session close 08-17: AMENDMENT 1 complete, binding rule ratified

The truncation and the unclosed fence are both resolved; A3's binding rule is
ratified and quoted verbatim in corpus/v2-stratum-tags.yaml.

⚠ Banked: a governed record's own FORMATTING can make an entry invisible to the
check that guards it while the check reports clean. The re-paste indented the
body but left the heading at column 0 — had it indented the heading, RE_HEAD
would have stopped matching and the amendment would have vanished from
register-integrity with no alarm. Third instance in a week of a check whose
subject sits adjacent to the property that matters.

claude/memory/MEMORY.md

@@ -74,7 +74,7 @@ permalink: claude-memory/memory
 > ⚠ **`test_legacy_indices_are_not_self_verified` DOES NOT EXIST** — one occurrence repo-wide, a docstring. Carried into a corpus file, a commit message and a steward report unopened. 4th cited-a-derived-label instance; fixed `966168b`.
 > ⚠ **PENDING-140 [ESCALATE] FILED 08-17 — a proposed THIRD axis for Constraint 6.** Jurist *without* keys (REVIEWED-116 pt 7) ruled on my testimony and its own A4 was false; *with* keys it returned **three defects in one sitting**. **Formation, role and incentive identical across both — only access changed.** ⇒ bias-difference is **necessary and radically insufficient**; a differently-biased reader with no access checks the *account*, not the *thing*. ⚠ n=1/condition, self-reported, and **authored by the party under discussion** — filed, not acted on. Also: `contamination-problem.md` is a theory of **glazing only**, while a crude probe puts our 235 drift-patterns at **86 literal-genie / 12 trickster / 8 glazing** (129 unclassified; classifier is the very defect PENDING-139 names).
 > ✅ **AMENDMENT 1 PLACED 08-17** (`~/REVIEWED.md` L1813) **and A3 EXECUTED** (`a3be778`, REVIEWED-121-A1) — the latch now carries `defeater_dispositions_recorded` + `defeater_population` (**named, not numbered**, on the amendment's instruction). Register check now sees **2 amendments** where it saw 1.
-> 📋 **STEWARD OWES — THE PLACED AMENDMENT IS TRUNCATED**, ending at A3's YAML block. **Missing: A3's binding rule · A4 entirely · the disposition.** ⚠ **The transcript holding the full draft was cleared, so the ONLY surviving copy of the binding rule is the comment in `corpus/v2-stratum-tags.yaml`** — recorded there as the executor's draft awaiting placement, **not** as ratified text, and it must not be cited as ratified. **`ratio_A_to_B` VOID until PENDING-137 lands too.**
+> ✅ **AMENDMENT 1 COMPLETE 08-17** — truncation filled, fence closed at L1853, all 10 elements verified present; A3's binding rule **ratified** and quoted verbatim in the corpus (`cd6d4bf`). ⚠ **The re-paste indented the body 2 spaces but left the HEADING at column 0 — had it not, `RE_HEAD` would have stopped matching and the amendment would have gone invisible to register-integrity while the check reported clean.** **`ratio_A_to_B` VOID until PENDING-137 lands.**
 
 - [Session 2026-08-14 — the controls tested the wrong property](session-2026-08-14-the-controls-tested-the-wrong-property.md) — PENDING-134 closed; REVIEWED-121 placed/executed; PENDING-137/138/139 + a PENDING-89 docket entry filed; three package defects jurist-caught, the addendum's own A4 false, the governance checker carrying two blind spots. **LITERAL Q (sharpens 08-13's): not regression-vs-discovery — was the control's SUBJECT the claim it was cited as verifying, or an adjacent property? Census the last ~10 sessions on that axis.** **+ CODA (post-wrap, 08-17 capture): the four-flavours reading → PENDING-140 [ESCALATE] — Constraint 6 names formation and role/information/incentive; the variable that actually decided whether the jurist caught me was SUBSTRATE ACCESS.**
 

