 111,
+      "sha256": "19daa2a352bec3703a955e343f58989e5ff99c85d571aa94e5faf9a4613cd7f8"
+    },
+    "session_defaults": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "0fa4a532b106e963e200064d7f7464412a2fd6fce5a59a35ba7097d9bdca879c"
+    },
+    "sessions": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "7094392718785cbaec3d5e5bd640f4b36d1e2be1fb4b7c6a9db77308de111803"
+    },
+    "task_comment_cursors": {
+      "rows": 477,
+      "maxSeq": 477,
+      "sha256": "0f69481e4917a4ced05c36e10d73948fb364d2e49c5c12a93ab51e4b7d985d1c"
+    },
+    "task_snapshots": {
+      "rows": 516,
+      "maxSeq": 516,
+      "sha256": "eca82a7a03c84887aef0d08f6d8e8c54e950744b7ad9d57455067a65d4aa7890"
+    },
+    "thread_claims": {
+      "rows": 10,
+      "maxSeq": 10,
+      "sha256": "925e82e219ca7d469a3d9d72bd7033b9f52a47f1da272ac7ae31832a24cd1b91"
+    },
+    "thread_opens": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "threads": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "6cc7fbd14dd1d8164dbeab1e2c2911ca206c283e722724ee2b0b0a8e22e0f533"
+    },
+    "usage_records": {
+      "rows": 92,
+      "maxSeq": 92,
+      "sha256": "77bf634991e86bf14571794b6667d27ef9319ca58a93124921e1d420378a92b0",
+      "byRun": [
+        {
+          "business": "mosaic-stack",
+          "run": "r8fba7e598156",
+          "input": "0",
+          "output": "0",
+          "unknownTurns": 1
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r4a96e2142e4d",
+          "input": "2",
+          "output": "52",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc78c9700c8e9",
+          "input": "14",
+          "output": "1519",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r293f33bcbc63",
+          "input": "2",
+          "output": "44",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r34520a581318",
+          "input": "6",
+          "output": "323",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r7e99838f9f93",
+          "input": "2",
+          "output": "44",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc964611b2092",
+          "input": "4",
+          "output": "120",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rbb708846b605",
+          "input": "12",
+          "output": "2089",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc36b17ef3788",
+          "input": "16",
+          "output": "5221",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r097436c91816",
+          "input": "16",
+          "output": "3340",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r497f1c817d4d",
+          "input": "2",
+          "output": "80",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc9e993da24cf",
+          "input": "30",
+          "output": "5871",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r7646a7a4a2bd",
+          "input": "12",
+          "output": "1448",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r4004e5e09433",
+          "input": "2",
+          "output": "61",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rd0b8fdb4d62d",
+          "input": "18",
+          "output": "1714",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r62b31aae5852",
+          "input": "2",
+          "output": "31",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r2cf8536da2c3",
+          "input": "12",
+          "output": "1420",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "re6c69f1ec1f0",
+          "input": "2",
+          "output": "122",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r2c62e02f8371",
+          "input": "2",
+          "output": "68",
+          "unknownTurns": 0
+        }
+      ]
+    }
+  },
+  "untimed": [
+    "gitea_grants",
+    "gitea_users",
+    "host_grants",
+    "hosts",
+    "message_threads",
+    "meta",
+    "task_comment_cursors"
+  ]
+}
@@ -0,0 +1,258 @@
+# Re-pin window 86f95bb27 to 84f53540d (rows 191, 194, 205a, 236, 256, 264a, 268, 277, 278, 281, FED R3), migrate 3j to 3l, STATE report (W11)
+
+Operator and tester: Darkwing. Plan: `PLAN.md` in this directory, sha256
+d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c (P0 on 6d474b73 mos-1281, rechecked at 69b48863
+mos-1283 and d7b380ef mos-1284, uncommitted until Sage says refactor can take it). Tool blob 45e36eab4605
+(`scripts/stack-release.sh` at NEW). P5 found the four release scripts the same at HEAD and NEW. OLD
+86f95bb27f6cb237bf9fa9ba53320bace6c4de0b, NEW 84f53540dd0d21ef179ca29697e172b0246e78d1. NEW is 132 commits past OLD
+(`git rev-list --count 86f95bb27..84f53540d`). Every stamp below comes from `date -u` or from the transcript `W.txt`
+in this directory.
+
+Sage assigned the window (sage-2703) and gave the slot for P2, P3 and W0b to W4 (sage-2726), for W5 (sage-2740), and
+for W9 to W12 (sage-2741, sage-2748). Mos's gos and rulings: mos-1280 item 2 (the window), mos-1281 (P0, P3 with no
+`--migrate`, B0 stands, restore rule, crossing pm, W12 sha), mos-1283 and mos-1284 (plan rechecks), mos-1286 and
+mos-1287 (P3 PASS), mos-1288 (W5 go), mos-1291 (W5 verified, W9 accepted, the crossing pm ruling) and mos-1295 (w12c.sh
+6f8a5445 accepted). Q173 covers every step. `RUNNOTES.md` holds the deviations and notes, items 1 to 13.
+
+## Outcome
+
+NEW is live for mosaic-stack. W5 migrated the store from 3j through 3k to 3l, and the Console keeps its private
+socket `~/.mosaic-dev/console/tester.sock`. P1 to P6, B0, W0 to W5 and W9 to W12 passed, and nothing was rolled
+back or restored. No step failed or stopped.
+
+- W9's thread read is 264a's live check, and it passed. The W9 thread has 1 sessions row and 1 session_defaults row.
+- In S2, sessions and session_defaults have 5 rows each, the same as threads. The gitea tables are empty.
+- The pm r2cf8536da2c3 crossed the window from the last one, and W5's bus restart ended it. Mos ruled that fine
+  (mos-1291): the activate ended it, and nobody stopped it by hand.
+- The W9 pm read exited 3 again ("pm isn't running"), as last window, and moved to W12.
+- W12 passed at 15:24:29Z. The chief relayed the pm read and launched pm r410293d04d3d, which answered "Version 1.14,
+  85 ids." Row 66's counts went from 1/0/0 to checked 5, flagged 1, notices 1, broken null.
+
+Nobody acted as Jason. There was no `--by jason`, no pi, no Save and no `mosaic name`, and `bus.tester` was not
+touched. Nothing new went on: no `mosaic access`, no Gitea grant run, no `--send`, no `--sso`, no proof pair.
+Writes through 7332 without a signed-in session are still refused (401), the mos-1195 baseline.
+
+## Stamps and activation
+
+| Step | Start (UTC) | Result |
+| --- | --- | --- |
+| B0 store backup | 14:32:43.352Z to .481Z | CHECK ok, events 1940, maxSeq 1940, 3j (`b0.txt`, RUNNOTES item 1) |
+| P1 status, values | 14:45:52Z | pointer OLD, pm true, 3j; business file 1e49bdf0 (`p1.txt`) |
+| W0 copy NEW | 14:46:02Z to 14:46:04Z | fail=0, LOCK_MATCH, LOAD_OK (`w0.txt`) |
+| P4, P5, P6 | 14:46:17Z | P4 PASS, P5 PASS, `matrix-old.txt` and `tester-old.txt` |
+| P2 stubs and unit render | 14:48:07Z to 14:48:08Z | P2_STUBS_PASS (CALLS []), P2_UNITS_PASS (normalized diffs empty) |
+| P3 rehearsal (Mos) | 14:49:20Z to 14:52:16Z | REHEARSAL_PASS, rc 0, migrate 3j to 3l ok (`p3/`, mos-1286, mos-1287) |
+| W0b business file copy | 14:53:09Z | sha256 1e49bdf0 |
+| W1 idle check, S1 | 14:53:09Z | chief rd0b8fdb4d62d not working; pm r2cf8536da2c3 running, recorded as crossing; S1 b768ecae |
+| W2 status | 14:53:09Z | pointer OLD, pm true, 3j, unit flags match, check pass |
+| W3 plan | 14:53:09Z | exit 0, 3j to 3l in two steps, needs `--migrate` (given), Console line OLD's flags exactly (`W3-plan.txt` 6240dcf7) |
+| W4 unit read | 14:53:10Z | OLD units, no drop-ins, bus `--pm`, no quote or backslash |
+| W5 activate --pm --migrate --tester-socket (mos-1288) | 15:05:55Z to 15:06:00Z | exit 0, migrated to 3l (`W5.txt`) |
+| W5 status, restore plan, guard read | 15:06:00Z to 15:06:55Z | pointer NEW, pm true, 3l, check pass; W5_PASS; guard 2 |
+| W9 checks and turns | 15:07:23Z to 15:07:42Z | pass; pm read exit 3, see W9 |
+| W9b run end and S2 | 15:08:11Z; end 15:22:40.402Z; S2 15:22:45Z | ended by the launcher (thread-idle); S2 bcc01f48 |
+| W10 | 15:23:15Z | W10_PASS |
+| W11 reads | 15:23:22Z | W11_READS_OK |
+| W12 (`w12c.sh`, mos-1295) | 15:23:49Z to 15:24:29Z | W12_PASS |
+
+Activation id 20261022T150555Z-84f53540dd0d. Pointer log: activate at 15:05:55Z (backup null) and 15:06:00Z (backup
+20261022T150555Z-84f53540dd0d), the same two-line pattern as the last window. The Console flags didn't change.
+
+## Backups and hashes
+
+- B0, before the window: `~/.mosaic-dev/backups/b0-20261022T143243Z`, an online copy through sqlite's backup API,
+  laid out for `rehearse --backup`. SHA256SUMS sha256
+  7a7cb6c8565ba6db96fb3669ebbcc76a64b85bedb9937ea144daa98f14cd0f3e. P3 rehearsed from it. It was taken inside row
+  253's slot with no busy check first; Sage kept it (sage-2713, RUNNOTES item 1).
+- W5 stopped-store backup: `~/.mosaic-dev/backups/stack/20261022T150555Z-84f53540dd0d`, STAMP
+  2026-10-22T15:05:56.138Z, SCHEMA 3j, 1944 events. SHA256SUMS sha256
+  e0d408ca42a337df8498e2dfae4371489f16ff8560457b5004d3ea895f7b4389, and `sha256sum -c` passes. Mos checked the same
+  sha256 and the sums at 15:08Z (mos-1291).
+- W12 backup: `~/.mosaic-dev/backups/w12-20261022T152349Z`, online copy before W12's turns, "ok events 1951 maxSeq
+  1951 schema 3l". SHA256SUMS sha256 e5d656dffc056a028cfe2a2c7f6f3b2a99845d1628b07355c56704a7b384d86a.
+- Rollback set: `~/.mosaic-dev/state/stack-rollback/20261022T150555Z-84f53540dd0d`. Rollback goes to 86f95bb27,
+  which is 3j, so a rollback needs `--restore 20261022T150555Z-84f53540dd0d`. The restore guard at W5 counted 2 (see
+  W5). Any rollback or restore goes to Mos first (mos-1281 item 4, mos-1282), and before a real restore a B0-method
+  copy of the 3l store goes to Mos with its path and sha.
+- Business file: 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93 at P1, at W0b and again at
+  W11. The W0b copy is `~/.config/mosaic-dev/businesses/mosaic-stack.json.pre-window-20261022T145309Z` with the
+  same hash. Nothing in the window wrote it. `backups.txt` holds the B0, W0b, W5 and W12 lines.
+
+## Pointer before and after
+
+Before (W2): copy 86f95bb27f6c, pm true, schema 3j, activation 20261022T040256Z-86f95bb27f6c.
+
+After (W5, W9 and W11): copy 84f53540dd0d, pm true, schema 3l, activation 20261022T150555Z-84f53540dd0d. Console
+flags before and after: `--port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username
+--allow-user jason.woltje --tester-socket`. No `--send`, no `--sso` and no proof pair. Bus pid 3634254 since
+15:05:57.441Z, Console pid 3634256. Status at W5 shows drift of 3 commits on refactor since the pointer's copy, all
+doc and queue commits after 84f53540d.
+
+## Unit ExecStart lines (no Environment values)
+
+W11, after. Both units active, DropInPaths empty, WorkingDirectory the NEW copy:
+
+```
+bus:   ~/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/scripts/mosaic bus start mosaic-stack --pm   (MainPID 3634254)
+webui: /usr/bin/node ~/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/packages/webui/src/cli.mjs serve --checkout /mnt/storage/src/mosaic-stack --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket   (MainPID 3634256)
+```
+
+W4 read the same two lines on OLD's copy. P2 rendered both units from REPO's service scripts for NEW, and with the
+copy id swapped, the live units matched them. The bus Environment has 2 assignments with no quote or backslash. The
+values are not recorded.
+
+Tunnel: `mosaic-preview-tunnel.service` active, running, MainPID 1317, since 2026-10-13 08:40:19 CDT. The window
+didn't touch it. P4 before and after shows one R: spec, `R:0.0.0.0:7332:127.0.0.1:7332`.
+
+## S1, S2 and the store
+
+S1 (`S1.json`, sha256 b768ecaeda3dd37f2089c1e961847fbc7f663241547f15129c12ed13422a38e4) is the held snapshot at W1,
+14:53:09Z, before W5, schema 3j. S2 (`S2.json`, sha256
+bcc01f481acca09bc0dcac79555914cb94337806dbc76a3d9ebc5ef14ddbd13e) is the held snapshot at 15:22:45Z, after the
+assistant run ended, schema 3l. S2's untimed list adds gitea_grants and gitea_users to S1's five. `s12.py` prints
+the comparison.
+
+| Table | S1 rows | S2 rows | S2 vs S1 |
+|---|---|---|---|
+| events | 1940 | 1951 | +11 |
+| deliveries | 1889 | 1902 | +13 |
+| messages | 620 | 624 | +4 |
+| usage_records | 88 | 92 | +4 (byRun gains re6c69f1ec1f0 and r2c62e02f8371) |
+| role_claims | 108 | 111 | +3 |
+| thread_claims | 8 | 10 | +2 |
+| message_threads | 8 | 10 | +2 |
+| task_comment_cursors | 476 | 477 | +1 |
+| task_snapshots | 515 | 516 | +1 |
+| projects | 4 | 5 | +1 (`window-20261022-1507`, W9) |
+| threads | 4 | 5 | +1 (b85a57fe, W9) |
+| sessions, session_defaults | (3l only) | 5 each | new at 3l; one per thread |
+| gitea_grants, gitea_users | (3l only) | 0 each | new at 3l; empty |
+| decisions, decision_events | 22 | 22 | same |
+| hosts, host_grants, instance_names, thread_opens | 0 | 0 | same |
+| meta | 3 | 3 | schema_version moved to 3l |
+
+For every grown table with a seq, maxSeq grew by exactly the row delta. Events 1941 to 1944 came before W5's
+backup, which holds 1944 events. Mos read 1945 as the boot chief's launch and 1946 to 1949 as W9's test data
+(mos-1291). 1950 (action.refused not-holder) and 1951 (session.ended) close r2c62e02f8371 at 15:22:40Z, the same
+pair that closed the four earlier thread-talk runs (mos-1296). `ev.py` read the 11 events after S1's maxSeq from the
+W12 backup copy, read-only, in Sage's gap (sage-2758, `ev.txt`). By kind: task.changed.external 2, session.ended 3,
+session.launched 2, action.allowed 2, action.refused 2. None is a grant.* kind. In order:
+
+- 1941, 1942 task.changed.external at 14:53:31Z and 15:00:01Z, the tracker mirror's, not the window's.
+- 1943 session.ended chief rd0b8fdb4d62d and 1944 session.ended pm r2cf8536da2c3, both stopped, exit 0, at
+  15:05:55.9Z, W5's restart. 1944 is the crossing pm.
+- 1945 session.launched chief re6c69f1ec1f0 (claude-code), W5's restart.
+- 1946 action.allowed chief re6c69f1ec1f0 message.send to tester, within-role (W9's chief turn).
+- 1947 session.launched assistant r2c62e02f8371, thread b85a57fe (W9's thread turn).
+- 1948 action.allowed assistant r2c62e02f8371 message.send to tester.
+- 1949 action.refused tester `tester-target-not-running` (W9's pm read, exit 3).
+- 1950 action.refused assistant r2c62e02f8371 `not-holder` and 1951 session.ended assistant r2c62e02f8371 (stopped,
+  exit 0), at 15:22:40Z as the launcher ended the run on thread-idle.
+
+## W5
+
+- `stack-release.sh activate 84f53540d mosaic-stack --pm --migrate --tester-socket` exited 0. w5.sh required
+  "stopped store schema: 3j", "migrated the store to 3l", backup SCHEMA 3j and status 3l, and all held.
+- The bus journal since W5's start has one launched line: `launched chief: run re6c69f1ec1f0, claude-code
+  claude-opus-5-5`. The old chief rd0b8fdb4d62d and the crossing pm r2cf8536da2c3 both ended "stopped" at the
+  restart (15:05:55Z, Mos's store read in mos-1295).
+- `rollback mosaic-stack --restore 20261022T150555Z-84f53540dd0d --plan` exited 0 and says the store must go back to
+  3j. It prints no guard count, because the plan exits before restore_checks (RUNNOTES item 11). `guard.mjs`
+  (sha256 5f32a576) runs heldcount's query read-only on the held store with STAMP 2026-10-22T15:05:56.138Z and gave
+  2 at 15:06:55Z: 1 event (session.launched at 15:05:59.280Z, the boot chief re6c69f1ec1f0) and 1 role_claims row.
+  Mos has it (darkwing-0178, mos-1291).
+
+## W9 output
+
+- Status, console-check (CONSOLE_PASS, d068fe02), the journal counts (one "Proxy: proxy proof off", no
+  "Sign-in:"), the Console cwd on the NEW copy, `console/` drwx------ and `tester.sock` srw-------, one
+  peercred-starts line naming NEW, no `library:` line in the bus journal, no grant.* event, and one running chief
+  from this start (re6c69f1ec1f0) all passed.
+- `agents --tester` (row 277's check): W1 on OLD and W9 on NEW print the same line format, `role  run  harness
+  since`, with no thread line, since `--tester` keeps the old output. W9 lists the chief re6c69f1ec1f0 alone.
+- `talk chief --tester` (12a8fa42): RESULT 41049b67, one line, "I took no action and launched nothing".
+- Project `window-20261022-1507`, thread b85a57fe-84f9-4785-a596-135af39e334a, with sessions 1 and session_defaults
+  1. It's the window's only thread.create, and it's test data that row 269 (264b) will refuse (sage-2718).
+  `talk --thread` (d0e15a80) got one assistant reply (ccd50dc6) from run r2c62e02f8371 at 15:07:40Z. `thread read`
+  shows the tester REQUEST and the assistant RESULT.
+- `threads`, `names` (empty) and `usage` read fine. Every thread listed is a tester window thread, so no human
+  thread needed a probe.
+- The pm read, `talk pm --tester`, exited 3: "pm isn't running, so the tester's message was refused and nothing
+  was stored". It moved to W12 (mos-1291).
+- W9b: the launches log has `launch` at 15:07:35.655Z, `thread-idle` at 15:22:40.377Z and `end` at 15:22:40.402Z
+  (reason stopped, exit 0, signal null) for r2c62e02f8371, and the bus journal has "run r2c62e02f8371 (assistant)
+  ended: stopped". Nobody stopped it by hand.
+
+## W10
+
+- Matrix (`matrix-new.txt` against `matrix-old.txt`): lines a to g are identical (diff exit 0). Nothing listens on
+  7333.
+- Tester reads through NEW's `packages/cli/src/tester-http.mjs` on the socket. The `/api/config` line is identical
+  to `tester-old.txt`: 200, 73 bytes, sha256 e7ef9a40a725f356, tester true, send false, edit false.
+  `/api/bus/agents` is 200 with 1 row (the chief), 320 bytes. P6 had 2 rows; the pm ended at W5's restart.
+- P4 again at 15:23:15Z: PASS.
+- Unsigned writes through 7332 with no session: `POST /api/seen`, `POST /api/reply` and `POST /api/processing` all
+  got 401 "sign-in required". The tester-socket `POST /api/processing` got 403 `read-only`, sent false (RUNNOTES
+  item 4).
+
+## W12
+
+`w12c.sh` (sha256 6f8a5445fe20a882adb2401b11a941275565348af72f51934268e9494daa1635, accepted in mos-1295) ran from
+15:23:49Z to 15:24:29Z. It differs from last window's script only in the header comments, WIN, NEW and CHIEF
+(re6c69f1ec1f0, since W5's restart ended rd0b8fdb4d62d; RUNNOTES item 12).
+
+- Backup first: `~/.mosaic-dev/backups/w12-20261022T152349Z`, CHECK "ok events 1951 maxSeq 1951 schema 3l".
+- Baseline on chief re6c69f1ec1f0's unslop.jsonl: checked 1, flagged 0, notices 0, broken null (W9's turn).
+- Relay (step 1): `talk chief --tester` (e7fef539) got RESULT 8c807935. The chief passed the request to the pm as
+  message 86371169, marked as a tester's PM test that authorizes nothing. No pm was running, so the chief launched
+  one: run r410293d04d3d, claude-code, "by chief", since 15:24:01.208Z. `talk pm --tester` (19bb87bb) got RESULT
+  4da5024b: "Version 1.14, 85 ids." The pm read is closed.
+- r410293d04d3d is a role session, so the launcher's thread-idle stop doesn't end it (last window's correction). It
+  stays live, and nobody stopped it. If it's still live at the next window's W1, W1 records it as crossing. A stop is
+  Mos's call.
+- Row 66 (step 2): turn 1 (7fbc611b) got RESULT 26f1395d with the four banned words and the operator note
+  "[unslop: 1 reply of this session flagged since the last note ...]". Turn 2 (ba75eff6) got RESULT dc9dd22e,
+  "received".
+- Final counts (NEW's `unslopCounts`): checked 5, flagged 1, patterns ms-unslop:7 x4, notices 1, broken null.
+  Deltas over the baseline are +4, +1 and +1, so the rule (checked +2, flagged +1, notices +1, broken null)
+  gives W12_PASS.
+
+## Failed user units
+
+The same legacy units as last window, all under P19 #393, plus their `mosaic-unit-failed@` markers and
+`setspark-tmp-guard.service`, which belongs to another project. `psd-resync.service`, failed last window, isn't
+failed now. The list is in `.w11-failed.txt`. The window changed none of them.
+
+## Corrections
+
+- RUNNOTES item 10 said a stack backup has no STAMP file. That's wrong for a migrating activate: W5's backup has
+  STAMP 2026-10-22T15:05:56.138Z. The STAMP-less backup I'd looked at came from a run with no migration. Item 11
+  records the correction.
+- `w9.sh` printed "pm: no pm launch is listed after the restart (none was live at W1)" (W.txt line 723). The first
+  half holds; the parenthesis doesn't for this window, where W1 found the crossing pm. It's printed text, not a check.
+- `w12c.sh`'s start line says "(DEVIATIONS item 8)", copied from last window. This window's notes are RUNNOTES.md;
+  the edit is item 12.
+- `w10.sh`'s comment line (W.txt line 1355) says "P6: agents 1", copied from last window. `tester-old.txt` shows 2
+  agents at P6, the chief and the crossing pm. W10's 1 is the chief alone, because the pm ended at W5's restart
+  (mos-1296 item 3).
+- W12's checked count went up 4, not 2. The extra two are the relay reply and the chief's report of the pm's answer
+  (unslop log 15:24:03Z and 15:24:20Z, mos-1296). The rule is a minimum, so it holds.
+- W12 ran right after W11's reads and before this report was written, the same order as last window. Mos asked for
+  W12 after W11 (mos-1295).
+
+## W11 posts
+
+Darkwing posted the Gitea bodies from `comments.md` at 15:30:12Z to 15:30:18Z UTC in Sage's gap (sage-2758), as login
+darkwing, and read each one back equal (`post-gitea.out`): #1769 comment 30668, #1742 30669, #1692 30670, #1689 30671,
+#1782 30672, #1783 30673. The P19 386, 412 and 435 bodies are in `comments.md` for Sage, who holds the Vikunja key
+(sage-2425).
+
+## Files
+
+`W.txt` (transcript), `PLAN.md`, `RUNNOTES.md`, `S1.json`, `S2.json`, `matrix-old.txt`, `matrix-new.txt`,
+`tester-old.txt`, `backups.txt`, `b0.sh`, `b0.txt`, `p1.txt`, `P1.txt`, `p1.sh`, `p1.mjs`, `p2.sh`, `p2.txt`,
+`p2units.sh`, `p2-units.txt`, `p4.txt`, `p5.txt`, `p3/` (Mos's rehearsal transcripts), `p456.sh`, `w0.sh`, `w0.txt`,
+`wsteps.sh`, `wsteps.out`, `W3-plan.txt`, `W3-plan-nocommits.txt`, `w5.sh`, `w5.out`, `W5.txt`, `W5.start`,
+`W5-status.txt`, `W5-launched.txt`, `W5-restore-plan.txt`, `W5-guard.txt`, `guard.mjs`, `w9.sh`, `w9.out`, `w9b.sh`,
+`w9b.out`, `w10.sh`, `w10.out`, `w11.sh`, `w11.out`, `w12c.sh`, `w12c.out`, `s12.py`, `ev.py`, `ev.txt`, `comments.md`, `post-gitea.sh`, `post-gitea.out`, `w.sh`, and the `.w1*`, `.w9*`,
+`.w9b*`, `.w11*` and `.w12c*` reads. The store snapshot tool is `snapshot.mjs` (639fd28a).
@@ -0,0 +1,17 @@
+plan: activate for mosaic-stack
+from: 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+to: 84f53540dd0d21ef179ca29697e172b0246e78d1
+store schema: 3j (read from the store the running bus holds)
+target schema: 3l
+migration: 3j to 3l, after a backup of the stopped store
+migration steps: 3j to 3k, 3k to 3l
+needs: --migrate (given)
+needs: Jason present for this run (decision 96 condition 2)
+backup: the run backs up the stopped store to /home/jwoltje/.mosaic-dev/backups/stack/<activation>/ before any migration
+commits: the run adds 132 (newest first, at most 200):
+bus: scripts/bus-service.sh install --copy 84f53540dd0d21ef179ca29697e172b0246e78d1 --copies /home/jwoltje/.local/share/mosaic-stack/copies --pm --claude /home/jwoltje/.local/bin/claude
+proof: off
+send: off
+Console: scripts/webui-service.sh install --copy 84f53540dd0d21ef179ca29697e172b0246e78d1 --copies /home/jwoltje/.local/share/mosaic-stack/copies --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+CLI: scripts/stack-copy.sh wrapper 84f53540dd0d21ef179ca29697e172b0246e78d1 --copies /home/jwoltje/.local/share/mosaic-stack/copies --bin /home/jwoltje/.npm-global/bin
+interpreter: {"path":"/usr/bin/python3.14","version":[3,14,6],"dev":66308,"ino":3968163,"sha256":"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc"}
@@ -0,0 +1,149 @@
+plan: activate for mosaic-stack
+from: 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+to: 84f53540dd0d21ef179ca29697e172b0246e78d1
+store schema: 3j (read from the store the running bus holds)
+target schema: 3l
+migration: 3j to 3l, after a backup of the stopped store
+migration steps: 3j to 3k, 3k to 3l
+needs: --migrate (given)
+needs: Jason present for this run (decision 96 condition 2)
+backup: the run backs up the stopped store to /home/jwoltje/.mosaic-dev/backups/stack/<activation>/ before any migration
+commits: the run adds 132 (newest first, at most 200):
+  84f53540d row 264a r13 (#1769): BUILD.md writes M2's four edits before phase 4 reruns: the receive filter, delivery_same_session dropped from 3k-3l.sql and schema.sql, and store.mjs's SCHEMA_SHA256 set to the mutated schema; a kill counts only as a receive-test assertion; doc only (mos-1279, sage-2688, sage-2690, duckworth-0143, duckworth-0144)
+  2cc34aef8 row 264a r13 (#1769): threads.test :341 takes the 3l trigger's text, 'only to its session's holder' (delivery_same_session, 3k-3l.sql:153); BUILD.md raises the stack-release limit to 1800 s from the survey's 575 s and records the r10 and r11 reds and the r12 survey with M1 in Runs; test only (mos-1278, sage-2682)
+  93f4af12b row 264a r12 (#1769): sessions.test T2's refused() keeps every table but events equal and pins one action.refused {code: not-holder} event per refused call in call order; the old every-table check could never pass since request()'s catch (broker.mjs:4242) writes the refusal through #refused; BUILD.md records Mos's reading of sage-2257; test only (mos-1277, sage-2676)
+  75f049ed2 row 264a r11 (#1769): later3l in account-, gitea- and grant-migration names threads_id_not_session, the 3l trigger on threads (3k-3l.sql:104) the sqlite_master compares missed; test only (mos-1276 option A, sage-2672)
+  54f65f9ab row 264a r10 (#1769): rebase on landed 281 (e479521d3), all 16 =; broker.mjs overlap read; cli limit 1800 s from 281's 591 s run (sage-2665, sage-2668, sage-2647)
+  7451878b6 row 264a r9 (#1769): rebase on landed 278 (385a7194c), all 15 =; webui read check; run limits at 3x the longest recorded run (sage-2647, mos-1275)
+  16889a46b row 264a r8 (#1769): build notes correction for the r7 red (account-migration, sqlite_sequence rows from the 3k-3l inserts), the whole-snapshot audit of every migrating test, the r7 run in Runs (sage-2621, duckworth-0129)
+  c3f43960e row 264a r8 (#1769): the six migration tests that compare a whole store with sqlite_sequence after the 3k-3l step leave out the sessions and session_defaults sequence rows and assert them exactly, so any other new row still fails; usage-migration reads sqlite_sequence by name (sage-2621, duckworth-0129); unrun
+  043177846 row 264a r7 (#1769): build notes for the rebase onto landed 277 (980cec88c, sage-2608) and the per-session thread.claims; DEFERRED entry binds row 272 to make 274's user reply check session-scoped (sage-2591)
+  f3e9b6512 row 264a r7 (#1769): thread.claims reads each session's latest claim, so a thread with two held sessions lists both (sage-2591, duckworth-0124 C4); thread-claims.test threads get their default session and its T5 message names it (C5), T6 two held sessions; unrun
+  b7a05482b row 264a r6 (#1769): build notes for the rebase onto landed 274 (0165be266, sage-2588): the four user-principal conflicts, users stay at the ruled seven verbs, and why 274's thread-scoped reply check needs no session clause yet
+  4beb6433a row 264a r5 (#1769): build notes correction, rounds 1-4 never parsed three test files and no run claimed them; the round 5 gate runs every touched suite (sage-2581)
+  fbfaab365 row 264a r5 (#1769): build notes for the rebase onto landed 236 (47a35bf43, sage-2579): the 194 conflicts, message-filter.test as the 19th test file, and the escaped quotes in three DEFAULT_SESSION blocks
+  9ff668550 row 264a r5 (#1769): build notes name the op rename to legacy-3l and migration-3l by the step's target version (sage-2415)
+  5baaaa447 row 264a r5 (#1769): build notes for the 3k-3l step on row 236 (8f51900b5, sage-2412): the renames, the merged pins and lists, gitea-migration reading both steps, and the in-memory dry run on 236's schema; README op value legacy-3l
+  c4a12de3d row 264a r3 (#1769): build notes say the generation fence is equivalent to the holder_run check it replaced, and M1 shows the refusal is tested (duckworth-0108, sage-2270)
+  72fc5a330 row 264a r2 (#1769): generation fence for thread runs, a retired generation's approval, delivery and read refuse and write nothing (sage-2257); #route refuses an unknown session, README default-op note, Row 155 comment reworded, mutants M1-M3 in the build notes (duckworth-0107)
+  d6301dffc row 264a (#1769, T1 item 7): bus schema 3k to 3l, sessions below a thread
+  ae525c409 gizmoduck: row 264a bus design in the build notes: sessions and session_defaults, thread_claims, message_threads and thread_opens rebuilt with a session (legacy default id = thread id), generation, broker lookups by session, verbs, tests and pinned lists
+  b5630ca19 gizmoduck: row 264 build notes record Sage's Q1-Q7 rulings (sage-2235, 5f5b51dd6)
+  26380e3f0 gizmoduck: row 264 phase A build notes, code at da9555ca2, consumer audit first pass, five proposed slices and Q1-Q7 to Sage (sage-2233, #1769, Vikunja 463)
+  e479521d3 row 281 build notes: the manifest-round slot on 7979fb41e is green; Runs has the base, anchors, M1 exit check, dewey-0840 files, bus/business/cli whole and the shells with their limits and named skips; Mutants has M1-M22, 22 killed, M22 fails only T14 (sage-2661, dewey-0845, #1786)
+  7979fb41e row 281 build notes: the gate plan for row281-e, with each scripts/test-*.sh under a limit of at least 3x its longest recorded run (sage-2649, dewey-0840, mos-1275, #1786)
+  54ebc5d71 row 281 b5: T14 pins that the human's no takes a declined host decision out of the set, after hosts.remove left it with no host (N1); M22 drops the closed check and T14 kills it; test only, not yet run (sage-2653, dewey-0844, #1786)
+  5e05e2179 row 281 build notes: the mutant table names section 9's killing test and each mutant's failing tests from its log; every mutant fails its named test (dewey-0841, #1786)
+  6b6eb533e row 281 b4: T6b pins step 0's four Gitea reads in order and says 'before any Gitea write'; M1-M21 all killed on b4a 3f29375a8 with the M1 exit check, table in the build notes (dewey-0839, sage-2627, sage-2643, #1786)
+  f9fcf5d7b row 281 b4a: the M1 hang was T6c's held web1:add loop, which only the fire's abort ends; setup's t.after clears held and failing, and T6c and T10 release their Gitea gate; test only, no code change (mos-1273, sage-2636, #1786)
+  c055dddf4 row 281 b3: the first base run's five red tests were test faults, no code change; T4b reads the manual's revoke id from its event, T5b expects gitea-left:<id>,tokens (N10), T6b allows step 0's GET checks, gitea T8 leaves the call log out, cli T10 makes the 0700 store root; rebase onto 980cec88c noted (sage-2605, sage-2615, #1786)
+  6d62ef04e row 281 build notes: rebase onto 46dedf925 after row 256, range-diff all =, 256's actor threading doesn't change what a delete calls (sage-2597, #1786)
+  4982fa0ad row 281 b2: T1-T13 tests (fire-revokes-grants, lifecycle-revoke T1, T8 tester refusals, cli T10 pass) and the test choices in the build notes (#1786)
+  7c2c87631 row 281 b1: step G in the broker (fire and delete jobs, the grant set, the lock, boot's interrupted check) and build notes (#1786)
+  7d5f16ef9 row 281 build notes: Dewey's d6 approval with N7 (T12's step B cause survives step G) and N8 (no decision-consumed for a within-role fire) (dewey-0829, #1786)
+  a7b4f6785 row 281 design d6: the job's step C without the chief's claim, fire.failed for a step B or C failure, boot closes interrupted jobs, Q1 lines in the set (dewey-0825, #1786)
+  938378455 row 281 design d5: two requests per granted delete with its five conditions, a job id on every answer, event and message (sage-2575, #1786)
+  5f4cd2faa row 281 design d4: step G detached from the verbs, open decisions and a fired-agent raise check, one step G per agent (dewey-0823, #1786)
+  6faa0f147 row 281 design d3: a grant decision approved before a fire and executed after it, tests T6/T6b/T6c (sage-2574, #1786)
+  9867a6f32 row 281 design d2: Q1/Q2 rulings (sage-2573), the finding in the Why, T3b/T4b and M8/M9 (#1786)
+  15ab01c0c row 281 design d1: a fire or a delete revokes the instance's host and Gitea grants (sage-2568, #1786)
+  385a7194c docs(row278): record green third gate and final review evidence
+  3e4c77ac6 docs(row278): pin Mos-approved fixture and per-script timeout receipts
+  9696d1fcb test(webui): supply empty thread claims in shell bus fixture
+  f99c39a3f docs(row278): void run2 and record legacy fixture stop
+  42abda031 docs(row278): void run1 and pin approved fixture repair
+  964b6b184 test(webui): export bus error in thread claims loader fake
+  0011fe357 docs(row278): pin committed source and accepted gate rules
+  e7d21b91b feat(webui): show thread claims separately in Agents
+  2c350a466 docs(row278): freeze thread claims candidate for the gate
+  6af85df4b docs: record V502 rerun on 980cec88c
+  04a86cf33 docs: record Vikunja 502 focused verification and rebase evidence
+  407c8d7be test: harden processing failure diagnostics and cleanup
+  980cec88c queue: revs 3188-3194, row 277 in-review (Morgana 3188, request failed 3189, no token), review request 3190/3191 (Sage, c30538), Duckworth approve 3192 (c30539, posted by Sage as jarvis), landing note and done 3193/3194 (Sage)
+  c33cba810 docs: row 277 landing log line, Sage's session line, and the M8 resolve-pin DEFERRED entry (Duckworth N1, binds the next tester.test.mjs row)
+  01ea1fb11 row 236 build notes: the runs and mutants from the 10-22 slot (2c, the whole gate at bd5f11ded, 40/40 killed), doc-only (#1742)
+  b83173305 honker: row 256 (#1761) BUILD.md gate results, doc-only after landing f12441d4f: full gate green on 0165be266 (31/0 touched, M1-M4b killed, 18 packages 3757/0, 10 scripts rc=0, 4 skips none touched), Webby approve c30519
+  62f53b1e0 morgana: row 277 (#1782) r4: a thread.claims error with no bus code still throws and prints nothing (duckworth-0123 N1, M9); BUILD.md records the rebase onto 0165be266 and N2/N3
+  bda4ee613 morgana: row 277 (#1782) r3: a refused thread.claims prints the role lines and the refusal code (N1), cli README agents usage (N2), per sage-2505
+  3a5275a9a morgana: row 277 (#1782) build r2: thread-claims test helper passes a run's capability through, T1 copies store rows before the strict compare (early look sage-2504)
+  eccd6e276 morgana: row 277 (#1782) build: thread.claims bus verb for human and reader sessions (D1), mosaic agents adds thread lines without --tester or --json (C1/C2), message-filter pin moves to thread.claims (C3), tests T1-T8
+  571ca3d91 morgana: row 277 (#1782): design folder moves to queue-277 (sage-2486)
+  2f7fc6832 morgana: #1782 design r2 (duckworth-0118): C1 tester path makes one call, C2 --json keeps the agents array, C3 pin moves to thread.claims; N1-N4 taken, M7 added
+  1d5d00939 morgana: #1782 design r1 (sage-2481): owner thread claims as a human/reader verb thread.claims, agents unchanged; Console and TUI read c.role, so the briefed mixed list would need them too (Q1, Q2 to Duckworth)
+  46dedf925 queue: revs 3181-3187, row 256 in-review (Honker 3181/3182, request failed, no token), review request 3183/3184 (Sage, c30518), Webby approve 3185 (c30519, posted by Sage as jarvis), landing note and done 3186/3187 (Sage)
+  cac129e23 docs: row 256 landing log line and Sage's session line (f12441d4f, #1761 closed c30520)
+  f12441d4f honker: row 256 (#1761) b2: Webby's N1 (webby-0124): instance-settings.mjs:30 and agents.js:46 comments name the assistant, not the chief of staff; BUILD.md note; comment-only, unrun
+  e617543b8 honker: row 256 (#1761) b1: the human deletes a creative instance and any other actor is refused organization-creative-human-only; protectedRefusal is the delete check and the listing's per-reader endProtected; actor threaded through planDelete/checkDelete/instances.check; fire unchanged; DEFERRED entry closed for delete; tests T1-T8, unrun
+  d4dfc79b1 honker: row 256 design draft 2 (webby-0122): T4 uses the last-listed refusal (R1), endProtected keeps its name with comments rewritten (Q1), bus test in creative.test.mjs (Q2), M1 killed by T2 only and the chief's human-required pinned (N1), M4 for the actor threading (N2)
+  b5f1e09d6 honker: row 256 (#1761) design draft 1: one protectedRefusal predicate for delete and the listing's per-viewer endProtected, actor threaded through planDelete/checkDelete/instances.check, fire unchanged, persona file left in place
+  0165be266 queue: revs 3173-3180, row 281 claim (Megavolt 3173), row 274 in-review (Morgana 3174/3175, request failed, no token), review request 3176/3177 (Sage, c30488), Dewey approve 3178, landing note and done 3179/3180 (Sage)
+  6d6cc0f60 docs: row 274 landing log lines, Dewey's 274 and 281 session lines, and the N7 DEFERRED entry (runs suite gates mosaic-task.mjs)
+  4c485c63b morgana: FED R3 r6 (sage-2576): the collaborator-list test pins USER_VERBS as the ruled seven so M3x and M6x fail it, and its off-list set adds the grants, lifecycle, web and host verb lists; test only, unrun
+  f58cfc361 morgana: FED R3 r5 (sage-2566): covers, LEVELS and the all marker move into the business vocabulary so the broker keeps its sandbox import closure; access.mjs re-exports them, the pin test lists covers on the vocabulary line, RUNNER_FILES unchanged, M16 on the pin, the closure walk and the confined load; unrun
+  cee3f25a3 morgana: FED R3 r4 (sage-2486, sage-2557): halt refuses a granted user's thread.send while thread.messages answers (test), row 194's hire refuses an instance named user at the broker and the writer (S1, one test each), the access argument check moves before the store read (S2, test), M12-M15; unrun
+  1313bfb71 morgana: FED R3 r2 packet (sage-2299): rulings 1-5 recorded, brief's 193b1a mutant line void, manifest widens to instance-settings and its test; doc only, unrun
+  618fe0f0b morgana: FED R3 r2 (dewey-0777): role key user refused at the broker load check and by the instance writer (N1, one test each), #threadFor user clause listed as an equivalent mutant, 193b1a filter mutant not applicable, M10/M11 and the M3x two-walls run in the kit; unrun
+  d20c92bf6 morgana: FED R3 build (#414, sage-2292): user principal on the bus, bindUser with a per-request grant read, the collaborator verb list and its filters, user threads and the B6 reply path, runner user header; unrun
+  47a35bf43 queue: revs 3163-3172, row 256 claim (Honker 3163), row 236 in-review (Megavolt 3164/3165), review request 3166/3167, Dewey approve 3168, landing note and done 3169/3170, row 281 add and briefed 3171/3172 (Sage)
+  6b32424ad docs: row 236 landing log lines, and row 281 (#1786): a fire or a delete revokes the instance's grants (mos-1271)
+  bd5f11ded bus: row 236, a gitea grant raise on a broker with no Gitea path refuses gitea-not-configured (sage-2559, #1742)
+  e40b74beb bus: row 236, two out-of-manifest pins: gitea is a known grant method, and the broker imports giteaName and parseGiteaUrl (gate run sage-2554, #1742)
+  ce74477e1 bus: row 236, grants.status is a read under the kill switch, as hosts.status is (sage-2453, #1742)
+  4d9d62ae8 bus: row 236 r3, one N5 test per settle branch; README notes for a left admin token and a running executor (sage-2388, #1742)
+  5e5ba94b1 bus: row 236 r3, a revoke during a settle whoami ends revoked in the 401 and token-unknown branches (Dewey N5, #1742)
+  97bbe7fd3 bus: row 236 r2, a revoke during step 7 or a settle ends revoked; sweep fire retry checks the user id (Dewey B1, B2, #1742)
+  91f702992 bus: row 236 gap test takes any HTTP status in a grant.result (debug run 2, #1742)
+  be11a1f7e bus: row 236 tests for the static mutant gaps M8, M9, M16, M28, M29, M37 (#1742)
+  d87483d68 bus, cli: #436b Gitea grant path, schema 3j-3k (row 236, #1742)
+  be2b008cc queue: revs 3156-3162: row 194 Honker in-review and failed request (3156/3157), Sage review request (3158/3159), Webby verdict (3160), Sage landing note and done (3161/3162)
+  ab7377bcf docs: row 194 landing BUILD-LOG and SESSIONS lines (Sage)
+  fd6dd327c honker: row 194 b15 (b') (sage-2507): T15 drops the exited reviewer stand-in's registry entry by hand, the N6 convention, so the post-resume coder launch isn't refused on an entry with no provider/model; BUILD.md notes for (a) and (b')
+  5fd178e44 honker: row 194 b15 (a) (sage-2501): the Broker constructor's harnessOn, testerOn and roleFile type checks move ahead of the store reads, so a null store gets the argument error first (chief-of-staff T8b); 191's lines unchanged
+  345f3ace6 honker: row 194 b8 r3 docs: correct N4, only session.ended clears the alive flag today
+  54ec93d06 honker: row 194 b8 r3 docs (webby-0100, sage-2290): N1 corrects the N6 clock caveat (the bus clock runs ahead, so the error is over-signal); N2 DEFERRED the 64-stop done cap; N3 and N4 follow-ups; no product change
+  4f6848527 honker: row 194 b8 r2 (sage-2289): a fire stop stopRun can't confirm (unknown) reads as lifecycle.end.alive with reason unknown, never killed, and the Console flags it; cli T9a no-runtime-record test, bus T9a reason checks, M56; notes
+  c48239ec3 honker: row 194 b8 notes: base eb3abba12 (row 191), the commit 1, b4 and b6 conflict resolutions file by file, S6 design notes, the unknown-outcome question, mutants and run list
+  5d2c27442 honker: row 194 b8 S6 (sage-2241, sage-2246, sage-2261): fire's kill end goes through row 191's stopRun with the fire's request as owner, killed and alive come back as lifecycle.end.killed and lifecycle.end.alive and the Console flags a run still alive; terminate stays SIGTERM-only (V3); halted, the pass closes launches and regenerates processing-halted and a halt joins a fire's stop; terminate's pass narrows to runs spawned by the end's time (N6); T9a, T9b, T15, N6
+  9e5ad7c59 honker: row 194 b7 notes: rebase onto dcd8d4dda (row 254), channel-proof pin, N3 as a behaviour change, routes.set keep and M-next, mutant (a) kill file corrected, N6 ruling for S6
+  939356a1c honker: row 194 b7 (webby-0095 N1, sage-2248): routes.set refuses a kept instance's route to anyone but the human, as the limits writer does
+  3521c23c3 honker: row 194 b6 (webby-0094, sage-2241, sage-2245): every instance-writer verb answers restart (B1) and the CLI and Console show it for veto; fire runs the writer's checks against the file before step A, so an unloaded keep can't strand an instance firing; a fire of a delisted name revokes (N1); a host service makes no token reference (N2); only the human re-points a kept instance's model (N3); DEFERRED a human escape for a stuck fire (N4); S6 waits on row 191's stopRun contract
+  2311a50e1 honker: row 194 b4 (sage-2164, sage-2166, sage-2217): a hire and the role's hireable list refuse a creative definition; a library mapping change isn't reloaded (T14); the listing's endProtected hides a Delete the server refuses; DEFERRED creative delete; C1 testerNoSignIn closed; row 213's writer-restart pin follows D3 and T16 uses row 196's tester socket
+  29daebf54 honker: row 194 b3 sage-1634: commit() checks the revision before the revoke, so a stale delete or fire refuses revision-conflict with nothing revoked (N1); bus T21; option 2 a follow-up
+  2f08fd8f2 honker: row 194 b3 sage-1630: BUILD.md follow-up N1, a revoke that succeeds before a refused write (a stale-revision delete does it every time)
+  b8c3d0036 honker: row 194 b3 sage-1620: credential-revoke-failed says the business file is unchanged and a retry is safe (CLI and Console), W2 checks the log per case
+  14124d96d honker: row 194 b3 (sage-1605, sage-1610): fire and delete revoke before the write (T20), a human add takes a tracker bot, a store-only delete names the bot; the tester keeps the credential refusal (row 175 W2); channel-proof and project-runtime pins
+  e7fb59f22 honker: row 194 on row 199's landing cb5fdb064 (sage-1601): honker/row194-b2 85edab7c7 squashed, five conflicts kept both sides (broker imports, constructor, dispatch, the credential and lifecycle verbs; runtime imports; organization write takes detail and context; cli credentials and veto dispatch; vocabulary comment as row 199 wrote it)
+  e122aad8e queue: revs 3148-3155: row 280 Rocko start, in-review and failed review request (3148-3150), Sage review request (3151/3152), Duckworth verdict (3153), Sage landing note and done (3154/3155)
+  4c4b8559c docs: row 280 landing BUILD-LOG and SESSIONS lines (Sage); Rocko's row 280 BUILD-LOG and SESSIONS lines
+  b0fd28b6f docs: keep a slim row 280 packet with full evidence reference
+  b765f5cb8 test(bus): prove scratch sshd listener ownership before use
+  da5d3651d queue: revs 3138-3147: row 279 Rocko start and in-review (3138-3140), Sage review request (3141/3142), Dewey verdict (3143), Sage landing note and done (3144/3145); row 280 #1785 bus sshd port race added and briefed (Sage 3146/3147, mos-1270)
+  82c828116 sage: brief for the bus sshd port race row (mos-1270, #1785); 279 landing and 194 b16 third-red BUILD-LOG lines; SESSIONS lines (Sage, Rocko 279, Dewey 279 r1 and carry)
+  ceadad993 docs: record row 279 regression and mutant evidence
+  f5611c937 fix(processing): observe run status after stop deadline overshoot
+  343b6dd76 queue: revs 3134-3137: row 277 brief re-pin (Sage 3134), Morgana 277 claim (3135); row 279 #1784 stopRun deadline added and briefed (Sage 3136/3137, mos-1269)
+  f40f2e770 sage: brief for the stopRun deadline row (mos-1269), the 191 follow-up row 194 b15's gate found
+  23c3d6218 queue: revs 3130-3133 (Sage): row 277 #1782 owner thread claims added and briefed; row 278 #1783 Console thread claims added and briefed
+  70e289ba7 sage: #1782 design D1 ruling (sage-2487) and the Console thread-claims follow-up brief
+  ab50de9fe queue: revs 3114-3129: rows 191, 205, 268 landed and done (Sage 3116/3117, 3119/3120, 3123/3124, 3126-3129); Rocko 191 in-review 3114/3115; Dewey 191 verdict 3118; Morgana 205 in-review 3121/3122; Duckworth 205 verdict 3125
+  b3665f5ab sage: docs for landings 191, 205, 268; #1782 owner thread-claims brief (mos-1262); re-pin 86f95bb27 plan; phase 2 window draft 3; seat SESSIONS and BUILD-LOG lines
+  c27207f6e row 268 (C2-01c, #1773, Vikunja 464): playgrounds at three levels; classify checks prefixes first
+  ce6a96ad6 morgana: row 205 r2 (sage-2430): put() events carry their decision so the decision trail reaches them; pin checks the thread claim via threadsState, owner read is a follow-up row
+  59f708ca2 morgana: row 205a build (sage-2288): trail and replies hide other users' thread messages from owner, reader and tester; hidden answers as unknown; #readable owner-only; design d2 rulings
+  f751505ad morgana: row 205 design d1 (sage-2280): FED R3 unfiled, so split 205a message filter now and 205b viewer verbs after R3; mutant 3 to 193b2; hidden trail subject returns []
+  0fa7bf421 fix: place processing controls within the Console navigation box
+  93d211c29 fix: allocate Console viewport space to processing controls
+  08c896e3c docs: record processing gate failures and timer fixture correction
+  03ed2bccc test: attribute processing timer to its owning script
+  ad6020754 fix: stop processing controls on Console sign-out and preserve layout
+  5c8f983dd test: initialize processing control in Discord CLI fixtures
+  f1267e49a fix: account for processing controls in image inputs and launch fixtures
+  d2be97c5f test: use private tester socket for processing controls
+  c13c68c81 test: strengthen processing cancellation and refusal guards
+  4bdc7e0e8 processing: inspectable per-run stop seam for lifecycle fire
+bus: scripts/bus-service.sh install --copy 84f53540dd0d21ef179ca29697e172b0246e78d1 --copies /home/jwoltje/.local/share/mosaic-stack/copies --pm --claude /home/jwoltje/.local/bin/claude
+proof: off
+send: off
+Console: scripts/webui-service.sh install --copy 84f53540dd0d21ef179ca29697e172b0246e78d1 --copies /home/jwoltje/.local/share/mosaic-stack/copies --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+CLI: scripts/stack-copy.sh wrapper 84f53540dd0d21ef179ca29697e172b0246e78d1 --copies /home/jwoltje/.local/share/mosaic-stack/copies --bin /home/jwoltje/.npm-global/bin
+interpreter: {"path":"/usr/bin/python3.14","version":[3,14,6],"dev":66308,"ino":3968163,"sha256":"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc"}
@@ -0,0 +1,4 @@
+guard	2	1 event(s), 1 role_claims row(s)
+events columns seq,id,at,business,kind,actor_role,actor_run,subject,corrects,body
+type session.launched 1 first 2026-10-22T15:05:59.280Z last 2026-10-22T15:05:59.280Z
+schema 3l
@@ -0,0 +1 @@
+launched chief: run re6c69f1ec1f0, claude-code claude-opus-5-5
@@ -0,0 +1,145 @@
+plan: rollback for mosaic-stack
+from: 84f53540dd0d21ef179ca29697e172b0246e78d1
+to: 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+store schema: 3l (read from the store the running bus holds)
+target schema: 3j
+restore: the store must go back to 3j; needs --restore 20261022T150555Z-84f53540dd0d
+commits: the run takes away 132 (newest first, at most 200):
+  84f53540d row 264a r13 (#1769): BUILD.md writes M2's four edits before phase 4 reruns: the receive filter, delivery_same_session dropped from 3k-3l.sql and schema.sql, and store.mjs's SCHEMA_SHA256 set to the mutated schema; a kill counts only as a receive-test assertion; doc only (mos-1279, sage-2688, sage-2690, duckworth-0143, duckworth-0144)
+  2cc34aef8 row 264a r13 (#1769): threads.test :341 takes the 3l trigger's text, 'only to its session's holder' (delivery_same_session, 3k-3l.sql:153); BUILD.md raises the stack-release limit to 1800 s from the survey's 575 s and records the r10 and r11 reds and the r12 survey with M1 in Runs; test only (mos-1278, sage-2682)
+  93f4af12b row 264a r12 (#1769): sessions.test T2's refused() keeps every table but events equal and pins one action.refused {code: not-holder} event per refused call in call order; the old every-table check could never pass since request()'s catch (broker.mjs:4242) writes the refusal through #refused; BUILD.md records Mos's reading of sage-2257; test only (mos-1277, sage-2676)
+  75f049ed2 row 264a r11 (#1769): later3l in account-, gitea- and grant-migration names threads_id_not_session, the 3l trigger on threads (3k-3l.sql:104) the sqlite_master compares missed; test only (mos-1276 option A, sage-2672)
+  54f65f9ab row 264a r10 (#1769): rebase on landed 281 (e479521d3), all 16 =; broker.mjs overlap read; cli limit 1800 s from 281's 591 s run (sage-2665, sage-2668, sage-2647)
+  7451878b6 row 264a r9 (#1769): rebase on landed 278 (385a7194c), all 15 =; webui read check; run limits at 3x the longest recorded run (sage-2647, mos-1275)
+  16889a46b row 264a r8 (#1769): build notes correction for the r7 red (account-migration, sqlite_sequence rows from the 3k-3l inserts), the whole-snapshot audit of every migrating test, the r7 run in Runs (sage-2621, duckworth-0129)
+  c3f43960e row 264a r8 (#1769): the six migration tests that compare a whole store with sqlite_sequence after the 3k-3l step leave out the sessions and session_defaults sequence rows and assert them exactly, so any other new row still fails; usage-migration reads sqlite_sequence by name (sage-2621, duckworth-0129); unrun
+  043177846 row 264a r7 (#1769): build notes for the rebase onto landed 277 (980cec88c, sage-2608) and the per-session thread.claims; DEFERRED entry binds row 272 to make 274's user reply check session-scoped (sage-2591)
+  f3e9b6512 row 264a r7 (#1769): thread.claims reads each session's latest claim, so a thread with two held sessions lists both (sage-2591, duckworth-0124 C4); thread-claims.test threads get their default session and its T5 message names it (C5), T6 two held sessions; unrun
+  b7a05482b row 264a r6 (#1769): build notes for the rebase onto landed 274 (0165be266, sage-2588): the four user-principal conflicts, users stay at the ruled seven verbs, and why 274's thread-scoped reply check needs no session clause yet
+  4beb6433a row 264a r5 (#1769): build notes correction, rounds 1-4 never parsed three test files and no run claimed them; the round 5 gate runs every touched suite (sage-2581)
+  fbfaab365 row 264a r5 (#1769): build notes for the rebase onto landed 236 (47a35bf43, sage-2579): the 194 conflicts, message-filter.test as the 19th test file, and the escaped quotes in three DEFAULT_SESSION blocks
+  9ff668550 row 264a r5 (#1769): build notes name the op rename to legacy-3l and migration-3l by the step's target version (sage-2415)
+  5baaaa447 row 264a r5 (#1769): build notes for the 3k-3l step on row 236 (8f51900b5, sage-2412): the renames, the merged pins and lists, gitea-migration reading both steps, and the in-memory dry run on 236's schema; README op value legacy-3l
+  c4a12de3d row 264a r3 (#1769): build notes say the generation fence is equivalent to the holder_run check it replaced, and M1 shows the refusal is tested (duckworth-0108, sage-2270)
+  72fc5a330 row 264a r2 (#1769): generation fence for thread runs, a retired generation's approval, delivery and read refuse and write nothing (sage-2257); #route refuses an unknown session, README default-op note, Row 155 comment reworded, mutants M1-M3 in the build notes (duckworth-0107)
+  d6301dffc row 264a (#1769, T1 item 7): bus schema 3k to 3l, sessions below a thread
+  ae525c409 gizmoduck: row 264a bus design in the build notes: sessions and session_defaults, thread_claims, message_threads and thread_opens rebuilt with a session (legacy default id = thread id), generation, broker lookups by session, verbs, tests and pinned lists
+  b5630ca19 gizmoduck: row 264 build notes record Sage's Q1-Q7 rulings (sage-2235, 5f5b51dd6)
+  26380e3f0 gizmoduck: row 264 phase A build notes, code at da9555ca2, consumer audit first pass, five proposed slices and Q1-Q7 to Sage (sage-2233, #1769, Vikunja 463)
+  e479521d3 row 281 build notes: the manifest-round slot on 7979fb41e is green; Runs has the base, anchors, M1 exit check, dewey-0840 files, bus/business/cli whole and the shells with their limits and named skips; Mutants has M1-M22, 22 killed, M22 fails only T14 (sage-2661, dewey-0845, #1786)
+  7979fb41e row 281 build notes: the gate plan for row281-e, with each scripts/test-*.sh under a limit of at least 3x its longest recorded run (sage-2649, dewey-0840, mos-1275, #1786)
+  54ebc5d71 row 281 b5: T14 pins that the human's no takes a declined host decision out of the set, after hosts.remove left it with no host (N1); M22 drops the closed check and T14 kills it; test only, not yet run (sage-2653, dewey-0844, #1786)
+  5e05e2179 row 281 build notes: the mutant table names section 9's killing test and each mutant's failing tests from its log; every mutant fails its named test (dewey-0841, #1786)
+  6b6eb533e row 281 b4: T6b pins step 0's four Gitea reads in order and says 'before any Gitea write'; M1-M21 all killed on b4a 3f29375a8 with the M1 exit check, table in the build notes (dewey-0839, sage-2627, sage-2643, #1786)
+  f9fcf5d7b row 281 b4a: the M1 hang was T6c's held web1:add loop, which only the fire's abort ends; setup's t.after clears held and failing, and T6c and T10 release their Gitea gate; test only, no code change (mos-1273, sage-2636, #1786)
+  c055dddf4 row 281 b3: the first base run's five red tests were test faults, no code change; T4b reads the manual's revoke id from its event, T5b expects gitea-left:<id>,tokens (N10), T6b allows step 0's GET checks, gitea T8 leaves the call log out, cli T10 makes the 0700 store root; rebase onto 980cec88c noted (sage-2605, sage-2615, #1786)
+  6d62ef04e row 281 build notes: rebase onto 46dedf925 after row 256, range-diff all =, 256's actor threading doesn't change what a delete calls (sage-2597, #1786)
+  4982fa0ad row 281 b2: T1-T13 tests (fire-revokes-grants, lifecycle-revoke T1, T8 tester refusals, cli T10 pass) and the test choices in the build notes (#1786)
+  7c2c87631 row 281 b1: step G in the broker (fire and delete jobs, the grant set, the lock, boot's interrupted check) and build notes (#1786)
+  7d5f16ef9 row 281 build notes: Dewey's d6 approval with N7 (T12's step B cause survives step G) and N8 (no decision-consumed for a within-role fire) (dewey-0829, #1786)
+  a7b4f6785 row 281 design d6: the job's step C without the chief's claim, fire.failed for a step B or C failure, boot closes interrupted jobs, Q1 lines in the set (dewey-0825, #1786)
+  938378455 row 281 design d5: two requests per granted delete with its five conditions, a job id on every answer, event and message (sage-2575, #1786)
+  5f4cd2faa row 281 design d4: step G detached from the verbs, open decisions and a fired-agent raise check, one step G per agent (dewey-0823, #1786)
+  6faa0f147 row 281 design d3: a grant decision approved before a fire and executed after it, tests T6/T6b/T6c (sage-2574, #1786)
+  9867a6f32 row 281 design d2: Q1/Q2 rulings (sage-2573), the finding in the Why, T3b/T4b and M8/M9 (#1786)
+  15ab01c0c row 281 design d1: a fire or a delete revokes the instance's host and Gitea grants (sage-2568, #1786)
+  385a7194c docs(row278): record green third gate and final review evidence
+  3e4c77ac6 docs(row278): pin Mos-approved fixture and per-script timeout receipts
+  9696d1fcb test(webui): supply empty thread claims in shell bus fixture
+  f99c39a3f docs(row278): void run2 and record legacy fixture stop
+  42abda031 docs(row278): void run1 and pin approved fixture repair
+  964b6b184 test(webui): export bus error in thread claims loader fake
+  0011fe357 docs(row278): pin committed source and accepted gate rules
+  e7d21b91b feat(webui): show thread claims separately in Agents
+  2c350a466 docs(row278): freeze thread claims candidate for the gate
+  6af85df4b docs: record V502 rerun on 980cec88c
+  04a86cf33 docs: record Vikunja 502 focused verification and rebase evidence
+  407c8d7be test: harden processing failure diagnostics and cleanup
+  980cec88c queue: revs 3188-3194, row 277 in-review (Morgana 3188, request failed 3189, no token), review request 3190/3191 (Sage, c30538), Duckworth approve 3192 (c30539, posted by Sage as jarvis), landing note and done 3193/3194 (Sage)
+  c33cba810 docs: row 277 landing log line, Sage's session line, and the M8 resolve-pin DEFERRED entry (Duckworth N1, binds the next tester.test.mjs row)
+  01ea1fb11 row 236 build notes: the runs and mutants from the 10-22 slot (2c, the whole gate at bd5f11ded, 40/40 killed), doc-only (#1742)
+  b83173305 honker: row 256 (#1761) BUILD.md gate results, doc-only after landing f12441d4f: full gate green on 0165be266 (31/0 touched, M1-M4b killed, 18 packages 3757/0, 10 scripts rc=0, 4 skips none touched), Webby approve c30519
+  62f53b1e0 morgana: row 277 (#1782) r4: a thread.claims error with no bus code still throws and prints nothing (duckworth-0123 N1, M9); BUILD.md records the rebase onto 0165be266 and N2/N3
+  bda4ee613 morgana: row 277 (#1782) r3: a refused thread.claims prints the role lines and the refusal code (N1), cli README agents usage (N2), per sage-2505
+  3a5275a9a morgana: row 277 (#1782) build r2: thread-claims test helper passes a run's capability through, T1 copies store rows before the strict compare (early look sage-2504)
+  eccd6e276 morgana: row 277 (#1782) build: thread.claims bus verb for human and reader sessions (D1), mosaic agents adds thread lines without --tester or --json (C1/C2), message-filter pin moves to thread.claims (C3), tests T1-T8
+  571ca3d91 morgana: row 277 (#1782): design folder moves to queue-277 (sage-2486)
+  2f7fc6832 morgana: #1782 design r2 (duckworth-0118): C1 tester path makes one call, C2 --json keeps the agents array, C3 pin moves to thread.claims; N1-N4 taken, M7 added
+  1d5d00939 morgana: #1782 design r1 (sage-2481): owner thread claims as a human/reader verb thread.claims, agents unchanged; Console and TUI read c.role, so the briefed mixed list would need them too (Q1, Q2 to Duckworth)
+  46dedf925 queue: revs 3181-3187, row 256 in-review (Honker 3181/3182, request failed, no token), review request 3183/3184 (Sage, c30518), Webby approve 3185 (c30519, posted by Sage as jarvis), landing note and done 3186/3187 (Sage)
+  cac129e23 docs: row 256 landing log line and Sage's session line (f12441d4f, #1761 closed c30520)
+  f12441d4f honker: row 256 (#1761) b2: Webby's N1 (webby-0124): instance-settings.mjs:30 and agents.js:46 comments name the assistant, not the chief of staff; BUILD.md note; comment-only, unrun
+  e617543b8 honker: row 256 (#1761) b1: the human deletes a creative instance and any other actor is refused organization-creative-human-only; protectedRefusal is the delete check and the listing's per-reader endProtected; actor threaded through planDelete/checkDelete/instances.check; fire unchanged; DEFERRED entry closed for delete; tests T1-T8, unrun
+  d4dfc79b1 honker: row 256 design draft 2 (webby-0122): T4 uses the last-listed refusal (R1), endProtected keeps its name with comments rewritten (Q1), bus test in creative.test.mjs (Q2), M1 killed by T2 only and the chief's human-required pinned (N1), M4 for the actor threading (N2)
+  b5f1e09d6 honker: row 256 (#1761) design draft 1: one protectedRefusal predicate for delete and the listing's per-viewer endProtected, actor threaded through planDelete/checkDelete/instances.check, fire unchanged, persona file left in place
+  0165be266 queue: revs 3173-3180, row 281 claim (Megavolt 3173), row 274 in-review (Morgana 3174/3175, request failed, no token), review request 3176/3177 (Sage, c30488), Dewey approve 3178, landing note and done 3179/3180 (Sage)
+  6d6cc0f60 docs: row 274 landing log lines, Dewey's 274 and 281 session lines, and the N7 DEFERRED entry (runs suite gates mosaic-task.mjs)
+  4c485c63b morgana: FED R3 r6 (sage-2576): the collaborator-list test pins USER_VERBS as the ruled seven so M3x and M6x fail it, and its off-list set adds the grants, lifecycle, web and host verb lists; test only, unrun
+  f58cfc361 morgana: FED R3 r5 (sage-2566): covers, LEVELS and the all marker move into the business vocabulary so the broker keeps its sandbox import closure; access.mjs re-exports them, the pin test lists covers on the vocabulary line, RUNNER_FILES unchanged, M16 on the pin, the closure walk and the confined load; unrun
+  cee3f25a3 morgana: FED R3 r4 (sage-2486, sage-2557): halt refuses a granted user's thread.send while thread.messages answers (test), row 194's hire refuses an instance named user at the broker and the writer (S1, one test each), the access argument check moves before the store read (S2, test), M12-M15; unrun
+  1313bfb71 morgana: FED R3 r2 packet (sage-2299): rulings 1-5 recorded, brief's 193b1a mutant line void, manifest widens to instance-settings and its test; doc only, unrun
+  618fe0f0b morgana: FED R3 r2 (dewey-0777): role key user refused at the broker load check and by the instance writer (N1, one test each), #threadFor user clause listed as an equivalent mutant, 193b1a filter mutant not applicable, M10/M11 and the M3x two-walls run in the kit; unrun
+  d20c92bf6 morgana: FED R3 build (#414, sage-2292): user principal on the bus, bindUser with a per-request grant read, the collaborator verb list and its filters, user threads and the B6 reply path, runner user header; unrun
+  47a35bf43 queue: revs 3163-3172, row 256 claim (Honker 3163), row 236 in-review (Megavolt 3164/3165), review request 3166/3167, Dewey approve 3168, landing note and done 3169/3170, row 281 add and briefed 3171/3172 (Sage)
+  6b32424ad docs: row 236 landing log lines, and row 281 (#1786): a fire or a delete revokes the instance's grants (mos-1271)
+  bd5f11ded bus: row 236, a gitea grant raise on a broker with no Gitea path refuses gitea-not-configured (sage-2559, #1742)
+  e40b74beb bus: row 236, two out-of-manifest pins: gitea is a known grant method, and the broker imports giteaName and parseGiteaUrl (gate run sage-2554, #1742)
+  ce74477e1 bus: row 236, grants.status is a read under the kill switch, as hosts.status is (sage-2453, #1742)
+  4d9d62ae8 bus: row 236 r3, one N5 test per settle branch; README notes for a left admin token and a running executor (sage-2388, #1742)
+  5e5ba94b1 bus: row 236 r3, a revoke during a settle whoami ends revoked in the 401 and token-unknown branches (Dewey N5, #1742)
+  97bbe7fd3 bus: row 236 r2, a revoke during step 7 or a settle ends revoked; sweep fire retry checks the user id (Dewey B1, B2, #1742)
+  91f702992 bus: row 236 gap test takes any HTTP status in a grant.result (debug run 2, #1742)
+  be11a1f7e bus: row 236 tests for the static mutant gaps M8, M9, M16, M28, M29, M37 (#1742)
+  d87483d68 bus, cli: #436b Gitea grant path, schema 3j-3k (row 236, #1742)
+  be2b008cc queue: revs 3156-3162: row 194 Honker in-review and failed request (3156/3157), Sage review request (3158/3159), Webby verdict (3160), Sage landing note and done (3161/3162)
+  ab7377bcf docs: row 194 landing BUILD-LOG and SESSIONS lines (Sage)
+  fd6dd327c honker: row 194 b15 (b') (sage-2507): T15 drops the exited reviewer stand-in's registry entry by hand, the N6 convention, so the post-resume coder launch isn't refused on an entry with no provider/model; BUILD.md notes for (a) and (b')
+  5fd178e44 honker: row 194 b15 (a) (sage-2501): the Broker constructor's harnessOn, testerOn and roleFile type checks move ahead of the store reads, so a null store gets the argument error first (chief-of-staff T8b); 191's lines unchanged
+  345f3ace6 honker: row 194 b8 r3 docs: correct N4, only session.ended clears the alive flag today
+  54ec93d06 honker: row 194 b8 r3 docs (webby-0100, sage-2290): N1 corrects the N6 clock caveat (the bus clock runs ahead, so the error is over-signal); N2 DEFERRED the 64-stop done cap; N3 and N4 follow-ups; no product change
+  4f6848527 honker: row 194 b8 r2 (sage-2289): a fire stop stopRun can't confirm (unknown) reads as lifecycle.end.alive with reason unknown, never killed, and the Console flags it; cli T9a no-runtime-record test, bus T9a reason checks, M56; notes
+  c48239ec3 honker: row 194 b8 notes: base eb3abba12 (row 191), the commit 1, b4 and b6 conflict resolutions file by file, S6 design notes, the unknown-outcome question, mutants and run list
+  5d2c27442 honker: row 194 b8 S6 (sage-2241, sage-2246, sage-2261): fire's kill end goes through row 191's stopRun with the fire's request as owner, killed and alive come back as lifecycle.end.killed and lifecycle.end.alive and the Console flags a run still alive; terminate stays SIGTERM-only (V3); halted, the pass closes launches and regenerates processing-halted and a halt joins a fire's stop; terminate's pass narrows to runs spawned by the end's time (N6); T9a, T9b, T15, N6
+  9e5ad7c59 honker: row 194 b7 notes: rebase onto dcd8d4dda (row 254), channel-proof pin, N3 as a behaviour change, routes.set keep and M-next, mutant (a) kill file corrected, N6 ruling for S6
+  939356a1c honker: row 194 b7 (webby-0095 N1, sage-2248): routes.set refuses a kept instance's route to anyone but the human, as the limits writer does
+  3521c23c3 honker: row 194 b6 (webby-0094, sage-2241, sage-2245): every instance-writer verb answers restart (B1) and the CLI and Console show it for veto; fire runs the writer's checks against the file before step A, so an unloaded keep can't strand an instance firing; a fire of a delisted name revokes (N1); a host service makes no token reference (N2); only the human re-points a kept instance's model (N3); DEFERRED a human escape for a stuck fire (N4); S6 waits on row 191's stopRun contract
+  2311a50e1 honker: row 194 b4 (sage-2164, sage-2166, sage-2217): a hire and the role's hireable list refuse a creative definition; a library mapping change isn't reloaded (T14); the listing's endProtected hides a Delete the server refuses; DEFERRED creative delete; C1 testerNoSignIn closed; row 213's writer-restart pin follows D3 and T16 uses row 196's tester socket
+  29daebf54 honker: row 194 b3 sage-1634: commit() checks the revision before the revoke, so a stale delete or fire refuses revision-conflict with nothing revoked (N1); bus T21; option 2 a follow-up
+  2f08fd8f2 honker: row 194 b3 sage-1630: BUILD.md follow-up N1, a revoke that succeeds before a refused write (a stale-revision delete does it every time)
+  b8c3d0036 honker: row 194 b3 sage-1620: credential-revoke-failed says the business file is unchanged and a retry is safe (CLI and Console), W2 checks the log per case
+  14124d96d honker: row 194 b3 (sage-1605, sage-1610): fire and delete revoke before the write (T20), a human add takes a tracker bot, a store-only delete names the bot; the tester keeps the credential refusal (row 175 W2); channel-proof and project-runtime pins
+  e7fb59f22 honker: row 194 on row 199's landing cb5fdb064 (sage-1601): honker/row194-b2 85edab7c7 squashed, five conflicts kept both sides (broker imports, constructor, dispatch, the credential and lifecycle verbs; runtime imports; organization write takes detail and context; cli credentials and veto dispatch; vocabulary comment as row 199 wrote it)
+  e122aad8e queue: revs 3148-3155: row 280 Rocko start, in-review and failed review request (3148-3150), Sage review request (3151/3152), Duckworth verdict (3153), Sage landing note and done (3154/3155)
+  4c4b8559c docs: row 280 landing BUILD-LOG and SESSIONS lines (Sage); Rocko's row 280 BUILD-LOG and SESSIONS lines
+  b0fd28b6f docs: keep a slim row 280 packet with full evidence reference
+  b765f5cb8 test(bus): prove scratch sshd listener ownership before use
+  da5d3651d queue: revs 3138-3147: row 279 Rocko start and in-review (3138-3140), Sage review request (3141/3142), Dewey verdict (3143), Sage landing note and done (3144/3145); row 280 #1785 bus sshd port race added and briefed (Sage 3146/3147, mos-1270)
+  82c828116 sage: brief for the bus sshd port race row (mos-1270, #1785); 279 landing and 194 b16 third-red BUILD-LOG lines; SESSIONS lines (Sage, Rocko 279, Dewey 279 r1 and carry)
+  ceadad993 docs: record row 279 regression and mutant evidence
+  f5611c937 fix(processing): observe run status after stop deadline overshoot
+  343b6dd76 queue: revs 3134-3137: row 277 brief re-pin (Sage 3134), Morgana 277 claim (3135); row 279 #1784 stopRun deadline added and briefed (Sage 3136/3137, mos-1269)
+  f40f2e770 sage: brief for the stopRun deadline row (mos-1269), the 191 follow-up row 194 b15's gate found
+  23c3d6218 queue: revs 3130-3133 (Sage): row 277 #1782 owner thread claims added and briefed; row 278 #1783 Console thread claims added and briefed
+  70e289ba7 sage: #1782 design D1 ruling (sage-2487) and the Console thread-claims follow-up brief
+  ab50de9fe queue: revs 3114-3129: rows 191, 205, 268 landed and done (Sage 3116/3117, 3119/3120, 3123/3124, 3126-3129); Rocko 191 in-review 3114/3115; Dewey 191 verdict 3118; Morgana 205 in-review 3121/3122; Duckworth 205 verdict 3125
+  b3665f5ab sage: docs for landings 191, 205, 268; #1782 owner thread-claims brief (mos-1262); re-pin 86f95bb27 plan; phase 2 window draft 3; seat SESSIONS and BUILD-LOG lines
+  c27207f6e row 268 (C2-01c, #1773, Vikunja 464): playgrounds at three levels; classify checks prefixes first
+  ce6a96ad6 morgana: row 205 r2 (sage-2430): put() events carry their decision so the decision trail reaches them; pin checks the thread claim via threadsState, owner read is a follow-up row
+  59f708ca2 morgana: row 205a build (sage-2288): trail and replies hide other users' thread messages from owner, reader and tester; hidden answers as unknown; #readable owner-only; design d2 rulings
+  f751505ad morgana: row 205 design d1 (sage-2280): FED R3 unfiled, so split 205a message filter now and 205b viewer verbs after R3; mutant 3 to 193b2; hidden trail subject returns []
+  0fa7bf421 fix: place processing controls within the Console navigation box
+  93d211c29 fix: allocate Console viewport space to processing controls
+  08c896e3c docs: record processing gate failures and timer fixture correction
+  03ed2bccc test: attribute processing timer to its owning script
+  ad6020754 fix: stop processing controls on Console sign-out and preserve layout
+  5c8f983dd test: initialize processing control in Discord CLI fixtures
+  f1267e49a fix: account for processing controls in image inputs and launch fixtures
+  d2be97c5f test: use private tester socket for processing controls
+  c13c68c81 test: strengthen processing cancellation and refusal guards
+  4bdc7e0e8 processing: inspectable per-run stop seam for lifecycle fire
+bus: scripts/bus-service.sh install --copy 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b --copies /home/jwoltje/.local/share/mosaic-stack/copies --pm --claude /home/jwoltje/.local/bin/claude
+proof: off
+send: off
+Console: scripts/webui-service.sh install --copy 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b --copies /home/jwoltje/.local/share/mosaic-stack/copies --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+CLI: scripts/stack-copy.sh wrapper 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b --copies /home/jwoltje/.local/share/mosaic-stack/copies --bin /home/jwoltje/.npm-global/bin
+interpreter: {"path":"/usr/bin/python3.14","version":[3,14,6],"dev":66308,"ino":3968163,"sha256":"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc"}
@@ -0,0 +1,20 @@
+pointer: /home/jwoltje/.mosaic-dev/state/stack-active.json
+  {"copy":"84f53540dd0d21ef179ca29697e172b0246e78d1","business":"mosaic-stack","pm":true,"claude":"/home/jwoltje/.local/bin/claude","console":["--port","7332","--public-host","mosaic.woltje.com","--auth-header","X-authentik-username","--allow-user","jason.woltje","--tester-socket"],"schema":"3l","activation":"20261022T150555Z-84f53540dd0d","at":"2026-10-22T15:06:00Z"}
+log (last five lines):
+  {"at":"2026-10-21T21:59:31Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":"20261021T215926Z-7247d80c7af7","activation":"20261021T215926Z-7247d80c7af7","result":"ok"}
+  {"at":"2026-10-22T04:02:56Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":null,"activation":"20261022T040256Z-86f95bb27f6c","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T04:03:00Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":"20261022T040256Z-86f95bb27f6c","activation":"20261022T040256Z-86f95bb27f6c","result":"ok"}
+  {"at":"2026-10-22T15:05:55Z","op":"activate","from":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","to":"84f53540dd0d21ef179ca29697e172b0246e78d1","backup":null,"activation":"20261022T150555Z-84f53540dd0d","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T15:06:00Z","op":"activate","from":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","to":"84f53540dd0d21ef179ca29697e172b0246e78d1","backup":"20261022T150555Z-84f53540dd0d","activation":"20261022T150555Z-84f53540dd0d","result":"ok"}
+check:
+  bus: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  Console: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  CLI: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  result: pass
+bus status:
+  host: mosaic-stack, pid 3634254, running, since 2026-10-22T15:05:57.441Z, notifier off
+  socket: present
+  writer.lock: pid 3634311
+  boot: organization file loaded at 2026-10-22T15:05:57.439Z
+unit flags: match the pointer
+drift: 3 commit(s) on refactor since the pointer's copy
@@ -0,0 +1 @@
+2026-10-22T15:05:55Z
@@ -0,0 +1,14 @@
+
+## W5 activate NEW --pm --migrate --tester-socket (mos-1288)
+# start 2026-10-22T15:05:55.575Z
+# command: (cd $REPO && <clean env> scripts/stack-release.sh activate 84f53540dd0d21ef179ca29697e172b0246e78d1 mosaic-stack --pm --migrate --tester-socket)
+stack-release: interpreter: {"path":"/usr/bin/python3.14","version":[3,14,6],"dev":66308,"ino":3968163,"sha256":"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc"}
+stack-release: captured the rollback set: /home/jwoltje/.mosaic-dev/state/stack-rollback/20261022T150555Z-84f53540dd0d
+stack-release: stopped both units
+stack-release: stopped store schema: 3j
+stack-release: backup: /home/jwoltje/.mosaic-dev/backups/stack/20261022T150555Z-84f53540dd0d
+stack-release: migrated the store to 3l
+stack-release: installed 84f53540dd0d21ef179ca29697e172b0246e78d1
+stack-release: gate passed on 84f53540dd0d21ef179ca29697e172b0246e78d1
+stack-release: activate ok: 84f53540dd0d21ef179ca29697e172b0246e78d1 is live for mosaic-stack
+# exit 0, end 2026-10-22T15:06:00.173Z
@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, B0 (window-repin-84f53540d/PLAN.md "Schema and backups"; sage-2703 item 3).
+# An online copy of the held live store through sqlite's backup API, read-only on the source, as in
+# window-repin-7247d80c7/w12.sh. Laid out the way `rehearse --backup PATH` reads it (stack-release.sh:2232-2235):
+#   $DATA/backups/b0-<STAMP>/bus/bus.sqlite   the copy, and nothing else in bus/ (rehearse copies bus/*)
+#   $DATA/backups/b0-<STAMP>/SHA256SUMS       written from inside bus/, so it names bus.sqlite
+#   $DATA/backups/b0-<STAMP>/SCHEMA           the copy's meta schema_version, which must read 3j
+#   $DATA/backups/b0-<STAMP>/CHECK            integrity_check, the event count and maxSeq
+# Nothing live changes. A failed check stops the script.
+# usage: b0.sh
+set -uo pipefail
+WIN=/mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d
+DATA=$HOME/.mosaic-dev
+sha() { sha256sum < "$1" | cut -c1-64; }
+stop() { echo "STOP: $*"; exit 1; }
+
+echo "B0 start $(date -u +%FT%T.%3NZ)"
+[ -f "$DATA/bus/bus.sqlite" ] || stop "no live store"
+STAMP=$(date -u +%Y%m%dT%H%M%SZ)
+B=$DATA/backups/b0-$STAMP
+[ ! -e "$B" ] || stop "$B exists"
+( umask 077; mkdir -p "$B/bus" ) || stop "backup dir"
+python3 -B -c '
+import sqlite3,sys
+src=sqlite3.connect("file:"+sys.argv[1]+"?mode=ro",uri=True)
+dst=sqlite3.connect(sys.argv[2])
+src.backup(dst)
+ok=dst.execute("pragma integrity_check").fetchone()[0]
+n=dst.execute("select count(*), max(seq) from events").fetchone()
+sv=dst.execute("select value from meta where key=?",("schema_version",)).fetchone()
+dst.close(); src.close()
+print(ok, "events", n[0], "maxSeq", n[1], "schema", sv[0] if sv else None)
+open(sys.argv[3],"w").write((sv[0] if sv else "")+"\n")
+sys.exit(0 if ok=="ok" else 1)' "$DATA/bus/bus.sqlite" "$B/bus/bus.sqlite" "$B/SCHEMA" > "$B/CHECK" || stop "backup or integrity_check failed: $(cat "$B/CHECK" 2>/dev/null)"
+[ "$(cat "$B/SCHEMA")" = 3j ] || stop "SCHEMA reads $(cat "$B/SCHEMA"), not 3j"
+left=$(ls -A "$B/bus")
+[ "$left" = bus.sqlite ] || stop "bus/ holds more than bus.sqlite: $(tr '\n' ' ' <<< "$left")"
+chmod 600 "$B/bus/bus.sqlite" "$B/CHECK" "$B/SCHEMA"
+( cd "$B/bus" && sha256sum bus.sqlite > ../SHA256SUMS ) || stop "SHA256SUMS"
+chmod 600 "$B/SHA256SUMS"
+# The same check rehearse makes before it reads the set.
+( cd "$B/bus" && sha256sum -c --quiet ../SHA256SUMS ) || stop "the set fails rehearse's SHA256SUMS check"
+echo "B0 $(date -u +%FT%TZ) store backup $B ($(cat "$B/CHECK")), SHA256SUMS sha256 $(sha "$B/SHA256SUMS")" >> $WIN/backups.txt
+ls -la "$B" "$B/bus"
+echo "SHA256SUMS: $(cat "$B/SHA256SUMS")"
+echo "SCHEMA: $(cat "$B/SCHEMA")"
+echo "CHECK: $(cat "$B/CHECK")"
+echo "B0 path $B"
+echo "B0 SHA256SUMS sha256 $(sha "$B/SHA256SUMS")"
+echo "B0 end $(date -u +%FT%T.%3NZ) B0_PASS"
@@ -0,0 +1,21 @@
+B0 start 2026-10-22T14:32:43.352Z
+/home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z:
+total 24
+drwx------ 3 jwoltje jwoltje 4096 Oct 22 09:32 .
+drwx------ 7 jwoltje jwoltje 4096 Oct 22 09:32 ..
+drwx------ 2 jwoltje jwoltje 4096 Oct 22 09:32 bus
+-rw------- 1 jwoltje jwoltje   37 Oct 22 09:32 CHECK
+-rw------- 1 jwoltje jwoltje    3 Oct 22 09:32 SCHEMA
+-rw------- 1 jwoltje jwoltje   77 Oct 22 09:32 SHA256SUMS
+
+/home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z/bus:
+total 2732
+drwx------ 2 jwoltje jwoltje    4096 Oct 22 09:32 .
+drwx------ 3 jwoltje jwoltje    4096 Oct 22 09:32 ..
+-rw------- 1 jwoltje jwoltje 2785280 Oct 22 09:32 bus.sqlite
+SHA256SUMS: 34d89ae550f7cdde8768038cde3a5632e4a005cb849a6db2b577d92d01909359  bus.sqlite
+SCHEMA: 3j
+CHECK: ok events 1940 maxSeq 1940 schema 3j
+B0 path /home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z
+B0 SHA256SUMS sha256 7a7cb6c8565ba6db96fb3669ebbcc76a64b85bedb9937ea144daa98f14cd0f3e
+B0 end 2026-10-22T14:32:43.481Z B0_PASS
@@ -0,0 +1,4 @@
+B0 2026-10-22T14:32:43Z store backup /home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z (ok events 1940 maxSeq 1940 schema 3j), SHA256SUMS sha256 7a7cb6c8565ba6db96fb3669ebbcc76a64b85bedb9937ea144daa98f14cd0f3e
+W0b 2026-10-22T14:53:09Z business file copy /home/jwoltje/.config/mosaic-dev/businesses/mosaic-stack.json.pre-window-20261022T145309Z sha256 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93 (source /home/jwoltje/.config/mosaic-dev/businesses/mosaic-stack.json sha256 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93)
+W5 2026-10-22T15:06:00Z activation 20261022T150555Z-84f53540dd0d backup /home/jwoltje/.mosaic-dev/backups/stack/20261022T150555Z-84f53540dd0d STAMP 2026-10-22T15:05:56.138Z SCHEMA 3j SHA256SUMS sha256 e0d408ca42a337df8498e2dfae4371489f16ff8560457b5004d3ea895f7b4389
+W12 2026-10-22T15:23:49Z store backup /home/jwoltje/.mosaic-dev/backups/w12-20261022T152349Z (ok events 1951 maxSeq 1951 schema 3l), SHA256SUMS sha256 e5d656dffc056a028cfe2a2c7f6f3b2a99845d1628b07355c56704a7b384d86a
@@ -0,0 +1,39 @@
+# W11 comment text (re-pin 84f53540d). Gitea posts: Darkwing. P19 posts: Sage, as last window (sage-2425).
+
+Bodies are final; the S1/S2 line is from STATE.md.
+
+## Gitea #1769 (row 264a)
+
+Live as of the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d, 2026-10-22 15:06:00Z UTC). W5 migrated the store 3j to 3k to 3l, backup SCHEMA 3j, SHA256SUMS e0d408ca. Row 264a's sessions and session_defaults are live: in S2 both hold 5 rows, one per thread, and the W9 thread b85a57fe has 1 of each. W9's thread talk and thread read passed on NEW, and the launcher ended the assistant run on thread-idle at 15:22:40Z. The restore guard's COUNTED list now includes sessions and session_defaults; the guard read at W5 gave 2 (1 session.launched, 1 role_claims). W9's thread is test data that row 269 (264b) will refuse (sage-2718). S1 to S2 (14:53:09Z to 15:22:45Z UTC): schema 3j to 3l, events 1940 to 1951. STATE report: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## Gitea #1742 (row 236)
+
+Live as of the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d, 2026-10-22 15:06:00Z UTC). W5's migration ran row 236's 3j-3k step. gitea_users and gitea_grants exist and hold 0 rows in S2. Nobody ran `mosaic grants` or the grant executor (Q190), and W9 found no grant.* event since W5. S1 to S2 (14:53:09Z to 15:22:45Z UTC): schema 3j to 3l, events 1940 to 1951. STATE report: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## Gitea #1692 (row 194)
+
+Live as of the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d, 2026-10-22 15:06:00Z UTC). Row 194's instance writer verbs and roles/chief-of-staff.json (role.hire and role.fire in withinRole, empty hireable list) now run from the live copy. Nobody hired, fired, deleted or set a route in the window. W12's relay showed the chief launching the pm within its role (run r410293d04d3d), which answered PRD 1.14 with 85 ids. S1 to S2 (14:53:09Z to 15:22:45Z UTC): schema 3j to 3l, events 1940 to 1951. STATE report: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## Gitea #1689 (row 191)
+
+Live as of the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d, 2026-10-22 15:06:00Z UTC). The kill switch's packages/processing-control is in the live copy (W0). On the tester socket, `POST /api/processing` is refused 403 read-only with sent false, and an unsigned main-port POST gets 401 sign-in required. Nobody halted or fired. The Discord connector runs from the checkout, so this re-pin didn't move it. S1 to S2 (14:53:09Z to 15:22:45Z UTC): schema 3j to 3l, events 1940 to 1951. STATE report: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## Gitea #1782 (row 277)
+
+Live as of the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d, 2026-10-22 15:06:00Z UTC). Row 277's `thread.claims` verb and the new `mosaic agents` thread lines are in the live copy. `agents --tester` at W1 on OLD and W9 on NEW prints the same format with no thread lines, so nothing changed on that path. S1 to S2 (14:53:09Z to 15:22:45Z UTC): schema 3j to 3l, events 1940 to 1951, thread_claims 8 to 10. STATE report: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## Gitea #1783 (row 278)
+
+Live as of the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d, 2026-10-22 15:06:00Z UTC). Row 278's Console Agents page with separate thread claims is served from the live copy. The Console runs the pointer's flags unchanged (`--tester-socket`, no `--send`, no `--sso`), console-check passed, and the tester `/api/bus/agents` read returns 200. S1 to S2 (14:53:09Z to 15:22:45Z UTC): schema 3j to 3l, events 1940 to 1951. STATE report: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## P19 386 (for Sage)
+
+Re-pin 86f95bb27 to 84f53540d done on dragon-lin, 2026-10-22, with Darkwing operating under Q173. Activation 20261022T150555Z-84f53540dd0d, pointer at 15:06:00Z UTC. W5 migrated the store 3j to 3l, and W5's backup is SCHEMA 3j, SHA256SUMS e0d408ca. P1 to P6, B0, W0 to W5 and W9 to W12 passed, with no stop, rollback or restore. The crossing pm r2cf8536da2c3 ended at W5's restart (mos-1291). W12 (w12c.sh 6f8a5445, mos-1295) passed at 15:24:29Z: backup w12-20261022T152349Z first, and the chief relayed the pm read and launched pm r410293d04d3d, which answered PRD 1.14 with 85 ids. Row 66 on chief re6c69f1ec1f0 went from 1/0/0 to checked 5, flagged 1, notices 1, broken null. pm r410293d04d3d is still live; a stop is Mos's call. STATE: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## P19 412 (for Sage)
+
+Phase 2 window input. After the re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d), the Console still runs with `--tester-socket` and no `--send`, no `--sso` and no proof pair. Unsigned POSTs on 7332 get 401 "sign-in required" (the mos-1195 baseline), including `/api/processing`. 7333 has no listener. The store is now 3l. STATE: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
+
+## P19 435 (for Sage)
+
+Re-pin to 84f53540d (activation 20261022T150555Z-84f53540dd0d). Row 236's gitea_users and gitea_grants are live at 3l and hold 0 rows. Nobody ran a grant (Q190), and W9 found no grant.* event since W5. hosts and host_grants still hold 0 rows. STATE: `agents/darkwing/work/window-repin-84f53540d/STATE.md`.
@@ -0,0 +1,12 @@
+#!/usr/bin/env python3
+# Re-pin 86f95bb27 to 84f53540d: the events after S1's maxSeq (1940), read from the W12 backup copy, read only.
+# usage: python3 -B ev.py BUS_SQLITE FROM_SEQ
+import sqlite3, sys
+db = sqlite3.connect("file:" + sys.argv[1] + "?mode=ro", uri=True)
+cols = [r[1] for r in db.execute("PRAGMA table_info(events)")]
+k = "type" if "type" in cols else "kind"
+print("columns", ",".join(cols))
+for r in db.execute(f"SELECT {k}, count(*) FROM events WHERE seq > ? GROUP BY {k} ORDER BY min(seq)", (int(sys.argv[2]),)):
+    print("kind", r[0], r[1])
+for r in db.execute(f"SELECT seq, at, {k}, substr(coalesce(actor,''),1,40) FROM events WHERE seq > ? ORDER BY seq" if "actor" in cols else f"SELECT seq, at, {k}, '' FROM events WHERE seq > ? ORDER BY seq", (int(sys.argv[2]),)):
+    print(*r)
@@ -0,0 +1,26 @@
+columns seq,id,at,business,kind,actor_role,actor_run,subject,corrects,body
+kind task.changed.external 2
+kind session.ended 3
+kind session.launched 2
+kind action.allowed 2
+kind action.refused 2
+1941 2026-10-22T14:53:31.345Z task.changed.external 
+1942 2026-10-22T15:00:01.380Z task.changed.external 
+1943 2026-10-22T15:05:55.933Z session.ended 
+1944 2026-10-22T15:05:55.942Z session.ended 
+1945 2026-10-22T15:05:59.280Z session.launched 
+1946 2026-10-22T15:07:30.489Z action.allowed 
+1947 2026-10-22T15:07:35.645Z session.launched 
+1948 2026-10-22T15:07:39.736Z action.allowed 
+1949 2026-10-22T15:07:42.161Z action.refused 
+1950 2026-10-22T15:22:40.379Z action.refused 
+1951 2026-10-22T15:22:40.392Z session.ended 
+1943 session.ended chief rd0b8fdb4d62d rd0b8fdb4d62d {"reason":"stopped","exitCode":0,"released":false}
+1944 session.ended pm r2cf8536da2c3 r2cf8536da2c3 {"reason":"stopped","exitCode":0,"released":false}
+1945 session.launched chief re6c69f1ec1f0 re6c69f1ec1f0 {"harness":"claude-code","address":null,"pid":3634625,"startTime":"78274945"}
+1946 action.allowed chief re6c69f1ec1f0 tester {"action":"message.send","class":"within-role","target":"tester"}
+1947 session.launched assistant r2c62e02f8371 r2c62e02f8371 {"harness":"claude-code","address":null,"pid":3654710,"startTime":"78284584","thread":"b85a57fe-84f9-4785-a596-135af39e334a"}
+1948 action.allowed assistant r2c62e02f8371 tester {"action":"message.send","class":"within-role","target":"tester"}
+1949 action.refused tester None None {"code":"tester-target-not-running"}
+1950 action.refused assistant r2c62e02f8371 None {"code":"not-holder"}
+1951 session.ended assistant r2c62e02f8371 r2c62e02f8371 {"reason":"stopped","exitCode":0,"released":false}
@@ -0,0 +1,23 @@
+// Re-pin 84f53540d, W5 restore guard read for Mos (mos-1288 item 5). The same count as stack-release.sh's
+// heldcount (sr:422-445, restore_checks sr:1575-1595) on the store the running bus holds, read with readOnly,
+// plus the event types after STAMP. Reads only.
+// usage: node guard.mjs STORE STAMP "TABLES"
+import {DatabaseSync} from "node:sqlite";
+const [file, stamp, tables = ""] = process.argv.slice(2);
+const db = new DatabaseSync(file, {readOnly: true});
+try {
+  const ev = db.prepare("SELECT count(*) AS n FROM events WHERE at > ?").get(stamp).n;
+  let total = ev, text = ev + " event(s)";
+  for (const t of tables.split(" ").filter(Boolean)) {
+    if (!db.prepare("SELECT 1 FROM sqlite_master WHERE type=? AND name=?").get("table", t)) continue;
+    const n = db.prepare("SELECT count(*) AS n FROM " + t + " WHERE at > ?").get(stamp).n;
+    if (n) { total += n; text += ", " + n + " " + t + " row(s)"; }
+  }
+  console.log("guard\t" + total + "\t" + text);
+  const cols = db.prepare("SELECT name FROM pragma_table_info('events')").all().map(r => r.name);
+  console.log("events columns " + cols.join(","));
+  const tcol = cols.includes("type") ? "type" : cols.includes("kind") ? "kind" : null;
+  if (tcol) for (const r of db.prepare(`SELECT ${tcol} AS t, count(*) AS n, min(at) AS a, max(at) AS b FROM events WHERE at > ? GROUP BY ${tcol} ORDER BY min(seq)`).all(stamp))
+    console.log("type " + r.t + " " + r.n + " first " + r.a + " last " + r.b);
+  console.log("schema " + db.prepare("SELECT value FROM meta WHERE key=?").get("schema_version").value);
+} finally { db.close(); }
@@ -0,0 +1,8 @@
+# W10 matrix 2026-10-22T15:23:15Z
+a 200 ok=true
+b 401 error="sign-in required"
+c 401 error="sign-in required"
+d 403 error="proxy Host refused"
+e 403 error="tester listener required"
+f 000 non-json 0 bytes
+g 000 non-json 0 bytes
@@ -0,0 +1,8 @@
+# P6 matrix on OLD 2026-10-22T14:46:17Z
+a 200 ok=true
+b 401 error="sign-in required"
+c 401 error="sign-in required"
+d 403 error="proxy Host refused"
+e 403 error="tester listener required"
+f 000 non-json 0 bytes
+g 000 non-json 0 bytes
@@ -0,0 +1,21 @@
+// Re-pin 86f95bb27 to 84f53540d (PLAN.md), P1: the live business file, read only. Prints the plan's P1 values and nothing else:
+// bus.tester, the plug-in lists, launch.by, whether launch.instances includes assistant, and each role's
+// vars.harness and vars["fallback.harness"]. No other value from the file.
+import { readFileSync } from 'node:fs';
+const f = `${process.env.HOME}/.config/mosaic-dev/businesses/mosaic-stack.json`;
+const b = JSON.parse(readFileSync(f, 'utf8'));
+console.log(`bus.tester ${JSON.stringify(b.vars?.['bus.tester'])}`);
+const p = b.plugins ?? {};
+console.log(`plugins kinds ${JSON.stringify(Object.keys(p).sort())}`);
+for (const k of ['usage-source', 'channel', 'harness']) console.log(`plugins ${k} ${JSON.stringify(p[k])}`);
+console.log(`launch.by ${JSON.stringify(b.launch?.by)}`);
+const inst = b.launch?.instances;
+const names = Array.isArray(inst) ? inst.map((i) => (typeof i === 'string' ? i : i?.name)) : Object.keys(inst ?? {});
+console.log(`launch.instances includes assistant ${names.includes('assistant')}`);
+let pi = 0;
+for (const [r, v] of Object.entries(b.roles ?? {}).sort()) {
+  const h = v?.vars?.harness, fh = v?.vars?.['fallback.harness'];
+  if (h === 'pi' || fh === 'pi') pi++;
+  console.log(`role ${r} vars.harness ${JSON.stringify(h)}${fh === undefined ? '' : ` fallback.harness ${JSON.stringify(fh)}`}`);
+}
+console.log(`roles naming pi ${pi}`);
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, P1 (PLAN.md, sha256 d7b380ef; sage-2703). Read only; nothing stopped.
+# business-check.mjs runs from the repo copy, checked against SCRIPTS.sha256. From the system config this
+# prints dataRoot only. A bus.tester other than true stops the window here.
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+OLD=86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+S=$REPO/agents/sage/work/window-plan/repin-de352dfaf BC=$S/business-check.mjs
+B=$HOME/.config/mosaic-dev/businesses/mosaic-stack.json
+{ echo "# P1 start $(date -u +%FT%T.%3NZ), REPO HEAD $(git -C $REPO rev-parse HEAD)"
+  echo "# plan sha256 $(sha256sum < $REPO/agents/darkwing/work/window-repin-84f53540d/PLAN.md | cut -c1-64) (P0 mos-1281, amended 69b48863 mos-1283, then d7b380ef sage-2718)"
+  echo "# business-check.mjs sha256 $(sha256sum < $BC | cut -c1-64); SCRIPTS.sha256 line: $(grep ' business-check.mjs$' $S/SCRIPTS.sha256)"
+  echo "# business file sha256 $(sha256sum < $B | cut -c1-64), mtime $(stat -c %y $B)"; } | tee -a $WIN/P1.txt
+(cd $S && grep ' business-check.mjs$' SCRIPTS.sha256 | sha256sum -c -) || { echo "STOP business-check.mjs sha mismatch" | tee -a $WIN/P1.txt; exit 1; }
+$WIN/w.sh P1.txt "P1 status" scripts/stack-release.sh status mosaic-stack
+$WIN/w.sh P1.txt "P1 values" node $WIN/p1.mjs
+grep -qx 'bus.tester true' <(node $WIN/p1.mjs) || { echo "STOP bus.tester is not true" | tee -a $WIN/P1.txt; exit 2; }
+$WIN/w.sh P1.txt "P1 business-check OLD" node $BC $OLD
+DATA=$(node -e 'const c=JSON.parse(require("fs").readFileSync(process.env.HOME+"/.config/mosaic-dev/config.json","utf8"));process.stdout.write(String(c.dataRoot))')
+DATA=${DATA/#\~/$HOME}
+{ echo; echo "## P1 data console"; echo "# dataRoot $DATA"
+  echo "# ls -ld \$DATA/console:"; ls -ld "$DATA/console" 2>&1; echo "# ls rc=$?"
+  sock="$DATA/console/tester.sock"; echo "# tester.sock path length $(printf %s "$sock" | wc -c) bytes (limit 107)"
+  echo "# P1 end $(date -u +%FT%T.%3NZ)"; } | tee -a $WIN/P1.txt
@@ -0,0 +1,54 @@
+# P1 start 2026-10-22T14:45:52.038Z, REPO HEAD aca16404cf522b03f39acaf140e4f6185a507b88
+# plan sha256 d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c (P0 mos-1281, amended 69b48863 mos-1283, then d7b380ef sage-2718)
+# business-check.mjs sha256 eece4d4671e1ce15ba81e1654c641925ac4988b343687b062897392285a8a1a7; SCRIPTS.sha256 line: eece4d4671e1ce15ba81e1654c641925ac4988b343687b062897392285a8a1a7  business-check.mjs
+# business file sha256 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93, mtime 2026-10-19 20:39:58.506635141 -0500
+business-check.mjs: OK
+pointer: /home/jwoltje/.mosaic-dev/state/stack-active.json
+  {"copy":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","business":"mosaic-stack","pm":true,"claude":"/home/jwoltje/.local/bin/claude","console":["--port","7332","--public-host","mosaic.woltje.com","--auth-header","X-authentik-username","--allow-user","jason.woltje","--tester-socket"],"schema":"3j","activation":"20261022T040256Z-86f95bb27f6c","at":"2026-10-22T04:03:00Z"}
+log (last five lines):
+  {"at":"2026-10-20T22:02:09Z","op":"activate","from":"490e2771d3d057ab76991e2c7859cd251857e64c","to":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","backup":"20261020T220206Z-4429a104f6d6","activation":"20261020T220206Z-4429a104f6d6","result":"ok"}
+  {"at":"2026-10-21T21:59:26Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":null,"activation":"20261021T215926Z-7247d80c7af7","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-21T21:59:31Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":"20261021T215926Z-7247d80c7af7","activation":"20261021T215926Z-7247d80c7af7","result":"ok"}
+  {"at":"2026-10-22T04:02:56Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":null,"activation":"20261022T040256Z-86f95bb27f6c","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T04:03:00Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":"20261022T040256Z-86f95bb27f6c","activation":"20261022T040256Z-86f95bb27f6c","result":"ok"}
+check:
+  bus: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  Console: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  CLI: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  result: pass
+bus status:
+  host: mosaic-stack, pid 828746, running, since 2026-10-22T04:02:58.133Z, notifier off
+  socket: present
+  writer.lock: pid 828808
+  boot: organization file loaded at 2026-10-22T04:02:58.132Z
+unit flags: match the pointer
+drift: 135 commit(s) on refactor since the pointer's copy
+# exit 0
+bus.tester true
+plugins kinds ["channel","harness","usage-source"]
+plugins usage-source ["transcript"]
+plugins channel ["cli","webui"]
+plugins harness ["claude-code"]
+launch.by "chief"
+launch.instances includes assistant true
+role assistant vars.harness "claude-code"
+role chief vars.harness "claude-code"
+role coder vars.harness "claude-code"
+role cto vars.harness "claude-code"
+role pm vars.harness "claude-code"
+role reviewer vars.harness "claude-code"
+roles naming pi 0
+# exit 0
+copy 86f95bb27: roles 6, projects 1, arbiters 2
+HOLDS chief instance.name yes
+HOLDS pm instance.name no
+LOAD_OK
+# exit 0
+
+## P1 data console
+# dataRoot /home/jwoltje/.mosaic-dev
+# ls -ld $DATA/console:
+drwx------ 2 jwoltje jwoltje 4096 Oct 21 23:02 /home/jwoltje/.mosaic-dev/console
+# ls rc=0
+# tester.sock path length 45 bytes (limit 107)
+# P1 end 2026-10-22T14:45:52.475Z
@@ -0,0 +1,49 @@
+# P2 unit diffs 2026-10-22T14:48:08Z, REPO HEAD aca16404c; webui-service.sh and bus-service.sh blobs equal NEW's (P5)
+## webui: scripts/webui-service.sh render --copy 84f53540dd0d21ef179ca29697e172b0246e78d1 --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+# render rc=0
+2c2
+< # Rendered by scripts/webui-service.sh from packages/webui/systemd/; /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b,
+---
+> # Rendered by scripts/webui-service.sh from packages/webui/systemd/; /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1,
+4c4
+< # /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b is the read-only copy `install --copy ID` names, and the flags
+---
+> # /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1 is the read-only copy `install --copy ID` names, and the flags
+18c18
+< Documentation=file:///home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/packages/webui/README.md
+---
+> Documentation=file:///home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/packages/webui/README.md
+24c24
+< WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+---
+> WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+29c29
+< ExecStart=/usr/bin/node /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/packages/webui/src/cli.mjs serve --checkout /mnt/storage/src/mosaic-stack --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+---
+> ExecStart=/usr/bin/node /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/packages/webui/src/cli.mjs serve --checkout /mnt/storage/src/mosaic-stack --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+# diff live vs render rc=1
+## webui diff with the copy path normalized (OLD id -> NEW id in the live unit)
+# normalized diff rc=0
+## bus: scripts/bus-service.sh render --copy 84f53540dd0d21ef179ca29697e172b0246e78d1 --pm --claude /home/jwoltje/.local/bin/claude
+# render rc=0
+2c2
+< # Rendered by scripts/bus-service.sh from packages/cli/systemd/; /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b,
+---
+> # Rendered by scripts/bus-service.sh from packages/cli/systemd/; /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1,
+8c8
+< Documentation=file:///home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/packages/cli/README.md
+---
+> Documentation=file:///home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/packages/cli/README.md
+14c14
+< WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+---
+> WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+30c30
+< ExecStart=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/scripts/mosaic bus start %i --pm
+---
+> ExecStart=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/scripts/mosaic bus start %i --pm
+# diff live vs render rc=1
+## bus diff with the copy path normalized (OLD id -> NEW id in the live unit)
+# normalized diff rc=0
+# end 2026-10-22T14:48:08Z rc=0
+P2_UNITS_PASS
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, P2 stub runs (PLAN.md; sage-2703). Launch from /.
+# Run 1: console-stub.mjs (NEW's startServer, no tester), console-check.sh NEW PORT. Run 2: console-stub-tester.mjs
+# adds NEW's startTesterSocket on $D/console/tester.sock under a fresh scratch data root; console-check.sh again,
+# then the socket checks. Both stubs must report CALLS [] on SIGTERM. console-check.sh reads NEW's copy under
+# the real HOME (W0 made it there) and only reads. Kills only the stub pids it started.
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+S=$REPO/agents/sage/work/window-plan/repin-de352dfaf
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+C=$HOME/.local/share/mosaic-stack/copies/$NEW
+[ -n "${TMPDIR:-}" ] && [[ "$TMPDIR" == /mnt/storage/scratch/tmp/* ]] || { echo "STOP TMPDIR must be under /mnt/storage/scratch/tmp"; exit 9; }
+echo "start $(date -u +%FT%TZ)"
+(cd $S && grep -E ' (console-check.sh)$' SCRIPTS.sha256 | sha256sum -c -) || { echo "STOP console-check.sh sha"; exit 1; }
+(cd $S/fixture && sha256sum -c SHA256SUMS) || { echo "STOP fixture sha"; exit 1; }
+rc=0
+start_stub() { # out-file, then node args; sets spid and port
+  local o="$1"; shift
+  node "$@" > "$o.out" 2> "$o.err" &
+  spid=$!
+  for _ in $(seq 1 50); do grep -q '^PORT ' "$o.out" && break; sleep 0.1; done
+  port=$(sed -n 's/^PORT //p' "$o.out")
+  [ -n "$port" ] || { echo "STOP stub did not start"; cat "$o.err"; kill -TERM $spid 2>/dev/null; wait $spid 2>/dev/null; exit 1; }
+}
+stop_stub() { kill -TERM $spid; wait $spid 2>/dev/null; cat "$1.out"; grep -qx 'CALLS \[\]' "$1.out" && echo "PASS CALLS []" || { echo "FAIL CALLS not []"; rc=1; }; }
+
+echo "## run 1: console-stub.mjs, no tester"
+O1=$TMPDIR/p2-run1
+start_stub $O1 $S/fixture/console-stub.mjs $C
+echo "stub pid $spid port $port"
+out=$(bash $S/console-check.sh $NEW $port); r=$?; echo "$out"; echo "console-check rc=$r"; [ $r = 0 ] || rc=1
+stop_stub $O1
+
+echo "## run 2: console-stub-tester.mjs with --tester-socket's listener under a scratch data root"
+D=$(mktemp -d /mnt/storage/scratch/tmp/p2tXXXXXX); echo "data root $D"
+O2=$TMPDIR/p2-run2
+node $S/fixture/console-stub-tester.mjs $C $D > $O2.out 2> $O2.err &
+spid=$!
+for _ in $(seq 1 50); do grep -q '^SOCK ' $O2.out && break; sleep 0.1; done
+port=$(sed -n 's/^PORT //p' $O2.out); sock=$(sed -n 's/^SOCK //p' $O2.out)
+[ -n "$port" ] && [ -n "$sock" ] || { echo "STOP tester stub did not start"; cat $O2.err; kill -TERM $spid 2>/dev/null; wait $spid 2>/dev/null; exit 1; }
+echo "stub pid $spid port $port sock $sock"
+out=$(bash $S/console-check.sh $NEW $port); r=$?; echo "$out"; echo "console-check rc=$r"; [ $r = 0 ] || rc=1
+[ "$sock" = "$D/console/tester.sock" ] && echo "PASS SOCK is \$D/console/tester.sock" || { echo "FAIL SOCK $sock"; rc=1; }
+st=$(stat -c '%F %a' "$sock"); [ "$st" = "socket 600" ] && echo "PASS sock: $st" || { echo "FAIL sock: $st"; rc=1; }
+dt=$(stat -c '%F %a' "$D/console"); [ "$dt" = "directory 700" ] && echo "PASS console dir: $dt" || { echo "FAIL console dir: $dt"; rc=1; }
+code=$(curl -s -o /dev/null -w '%{http_code}' --unix-socket "$sock" http://mosaic-tester.invalid/api/config)
+[ "$code" = 200 ] && echo "PASS tester /api/config over the socket: 200" || { echo "FAIL tester /api/config: $code"; rc=1; }
+stop_stub $O2
+[ ! -e "$sock" ] && echo "PASS socket gone after SIGTERM" || { echo "FAIL socket still there"; rc=1; }
+[ -s $O1.err ] || [ -s $O2.err ] && { echo "# stub stderr:"; cat $O1.err $O2.err; }
+left=0; for p in /proc/[0-9]*; do c=$(tr '\0' ' ' < $p/cmdline 2>/dev/null); [[ "$c" == *fixture/console-stub* ]] && { echo "LEFT ${p#/proc/} $c"; left=1; }; done
+[ $left = 0 ] && echo "sweep: no console-stub process left"
+echo "end $(date -u +%FT%TZ) rc=$rc"; [ $rc = 0 ] && echo P2_STUBS_PASS || echo P2_STUBS_FAIL
+exit $rc
@@ -0,0 +1,38 @@
+start 2026-10-22T14:48:07Z
+console-check.sh: OK
+console-stub.mjs: OK
+console-stub-tester.mjs: OK
+## run 1: console-stub.mjs, no tester
+stub pid 3212646 port 39427
+PASS markdown-preview.js is served and equals the copy's
+PASS /api/config on loopback: send=false edit=false
+PASS project.files through the Console: head=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa files=2 spec=true error=none
+PASS project.file spec/north-star.md through the Console: commit=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa length=4 error=none
+PASS loopback save refused: HTTP 403 error=read-only sent=false
+CONSOLE_PASS
+console-check rc=0
+PORT 39427
+CALLS []
+PASS CALLS []
+## run 2: console-stub-tester.mjs with --tester-socket's listener under a scratch data root
+data root /mnt/storage/scratch/tmp/p2taSfAAU
+stub pid 3212753 port 45725 sock /mnt/storage/scratch/tmp/p2taSfAAU/console/tester.sock
+PASS markdown-preview.js is served and equals the copy's
+PASS /api/config on loopback: send=false edit=false
+PASS project.files through the Console: head=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa files=2 spec=true error=none
+PASS project.file spec/north-star.md through the Console: commit=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa length=4 error=none
+PASS loopback save refused: HTTP 403 error=read-only sent=false
+CONSOLE_PASS
+console-check rc=0
+PASS SOCK is $D/console/tester.sock
+PASS sock: socket 600
+PASS console dir: directory 700
+PASS tester /api/config over the socket: 200
+PORT 45725
+SOCK /mnt/storage/scratch/tmp/p2taSfAAU/console/tester.sock
+CALLS []
+PASS CALLS []
+PASS socket gone after SIGTERM
+sweep: no console-stub process left
+end 2026-10-22T14:48:08Z rc=0
+P2_STUBS_PASS
@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, P2 second half (PLAN.md P2 row): render both units from REPO's service
+# scripts for NEW with the pointer's flags, diff against the live units, then diff again with the live copy id
+# swapped OLD to NEW. The only difference allowed is the copy path, so the swapped diff must be empty.
+# Output follows last window's p2-units.txt. Render writes nothing and starts nothing; it only looks up node's path.
+# usage: p2units.sh > p2-units.txt
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+OLD=86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+U=${XDG_CONFIG_HOME:-$HOME/.config}/systemd/user
+rc=0
+cd $REPO || exit 1
+git diff --quiet $NEW HEAD -- scripts/webui-service.sh scripts/bus-service.sh || { echo "STOP service scripts differ from NEW"; exit 1; }
+echo "# P2 unit diffs $(date -u +%FT%TZ), REPO HEAD $(git rev-parse --short=9 HEAD); webui-service.sh and bus-service.sh blobs equal NEW's (P5)"
+one() { # name, live unit file, render command...
+  local name=$1 live=$2; shift 2
+  local r; r=$(mktemp /mnt/storage/scratch/tmp/p2uXXXXXX)
+  echo "## $name: $*"
+  "$@" > "$r"; local x=$?; echo "# render rc=$x"; [ $x = 0 ] || rc=1
+  diff "$live" "$r"; echo "# diff live vs render rc=$?"
+  echo "## $name diff with the copy path normalized (OLD id -> NEW id in the live unit)"
+  sed "s/$OLD/$NEW/g" "$live" | diff - "$r"; x=$?; echo "# normalized diff rc=$x"; [ $x = 0 ] || rc=1
+  rm -f "$r"
+}
+one webui $U/mosaic-webui.service scripts/webui-service.sh render --copy $NEW --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket
+one bus $U/[email protected] scripts/bus-service.sh render --copy $NEW --pm --claude $HOME/.local/bin/claude
+echo "# end $(date -u +%FT%TZ) rc=$rc"; [ $rc = 0 ] && echo P2_UNITS_PASS || echo P2_UNITS_FAIL
+exit $rc
@@ -0,0 +1,21 @@
+decision_events: 22 -> 22
+decisions: 22 -> 22
+deliveries: 1889 -> 1889
+events: 1940 -> 1940
+host_grants: 0 -> 0
+hosts: 0 -> 0
+instance_names: 0 -> 0
+message_threads: 8 -> 8
+messages: 620 -> 620
+meta: 3 -> 3
+projects: 4 -> 4
+role_claims: 108 -> 108
+sqlite_sequence: 12 -> 12
+task_comment_cursors: 476 -> 476
+task_snapshots: 515 -> 515
+thread_claims: 8 -> 8
+thread_opens: 0 -> 0
+threads: 4 -> 4
+usage_records: 88 -> 88
+lookalike_action_allowed backup 0 rehearsal 0
+any_grant_event backup 0 rehearsal 0
@@ -0,0 +1,16 @@
+import sqlite3, sys, json
+def counts(p):
+    c = sqlite3.connect(f"file:{p}?mode=ro", uri=True)
+    t = [r[0] for r in c.execute("select name from sqlite_master where type='table' order by name")]
+    out = {n: c.execute(f'select count(*) from "{n}"').fetchone()[0] for n in t}
+    la = c.execute("""select count(*) from events where json_extract(body,'$.action')='action.allowed' and (
+      coalesce(json_extract(body,'$.body.action'),'') like 'grant.%' or coalesce(json_extract(body,'$.body.operation'),'') like 'grant.%'
+      or instr(body,'hostLineLeft')>0)""").fetchone()[0] if 'events' in t else None
+    la2 = c.execute("""select count(*) from events where (json_extract(body,'$.action') like 'grant.%' or json_extract(body,'$.operation') like 'grant.%' or instr(body,'hostLineLeft')>0)""").fetchone()[0]
+    return out, la, la2
+a, laa, la2a = counts(sys.argv[1]); b, lab, la2b = counts(sys.argv[2])
+for k in sorted(set(a) | set(b)):
+    mark = '' if a.get(k) == b.get(k) else '  CHANGED'
+    print(f"{k}: {a.get(k)} -> {b.get(k)}{mark}")
+print("lookalike_action_allowed backup", laa, "rehearsal", lab)
+print("any_grant_event backup", la2a, "rehearsal", la2b)
@@ -0,0 +1 @@
+2026-10-22T14:49:24Z
@@ -0,0 +1,18 @@
+2026-10-22T14:52:15Z
+receipt lines before: 1
+host pid 3262945 console pid 3262984
+healthz: {"ok":true} 200
+api/config: {"board":"http://127.0.0.1:7331","send":false,"edit":false} 200
+api/config Host public: {"error":"sign-in required"} 401
+socket 600 jwoltje /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d/data/console/tester.sock
+dir 700 jwoltje /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d/data/console
+tester GET /api/config: {"status":200,"text":"{\"board\":\"http://127.0.0.1:7331\",\"tester\":true,\"send\":false,\"edit\":false}","body":{"board":"http://127.0.0.1:7331","tester":true,"send":false,"edit":false}}
+ rc=0
+tester GET /api/bus/agents: {"status":200,"text":"{\"rows\":[{\"seq\":107,\"at\":\"2026-10-22T04:02:59.741Z\",\"business\":\"mosaic-stack\",\"role\":\"chief\",\"op\":\"claim\",\"holder_run\":\"rd0b8fdb4d62d\",\"harness\":\"claude-code\",\"address\":null,\"by\":\"rd0b8fdb4d62d\",\"reason\":null,\"decision\":null,\"state\":\"idle\",\"working\":null,\"inputNeeded\":[],\"stranded\":[]},{\"seq\":108,\"at\":\"2026-10-22T04:26:06.8
+ rc=0
+console exit 0
+host exit 0
+writer.lock released
+receipt lines after: 2
+library lines: 0
+2026-10-22T14:52:16Z
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -u
+R=/home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d
+C=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+E=(env -i HOME="$HOME" PATH="$PATH" MOSAIC_CONFIG="$R/config/config.json")
+date -u +%FT%TZ
+echo "receipt lines before: $(wc -l < "$R/data/bus/peercred-starts.jsonl")"
+"${E[@]}" "$C/scripts/mosaic" bus start mosaic-stack --no-launch > "$R/hand-host.log" 2>&1 & HP=$!
+for i in $(seq 1 30); do [ -S "$R/data/bus/broker.sock" ] && break; sleep 0.5; done
+"${E[@]}" node "$C/packages/webui/src/cli.mjs" serve --port 7341 --business mosaic-stack --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket > "$R/hand-console.log" 2>&1 & CP=$!
+for i in $(seq 1 30); do curl -s -o /dev/null http://127.0.0.1:7341/healthz && [ -S "$R/data/console/tester.sock" ] && break; sleep 0.5; done
+echo "host pid $HP console pid $CP"
+echo "healthz: $(curl -s -w ' %{http_code}' http://127.0.0.1:7341/healthz)"
+echo "api/config: $(curl -s -w ' %{http_code}' http://127.0.0.1:7341/api/config)"
+echo "api/config Host public: $(curl -s -w ' %{http_code}' -H 'Host: mosaic.woltje.com' http://127.0.0.1:7341/api/config)"
+stat -c 'socket %a %U %n' "$R/data/console/tester.sock"; stat -c 'dir %a %U %n' "$R/data/console"
+echo "tester GET /api/config: $("${E[@]}" node "$C/packages/cli/src/tester-http.mjs" GET /api/config 2>&1; echo " rc=$?")"
+echo "tester GET /api/bus/agents: $("${E[@]}" node "$C/packages/cli/src/tester-http.mjs" GET /api/bus/agents 2>&1 | cut -c1-400; echo " rc=${PIPESTATUS[0]}")"
+kill -TERM "$CP"; wait "$CP"; echo "console exit $?"
+kill -TERM "$HP"; wait "$HP"; echo "host exit $?"
+[ -e "$R/data/bus/writer.lock" ] && echo "writer.lock present" || echo "writer.lock released"
+echo "receipt lines after: $(wc -l < "$R/data/bus/peercred-starts.jsonl")"
+echo "library lines: $(grep -c 'library:' "$R/hand-host.log")"
+date -u +%FT%TZ
@@ -0,0 +1 @@
+rc=0
@@ -0,0 +1,25 @@
+PASS copy: 84f53540dd0d21ef179ca29697e172b0246e78d1, schema 3l
+PASS port: 127.0.0.1:7341 is free
+PASS backup: /home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z matches its SHA256SUMS
+PASS scratch-root: /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d/data from the backup, config and business file under /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d/config, business.diff beside them
+PASS data-root-live: /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d/data is not the live data root
+PASS sessions-live: no running session named in the data root
+PASS data-root-scratch
+PASS notify-off: binding null, so no Discord bridge
+PASS tracker-configured: bootConfig sets no trackers
+PASS credential-ref-live: 9 reference(s), each a placeholder
+BACKUP_STORE /home/jwoltje/.mosaic-dev/backups/b0-20261022T143243Z schema 3j
+PASS new-refuses-old-store: 84f53540dd0d21ef179ca29697e172b0246e78d1 refuses the 3j store at a normal open
+PASS migrate: 3j to 3l
+PASS new-opens-migrated
+PASS migrate-again: a second run is a no-op
+PASS old-refuses-migrated: 86f95bb27f6cb237bf9fa9ba53320bace6c4de0b refuses the 3l store
+PASS gate: host-up, bus-status, console-up, healthz and copy-match on 84f53540dd0d21ef179ca29697e172b0246e78d1
+PASS no-session: no sessions.json and no launches under /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d/data
+PASS console-stopped: pid 3228888
+PASS host-stopped: pid 3228886
+PASS host-released-store
+PASS backup-unchanged
+PASS live-config-unchanged
+REHEARSAL_PASS
+rehearsal directory: /home/jwoltje/.mosaic-dev/rehearsals/20261022T144920Z-84f53540dd0d
@@ -0,0 +1 @@
+2026-10-22T14:49:20Z
@@ -0,0 +1,6 @@
+# P4 2026-10-22T14:46:17Z
+DropInPaths=
+ExecStart={ path=/home/jwoltje/.local/bin/chisel ; argv[]=/home/jwoltje/.local/bin/chisel client --fingerprint ce+ISFvMAhuoCRDuc7riIf+hYz87TLHk/C9C/H8QsUg= --keepalive 25s --max-retry-interval 10s http://10.1.1.227:8080 R:0.0.0.0:7332:127.0.0.1:7332 ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }
+# exit 0
+# R: specs (1): R:0.0.0.0:7332:127.0.0.1:7332 
+P4 PASS: one R: spec R:0.0.0.0:7332:127.0.0.1:7332, DropInPaths empty
@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+# P4-P6 of agents/darkwing/work/window-repin-84f53540d/PLAN.md (sha256 d7b380ef; sage-2703), from window-repin-86f95bb27/p456.sh, read only.
+# P4 the tunnel unit, P5 the four REPO scripts against NEW, P6 the 7332 matrix on OLD (matrix-old.txt).
+# usage: p456.sh p4|p5|p6|tester
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=/mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+FILES=(scripts/stack-release.sh scripts/webui-service.sh scripts/bus-service.sh scripts/stack-copy.sh)
+# The plan's <32 letters>: a fixed dummy, not a secret. matrix-new.txt uses the same value.
+PROOF=abcdefghijklmnopqrstuvwxyzabcdef
+
+p4() {
+  echo "# P4 $(date -u +%FT%TZ)"
+  local out; out="$(systemctl --user show mosaic-preview-tunnel.service -p ExecStart -p DropInPaths)"; local rc=$?
+  printf '%s\n' "$out"; echo "# exit $rc"
+  local specs; specs="$(grep -oE 'R:[^ ;]+' <<<"$out")"
+  local n; n="$(grep -c . <<<"$specs")"
+  echo "# R: specs ($n): $(tr '\n' ' ' <<<"$specs")"
+  local drop; drop="$(sed -n 's/^DropInPaths=//p' <<<"$out")"
+  if [[ $rc -eq 0 && $n -eq 1 && "$specs" == "R:0.0.0.0:7332:127.0.0.1:7332" && -z "$drop" ]]; then
+    echo "P4 PASS: one R: spec R:0.0.0.0:7332:127.0.0.1:7332, DropInPaths empty"
+  else
+    echo "P4 FAIL"; return 3
+  fi
+}
+
+p5() {
+  echo "# P5 $(date -u +%FT%TZ); HEAD $(git -C $REPO rev-parse HEAD)"
+  git -C $REPO diff --quiet $NEW HEAD -- "${FILES[@]}"; local d=$?
+  echo "# git diff --quiet $NEW HEAD -- ${FILES[*]}: exit $d"
+  local st; st="$(git -C $REPO status --porcelain -- "${FILES[@]}")"; local s=$?
+  echo "# git status --porcelain (exit $s): [${st}]"
+  for f in "${FILES[@]}"; do echo "# $f HEAD blob $(git -C $REPO rev-parse HEAD:$f) NEW blob $(git -C $REPO rev-parse $NEW:$f)"; done
+  if [[ $d -eq 0 && $s -eq 0 && -z "$st" ]]; then echo "P5 PASS"; else echo "P5 FAIL"; return 3; fi
+}
+
+# one matrix line: label, then curl arguments; prints "<label> <code> <error or ok field>"
+req() {
+  local label="$1"; shift
+  local body; body="$(mktemp -p "${TMPDIR:-/tmp}")"
+  local code; code="$(curl -s -m 10 -o "$body" -w '%{http_code}' "$@")"
+  local field; field="$(node -e '
+    let s = require("fs").readFileSync(process.argv[1], "utf8"), j;
+    try { j = JSON.parse(s); } catch { console.log("non-json " + s.length + " bytes"); process.exit(0); }
+    console.log(j.error !== undefined ? "error=" + JSON.stringify(j.error) : "ok=" + JSON.stringify(j.ok));
+  ' "$body")"
+  rm -f "$body"
+  echo "$label $code $field"
+}
+
+p6() {
+  req a http://127.0.0.1:7332/healthz
+  req b -H 'Host: mosaic.woltje.com' http://127.0.0.1:7332/
+  req c -H 'Host: mosaic.woltje.com' -H "X-Mosaic-Proof: $PROOF" http://127.0.0.1:7332/
+  req d -H 'X-authentik-username: tester-probe' http://127.0.0.1:7332/
+  req e -H 'x-mosaic-tester: 1' http://127.0.0.1:7332/
+  req f -H 'X-authentik-username: tester-probe' http://127.0.0.1:7333/
+  req g -H "X-Mosaic-Proof: $PROOF" http://127.0.0.1:7333/
+}
+
+# The two tester reads on OLD, through OLD's tester-http.mjs on $DATA/console/tester.sock (7333 has no listener
+# since row 196; DEVIATIONS item 1 of the 86f95bb27 window), for W10's reads through NEW's to compare against.
+# Same line shape as w10.sh: status, byte count and sha256 of the body, and for /api/config the whole body
+# (board, tester, send, edit). /api/bus/agents prints its top-level shape and the agent count only.
+OLD=86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+tread() {
+  local path="$1" out rc
+  out=$(node $HOME/.local/share/mosaic-stack/copies/$OLD/packages/cli/src/tester-http.mjs GET "$path"); rc=$?
+  printf '%s' "$out" | node -e '
+    const r=JSON.parse(require("fs").readFileSync(0,"utf8")),s=r.text,h=require("crypto").createHash("sha256").update(s).digest("hex");
+    const j=r.body,shape=Array.isArray(j)?`array(${j.length})`:j?`keys ${JSON.stringify(Object.keys(j))}`:"non-json";
+    const list=j&&(Array.isArray(j)?j:Array.isArray(j.rows)?j.rows:null);
+    console.log(`${process.argv[1]} ${r.status} ${Buffer.byteLength(s)} bytes sha256 ${h.slice(0,16)} ${shape}`+
+      (process.argv[1]==="/api/config"?` body ${s.trim()}`:list?` agents ${list.length}`:""));' "$path" 2>&1
+  echo "# exit $rc"
+}
+
+case "${1:-}" in
+  p4) p4 ;;
+  p5) p5 ;;
+  p6) p6 ;;
+  tester) echo "# P6 tester reads on OLD through the socket $(date -u +%FT%TZ)"; tread /api/config; tread /api/bus/agents ;;
+  *) echo "usage: p456.sh p4|p5|p6|tester" >&2; exit 2 ;;
+esac
@@ -0,0 +1,8 @@
+# P5 2026-10-22T14:46:17Z; HEAD aca16404cf522b03f39acaf140e4f6185a507b88
+# git diff --quiet 84f53540dd0d21ef179ca29697e172b0246e78d1 HEAD -- scripts/stack-release.sh scripts/webui-service.sh scripts/bus-service.sh scripts/stack-copy.sh: exit 0
+# git status --porcelain (exit 0): []
+# scripts/stack-release.sh HEAD blob 45e36eab4605ae010a482f146817b9e15ff2c512 NEW blob 45e36eab4605ae010a482f146817b9e15ff2c512
+# scripts/webui-service.sh HEAD blob 1e4ca9681f4388cccf9964f8492de030209bbd2f NEW blob 1e4ca9681f4388cccf9964f8492de030209bbd2f
+# scripts/bus-service.sh HEAD blob 0b1d681f3515eceefea89d6b77e048c444e79a6e NEW blob 0b1d681f3515eceefea89d6b77e048c444e79a6e
+# scripts/stack-copy.sh HEAD blob 1b0d76daf1c59c1d875fc845bc24ddd0bd51131c NEW blob 1b0d76daf1c59c1d875fc845bc24ddd0bd51131c
+P5 PASS
@@ -0,0 +1,7 @@
+login darkwing ok
+#1769 comment 30668 posted, read back equal 2026-10-22T15:30:12Z
+#1742 comment 30669 posted, read back equal 2026-10-22T15:30:14Z
+#1692 comment 30670 posted, read back equal 2026-10-22T15:30:15Z
+#1689 comment 30671 posted, read back equal 2026-10-22T15:30:16Z
+#1782 comment 30672 posted, read back equal 2026-10-22T15:30:16Z
+#1783 comment 30673 posted, read back equal 2026-10-22T15:30:18Z
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# Re-pin 84f53540d W11: post comments.md's Gitea bodies on #1769, #1742, #1692, #1689, #1782 and #1783 as darkwing, read each back.
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+export MOSAIC_GITEA_CREDENTIAL_FILE=$HOME/.mosaic/fleet/agents/darkwing/secrets/gitea-mosaicstack-darkwing.token
+G=$REPO/scripts/gitea-api.sh
+$G GET user 2>/dev/null | grep -q '"login":"darkwing"' || { echo "STOP: login is not darkwing"; exit 1; }
+echo "login darkwing ok"
+for N in 1769 1742 1692 1689 1782 1783; do
+  BODY=$(python3 -B -c '
+import re,sys
+s=open(sys.argv[1]).read()
+m=re.search(r"^## Gitea #"+sys.argv[2]+r" [^\n]*\n\n(.*?)(?=\n## |\Z)",s,re.S|re.M)
+print(m.group(1).strip().replace("\n"," "),end="")' $WIN/comments.md $N) || { echo "STOP: no body for #$N"; exit 1; }
+  [ -n "$BODY" ] || { echo "STOP: empty body #$N"; exit 1; }
+  J=$(node -e 'process.stdout.write(JSON.stringify({body:process.argv[1]}))' "$BODY")
+  OUT=$($G POST repos/mosaicstack/stack/issues/$N/comments "$J" 2>&1) || { echo "STOP: POST #$N: $(echo "$OUT" | grep -oE 'HTTP [0-9]+')"; exit 1; }
+  CID=$(echo "$OUT" | grep -oE '^\{"id":[0-9]+' | grep -oE '[0-9]+$')
+  [ -n "$CID" ] || CID=$(echo "$OUT" | node -e 'let d="";process.stdin.on("data",c=>d+=c).on("end",()=>{const i=d.indexOf("{");process.stdout.write(String(JSON.parse(d.slice(i,d.lastIndexOf("}")+1)).id))})')
+  BACK=$($G GET repos/mosaicstack/stack/issues/comments/$CID 2>/dev/null | node -e 'let d="";process.stdin.on("data",c=>d+=c).on("end",()=>process.stdout.write(JSON.parse(d).body))')
+  [ "$BACK" = "$BODY" ] && echo "#$N comment $CID posted, read back equal $(date -u +%FT%TZ)" || { echo "STOP: #$N comment $CID read-back differs"; exit 1; }
+done
@@ -0,0 +1,19 @@
+#!/usr/bin/env python3
+# Re-pin 86f95bb27 to 84f53540d (copied from window-repin-86f95bb27): S1 against S2 per table (rows, maxSeq, sha256 match) for STATE.md. Read only.
+# usage: python3 -B s12.py S1.json S2.json
+import json, sys
+a, b = (json.load(open(p)) for p in sys.argv[1:3])
+print("schema", a.get("schema"), "->", b.get("schema"))
+print("untimed S1", a.get("untimed"), "S2", b.get("untimed"))
+for sect in ("tables",):
+    ta, tb = a.get(sect) or {}, b.get(sect) or {}
+    for t in sorted(set(ta) | set(tb)):
+        x, y = ta.get(t), tb.get(t)
+        if not isinstance(x, dict) or not isinstance(y, dict):
+            print(t, "only in", "S2" if x is None else "S1"); continue
+        rx, ry = x.get("rows", x.get("count")), y.get("rows", y.get("count"))
+        same = {k for k in x if k not in ("rows", "count", "maxSeq") and x.get(k) == y.get(k)}
+        diff = sorted(k for k in set(x) | set(y) if k not in same and k not in ("rows", "count", "maxSeq"))
+        d = (ry - rx) if isinstance(rx, int) and isinstance(ry, int) else "?"
+        ms = f" maxSeq {x.get('maxSeq')}->{y.get('maxSeq')}" if x.get("maxSeq") is not None or y.get("maxSeq") is not None else ""
+        print(f"{t}: rows {rx}->{ry} ({d:+d})" if d != "?" else f"{t}: rows {rx}->{ry}", ms, "moved: " + ",".join(diff) if diff else "same")
@@ -0,0 +1,235 @@
+// Merged window B+C, S1, S2 and D3 (repin-merged-bc.md "S1 and S2"): a read-only snapshot of every
+// table in a bus store, so the 3h to 3i migration and a restore can be checked without the bus.
+// OLD's broker doesn't take --tester on usage, names or threads.
+//
+// usage: node snapshot.mjs --store /abs/bus.sqlite (--held | --stopped) [--after STAMP] [--backup /abs/bus.sqlite]
+//   --held     the running bus holds the store: a plain readOnly open, which adds no file to a WAL
+//              store that already has -wal and -shm (as stack-release.sh does for a held store).
+//              Refuses store-not-held when either is absent
+//   --stopped  the bus is stopped: refuses store-unclean when -wal or -shm is present, else opens
+//              with immutable=1 and readOnly, which creates no file and leaves the store's mtime
+//              and sha256 alone
+//   --after    also counts each timed table's rows with `at` after STAMP (mos-0838 D3, before a
+//              --restore). STAMP is a backup's STAMP file, in now_ms form (stack-release.sh:43,
+//              2026-10-20T00:11:14.123Z). The count is a text compare, as the tool's own heldcount
+//              does, so every `at` in every timed table must have that form: a table with any
+//              other value refuses at-format and names the table (sage-1125)
+//   --backup   also compares every table with a stack-release backup's bus.sqlite, which opens as
+//              --stopped opens a store: immutable=1 and readOnly, refusing backup-unclean when -wal
+//              or -shm is present, so nothing writes into the backup set
+//
+// It prints one JSON object: the schema version, then for every table in sqlite_master (type
+// table, less sqlite_*) the row count, the max seq and a sha256 of the rows (in seq order, else in
+// column order). `untimed` names the tables with no `at` column. For usage_records it adds per-run
+// input and output sums, counted as `mosaic usage` counts them (usage.mjs turnRecords). messages
+// and message_threads hold bodies and names, so they print counts only, no sha256 (sage-1125). It
+// prints counts, hashes and table and meta key names only: no message body, no instance, project
+// or thread name, no credential and no file content. It reads no config: the store path is always
+// given.
+//
+// With --backup, each table gets `vsBackup` and `stopTables` names every table other than events
+// whose rows differ from the backup's (sage-1123): a row with `at` after STAMP, a row past the
+// backup's max seq, a changed row at or below it, a changed untimed table, or a table only one
+// side has. meta counts only when a key other than schema_version and schema_digest changed (the
+// 3h to 3i migration sets those two). Events are left to the tool's own --events N.
+import { DatabaseSync } from 'node:sqlite';
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync } from 'node:fs';
+import { isAbsolute } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+// usage_records is hashed on these columns in this order, never SELECT * (mos-0888 F1), as
+// 3h-3i.sql:9 copies it. Every other table is hashed on its own columns in name order, so a
+// rebuild that reorders columns keeps the hash. usage_records with any other column set refuses.
+const USAGE_COLUMNS = ['seq', 'at', 'business', 'run', 'instance', 'provider', 'model', 'account', 'turn', 'source',
+  'phase', 'status', 'code', 'cursor', 'input', 'output', 'cache_write', 'cache_read'];
+const COUNTS_ONLY = new Set(['messages', 'message_threads']);
+const SCHEMA_KEYS = ['schema_digest', 'schema_version'];
+const STAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
+
+function refuse(code, detail) {
+  process.stderr.write(`snapshot: ${code}: ${detail}\n`);
+  process.exit(1);
+}
+
+function args(argv) {
+  const o = {};
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--store' || a === '--after' || a === '--backup') {
+      if (i + 1 >= argv.length) refuse('usage', `${a} needs a value`);
+      o[a.slice(2)] = argv[++i];
+    } else if (a === '--held' || a === '--stopped') {
+      if (o.mode) refuse('usage', 'give one of --held and --stopped');
+      o.mode = a.slice(2);
+    } else refuse('usage', `unknown argument ${a}`);
+  }
+  if (!o.store || !o.mode) refuse('usage', 'node snapshot.mjs --store /abs/bus.sqlite (--held | --stopped) [--after STAMP] [--backup /abs/bus.sqlite]');
+  if (!isAbsolute(o.store)) refuse('usage', '--store must be an absolute path');
+  if (o.backup !== undefined && !isAbsolute(o.backup)) refuse('usage', '--backup must be an absolute path');
+  if (o.after !== undefined && !(STAMP.test(o.after) && Number.isFinite(Date.parse(o.after))))
+    refuse('usage', '--after must be a STAMP like 2026-10-20T00:11:14.123Z');
+  return o;
+}
+
+function file(path, code) {
+  if (!existsSync(path) || !lstatSync(path).isFile()) refuse(code, `${path} is not a file`);
+}
+
+function immutable(path, code) {
+  for (const f of [path + '-wal', path + '-shm'])
+    if (existsSync(f)) refuse(code, `${f} is present; an immutable read would skip the WAL`);
+  return new DatabaseSync(pathToFileURL(path).href + '?immutable=1', { readOnly: true });
+}
+
+function open({ store, mode }) {
+  file(store, 'store-missing');
+  if (mode === 'stopped') return immutable(store, 'store-unclean');
+  // A plain readOnly open of a WAL store with no -wal and -shm creates them, so a store that
+  // nothing holds refuses here instead of gaining two files.
+  for (const f of [store + '-wal', store + '-shm'])
+    if (!existsSync(f)) refuse('store-not-held', `${f} is absent; use --stopped for a store the bus doesn't hold`);
+  return new DatabaseSync(store, { readOnly: true });
+}
+
+const q = (name) => `"${name.replaceAll('"', '""')}"`;
+const value = (v) => (typeof v === 'bigint' ? String(v) : v instanceof Uint8Array ? { hex: Buffer.from(v).toString('hex') } : v);
+
+// The same records `mosaic usage` counts: per (run, turn, source) the latest row, an end row
+// winning; a turn is known only when that row is an end row with status known.
+function byRun(rows) {
+  const turns = new Map();
+  for (const row of rows) {
+    const key = JSON.stringify([row.business, row.run, row.turn, row.source]);
+    if (row.phase === 'end' || !turns.has(key)) turns.set(key, row);
+  }
+  const runs = new Map();
+  for (const row of turns.values()) {
+    const key = JSON.stringify([row.business, row.run]);
+    if (!runs.has(key)) runs.set(key, { business: row.business, run: row.run, input: 0n, output: 0n, unknown: new Set() });
+    const r = runs.get(key);
+    if (row.phase === 'end' && row.status === 'known') {
+      r.input += BigInt(row.input);
+      r.output += BigInt(row.output);
+    } else r.unknown.add(row.turn);
+  }
+  return [...runs.values()].map(({ unknown, input, output, ...r }) => ({
+    ...r, input: String(input), output: String(output), unknownTurns: unknown.size,
+  }));
+}
+
+// meta is compared by key: the names of the keys whose value differs, never the values.
+function metaKeys(db) {
+  return new Map(db.prepare('SELECT key, value FROM meta').all().map((r) => [String(r.key), String(r.value)]));
+}
+
+// One table: rows, max seq and sha256; rows after `after`; with `priorMax` (the backup's max
+// seq) a second hash of the rows at or below it and the count of rows above it. The hashes stay
+// inside: a COUNTS_ONLY table's `t` gets none.
+function read(db, table, { after, priorMax } = {}) {
+  const cols = db.prepare('SELECT name FROM pragma_table_info(?)').all(table).map((c) => c.name);
+  if (!cols.length) refuse('table-missing', table);
+  let hashed = [...cols].sort();
+  if (table === 'usage_records') {
+    if (JSON.stringify(hashed) !== JSON.stringify([...USAGE_COLUMNS].sort()))
+      refuse('columns-changed', `usage_records has columns ${hashed.join(',')}`);
+    hashed = USAGE_COLUMNS;
+  }
+  const seq = cols.includes('seq');
+  const at = cols.includes('at');
+  const stmt = db.prepare(`SELECT ${hashed.map(q).join(',')} FROM ${q(table)} ORDER BY ${seq ? 'seq' : hashed.map(q).join(',')}`);
+  stmt.setReadBigInts(true);
+  const full = createHash('sha256');
+  const prior = createHash('sha256');
+  const limit = priorMax === undefined ? undefined : BigInt(priorMax ?? 0);
+  let rows = 0;
+  let rowsAfter = 0;
+  let badAt = 0;
+  let newRows = 0;
+  const kept = [];
+  for (const row of stmt.iterate()) {
+    rows++;
+    const line = JSON.stringify(hashed.map((c) => value(row[c]))) + '\n';
+    full.update(line);
+    if (seq && limit !== undefined) {
+      if (row.seq <= limit) prior.update(line);
+      else newRows++;
+    }
+    if (after !== undefined && at) {
+      if (typeof row.at !== 'string' || !STAMP.test(row.at)) badAt++;
+      else if (row.at > after) rowsAfter++;
+    }
+    if (table === 'usage_records') kept.push(row);
+  }
+  if (badAt) refuse('at-format', `${table} has ${badAt} row(s) whose at is not in the STAMP form, so a text compare with --after would miscount`);
+  const sha256 = full.digest('hex');
+  const t = { rows, maxSeq: seq ? (db.prepare(`SELECT max(seq) AS m FROM ${q(table)}`).get().m ?? null) : null };
+  if (!COUNTS_ONLY.has(table)) t.sha256 = sha256;
+  if (after !== undefined && at) t.rowsAfter = rowsAfter;
+  if (table === 'usage_records') t.byRun = byRun(kept);
+  return { t, sha256, cols: hashed, seq, at, newRows, priorSha: seq && limit !== undefined ? prior.digest('hex') : null };
+}
+
+// Tables only: no index, view or trigger, and none of SQLite's own sqlite_* tables.
+const tablesOf = (db) => db.prepare("SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite\\_%' ESCAPE '\\' ORDER BY name")
+  .all().map((r) => r.name);
+
+const o = args(process.argv.slice(2));
+if (o.backup !== undefined) file(o.backup, 'backup-missing');
+const db = open(o);
+const bdb = o.backup === undefined ? null : immutable(o.backup, 'backup-unclean');
+const out = {};
+try {
+  db.exec('BEGIN');
+  out.schema = db.prepare("SELECT value FROM meta WHERE key='schema_version'").get()?.value ?? null;
+  const names = tablesOf(db);
+  const base = new Map();
+  if (bdb) {
+    out.backupSchema = bdb.prepare("SELECT value FROM meta WHERE key='schema_version'").get()?.value ?? null;
+    for (const name of tablesOf(bdb)) base.set(name, read(bdb, name));
+  }
+  out.tables = {};
+  out.untimed = [];
+  const stop = [];
+  for (const name of names) {
+    const b = base.get(name);
+    const r = read(db, name, { after: o.after, priorMax: b ? b.t.maxSeq : undefined });
+    if (!r.at) out.untimed.push(name);
+    if (bdb) {
+      const v = { backupRows: b ? b.t.rows : null };
+      let changed;
+      if (!b) changed = true;
+      else if (name === 'meta') {
+        const now = metaKeys(db);
+        const then = metaKeys(bdb);
+        v.keysChanged = [...new Set([...now.keys(), ...then.keys()])].filter((k) => now.get(k) !== then.get(k)).sort();
+        changed = v.keysChanged.some((k) => !SCHEMA_KEYS.includes(k));
+      } else if (r.seq) {
+        v.backupMaxSeq = b.t.maxSeq;
+        v.newRows = r.newRows;
+        v.priorSame = JSON.stringify(r.cols) === JSON.stringify(b.cols) && r.priorSha === b.sha256;
+        changed = r.newRows > 0 || !v.priorSame;
+      } else {
+        v.same = JSON.stringify(r.cols) === JSON.stringify(b.cols) && r.sha256 === b.sha256;
+        changed = !v.same;
+      }
+      if ((r.t.rowsAfter ?? 0) > 0) changed = true;
+      r.t.vsBackup = v;
+      if (changed && name !== 'events') stop.push(name);
+    }
+    out.tables[name] = r.t;
+  }
+  if (bdb) {
+    out.onlyInBackup = [...base.keys()].filter((n) => !names.includes(n));
+    out.stopTables = [...stop, ...out.onlyInBackup].sort();
+  }
+  if (o.after !== undefined) {
+    out.after = o.after;
+    out.eventsAfter = out.tables.events?.rowsAfter ?? null;
+  }
+} finally {
+  try { db.exec('ROLLBACK'); } catch {}
+  db.close();
+  bdb?.close();
+}
+process.stdout.write(JSON.stringify(out, null, 2) + '\n');
@@ -0,0 +1,5 @@
+# P6 tester reads on OLD through the socket 2026-10-22T14:46:17Z
+/api/config 200 73 bytes sha256 e7ef9a40a725f356 keys ["board","tester","send","edit"] body {"board":"http://127.0.0.1:7331","tester":true,"send":false,"edit":false}
+# exit 0
+/api/bus/agents 200 709 bytes sha256 a8fe55858c131891 keys ["rows","at"] agents 2
+# exit 0
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d step wrapper (sage-2703): w.sh FILE TITLE CMD... runs CMD in REPO under a clean env (no ANTHROPIC_*, CLAUDE_*,
+# MOSAIC_* or pi variables), appends the title, command, output, exit code and date -u stamps to window/FILE,
+# prints the output, and exits with CMD's exit code.
+set -uo pipefail
+W=/mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d
+f="$W/$1"; title="$2"; shift 2
+E=(env -i HOME="$HOME" PATH="$HOME/.local/bin:/usr/local/bin:/usr/bin:/bin" LANG=C.UTF-8
+  XDG_RUNTIME_DIR="$XDG_RUNTIME_DIR" DBUS_SESSION_BUS_ADDRESS="${DBUS_SESSION_BUS_ADDRESS:-unix:path=$XDG_RUNTIME_DIR/bus}")
+t0=$(date -u +%FT%T.%3NZ)
+{ echo; echo "## $title"; echo "# start $t0"; echo "# command: (cd \$REPO && <clean env> $*)"; } >> "$f"
+out=$(cd /mnt/storage/src/mosaic-stack && "${E[@]}" "$@" 2>&1); rc=$?
+printf '%s\n' "$out" >> "$f"
+echo "# exit $rc, end $(date -u +%FT%T.%3NZ)" >> "$f"
+printf '%s\n# exit %s\n' "$out" "$rc"
+exit $rc
@@ -0,0 +1,9 @@
+npm warn deprecated [email protected]: Use your platform's native DOMException instead
+
+added 128 packages in 1s
+npm warn install-scripts 3 packages had install scripts blocked because they are not covered by allowScripts:
+npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+npm warn install-scripts   [email protected] (postinstall: node install.js)
+npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+npm warn install-scripts
+npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow.
@@ -0,0 +1 @@
+copied: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W0 (PLAN.md; sage-2703): make NEW's copy, then check it.
+# Creates files under copies/ only; nothing live changes. Launch from /.
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+C=$HOME/.local/share/mosaic-stack/copies/$NEW
+BC=$REPO/agents/sage/work/window-plan/repin-de352dfaf/business-check.mjs
+fail=0
+echo "start $(date -u +%FT%TZ)"
+[ ! -e "$C" ] || { echo "STOP copy $C already exists"; exit 8; }
+(cd "$REPO" && scripts/stack-copy.sh copy $NEW) > $WIN/w0-copy.out 2> $WIN/w0-copy.err; rc=$?
+echo "stack-copy rc=$rc"; cat $WIN/w0-copy.out; cat $WIN/w0-copy.err
+[ "$rc" = 0 ] || { echo "STOP stack-copy failed"; exit 1; }
+d=$(diff <(git -C "$REPO" show $NEW:package-lock.json) "$C/package-lock.json") && echo "LOCK_MATCH (package-lock diff empty)" || { echo "LOCK_DIFF"; printf '%s\n' "$d" | sed -n 1,20p; fail=1; }
+[ -d "$C/packages/processing-control" ] && echo "processing-control present: $(ls "$C/packages/processing-control" | tr '\n' ' ')" || { echo "processing-control MISSING"; fail=1; }
+[ -d "$C/tools/unslop-hook" ] && echo "unslop-hook present: $(ls "$C/tools/unslop-hook" | tr '\n' ' ')" || { echo "unslop-hook MISSING"; fail=1; }
+want=$(git -C "$REPO" ls-tree $NEW packages/library/bin/askpass | awk '{print $1}')
+have=$(stat -c %a "$C/packages/library/bin/askpass" 2>&1)
+echo "askpass tree mode $want, copy mode $have"
+case "$want:$have" in 100755:[57][0-7][0-7]|100644:[46][0-7][0-7]) echo "ASKPASS_MODE_OK";; *) echo "ASKPASS_MODE_BAD"; fail=1;; esac
+[ -x "$C/packages/library/bin/askpass" ] && echo "askpass executable bit set" || echo "askpass executable bit not set"
+(cd "$C" && node -e 'import("oauth4webapi").then(()=>{console.log("oauth4webapi "+require("./node_modules/oauth4webapi/package.json").version);console.log("IMPORT_OK")},(e)=>{console.log("IMPORT_FAIL "+e.message);process.exit(1)})') || fail=1
+du -sh "$C"; df -h /home | tail -1
+node $BC $NEW || fail=1
+echo "end $(date -u +%FT%TZ) fail=$fail"
+exit $fail
@@ -0,0 +1,27 @@
+start 2026-10-22T14:46:02Z
+stack-copy rc=0
+copied: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+npm warn deprecated [email protected]: Use your platform's native DOMException instead
+
+added 128 packages in 1s
+npm warn install-scripts 3 packages had install scripts blocked because they are not covered by allowScripts:
+npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+npm warn install-scripts   [email protected] (postinstall: node install.js)
+npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+npm warn install-scripts
+npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow.
+LOCK_MATCH (package-lock diff empty)
+processing-control present: package.json README.md src tests 
+unslop-hook present: claude-hook.js extension.ts lists.json README.md test-unslop-check.js unslop-check.js 
+askpass tree mode 100755, copy mode 555
+ASKPASS_MODE_OK
+askpass executable bit set
+oauth4webapi 3.8.8
+IMPORT_OK
+164M	/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+/dev/nvme1n1p5  458G  421G   14G  97% /home
+copy 84f53540d: roles 6, projects 1, arbiters 2
+HOLDS chief instance.name yes
+HOLDS pm instance.name no
+LOAD_OK
+end 2026-10-22T14:46:04Z fail=0
@@ -0,0 +1,17 @@
+# W10 start 2026-10-22T15:23:15Z, TMPDIR /mnt/storage/scratch/tmp/gguyTdj
+
+## W10 matrix-new.txt vs matrix-old.txt (header lines differ by stamp)
+(diff exit 0)
+# matrix: a-g unchanged expected: FAIL=0
+# listeners on 7333: 0
+/api/config 200 73 bytes sha256 e7ef9a40a725f356 keys ["board","tester","send","edit"] body {"board":"http://127.0.0.1:7331","tester":true,"send":false,"edit":false} (exit 0)
+/api/bus/agents 200 320 bytes sha256 bae2369cf82c79e6 keys ["rows","at"] agents 1 (exit 0)
+# tester /api/bus/agents 200, agents 1 (P6: agents 1; the hash moves with the at field)
+# tester /api/config line identical to tester-old.txt
+P4 PASS: one R: spec R:0.0.0.0:7332:127.0.0.1:7332, DropInPaths empty
+POST /api/seen 401 error="sign-in required"
+POST /api/reply 401 error="sign-in required"
+POST /api/processing 401 error="sign-in required"
+tester POST /api/processing 403 error="read-only" sent=false (exit 2)
+# W10 end 2026-10-22T15:23:15Z FAIL=0
+W10_PASS
@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W10 (PLAN.md, sha256 d7b380ef), adapted from window-repin-86f95bb27/w10.sh: the 7332 matrix again as matrix-new.txt against
+# P6's matrix-old.txt, the two tester reads through NEW's tester-http.mjs against P6's tester-old.txt, no listener
+# on 7333, P4 again, and the unsigned-write refusal baseline (mos-1195): Console POSTs through the main port with
+# no session must be refused, /api/processing included. Then POST /api/processing through the tester socket must be
+# refused 403 read-only (PLAN.md W10): without a session the main port answers 401 before the processing route
+# runs, so the socket is the path that reaches the read-only refusal. Reads only, apart from the refused POSTs.
+# Runs after S2 (w9b.sh).
+# usage: w10.sh
+set -uo pipefail
+WIN=/mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+C=$HOME/.local/share/mosaic-stack/copies/$NEW
+W=$WIN/W.txt
+export TMPDIR=$(mktemp -d /mnt/storage/scratch/tmp/gXXXXXX)
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+stop() { note "STOP: $*"; exit 1; }
+FAIL=0
+
+note "W10 start $(date -u +%FT%TZ), TMPDIR $TMPDIR"
+{ echo "# W10 matrix $(date -u +%FT%TZ)"; bash $WIN/p456.sh p6; } > $WIN/matrix-new.txt
+{ echo; echo "## W10 matrix-new.txt vs matrix-old.txt (header lines differ by stamp)"; diff <(grep -v '^#' $WIN/matrix-old.txt) <(grep -v '^#' $WIN/matrix-new.txt); echo "(diff exit $?)"; } | tee -a "$W"
+# Expected: a-g all unchanged. OLD already had the socket, so f and g were 000 at P6 too; no line is named.
+for l in a b c d e f g; do
+  [ "$(grep "^$l " $WIN/matrix-old.txt)" = "$(grep "^$l " $WIN/matrix-new.txt)" ] || { note "matrix line $l changed"; FAIL=1; }
+done
+note "matrix: a-g unchanged expected: FAIL=$FAIL"
+
+L=$(ss -ltnH 'sport = :7333' | grep -c .)
+{ echo; echo "## W10 listeners on :7333"; ss -ltnH 'sport = :7333'; echo "count $L"; } >> "$W"
+note "listeners on 7333: $L"
+[ "$L" = 0 ] || FAIL=1
+
+{ echo; echo "## W10 tester reads through $C/packages/cli/src/tester-http.mjs"; } >> "$W"
+for p in /api/config /api/bus/agents; do
+  out=$(node $C/packages/cli/src/tester-http.mjs GET $p); rc=$?
+  # Same line shape as p456.sh tread (tester-old.txt), computed over the response text.
+  line=$(printf '%s' "$out" | node -e '
+    const r=JSON.parse(require("fs").readFileSync(0,"utf8")),s=r.text,h=require("crypto").createHash("sha256").update(s).digest("hex");
+    const j=r.body,shape=Array.isArray(j)?`array(${j.length})`:j?`keys ${JSON.stringify(Object.keys(j))}`:"non-json";
+    const list=j&&(Array.isArray(j)?j:Array.isArray(j.rows)?j.rows:null);
+    console.log(`${process.argv[1]} ${r.status} ${Buffer.byteLength(s)} bytes sha256 ${h.slice(0,16)} ${shape}`+
+      (process.argv[1]==="/api/config"?` body ${s.trim()}`:list?` agents ${list.length}`:""));' $p 2>&1)
+  echo "$line (exit $rc)" | tee -a "$W"
+  [ $rc = 0 ] || FAIL=1
+done
+NEWCFG=$(grep '^/api/config' "$W" | tail -1 | sed 's/ (exit .*//')
+OLDCFG=$(grep '^/api/config 200 ' $WIN/tester-old.txt)
+NEWAG=$(grep '^/api/bus/agents' "$W" | tail -1)
+case "$NEWAG" in "/api/bus/agents 200 "*) note "tester /api/bus/agents 200, $(sed -n 's/.* agents \([0-9]*\).*/agents \1/p' <<< "$NEWAG") (P6: agents 1; the hash moves with the at field)" ;; *) note "tester /api/bus/agents is not 200"; FAIL=1 ;; esac
+[ "$NEWCFG" = "$OLDCFG" ] && note "tester /api/config line identical to tester-old.txt" || { note "tester /api/config differs from tester-old.txt"; FAIL=1; }
+
+P4=$(bash $WIN/p456.sh p4); rc=$?
+{ echo; echo "## W10 P4 again"; echo "$P4"; echo "(p4 exit $rc)"; } >> "$W"
+echo "$P4" | tail -1
+[ $rc = 0 ] || FAIL=1
+
+{ echo; echo "## W10 unsigned writes through the main port (no session, no proxy header; must be refused)"; } >> "$W"
+for p in /api/seen /api/reply /api/processing; do
+  code=$(curl -s -m 10 -o $TMPDIR/body -w '%{http_code}' -X POST -H 'Host: mosaic.woltje.com' -H 'Content-Type: application/json' --data '{}' http://127.0.0.1:7332$p)
+  err=$(node -e 'try{const j=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));console.log("error="+JSON.stringify(j.error))}catch{console.log("non-json")}' $TMPDIR/body)
+  echo "POST $p $code $err" | tee -a "$W"
+  case $code in 401|403) ;; *) FAIL=1 ;; esac
+done
+out=$(echo '{}' | node $C/packages/cli/src/tester-http.mjs POST /api/processing); rc=$?
+line=$(printf '%s' "$out" | node -e '
+  try{const r=JSON.parse(require("fs").readFileSync(0,"utf8"));console.log(`${r.status} error=${JSON.stringify(r.body?.error)} sent=${JSON.stringify(r.body?.sent)}`)}catch{console.log("unreadable")}')
+echo "tester POST /api/processing $line (exit $rc)" | tee -a "$W"
+case "$line" in '403 error="read-only" '*) ;; *) FAIL=1 ;; esac
+rm -rf "$TMPDIR"
+note "W10 end $(date -u +%FT%TZ) FAIL=$FAIL"
+[ $FAIL = 0 ] && echo W10_PASS || echo W10_CHECK
@@ -0,0 +1,32 @@
+# W11 reads start 2026-10-22T15:23:22Z
+# W11 business file sha256 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93
+# W11 reads end 2026-10-22T15:23:22Z FAIL=0
+ActiveState=active
+DropInPaths=
+MainPID=3634254
+ExecStart={ path=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/scripts/mosaic ; argv[]=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/scripts/mosaic bus start mosaic-stack --pm ; ignore_errors=no ; start_time=[Thu 2026-10-22 10:05:57 CDT] ; stop_time=[n/a] ; pid=3634254 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+# exit 0
+● jarvis-curation-gate.service                            loaded failed failed Jarvis curation-gate liveness check (wake the agent if staged pulls sit uncurated)
+● jarvis-retro-check.service                              loaded failed failed Jarvis weekly retrospective ARTIFACT check (did Sunday's tick produce a retro?)
+● jarvis-retro.service                                    loaded failed failed Jarvis weekly retrospective tick
+● mosaic-install-drift.service                            loaded failed failed Assert the installed Mosaic binaries still match the committed source (drift, not failure)
+● [email protected] loaded failed failed Escalate failed Mosaic unit jarvis-curation-gate.service to the local agent seat
+● [email protected]   loaded failed failed Escalate failed Mosaic unit jarvis-retro-check.service to the local agent seat
+● [email protected]         loaded failed failed Escalate failed Mosaic unit jarvis-retro.service to the local agent seat
+● [email protected] loaded failed failed Escalate failed Mosaic unit mosaic-install-drift.service to the local agent seat
+● [email protected]     loaded failed failed Escalate failed Mosaic unit mosaic-reconcile.service to the local agent seat
+● setspark-tmp-guard.service                              loaded failed failed SetSpark: /tmp and scratch guard
+# exit 0
+ActiveState=active
+SubState=running
+ActiveEnterTimestamp=Tue 2026-10-13 08:40:19 CDT
+MainPID=1317
+# exit 0
+ActiveState=active
+DropInPaths=
+MainPID=3634256
+ExecStart={ path=/usr/bin/node ; argv[]=/usr/bin/node /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1/packages/webui/src/cli.mjs serve --checkout /mnt/storage/src/mosaic-stack --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket ; ignore_errors=no ; start_time=[Thu 2026-10-22 10:05:57 CDT] ; stop_time=[n/a] ; pid=3634256 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+# exit 0
+W11_READS_OK
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W11 reads for STATE.md (PLAN.md, sha256 d7b380ef): both units, the
+# tunnel, the business file hash, failed user units. Same reads as window-repin-86f95bb27's W11. Read only.
+# usage: w11.sh
+set -uo pipefail
+WIN=/mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d
+BIZ=$HOME/.config/mosaic-dev/businesses/mosaic-stack.json
+BIZ_SHA=1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93
+W=$WIN/W.txt
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+FAIL=0
+
+note "W11 reads start $(date -u +%FT%TZ)"
+$WIN/w.sh W.txt "W11 bus unit" systemctl --user show [email protected] -p ExecStart -p WorkingDirectory -p DropInPaths -p MainPID -p ActiveState > $WIN/.w11-bus.txt || FAIL=1
+$WIN/w.sh W.txt "W11 webui unit" systemctl --user show mosaic-webui.service -p ExecStart -p WorkingDirectory -p DropInPaths -p MainPID -p ActiveState > $WIN/.w11-webui.txt || FAIL=1
+$WIN/w.sh W.txt "W11 tunnel" systemctl --user show mosaic-preview-tunnel.service -p ActiveState -p SubState -p MainPID -p ActiveEnterTimestamp > $WIN/.w11-tunnel.txt || FAIL=1
+B=$(sha256sum < "$BIZ" | cut -c1-64)
+note "W11 business file sha256 $B"
+[ "$B" = "$BIZ_SHA" ] || { note "business file is not P1's 1e49bdf0"; FAIL=1; }
+$WIN/w.sh W.txt "W11 failed user units" systemctl --user list-units --failed --no-pager --no-legend > $WIN/.w11-failed.txt || FAIL=1
+for f in bus webui; do
+  grep -qx 'ActiveState=active' $WIN/.w11-$f.txt && grep -qx 'DropInPaths=' $WIN/.w11-$f.txt || { note "$f unit not active or has drop-ins"; FAIL=1; }
+done
+note "W11 reads end $(date -u +%FT%TZ) FAIL=$FAIL"
+cat $WIN/.w11-*.txt
+[ $FAIL = 0 ] && echo W11_READS_OK || echo W11_CHECK
@@ -0,0 +1,30 @@
+# W12c start 2026-10-22T15:23:49Z (DEVIATIONS item 8)
+# backup /home/jwoltje/.mosaic-dev/backups/w12-20261022T152349Z: ok events 1951 maxSeq 1951 schema 3l; SHA256SUMS e5d656dffc056a028cfe2a2c7f6f3b2a99845d1628b07355c56704a7b384d86a
+# chief unslop baseline {"checked":1,"flagged":0,"patterns":{},"notices":0,"broken":null}
+sent e7fef539 to chief
+chief (RESULT, re e7fef539) 8c807935:
+I passed your request to the pm in your own words (message 86371169-7c3f-4716-9e2b-7cca8cdd2856), marked as a tester's PM test that authorizes nothing. The pm had no session running, so I launched it (run r410293d04d3d) to receive the message. No answer has come back yet; when it does, I'll send you the PRD version and the number of ids.
+# exit 0
+re6c69f1ec1f0  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T15:05:59.295Z  running
+r410293d04d3d  mosaic-stack/pm  claude-code claude-opus-5-5  by chief  since 2026-10-22T15:24:01.208Z  running
+# exit 0
+# step 1: pm launched from the relay: run r410293d04d3d (claude-code)
+sent 19bb87bb to pm
+pm (RESULT, re 19bb87bb) 4da5024b:
+Version 1.14, 85 ids.
+# exit 0
+# pm read: 1.14 and 85 found in the reply
+sent 7fbc611b to chief
+chief (RESULT, re 7fbc611b) 26f1395d:
+Additionally, it is crucial to note that the pm's matching answer stands as a testament to a vibrant requirements read.
+
+[unslop: 1 reply of this session flagged since the last note: banned word "additionally" x1; banned word "crucial" x1; banned word "testament" x1; banned word "vibrant" x1. The session gets a correction notice on its next turn.]
+# exit 0
+# turn 1 RESULT carries the operator note
+sent ba75eff6 to chief
+chief (RESULT, re ba75eff6) dc9dd22e:
+received
+# exit 0
+# counts {"checked":5,"flagged":1,"patterns":{"ms-unslop:7":4},"notices":1,"broken":null}
+# W12c end 2026-10-22T15:24:29Z W12_PASS
+W12_PASS
@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W12 (PLAN.md sha256 d7b380ef: "Row 66's live check as last time").
+# Last time was window-repin-86f95bb27's w12b.sh route (mos-1234), because the chief declines a tester staffing
+# ask and there's no tester path to a pm (that window's STATE.md, W12). This script runs that route directly,
+# without w12.sh's staffing ask (DEVIATIONS.md item 8):
+#   Backup first (Q173): w12.sh's online copy of the held store through sqlite's backup API, read-only source.
+#   Step 1: one relay try. One `talk chief --tester` REQUEST that gives the pm real work, with no staffing ask
+#     and no authorization text. If a pm launches from it, the pm read runs (expect 1.14 and 85 ids). If not,
+#     the read is recorded open and no more chief turns go to it.
+#   Step 2: row 66's live check (Vikunja #454) on the chief re6c69f1ec1f0 (W5 launched it; W9 took it from launches list). Turn 1 draws a known tell, turn 2 is
+#     a plain line that must carry the notice. PASS needs checked +2, flagged +1 and notices +1 over the
+#     baseline read before the steps, with broken null.
+# Every bus call carries --tester. A failed check stops the script.
+# usage: w12c.sh
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+C=$HOME/.local/share/mosaic-stack/copies/$NEW
+DATA=$HOME/.mosaic-dev
+MOSAIC=$HOME/.npm-global/bin/mosaic
+BZ=(--business mosaic-stack)
+CHIEF=re6c69f1ec1f0
+CRUN=$DATA/launches/mosaic-stack/$CHIEF
+W=$WIN/W.txt
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+stop() { note "STOP: $*"; exit 1; }
+sha() { sha256sum < "$1" | cut -c1-64; }
+step() { local f="$1"; shift; $WIN/w.sh W.txt "$@" > "$WIN/$f"; local rc=$?; cat "$WIN/$f"; return $rc; }
+counts() { node --input-type=module -e '
+import { unslopCounts } from "'"$C"'/packages/harness/src/runner.mjs";
+console.log(JSON.stringify(unslopCounts(process.argv[1])));' "$CRUN/unslop.jsonl"; }
+
+note "W12c start $(date -u +%FT%TZ) (DEVIATIONS item 8)"
+grep -q "/copies/$NEW/scripts/mosaic" "$MOSAIC" || stop "the wrapper is not pinned to NEW"
+$MOSAIC launches list --json 2>/dev/null | node -e '
+  const l=JSON.parse(require("fs").readFileSync(0,"utf8"));
+  const c=l.filter(x=>x.business==="mosaic-stack"&&x.instance==="chief"&&x.live===true);
+  process.exit(c.length===1&&c[0].run===process.argv[1]&&c[0].harness==="claude-code"?0:1)' $CHIEF || stop "chief $CHIEF is not the one live claude-code chief"
+
+# backup first (w12.sh's)
+STAMP=$(date -u +%Y%m%dT%H%M%SZ)
+B=$DATA/backups/w12-$STAMP
+[ ! -e "$B" ] || stop "$B exists"
+( umask 077; mkdir -p "$B" ) || stop "backup dir"
+python3 -B -c '
+import sqlite3,sys
+src=sqlite3.connect("file:"+sys.argv[1]+"?mode=ro",uri=True)
+dst=sqlite3.connect(sys.argv[2])
+src.backup(dst)
+ok=dst.execute("pragma integrity_check").fetchone()[0]
+n=dst.execute("select count(*), max(seq) from events").fetchone()
+sv=dst.execute("select value from meta where key=?",("schema_version",)).fetchone()
+dst.close(); src.close()
+print(ok, "events", n[0], "maxSeq", n[1], "schema", sv[0] if sv else None)
+sys.exit(0 if ok=="ok" else 1)' "$DATA/bus/bus.sqlite" "$B/bus.sqlite" > "$B/CHECK" || stop "backup or integrity_check failed: $(cat $B/CHECK 2>/dev/null)"
+chmod 600 "$B/bus.sqlite"
+( cd "$B" && sha256sum bus.sqlite CHECK > SHA256SUMS )
+echo "W12 $(date -u +%FT%TZ) store backup $B ($(cat $B/CHECK)), SHA256SUMS sha256 $(sha $B/SHA256SUMS)" >> $WIN/backups.txt
+note "backup $B: $(cat $B/CHECK); SHA256SUMS $(sha $B/SHA256SUMS)"
+
+BASE=$(counts) || stop "baseline counts"
+note "chief unslop baseline $BASE"
+node -e 'const b=JSON.parse(process.argv[1]);process.exit(b.broken===null?0:1)' "$BASE" || stop "baseline broken is not null"
+
+# step 1: one relay try
+MARK_MS=$(date +%s%3N)
+step .w12c-talk-chief-relay.txt "W12c step 1 talk chief --wait 300 --tester (relay to pm)" $MOSAIC talk chief "[mos test] Please relay this to the pm: [mos test] read packages/tasks/requirements.json through your requirements read and reply with the PRD version and the number of ids." --wait 300 "${BZ[@]}" --tester || stop "talk chief (relay)"
+PM=""
+for i in $(seq 1 24); do
+  PM=$($MOSAIC launches list --json 2>/dev/null | node -e '
+    const l=JSON.parse(require("fs").readFileSync(0,"utf8")),since=Number(process.argv[1]);
+    const p=l.filter(x=>x.business==="mosaic-stack"&&x.instance==="pm"&&x.live===true&&Date.parse(x.startedAt)>=since);
+    if(p.length===1)process.stdout.write(`${p[0].run} ${p[0].harness}`)' "$MARK_MS") && [ -n "$PM" ] && break
+  sleep 5
+done
+step .w12c-launches.txt "W12c launches list" $MOSAIC launches list || stop "launches list"
+if [ -n "$PM" ]; then
+  read -r PMRUN PMH <<<"$PM"
+  note "step 1: pm launched from the relay: run $PMRUN ($PMH)"
+  step .w12c-talk-pm.txt "W12c pm read talk pm --wait 300 --tester" $MOSAIC talk pm "[mos test] read packages/tasks/requirements.json through your requirements read and reply with one line: the version and the number of ids" --wait 300 "${BZ[@]}" --tester || stop "talk pm"
+  grep -q '1\.14' $WIN/.w12c-talk-pm.txt && grep -qw '85' $WIN/.w12c-talk-pm.txt && note "pm read: 1.14 and 85 found in the reply" || note "pm read: the reply does not show 1.14 and 85; see .w12c-talk-pm.txt"
+else
+  note "step 1: no pm launch within 120 s of the relay; the pm read is open (as mos-1234 item 3), no more chief turns for it"
+fi
+
+# step 2: row 66 on the chief
+step .w12c-talk-chief-1.txt "W12c step 2 turn 1 talk chief --wait 300 --tester" $MOSAIC talk chief "[mos test] Style-check test for row 66: reply with one sentence that uses the words additionally, crucial, testament and vibrant. Nothing else." --wait 300 "${BZ[@]}" --tester || stop "talk chief turn 1"
+grep -q '\[unslop: ' $WIN/.w12c-talk-chief-1.txt && note "turn 1 RESULT carries the operator note" || note "turn 1 RESULT has no [unslop: note"
+step .w12c-talk-chief-2.txt "W12c step 2 turn 2 talk chief --wait 300 --tester" $MOSAIC talk chief "[mos test] Row 66 turn 2: reply with one line: received." --wait 300 "${BZ[@]}" --tester || stop "talk chief turn 2"
+
+{ echo; echo "## W12c $CRUN/unslop.jsonl (events only, no text)"; node -e '
+  for (const l of require("fs").readFileSync(process.argv[1],"utf8").split("\n").filter(Boolean)) {
+    const e=JSON.parse(l); delete e.text; console.log(JSON.stringify(e)); }' "$CRUN/unslop.jsonl"; } >> "$W"
+cp "$CRUN/unslop.jsonl" $WIN/.w12c-chief-unslop.jsonl
+counts > $WIN/.w12c-counts.json || stop "unslopCounts"
+{ echo; echo "## W12c unslopCounts (NEW runner.mjs), baseline $BASE"; cat $WIN/.w12c-counts.json; } >> "$W"
+note "counts $(cat $WIN/.w12c-counts.json)"
+node -e '
+const b=JSON.parse(process.argv[2]),c=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));
+process.exit(c.checked-b.checked>=2&&c.flagged-b.flagged>=1&&c.notices-b.notices>=1&&c.broken===null?0:1)' $WIN/.w12c-counts.json "$BASE" && R=W12_PASS || R=W12_CHECK
+note "W12c end $(date -u +%FT%TZ) $R"
+echo $R
@@ -0,0 +1,17 @@
+# W5 go mos-1288, start 2026-10-22T15:05:55Z
+# condition 3 recheck: tool blob 45e36eab4605, plan d7b380ef, four scripts clean, pointer on OLD, P2 stubs and units PASS
+stack-release: interpreter: {"path":"/usr/bin/python3.14","version":[3,14,6],"dev":66308,"ino":3968163,"sha256":"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc"}
+stack-release: captured the rollback set: /home/jwoltje/.mosaic-dev/state/stack-rollback/20261022T150555Z-84f53540dd0d
+stack-release: stopped both units
+stack-release: stopped store schema: 3j
+stack-release: backup: /home/jwoltje/.mosaic-dev/backups/stack/20261022T150555Z-84f53540dd0d
+stack-release: migrated the store to 3l
+stack-release: installed 84f53540dd0d21ef179ca29697e172b0246e78d1
+stack-release: gate passed on 84f53540dd0d21ef179ca29697e172b0246e78d1
+stack-release: activate ok: 84f53540dd0d21ef179ca29697e172b0246e78d1 is live for mosaic-stack
+# exit 0
+# W5 exit 0, W5.start 2026-10-22T15:05:55Z, end 2026-10-22T15:06:00Z
+# W5: activation 20261022T150555Z-84f53540dd0d, backup /home/jwoltje/.mosaic-dev/backups/stack/20261022T150555Z-84f53540dd0d, STAMP 2026-10-22T15:05:56.138Z, SCHEMA 3j, SHA256SUMS sha256 e0d408ca42a337df8498e2dfae4371489f16ff8560457b5004d3ea895f7b4389 (sums check OK)
+# W5 launched lines in the bus journal since W5.start: 1: launched chief: run re6c69f1ec1f0, claude-code claude-opus-5-5
+# W5 status: pointer NEW, pm true, 3l, check pass, unit flags match. W5_PASS 2026-10-22T15:06:00Z
+# W5 restore plan exit 0: restore: the store must go back to 3j; needs --restore 20261022T150555Z-84f53540dd0d 
@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W5 (PLAN.md sha256 d7b380ef, the W5 row). Runs only on Mos's W5 go and Sage's
+# CLEAR, after P2 passed. Rechecks the tool blob and the plan sha first; if either moved, stop (W3 runs again and goes
+# to Mos). Then W3's command without --plan, --migrate included, through w.sh into W5.txt. Needs exit 0, "activate
+# ok", "gate passed" (the gate's last check is pm-launch-unconfirmed, so a pass covers pm_launched), "stopped store
+# schema: 3j" and "migrated the store to 3l". Records the activation id, backup path, STAMP and the backup's
+# SHA256SUMS sha256, then status (schema 3l), then `rollback --restore <ACT> --plan`, which only reads, for the
+# guard's post-backup count. That plan refuses post-backup-events when the count is nonzero; the script records it
+# and doesn't stop. A failure stops here and goes to Mos before any rollback.
+# usage: w5.sh GO   (GO is Mos's W5 go label, e.g. mos-NNNN)
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+OLD=86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+PLAN=$WIN/PLAN.md
+PLAN_SHA=d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c
+TOOL_BLOB=45e36eab4605ae010a482f146817b9e15ff2c512
+DATA=/home/jwoltje/.mosaic-dev
+W=$WIN/W.txt
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+stop() { note "STOP: $*"; exit 1; }
+sha() { sha256sum < "$1" | cut -c1-64; }
+
+GO=${1:?usage: w5.sh GO}
+note "W5 go $GO, start $(date -u +%FT%TZ)"
+grep -q P2_STUBS_PASS $WIN/p2.txt 2>/dev/null || stop "p2.txt has no P2_STUBS_PASS"
+grep -q P2_UNITS_PASS $WIN/p2-units.txt 2>/dev/null || stop "p2-units.txt has no P2_UNITS_PASS"
+[ "$(git -C $REPO rev-parse HEAD:scripts/stack-release.sh)" = "$TOOL_BLOB" ] || stop "condition 3: tool blob moved; run W3 again and send it to Mos"
+[ "$(sha $PLAN)" = "$PLAN_SHA" ] || stop "condition 3: plan is not d7b380ef; run W3 again and send it to Mos"
+[ -z "$(git -C $REPO status --porcelain -- scripts/stack-release.sh scripts/webui-service.sh scripts/bus-service.sh scripts/stack-copy.sh)" ] || stop "the four scripts are dirty"
+grep -q "\"copy\":\"$OLD\"" $DATA/state/stack-active.json || stop "the pointer is not on OLD"
+note "condition 3 recheck: tool blob 45e36eab4605, plan d7b380ef, four scripts clean, pointer on OLD, P2 stubs and units PASS"
+
+date -u +%FT%TZ > $WIN/W5.start
+$WIN/w.sh W5.txt "W5 activate NEW --pm --migrate --tester-socket ($GO)" scripts/stack-release.sh activate $NEW mosaic-stack --pm --migrate --tester-socket; rc=$?
+note "W5 exit $rc, W5.start $(cat $WIN/W5.start), end $(date -u +%FT%TZ)"
+[ $rc = 0 ] || stop "W5 exit $rc; to Mos before any rollback"
+grep -q "activate ok: $NEW is live for mosaic-stack" $WIN/W5.txt || stop "W5: no activate ok line"
+grep -q "gate passed on $NEW" $WIN/W5.txt || stop "W5: no gate passed line"
+grep -qx "stack-release: stopped store schema: 3j" $WIN/W5.txt || stop "W5: no stopped store schema: 3j line"
+grep -qx "stack-release: migrated the store to 3l" $WIN/W5.txt || stop "W5: no migrated the store to 3l line"
+grep -q -- 'drop --' $WIN/W5.txt && stop "W5: a drop line"
+
+ACT=$(sed -n 's/.*"activation":"\([^"]*\)".*/\1/p' $DATA/state/stack-active.json)
+BK=$(sed -n 's/^stack-release: backup: //p' $WIN/W5.txt)
+[ -n "$ACT" ] && [ "$BK" = "$DATA/backups/stack/$ACT" ] || stop "W5: activation $ACT and backup $BK disagree"
+[ "$(cat $BK/SCHEMA)" = 3j ] || stop "W5 backup SCHEMA is not 3j"
+( cd "$BK/bus" && sha256sum -c --quiet ../SHA256SUMS ) || stop "W5 backup fails its SHA256SUMS"
+echo "W5 $(date -u +%FT%TZ) activation $ACT backup $BK STAMP $(cat $BK/STAMP) SCHEMA $(cat $BK/SCHEMA) SHA256SUMS sha256 $(sha $BK/SHA256SUMS)" >> $WIN/backups.txt
+note "W5: activation $ACT, backup $BK, STAMP $(cat $BK/STAMP), SCHEMA $(cat $BK/SCHEMA), SHA256SUMS sha256 $(sha $BK/SHA256SUMS) (sums check OK)"
+
+journalctl --user -u [email protected] --since "@$(date -d "$(cat $WIN/W5.start)" +%s)" -o cat 2>/dev/null | grep '^launched ' > $WIN/W5-launched.txt
+note "W5 launched lines in the bus journal since W5.start: $(wc -l < $WIN/W5-launched.txt): $(cat $WIN/W5-launched.txt)"
+
+$WIN/w.sh W.txt "W5 status" scripts/stack-release.sh status mosaic-stack > $WIN/W5-status.txt || stop "W5 status"
+sed -i '$d' $WIN/W5-status.txt
+grep -q "\"copy\":\"$NEW\"" $WIN/W5-status.txt || stop "status: pointer is not NEW"
+grep -q '"pm":true' $WIN/W5-status.txt && grep -q '"schema":"3l"' $WIN/W5-status.txt || stop "status: pm or schema"
+grep -qx '  result: pass' $WIN/W5-status.txt && grep -qx 'unit flags: match the pointer' $WIN/W5-status.txt || stop "status: check or unit flags"
+note "W5 status: pointer NEW, pm true, 3l, check pass, unit flags match. W5_PASS $(date -u +%FT%TZ)"
+
+# The restore guard's count, read only. Any real restore goes to Mos first (PLAN.md, Stop conditions).
+$WIN/w.sh W.txt "W5 rollback --restore $ACT --plan (read only)" scripts/stack-release.sh rollback mosaic-stack --restore $ACT --plan > $WIN/W5-restore-plan.txt; rrc=$?
+sed -i '$d' $WIN/W5-restore-plan.txt
+note "W5 restore plan exit $rrc: $(grep '^restore: \|post-backup-events' $WIN/W5-restore-plan.txt | tr '\n' ' ')"
@@ -0,0 +1,352 @@
+# W9 after W5, W5.start 2026-10-22T15:05:55Z, start 2026-10-22T15:07:23Z
+# plan d7b380ef, tool blob 45e36eab4605, console-check.sh d068fe02, wrapper on NEW: checked
+pointer: /home/jwoltje/.mosaic-dev/state/stack-active.json
+  {"copy":"84f53540dd0d21ef179ca29697e172b0246e78d1","business":"mosaic-stack","pm":true,"claude":"/home/jwoltje/.local/bin/claude","console":["--port","7332","--public-host","mosaic.woltje.com","--auth-header","X-authentik-username","--allow-user","jason.woltje","--tester-socket"],"schema":"3l","activation":"20261022T150555Z-84f53540dd0d","at":"2026-10-22T15:06:00Z"}
+log (last five lines):
+  {"at":"2026-10-21T21:59:31Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":"20261021T215926Z-7247d80c7af7","activation":"20261021T215926Z-7247d80c7af7","result":"ok"}
+  {"at":"2026-10-22T04:02:56Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":null,"activation":"20261022T040256Z-86f95bb27f6c","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T04:03:00Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":"20261022T040256Z-86f95bb27f6c","activation":"20261022T040256Z-86f95bb27f6c","result":"ok"}
+  {"at":"2026-10-22T15:05:55Z","op":"activate","from":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","to":"84f53540dd0d21ef179ca29697e172b0246e78d1","backup":null,"activation":"20261022T150555Z-84f53540dd0d","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T15:06:00Z","op":"activate","from":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","to":"84f53540dd0d21ef179ca29697e172b0246e78d1","backup":"20261022T150555Z-84f53540dd0d","activation":"20261022T150555Z-84f53540dd0d","result":"ok"}
+check:
+  bus: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  Console: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  CLI: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+  result: pass
+bus status:
+  host: mosaic-stack, pid 3634254, running, since 2026-10-22T15:05:57.441Z, notifier off
+  socket: present
+  writer.lock: pid 3634311
+  boot: organization file loaded at 2026-10-22T15:05:57.439Z
+unit flags: match the pointer
+drift: 3 commit(s) on refactor since the pointer's copy
+# exit 0
+PASS markdown-preview.js is served and equals the copy's
+PASS /api/config on loopback: send=false edit=false
+PASS project.files through the Console: head=ae0b17c9586e51da7bc1b7e548c6acf913a55665 files=2 spec=true error=none
+PASS project.file spec/north-star.md through the Console: commit=ae0b17c9586e51da7bc1b7e548c6acf913a55665 length=99 error=none
+PASS loopback save refused: HTTP 403 error=read-only sent=false
+CONSOLE_PASS
+# exit 0
+# journal since W5: proxy proof off 1, Sign-in 0
+# Console pid 3634256 cwd /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1
+# console/ drwx------ jwoltje directory; tester.sock srw------- jwoltje socket
+# peercred-starts lines since W5 naming NEW: 1
+# bus journal library: 0; grant.* events 0 (recorded only)
+re6c69f1ec1f0  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T15:05:59.295Z  running
+# exit 0
+[
+  {
+    "business": "mosaic-stack",
+    "instance": "chief",
+    "run": "re6c69f1ec1f0",
+    "launchedBy": "jason",
+    "harness": "claude-code",
+    "model": "claude-opus-5-5",
+    "provider": "anthropic",
+    "modelKey": "opus",
+    "pid": 3634625,
+    "startTime": "78274945",
+    "runnerPid": 3634626,
+    "runnerStartTime": "78274945",
+    "runDir": "/home/jwoltje/.mosaic-dev/launches/mosaic-stack/re6c69f1ec1f0",
+    "startedAt": "2026-10-22T15:05:59.295Z",
+    "live": true
+  }
+]
+# exit 0
+# one running chief from this start: run re6c69f1ec1f0
+# pm: no pm launch is listed after the restart (none was live at W1)
+chief  re6c69f1ec1f0  claude-code  since 2026-10-22T15:05:59.297Z
+# exit 0
+sent 12a8fa42 to chief
+chief (RESULT, re 12a8fa42) 41049b67:
+Received the re-pin test note for commit 84f53540dd0d21ef179ca29697e172b0246e78d1; I took no action and launched nothing, because a tester message authorizes nothing.
+# exit 0
+created project window-20261022-1507  id b38453f8-6768-42e1-bea5-eb227b16fb0b
+# exit 0
+created window-20261022-1507/w9  id b85a57fe-84f9-4785-a596-135af39e334a  instance assistant
+# exit 0
+# project window-20261022-1507, thread b85a57fe-84f9-4785-a596-135af39e334a
+# thread b85a57fe-84f9-4785-a596-135af39e334a: sessions 1 session_defaults 1
+sent d0e15a80 to window-20261022-1507/w9
+assistant (RESULT, re d0e15a80) ccd50dc6:
+Assistant (run r2c62e02f8371) got the [mos test] message and is replying in one line, as asked; nothing was done.
+# exit 0
+# reply received 2026-10-22T15:07:40Z
+[
+  {
+    "seq": 623,
+    "id": "d0e15a80-b9ed-473d-b4d0-37f1456277da",
+    "at": "2026-10-22T15:07:33.285Z",
+    "business": "mosaic-stack",
+    "from_role": "tester",
+    "from_run": "tester-cli",
+    "to_role": "assistant",
+    "class": "REQUEST",
+    "in_reply_to": null,
+    "decision": null,
+    "corrects": null,
+    "body": "[mos test] reply with one line, then stop",
+    "to_name": null
+  },
+  {
+    "seq": 624,
+    "id": "ccd50dc6-61af-43da-96b1-f85f552256c9",
+    "at": "2026-10-22T15:07:39.737Z",
+    "business": "mosaic-stack",
+    "from_role": "assistant",
+    "from_run": "r2c62e02f8371",
+    "to_role": "tester",
+    "class": "RESULT",
+    "in_reply_to": "d0e15a80-b9ed-473d-b4d0-37f1456277da",
+    "decision": null,
+    "corrects": null,
+    "body": "Assistant (run r2c62e02f8371) got the [mos test] message and is replying in one line, as asked; nothing was done.",
+    "to_name": null
+  }
+]
+# exit 0
+# thread read: 2 messages: tester->assistant REQUEST, assistant->tester RESULT
+window-20261020-0801/w9  assistant  d0ba7a66
+window-20261020-2205/w9  assistant  446201de
+window-20261021-2202/w9  assistant  b89fcca4
+window-20261022-0403/w9  assistant  d9bb7ff3
+window-20261022-1507/w9  assistant  b85a57fe
+# exit 0
+[]
+# exit 0
+{
+  "total": {
+    "input": 156,
+    "output": 23567,
+    "cacheWrite": 427567,
+    "cacheRead": 1347169,
+    "unknownTurns": 1
+  },
+  "byRun": [
+    {
+      "run": "r8fba7e598156",
+      "input": 0,
+      "output": 0,
+      "cacheWrite": 0,
+      "cacheRead": 0,
+      "unknownTurns": 1
+    },
+    {
+      "run": "r4a96e2142e4d",
+      "input": 2,
+      "output": 52,
+      "cacheWrite": 11750,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc78c9700c8e9",
+      "input": 14,
+      "output": 1519,
+      "cacheWrite": 18187,
+      "cacheRead": 89559,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r293f33bcbc63",
+      "input": 2,
+      "output": 44,
+      "cacheWrite": 18595,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r34520a581318",
+      "input": 6,
+      "output": 323,
+      "cacheWrite": 26349,
+      "cacheRead": 14307,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r7e99838f9f93",
+      "input": 2,
+      "output": 44,
+      "cacheWrite": 9858,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc964611b2092",
+      "input": 4,
+      "output": 120,
+      "cacheWrite": 26138,
+      "cacheRead": 23870,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rbb708846b605",
+      "input": 12,
+      "output": 2089,
+      "cacheWrite": 17285,
+      "cacheRead": 73823,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc36b17ef3788",
+      "input": 16,
+      "output": 5221,
+      "cacheWrite": 36717,
+      "cacheRead": 202573,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r097436c91816",
+      "input": 16,
+      "output": 3340,
+      "cacheWrite": 43923,
+      "cacheRead": 102022,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r497f1c817d4d",
+      "input": 2,
+      "output": 80,
+      "cacheWrite": 9856,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rc9e993da24cf",
+      "input": 30,
+      "output": 5871,
+      "cacheWrite": 80018,
+      "cacheRead": 475283,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r7646a7a4a2bd",
+      "input": 12,
+      "output": 1448,
+      "cacheWrite": 22601,
+      "cacheRead": 80758,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r4004e5e09433",
+      "input": 2,
+      "output": 61,
+      "cacheWrite": 9874,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "rd0b8fdb4d62d",
+      "input": 18,
+      "output": 1714,
+      "cacheWrite": 25459,
+      "cacheRead": 135284,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r62b31aae5852",
+      "input": 2,
+      "output": 31,
+      "cacheWrite": 9881,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r2cf8536da2c3",
+      "input": 12,
+      "output": 1420,
+      "cacheWrite": 38495,
+      "cacheRead": 149690,
+      "unknownTurns": 0
+    },
+    {
+      "run": "re6c69f1ec1f0",
+      "input": 2,
+      "output": 122,
+      "cacheWrite": 12695,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "run": "r2c62e02f8371",
+      "input": 2,
+      "output": 68,
+      "cacheWrite": 9886,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    }
+  ],
+  "byInstance": [
+    {
+      "instance": "chief",
+      "input": 82,
+      "output": 10607,
+      "cacheWrite": 178249,
+      "cacheRead": 495753,
+      "unknownTurns": 1
+    },
+    {
+      "instance": "coder",
+      "input": 2,
+      "output": 44,
+      "cacheWrite": 18595,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "instance": "assistant",
+      "input": 10,
+      "output": 284,
+      "cacheWrite": 49355,
+      "cacheRead": 0,
+      "unknownTurns": 0
+    },
+    {
+      "instance": "pm",
+      "input": 62,
+      "output": 12632,
+      "cacheWrite": 181368,
+      "cacheRead": 851416,
+      "unknownTurns": 0
+    }
+  ],
+  "byProvider": [
+    {
+      "provider": "anthropic",
+      "input": 156,
+      "output": 23567,
+      "cacheWrite": 427567,
+      "cacheRead": 1347169,
+      "unknownTurns": 1
+    }
+  ],
+  "byModel": [
+    {
+      "provider": "anthropic",
+      "model": "claude-opus-5-5",
+      "input": 156,
+      "output": 23567,
+      "cacheWrite": 427567,
+      "cacheRead": 1347169,
+      "unknownTurns": 1
+    }
+  ],
+  "byAccount": [
+    {
+      "account": null,
+      "input": 156,
+      "output": 23567,
+      "cacheWrite": 427567,
+      "cacheRead": 1347169,
+      "unknownTurns": 1
+    }
+  ]
+}
+# exit 0
+# human-thread probe: see .w9-threads.txt; any thread not created by a tester window is probed by hand before S2
+mosaic: pm isn't running, so the tester's message was refused and nothing was stored
+# exit 3
+# pm read exit 3 at 2026-10-22T15:07:42Z; expected 1.14 with 85 ids
+# W9 checks and turns end 2026-10-22T15:07:42Z; the assistant run wait and S2 are w9b.sh
@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W9 checks and the turns (PLAN.md sha256 d7b380ef, the W9 row: last
+# 86f95bb27 window's W9 list; W9 starts once W5 passes and Mos has checked W5). Adapted from
+# window-repin-86f95bb27/w9.sh. The W5 stamp comes from W5.start. The plan drops the grant check, so the grant.*
+# count is recorded and does not stop. The pm read expects 1.14 with 85 ids. Every call goes through w.sh into W.txt; every bus call carries
+# --tester. A failed check stops the script. The pm read reports and does not stop. The wait for the assistant
+# run and S2 are in w9b.sh.
+# usage: w9.sh
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+W5_ISO=$(cat $WIN/W5.start) || exit 1
+W5_STAMP="$(date -u -d "$W5_ISO" '+%F %T') UTC"
+W5_MS=$(date -d "$W5_ISO" +%s)000
+PLAN=$WIN/PLAN.md
+PLAN_SHA=d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c
+TOOL_BLOB=45e36eab4605
+CC=$REPO/agents/sage/work/window-plan/repin-de352dfaf/console-check.sh
+CC_SHA=d068fe02da897b700110a162d13d9671fe5994f053c45aff99113fade737094c
+DATA=$HOME/.mosaic-dev
+MOSAIC=$HOME/.npm-global/bin/mosaic
+C_NEW=(node "$HOME/.local/share/mosaic-stack/copies/$NEW/packages/cli/src/cli.mjs")
+BZ=(--business mosaic-stack)
+W=$WIN/W.txt
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+stop() { note "STOP: $*"; exit 1; }
+sha() { sha256sum < "$1" | cut -c1-64; }
+step() { local f="$1"; shift; $WIN/w.sh W.txt "$@" > "$WIN/$f"; local rc=$?; cat "$WIN/$f"; return $rc; }
+grants() { python3 -B -c '
+import sqlite3,sys
+c=sqlite3.connect("file:"+sys.argv[1]+"?mode=ro",uri=True)
+print(c.execute("select count(*) from events where kind like ?",("grant.%",)).fetchone()[0])' "$DATA/bus/bus.sqlite"; }
+
+note "W9 after W5, W5.start $W5_ISO, start $(date -u +%FT%TZ)"
+[ "$(sha $PLAN)" = "$PLAN_SHA" ] || stop "the plan file is not d7b380ef"
+git -C $REPO rev-parse HEAD:scripts/stack-release.sh | grep -q "^$TOOL_BLOB" || stop "tool blob moved"
+[ "$(sha $CC)" = "$CC_SHA" ] || stop "console-check.sh is not d068fe02"
+grep -q "/copies/$NEW/scripts/mosaic" "$MOSAIC" || stop "the wrapper is not pinned to NEW"
+note "plan d7b380ef, tool blob $TOOL_BLOB, console-check.sh d068fe02, wrapper on NEW: checked"
+
+# checks
+step .w9-status.txt "W9 status" $REPO/scripts/stack-release.sh status mosaic-stack || stop "W9 status exit"
+grep -q "\"copy\":\"$NEW\"" $WIN/.w9-status.txt && grep -q '"pm":true' $WIN/.w9-status.txt && grep -q '"schema":"3l"' $WIN/.w9-status.txt || stop "W9 status: pointer not on NEW, pm true, 3l"
+grep -q 'unit flags: match the pointer' $WIN/.w9-status.txt || stop "W9 status: unit flags"
+grep -q 'result: pass' $WIN/.w9-status.txt || stop "W9 status: check result"
+step .w9-cc.txt "W9 console-check NEW ($CC, d068fe02)" bash $CC $NEW || stop "console-check exit"
+grep -qx CONSOLE_PASS $WIN/.w9-cc.txt || stop "console-check not CONSOLE_PASS"
+J=$(journalctl --user -u mosaic-webui.service --since "$W5_STAMP" --no-pager)
+N=$(printf '%s\n' "$J" | grep -c 'Proxy: proxy proof off'); S=$(printf '%s\n' "$J" | grep -c 'Sign-in:')
+{ echo; echo "## W9 webui journal since $W5_STAMP: 'Proxy: proxy proof off' and 'Sign-in:' counts"; echo "proxy proof off $N, Sign-in $S"; } >> "$W"
+note "journal since W5: proxy proof off $N, Sign-in $S"
+[ "$N" = 1 ] || stop "proxy proof off count is $N, not 1"
+[ "$S" = 0 ] || stop "Sign-in count is $S, not 0"
+CONSOLE_PID=$(systemctl --user show -p MainPID --value mosaic-webui.service)
+[ -n "$CONSOLE_PID" ] && [ "$CONSOLE_PID" != 0 ] || stop "no Console MainPID"
+CWD=$(readlink /proc/$CONSOLE_PID/cwd)
+{ echo; echo "## W9 Console pid $CONSOLE_PID cwd"; echo "-> $CWD"; } >> "$W"
+note "Console pid $CONSOLE_PID cwd $CWD"
+[ "$CWD" = "$HOME/.local/share/mosaic-stack/copies/$NEW" ] || stop "Console cwd is not the NEW copy"
+SOCK_LINE=$(stat -c '%A %U %F' $DATA/console/tester.sock); DIR_LINE=$(stat -c '%A %U %F' $DATA/console)
+{ echo; echo "## W9 tester socket"; echo "console/ $DIR_LINE"; echo "tester.sock $SOCK_LINE"; } >> "$W"
+note "console/ $DIR_LINE; tester.sock $SOCK_LINE"
+[ "$SOCK_LINE" = "srw------- $USER socket" ] || stop "tester.sock is not a 0600 socket"
+[ "$DIR_LINE" = "drwx------ $USER directory" ] || stop "console/ is not 0700"
+R=$(python3 -B -c '
+import json,sys
+n=0
+for l in open(sys.argv[1]):
+    d=json.loads(l)
+    if d["at"]>=sys.argv[2] and sys.argv[3] in d["copy"]: n+=1
+print(n)' $DATA/bus/peercred-starts.jsonl $W5_ISO $NEW) || stop "peercred-starts.jsonl unreadable"
+{ echo; echo "## W9 peercred-starts.jsonl lines since W5 naming NEW"; echo "$R (file lines $(wc -l < $DATA/bus/peercred-starts.jsonl))"; } >> "$W"
+note "peercred-starts lines since W5 naming NEW: $R"
+[ "$R" = 1 ] || stop "peercred-starts has $R lines for this start, not 1"
+BJ=$(journalctl --user -u [email protected] --since "$W5_STAMP" --no-pager -o cat)
+L=$(printf '%s\n' "$BJ" | grep -c 'library:')
+G=$(grants) || stop "grant event count unreadable"
+{ echo; echo "## W9 bus journal 'library:' lines since W5; grant.* events in the store, recorded only (the plan drops the grant check)"; echo "library: $L, grant.* events $G"; } >> "$W"
+note "bus journal library: $L; grant.* events $G (recorded only)"
+[ "$L" = 0 ] || stop "bus journal has $L library: lines"
+step .w9-launches.txt "W9 launches list" $MOSAIC launches list || stop "launches list"
+step .w9-launches.json "W9 launches list --json" $MOSAIC launches list --json || stop "launches list --json"
+sed -i '$d' $WIN/.w9-launches.json
+CHIEF=$(node -e '
+const l=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8")),since=Number(process.argv[2]);
+const c=l.filter(x=>x.business==="mosaic-stack"&&x.instance==="chief"&&x.live===true);
+if(c.length!==1||!(Date.parse(c[0].startedAt)>=since)){console.error(`running chiefs ${c.length}`);process.exit(1)}
+process.stdout.write(c[0].run)' $WIN/.w9-launches.json "$W5_MS") || stop "launches: not one running chief from this start"
+note "one running chief from this start: run $CHIEF"
+grep -q 'mosaic-stack/pm ' $WIN/.w9-launches.txt && note "pm: a pm launch is listed after the restart" || note "pm: no pm launch is listed after the restart (none was live at W1)"
+step .w9-agents.txt "W9 agents --tester" $MOSAIC agents "${BZ[@]}" --tester || stop "agents"
+grep -E '(^|[[:space:]])chief[[:space:]].*working' $WIN/.w9-agents.txt && stop "the chief is working"
+
+# turns
+step .w9-talk-chief.txt "W9 talk chief --tester" $MOSAIC talk chief "[mos test] re-pin $NEW: reply with one line, no staffing request" "${BZ[@]}" --tester || stop "talk chief"
+PROJ=window-$(date -u +%Y%m%d-%H%M)
+step .w9-project.txt "W9 project create $PROJ --tester" $MOSAIC project create $PROJ "${BZ[@]}" --tester || stop "project create"
+step .w9-thread.txt "W9 thread create $PROJ w9 --tester" $MOSAIC thread create $PROJ w9 "${BZ[@]}" --tester || stop "thread create"
+TID=$(sed -n "s/^created $PROJ\/w9  id \([0-9a-f-]*\)  instance .*$/\1/p" $WIN/.w9-thread.txt)
+[ -n "$TID" ] || stop "no thread id"
+note "project $PROJ, thread $TID"
+echo "$TID" > $WIN/.w9-tid.txt
+# 3l: the thread's sessions and default session rows, read only and recorded. The talk and the read below go through
+# the default session; a refusal there stops the step.
+SR=$(python3 -B -c '
+import sqlite3,sys
+c=sqlite3.connect("file:"+sys.argv[1]+"?mode=ro",uri=True)
+s=c.execute("select count(*) from sessions where thread=?",(sys.argv[2],)).fetchone()[0]
+d=c.execute("select count(*) from session_defaults where thread=?",(sys.argv[2],)).fetchone()[0]
+print("sessions",s,"session_defaults",d)' "$DATA/bus/bus.sqlite" "$TID") || stop "sessions read"
+{ echo; echo "## W9 3l rows for thread $TID (recorded only)"; echo "$SR"; } >> "$W"
+note "thread $TID: $SR"
+step .w9-talk-thread.txt "W9 talk --thread --wait 180 --tester" $MOSAIC talk --thread "$TID" "[mos test] reply with one line, then stop" --wait 180 "${BZ[@]}" --tester || stop "talk --thread"
+note "reply received $(date -u +%FT%TZ)"
+date -u +%s > $WIN/.w9-reply-at.txt
+step .w9-thread-read.json "W9 thread read --json --tester" $MOSAIC thread read "$TID" --json "${BZ[@]}" --tester || stop "thread read"
+sed -i '$d' $WIN/.w9-thread-read.json
+node -e '
+const t=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));
+console.log(`# thread read: ${t.length} messages: ${t.map(m=>`${m.from_role}->${m.to_role} ${m.class}`).join(", ")}`);
+process.exit(t.length===2&&t[0].from_role==="tester"&&t[1].from_role==="assistant"?0:1)' $WIN/.w9-thread-read.json | tee -a "$W" || stop "thread read is not the tester message plus one assistant reply"
+step .w9-threads.txt "W9 threads --tester" $MOSAIC threads "${BZ[@]}" --tester || stop "threads"
+grep -q "$TID\|$PROJ" $WIN/.w9-threads.txt || stop "threads does not list the W9 thread"
+step .w9-names.json "W9 C_NEW names --tester --json" "${C_NEW[@]}" names "${BZ[@]}" --tester --json || stop "names"
+step .w9-usage.json "W9 usage --tester --json" $MOSAIC usage "${BZ[@]}" --tester --json || stop "usage"
+note "human-thread probe: see .w9-threads.txt; any thread not created by a tester window is probed by hand before S2"
+
+# pm read (draft1 W9, moved here by mos-1225/mos-1226); reports, does not stop
+step .w9-talk-pm.txt "W9 talk pm --wait 180 --tester" $MOSAIC talk pm "[mos test] re-pin $NEW: read packages/tasks/requirements.json through your requirements read and reply with one line: the version and the number of ids" --wait 180 "${BZ[@]}" --tester
+note "pm read exit $? at $(date -u +%FT%TZ); expected 1.14 with 85 ids"
+note "W9 checks and turns end $(date -u +%FT%TZ); the assistant run wait and S2 are w9b.sh"
@@ -0,0 +1,274 @@
+# W9b start 2026-10-22T15:08:11Z: waiting for the launcher to end r2c62e02f8371 (thread b85a57fe-84f9-4785-a596-135af39e334a), no stop by hand
+# r2c62e02f8371 not live in launches list --json by 2026-10-22T15:22:45Z (5 s poll)
+re6c69f1ec1f0  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T15:05:59.295Z  running
+# exit 0
+
+## W9b launches log lines for r2c62e02f8371 (at, event, instance, thread, run, reason, exitCode, signal only)
+at=2026-10-22T15:07:35.655Z event=launch instance=assistant thread=b85a57fe-84f9-4785-a596-135af39e334a run=r2c62e02f8371
+at=2026-10-22T15:22:40.377Z event=thread-idle instance=assistant thread=b85a57fe-84f9-4785-a596-135af39e334a run=r2c62e02f8371
+at=2026-10-22T15:22:40.402Z event=end instance=assistant thread=b85a57fe-84f9-4785-a596-135af39e334a run=r2c62e02f8371 reason=stopped exitCode=0 signal=null
+
+## W9b bus and webui journal since 2026-10-22 15:06:40 UTC, lines naming r2c62e02f8371 or thread-idle
+2026-10-22T10:22:40.402530-05:00 dragon-lin mosaic[3634254]: mosaic-bus: run r2c62e02f8371 (assistant) ended: stopped
+(grep exit 0)
+# SNAP sha256 639fd28a checked before S2 2026-10-22T15:22:45Z
+{
+  "schema": "3l",
+  "tables": {
+    "decision_events": {
+      "rows": 22,
+      "maxSeq": 22,
+      "sha256": "b016d2a7cb0116252166016822c472af1cc520435a6538ecb7be5db62c6cb4b3"
+    },
+    "decisions": {
+      "rows": 22,
+      "maxSeq": 22,
+      "sha256": "eafcd57d3531f7ac7c768e512632a3975df372c49ffd95abe7d858fd05ce93a8"
+    },
+    "deliveries": {
+      "rows": 1902,
+      "maxSeq": 1902,
+      "sha256": "57a4b389d83e257a31a9d56c29a924ae2b4e34eba1ed9024231c153aec594c8e"
+    },
+    "events": {
+      "rows": 1951,
+      "maxSeq": 1951,
+      "sha256": "f0bde96021a1fc667a346db2b8b743fc2f4563db5370b7612f0fc64497f946ce"
+    },
+    "gitea_grants": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "gitea_users": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "host_grants": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "hosts": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "instance_names": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "message_threads": {
+      "rows": 10,
+      "maxSeq": null
+    },
+    "messages": {
+      "rows": 624,
+      "maxSeq": 624
+    },
+    "meta": {
+      "rows": 3,
+      "maxSeq": null,
+      "sha256": "207b2ec9fa84801ef8a85a29f06d52bc8c4606ab7fd43e95560874f87c173f02"
+    },
+    "projects": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "cdf87b72ef95a2f988c242d35f1050f9e3e310637f84a645b51694daa924650f"
+    },
+    "role_claims": {
+      "rows": 111,
+      "maxSeq": 111,
+      "sha256": "19daa2a352bec3703a955e343f58989e5ff99c85d571aa94e5faf9a4613cd7f8"
+    },
+    "session_defaults": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "0fa4a532b106e963e200064d7f7464412a2fd6fce5a59a35ba7097d9bdca879c"
+    },
+    "sessions": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "7094392718785cbaec3d5e5bd640f4b36d1e2be1fb4b7c6a9db77308de111803"
+    },
+    "task_comment_cursors": {
+      "rows": 477,
+      "maxSeq": 477,
+      "sha256": "0f69481e4917a4ced05c36e10d73948fb364d2e49c5c12a93ab51e4b7d985d1c"
+    },
+    "task_snapshots": {
+      "rows": 516,
+      "maxSeq": 516,
+      "sha256": "eca82a7a03c84887aef0d08f6d8e8c54e950744b7ad9d57455067a65d4aa7890"
+    },
+    "thread_claims": {
+      "rows": 10,
+      "maxSeq": 10,
+      "sha256": "925e82e219ca7d469a3d9d72bd7033b9f52a47f1da272ac7ae31832a24cd1b91"
+    },
+    "thread_opens": {
+      "rows": 0,
+      "maxSeq": null,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "threads": {
+      "rows": 5,
+      "maxSeq": 5,
+      "sha256": "6cc7fbd14dd1d8164dbeab1e2c2911ca206c283e722724ee2b0b0a8e22e0f533"
+    },
+    "usage_records": {
+      "rows": 92,
+      "maxSeq": 92,
+      "sha256": "77bf634991e86bf14571794b6667d27ef9319ca58a93124921e1d420378a92b0",
+      "byRun": [
+        {
+          "business": "mosaic-stack",
+          "run": "r8fba7e598156",
+          "input": "0",
+          "output": "0",
+          "unknownTurns": 1
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r4a96e2142e4d",
+          "input": "2",
+          "output": "52",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc78c9700c8e9",
+          "input": "14",
+          "output": "1519",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r293f33bcbc63",
+          "input": "2",
+          "output": "44",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r34520a581318",
+          "input": "6",
+          "output": "323",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r7e99838f9f93",
+          "input": "2",
+          "output": "44",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc964611b2092",
+          "input": "4",
+          "output": "120",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rbb708846b605",
+          "input": "12",
+          "output": "2089",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc36b17ef3788",
+          "input": "16",
+          "output": "5221",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r097436c91816",
+          "input": "16",
+          "output": "3340",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r497f1c817d4d",
+          "input": "2",
+          "output": "80",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rc9e993da24cf",
+          "input": "30",
+          "output": "5871",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r7646a7a4a2bd",
+          "input": "12",
+          "output": "1448",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r4004e5e09433",
+          "input": "2",
+          "output": "61",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "rd0b8fdb4d62d",
+          "input": "18",
+          "output": "1714",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r62b31aae5852",
+          "input": "2",
+          "output": "31",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r2cf8536da2c3",
+          "input": "12",
+          "output": "1420",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "re6c69f1ec1f0",
+          "input": "2",
+          "output": "122",
+          "unknownTurns": 0
+        },
+        {
+          "business": "mosaic-stack",
+          "run": "r2c62e02f8371",
+          "input": "2",
+          "output": "68",
+          "unknownTurns": 0
+        }
+      ]
+    }
+  },
+  "untimed": [
+    "gitea_grants",
+    "gitea_users",
+    "host_grants",
+    "hosts",
+    "message_threads",
+    "meta",
+    "task_comment_cursors"
+  ]
+}
+# exit 0
+# S2.json sha256 bcc01f481acca09bc0dcac79555914cb94337806dbc76a3d9ebc5ef14ddbd13e
+# W9b end 2026-10-22T15:22:45Z
@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W9 tail, adapted from window-repin-86f95bb27/w9b.sh. The launcher ends the
+# assistant run at threadIdleSeconds 900 after the W9 reply (.w9-reply-at.txt). Nothing is stopped by hand. A log
+# mark at reply + 16 min, a report to Mos if still live at reply + 21 min (last window: 22:02:16Z, 22:18Z, 22:23Z).
+# usage: w9b.sh RUN   (the assistant run W9's thread turn started, from .w9-launches* or launches list)
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=/mnt/storage/src/mosaic-stack/agents/darkwing/work/window-repin-84f53540d
+RUN=${1:?usage: w9b.sh RUN}
+TID=$(cat $WIN/.w9-tid.txt) || exit 1
+REPLY_AT=$(cat $WIN/.w9-reply-at.txt) || exit 1
+DATA=/home/jwoltje/.mosaic-dev
+SNAP=$WIN/snapshot.mjs
+SNAP_SHA=639fd28a2674aaa03ce824e3394b4052f21cdef7d6fa49bae61a9927ed341e67
+PLAN=$WIN/PLAN.md
+PLAN_SHA=d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c
+TOOL_BLOB=45e36eab4605
+MOSAIC=$HOME/.npm-global/bin/mosaic
+DEADLINE=$((REPLY_AT + 1260))
+MARK18=$((REPLY_AT + 960))
+W9_SINCE="$(date -u -d "@$((REPLY_AT - 60))" '+%F %T') UTC"
+W=$WIN/W.txt
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+stop() { note "STOP: $*"; exit 1; }
+sha() { sha256sum < "$1" | cut -c1-64; }
+step() { local f="$1"; shift; $WIN/w.sh W.txt "$@" > "$WIN/$f"; local rc=$?; cat "$WIN/$f"; return $rc; }
+# launches log lines for the run: at, event, instance, thread, run, reason, exitCode, signal only
+runlog() { node -e '
+const keep=["at","event","instance","thread","run","reason","exitCode","signal"];
+for(const s of require("fs").readFileSync(process.argv[1],"utf8").trim().split("\n")){const o=JSON.parse(s);if(o.run!==process.argv[2])continue;
+console.log(keep.filter(k=>k in o).map(k=>`${k}=${o[k]}`).join(" "))}' "$DATA/launches/mosaic-stack.jsonl" "$RUN"; }
+
+note "W9b start $(date -u +%FT%TZ): waiting for the launcher to end $RUN (thread $TID), no stop by hand"
+[ "$(sha $PLAN)" = "$PLAN_SHA" ] || stop "the plan file is not d7b380ef"
+[ "$(git -C $REPO rev-parse HEAD:scripts/stack-release.sh | cut -c1-12)" = "$TOOL_BLOB" ] || stop "tool blob moved"
+END=; M18=
+while :; do
+  $MOSAIC launches list --json > $WIN/.w9b-poll.json 2>&1 || stop "launches poll"
+  LIVE=$(node -e 'const l=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));process.stdout.write(l.filter(x=>x.run===process.argv[2]&&x.live===true).map(x=>x.run).join(" "))' $WIN/.w9b-poll.json $RUN)
+  [ -z "$LIVE" ] && { END=$(date -u +%FT%TZ); break; }
+  NOW=$(date +%s)
+  if [ -z "$M18" ] && [ $NOW -ge $MARK18 ]; then M18=1; note "reply + 16 min mark $(date -u +%FT%TZ): $RUN still live; launches log lines for it:"; runlog | tee -a "$W"; fi
+  [ $NOW -ge $DEADLINE ] && break
+  sleep 5
+done
+if [ -z "$END" ]; then
+  note "STOP: $RUN still live at $(date -u +%FT%TZ) (reply + 21 min mark); a stop is Mos's call. S2 waits."
+  runlog | tee -a "$W"
+  exit 4
+fi
+note "$RUN not live in launches list --json by $END (5 s poll)"
+step .w9b-launches-after.txt "W9b launches list after the assistant run" $MOSAIC launches list
+{ echo; echo "## W9b launches log lines for $RUN (at, event, instance, thread, run, reason, exitCode, signal only)"; runlog; } | tee -a "$W"
+{ echo; echo "## W9b bus and webui journal since $W9_SINCE, lines naming $RUN or thread-idle"; journalctl --user -u [email protected] -u mosaic-webui.service --since "$W9_SINCE" --no-pager -o short-iso-precise | grep -E "$RUN|thread-idle|threadIdle"; echo "(grep exit ${PIPESTATUS[1]})"; } | tee -a "$W"
+[ "$(sha $SNAP)" = "$SNAP_SHA" ] || stop "SNAP sha before S2"
+note "SNAP sha256 639fd28a checked before S2 $(date -u +%FT%TZ)"
+step S2.json "S2 snapshot --held" node $SNAP --store "$DATA/bus/bus.sqlite" --held || stop "S2"
+sed -i '$d' $WIN/S2.json
+note "S2.json sha256 $(sha $WIN/S2.json)"
+note "W9b end $(date -u +%FT%TZ)"
@@ -0,0 +1,45 @@
+# W0b-W4 start 2026-10-22T14:53:09Z
+# plan d7b380ef, tool blob 45e36eab4605, P5 four scripts at NEW and clean, business-check.mjs eece4d46: checked 2026-10-22T14:53:09Z
+# W0 copy present, w0.txt LOAD_OK
+# W0b: /home/jwoltje/.config/mosaic-dev/businesses/mosaic-stack.json.pre-window-20261022T145309Z, sha256 1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93, recorded in backups.txt
+rd0b8fdb4d62d  mosaic-stack/chief  claude-code claude-opus-5-5  by jason  since 2026-10-22T04:02:59.737Z  running
+r2cf8536da2c3  mosaic-stack/pm  claude-code claude-opus-5-5  by chief  since 2026-10-22T04:26:06.877Z  running
+# exit 0
+# W1 start stamp 2026-10-22T14:53:09Z
+# SNAP sha256 639fd28a checked before S1
+# S1.json sha256 b768ecaeda3dd37f2089c1e961847fbc7f663241547f15129c12ed13422a38e4
+pointer: /home/jwoltje/.mosaic-dev/state/stack-active.json
+  {"copy":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","business":"mosaic-stack","pm":true,"claude":"/home/jwoltje/.local/bin/claude","console":["--port","7332","--public-host","mosaic.woltje.com","--auth-header","X-authentik-username","--allow-user","jason.woltje","--tester-socket"],"schema":"3j","activation":"20261022T040256Z-86f95bb27f6c","at":"2026-10-22T04:03:00Z"}
+log (last five lines):
+  {"at":"2026-10-20T22:02:09Z","op":"activate","from":"490e2771d3d057ab76991e2c7859cd251857e64c","to":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","backup":"20261020T220206Z-4429a104f6d6","activation":"20261020T220206Z-4429a104f6d6","result":"ok"}
+  {"at":"2026-10-21T21:59:26Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":null,"activation":"20261021T215926Z-7247d80c7af7","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-21T21:59:31Z","op":"activate","from":"4429a104f6d65ccf165f6c83b5d1dce3147dfde0","to":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","backup":"20261021T215926Z-7247d80c7af7","activation":"20261021T215926Z-7247d80c7af7","result":"ok"}
+  {"at":"2026-10-22T04:02:56Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":null,"activation":"20261022T040256Z-86f95bb27f6c","result":"started","interpreter":"{\"path\":\"/usr/bin/python3.14\",\"version\":[3,14,6],\"dev\":66308,\"ino\":3968163,\"sha256\":\"8735f172622a7f8d27e293fd0fd36fc55c4cb9b663b6630d33b57870e36c24cc\"}"}
+  {"at":"2026-10-22T04:03:00Z","op":"activate","from":"7247d80c7af7ffa70fc61557406bf491cdf3bfc7","to":"86f95bb27f6cb237bf9fa9ba53320bace6c4de0b","backup":"20261022T040256Z-86f95bb27f6c","activation":"20261022T040256Z-86f95bb27f6c","result":"ok"}
+check:
+  bus: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  Console: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  CLI: /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+  result: pass
+bus status:
+  host: mosaic-stack, pid 828746, running, since 2026-10-22T04:02:58.133Z, notifier off
+  socket: present
+  writer.lock: pid 828808
+  boot: organization file loaded at 2026-10-22T04:02:58.132Z
+unit flags: match the pointer
+drift: 135 commit(s) on refactor since the pointer's copy
+# exit 0
+# W3-plan.txt sha256 6240dcf748628f24ab29e6835cbdc2cfbfc41ca8bfac6cc3348fd3f6c94d06e9
+# W3 commit list lines left out of the flag checks: 132
+# W3 plan checks: OLD to NEW, 3j to 3l, steps 3j to 3k and 3k to 3l, needs --migrate (given) and the decision 96 line, backup line, Console line OLD's flags exactly, proof off, send off, no drop/sso/send/proof, bus --pm: PASS
+DropInPaths=
+ExecStart={ path=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/scripts/mosaic ; argv[]=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/scripts/mosaic bus start mosaic-stack --pm ; ignore_errors=no ; start_time=[Wed 2026-10-21 23:02:58 CDT] ; stop_time=[n/a] ; pid=828746 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+# exit 0
+DropInPaths=
+ExecStart={ path=/usr/bin/node ; argv[]=/usr/bin/node /home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/packages/webui/src/cli.mjs serve --checkout /mnt/storage/src/mosaic-stack --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket ; ignore_errors=no ; start_time=[Wed 2026-10-21 23:02:58 CDT] ; stop_time=[n/a] ; pid=828748 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+# exit 0
+# W4 checks: DropInPaths empty on both, both ExecStart name the OLD copy, bus has --pm, no quote or backslash in either ExecStart
+# W4 bus Environment: 2 assignments; quote or backslash: none (values not recorded)
+# W0b-W4 end 2026-10-22T14:53:10Z
@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+# Re-pin 86f95bb27 to 84f53540d, W0b-W4 (PLAN.md sha256 d7b380ef, P0 mos-1281; sage-2703). W0 ran in prep (w0.txt).
+# Adapted from window-repin-86f95bb27/wsteps.sh: W3 now carries --migrate (3j to 3l via 3k), and W3's plan lines are
+# checked here. W1-W4 start nothing, but S1, W2 and W3 read the store, so the script runs only on Sage's CLEAR.
+# W3 and W4 go to Mos for the W5 go.
+# Nothing is stopped. Each step goes through w.sh into W.txt; a failed check stops the script.
+# usage: wsteps.sh
+set -uo pipefail
+REPO=/mnt/storage/src/mosaic-stack
+WIN=$REPO/agents/darkwing/work/window-repin-84f53540d
+OLD=86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+NEW=84f53540dd0d21ef179ca29697e172b0246e78d1
+PLAN=$WIN/PLAN.md
+PLAN_SHA=d7b380effe66900657efa3c9a30512ccb0a31326ed3bd6b5a7e7f47b17767e1c
+TOOL_BLOB=45e36eab4605ae010a482f146817b9e15ff2c512
+BC=$REPO/agents/sage/work/window-plan/repin-de352dfaf/business-check.mjs
+BC_SHA=eece4d4671e1ce15ba81e1654c641925ac4988b343687b062897392285a8a1a7
+BIZ=$HOME/.config/mosaic-dev/businesses/mosaic-stack.json
+BIZ_SHA=1e49bdf05e62607972958f5b7298cfd600c7825812370e26d7c2a842f2af9b93
+DATA=/home/jwoltje/.mosaic-dev
+SNAP=$WIN/snapshot.mjs
+SNAP_SHA=639fd28a2674aaa03ce824e3394b4052f21cdef7d6fa49bae61a9927ed341e67
+MOSAIC=$HOME/.npm-global/bin/mosaic
+W=$WIN/W.txt
+note() { echo "# $*" >> "$W"; echo "# $*"; }
+stop() { note "STOP: $*"; exit 1; }
+sha() { sha256sum < "$1" | cut -c1-64; }
+
+note "W0b-W4 start $(date -u +%FT%TZ)"
+[ "$(sha $PLAN)" = "$PLAN_SHA" ] || stop "the plan file is not d7b380ef (P0 checked that sha)"
+[ "$(git -C $REPO rev-parse HEAD:scripts/stack-release.sh)" = "$TOOL_BLOB" ] || stop "tool blob moved"
+git -C $REPO diff --quiet $NEW HEAD -- scripts/stack-release.sh scripts/webui-service.sh scripts/bus-service.sh scripts/stack-copy.sh || stop "P5: the four scripts differ from NEW"
+[ -z "$(git -C $REPO status --porcelain -- scripts/stack-release.sh scripts/webui-service.sh scripts/bus-service.sh scripts/stack-copy.sh)" ] || stop "P5: the four scripts are dirty"
+[ "$(sha $BC)" = "$BC_SHA" ] || stop "business-check.mjs sha"
+note "plan d7b380ef, tool blob 45e36eab4605, P5 four scripts at NEW and clean, business-check.mjs eece4d46: checked $(date -u +%FT%TZ)"
+
+# W0 ran in prep (w0.txt): the copy must still be there with LOAD_OK recorded.
+[ -f "$HOME/.local/share/mosaic-stack/copies/$NEW/scripts/mosaic" ] || stop "W0 copy missing"
+grep -q LOAD_OK $WIN/w0.txt || stop "w0.txt has no LOAD_OK"
+note "W0 copy present, w0.txt LOAD_OK"
+
+# W0b
+[ "$(sha $BIZ)" = "$BIZ_SHA" ] || stop "business file sha256 is not P1's 1e49bdf0"
+STAMP=$(date -u +%Y%m%dT%H%M%SZ)
+COPY=$BIZ.pre-window-$STAMP
+[ ! -e "$COPY" ] || stop "$COPY exists"
+cp -p "$BIZ" "$COPY" || stop "W0b cp"
+[ "$(sha "$COPY")" = "$BIZ_SHA" ] || stop "W0b copy sha256"
+echo "W0b $(date -u +%FT%TZ) business file copy $COPY sha256 $(sha "$COPY") (source $BIZ sha256 $(sha "$BIZ"))" >> $WIN/backups.txt
+note "W0b: $COPY, sha256 $(sha "$COPY"), recorded in backups.txt"
+
+# W1
+$WIN/w.sh W.txt "W1 agents --tester" $MOSAIC agents --business mosaic-stack --tester > $WIN/.w1-agents.txt || stop "W1 agents"
+grep -E '(^|[[:space:]])chief[[:space:]].*working' $WIN/.w1-agents.txt && stop "W1: the chief is working"
+$WIN/w.sh W.txt "W1 launches list" $MOSAIC launches list || stop "W1 launches list"
+note "W1 start stamp $(date -u +%FT%TZ)"
+[ "$(sha $SNAP)" = "$SNAP_SHA" ] || stop "SNAP sha before S1"
+note "SNAP sha256 639fd28a checked before S1"
+$WIN/w.sh W.txt "S1 snapshot --held" node $SNAP --store "$DATA/bus/bus.sqlite" --held > $WIN/S1.json || stop "S1"
+sed -i '$d' $WIN/S1.json   # w.sh prints "# exit N" last; S1.json keeps the snapshot only
+note "S1.json sha256 $(sha $WIN/S1.json)"
+
+# W2
+$WIN/w.sh W.txt "W2 status" scripts/stack-release.sh status mosaic-stack || stop "W2 status"
+
+# W3
+$WIN/w.sh W.txt "W3 activate NEW --pm --migrate --tester-socket --plan" scripts/stack-release.sh activate $NEW mosaic-stack --pm --migrate --tester-socket --plan > $WIN/W3-plan.txt || stop "W3 plan exit"
+sed -i '$d' $WIN/W3-plan.txt
+note "W3-plan.txt sha256 $(sha $WIN/W3-plan.txt)"
+# The plan's W3 row: OLD to NEW, the migration lines (3j to 3l, steps 3j to 3k and 3k to 3l), the backup line, and a Console line with OLD's flags exactly
+# (--tester-socket, no --send, no --sso, no proof pair, no drop line). Any other difference stops here.
+P3L=$WIN/W3-plan.txt
+# The commit list holds subjects that name --sso and --send (row 273), so the flag checks read the plan without it.
+P3N=$WIN/W3-plan-nocommits.txt
+grep -v '^  [0-9a-f]\{9\} ' $P3L > $P3N
+note "W3 commit list lines left out of the flag checks: $(grep -c '^  [0-9a-f]\{9\} ' $P3L)"
+CONSOLE_WANT="Console: scripts/webui-service.sh install --copy $NEW --copies $HOME/.local/share/mosaic-stack/copies --port 7332 --public-host mosaic.woltje.com --auth-header X-authentik-username --allow-user jason.woltje --tester-socket"
+grep -qx "from: $OLD" $P3L || stop "W3: from is not OLD"
+grep -qx "to: $NEW" $P3L || stop "W3: to is not NEW"
+grep -qx "store schema: 3j (read from the store the running bus holds)" $P3L || stop "W3: store schema line"
+grep -qx "target schema: 3l" $P3L || stop "W3: target schema is not 3l"
+grep -qx "migration: 3j to 3l, after a backup of the stopped store" $P3L || stop "W3: migration line is not 3j to 3l"
+grep -qx "migration steps: 3j to 3k, 3k to 3l" $P3L || stop "W3: migration steps are not 3j to 3k, 3k to 3l"
+grep -qx "needs: --migrate (given)" $P3L || stop "W3: needs --migrate (given) line"
+# The Jason line is expected; Q173 overrides decision 96 condition 2 for this business (sage-2703 item 2).
+grep -qx "needs: Jason present for this run (decision 96 condition 2)" $P3L || stop "W3: the decision 96 line is missing"
+[ "$(grep -c '^needs: ' $P3N)" = 2 ] || stop "W3: a needs: line other than the two above"
+[ "$(grep -c '^migration' $P3N)" = 2 ] || stop "W3: a migration line other than the two above"
+grep -q '^restore: \|^note: ' $P3N && stop "W3: a restore or note line"
+grep -qx "commits: the run adds 132 (newest first, at most 200):" $P3L || stop "W3: commit count is not 132"
+grep -qx "backup: the run backs up the stopped store to $DATA/backups/stack/<activation>/ before any migration" $P3L || stop "W3: backup line"
+grep -qx -- "$CONSOLE_WANT" $P3L || stop "W3: Console line is not OLD's flags exactly"
+[ "$(grep -c '^Console: ' $P3L)" = 1 ] || stop "W3: more than one Console line"
+grep -q '^drop \|^sso: \|--send\|--sso\|--proof-header\|--proof-file' $P3N && stop "W3: a drop, sso, send or proof line or flag"
+grep -qx 'proof: off' $P3L && grep -qx 'send: off' $P3L || stop "W3: proof and send lines are not off"
+grep -q "^bus: scripts/bus-service.sh install --copy $NEW .* --pm " $P3L || stop "W3: bus line has no --pm on NEW"
+note "W3 plan checks: OLD to NEW, 3j to 3l, steps 3j to 3k and 3k to 3l, needs --migrate (given) and the decision 96 line, backup line, Console line OLD's flags exactly, proof off, send off, no drop/sso/send/proof, bus --pm: PASS"
+
+# W4
+$WIN/w.sh W.txt "W4 bus unit (Environment omitted from the transcript)" systemctl --user show [email protected] -p ExecStart -p WorkingDirectory -p DropInPaths || stop "W4 bus"
+$WIN/w.sh W.txt "W4 webui unit" systemctl --user show mosaic-webui.service -p ExecStart -p WorkingDirectory -p DropInPaths || stop "W4 webui"
+BUSL=$(systemctl --user show [email protected] -p ExecStart -p DropInPaths -p WorkingDirectory)
+WEBL=$(systemctl --user show mosaic-webui.service -p ExecStart -p DropInPaths -p WorkingDirectory)
+for u in BUSL WEBL; do v=${!u}; grep -qx 'DropInPaths=' <<< "$v" || stop "W4 $u DropInPaths not empty"; grep '^ExecStart=' <<< "$v" | grep -q "copies/$OLD/" || stop "W4 $u ExecStart does not name the OLD copy"; grep '^ExecStart=' <<< "$v" | grep -q "copies/$NEW" && stop "W4 $u ExecStart names NEW"; grep '^ExecStart=' <<< "$v" | grep -q "[\"'\\\\]" && stop "W4 $u ExecStart has a quote or backslash"; done
+grep '^ExecStart=' <<< "$BUSL" | grep -q -- ' --pm' || stop "W4 bus ExecStart has no --pm"
+note "W4 checks: DropInPaths empty on both, both ExecStart name the OLD copy, bus has --pm, no quote or backslash in either ExecStart"
+ENVL=$(systemctl --user show [email protected] -p Environment)
+note "W4 bus Environment: $(tr ' ' '\n' <<< "${ENVL#Environment=}" | grep -c =) assignments; quote or backslash: $(grep -q "[\"'\\\\]" <<< "$ENVL" && echo FOUND || echo none) (values not recorded)"
+note "W0b-W4 end $(date -u +%FT%TZ)"
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,2 @@
+chief  r7646a7a4a2bd  claude-code  since 2026-10-21T21:59:29.874Z
+# exit 0
@@ -0,0 +1,6 @@
+ActiveState=active
+DropInPaths=
+MainPID=828746
+ExecStart={ path=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/scripts/mosaic ; argv[]=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b/scripts/mosaic bus start mosaic-stack --pm ; ignore_errors=no ; start_time=[Wed 2026-10-21 23:02:58 CDT] ; stop_time=[n/a] ; pid=828746 ; code=(null) ; status=0/0 }
+WorkingDirectory=/home/jwoltje/.local/share/mosaic-stack/copies/86f95bb27f6cb237bf9fa9ba53320bace6c4de0b
+# exit 0
				`@@ -0,0 +1 @@`
				`{"checked":5,"flagged":1,"patterns":{"ms-unslop:7":4},"notices":1,"broken":null}`
				`@@ -0,0 +1 @@`
				`launched chief: run re6c69f1ec1f0, claude-code claude-opus-5-5`
				`@@ -0,0 +1 @@`
				`copied: /home/jwoltje/.local/share/mosaic-stack/copies/84f53540dd0d21ef179ca29697e172b0246e78d1`