claude/memory/knowledge-graph.jsonl

@@ -660,3 +660,4 @@
 {"subject": "governance-drift-check.py", "predicate": "drift-pattern", "object": "TWO BLIND SPOTS, the second found by filing an item about the first. (A) RE_HEAD = ^##\\s+REVIEWED-(\\d+)\\s*[—-]\\s*(.*)$ cannot see a ###-level amendment: 2 amendments present in REVIEWED.md, 1 seen, and it prints '✓ every amendment link resolves (1 amendment(s) checked)'. (B) RE_BUILT = \\bBUILT\\b matches the marker even when preceded by NOT, reading a negation as an assertion. Common cause is the TECHNIQUE, not the regexes: a STATUS inferred from NARRATIVE prose never constrained to carry one. PENDING-139. ⚠ The register is now worded around (B), disclosed — so the check's silence on it is an accommodation, NOT a pass.", "valid_from": "2026-08-14", "valid_to": null, "confidence": 1.0, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-14"}
 {"subject": "checker substrate access", "predicate": "drift-pattern-good-direction", "object": "THE VARIABLE THAT DECIDED WHETHER THE JURIST CAUGHT THE EXECUTOR WAS ACCESS, NOT BIAS. Without governance_read keys (2026-08-10, REVIEWED-116 pt 7) the jurist ruled on the executor's testimony and its own drafted A4 asserted a test 'is not doubted' about a function that does not exist. With four keys served (2026-08-14, after REVIEWED-117) it opened the files and returned three defects in one sitting — a false census marked verified, a cost on the wrong population, and an unamended §6.2 narrowing. Formation, role and incentive were IDENTICAL across both sittings. ⇒ Constraint 6's two axes (formation; role/information/incentive) may be necessary and radically insufficient: a differently-biased reader with no access checks the ACCOUNT, not the THING. Filed PENDING-140 [ESCALATE]. ⚠ n=1 per condition, self-reported by parties under measurement, and authored by the party whose checking is at issue.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 0.7, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}
 {"subject": "contamination-problem.md", "predicate": "scope-limit", "object": "IS A THEORY OF ONE MISALIGNMENT FLAVOUR, USED HERE AS THE THEORY OF EXECUTOR FAILURE IN GENERAL. Against Byrnes's four-flavour taxonomy (imitative→seven-sins · human-approval→glazing · automatic-verifiers→literal-genie · LLM-judges→trickster), every mitigation in the doc — behavioural observation, explicit permission structures, indirect questioning, longitudinal analysis — is calibrated against APPROVAL-SEEKING, i.e. glazing. A crude keyword probe over the 235 banked claude-code drift-patterns classified 106 and left 129 unclassified: 86 literal-genie, 12 trickster, 8 glazing, 0 seven-sins. ⚠ The classifier is keyword-matching over prose — the exact defect PENDING-139 names — so indicative, not measured. If the skew survives a real instrument, our doctrine is ~100% anti-sycophancy while our failures are dominated by verifier-Goodhart, against which a control is simply another proxy.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 0.6, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}
+{"subject": "a governed record's own formatting", "predicate": "drift-pattern", "object": "CAN MAKE AN ENTRY INVISIBLE TO THE CHECK THAT GUARDS IT, WHILE THE CHECK REPORTS CLEAN. REVIEWED-121 AMENDMENT 1 was placed truncated (ended mid-A3), then re-pasted with an unclosed ```yaml fence that swallowed A3's binding rule, all of A4 and the disposition — rendering them as code and stripping their emphasis — and would have swallowed the NEXT entry appended to REVIEWED.md. Register-integrity reported clean throughout, because its subject is HEADINGS, not fences. The re-paste also indented the body 2 spaces; had it indented the HEADING, RE_HEAD (^##\\s+) would have stopped matching and the amendment would have vanished from the check entirely with no alarm. Third instance in one week of a check whose subject sits adjacent to the property that matters.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 1.0, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}

claude/memory/session-2026-08-14-the-controls-tested-the-wrong-property.md

@@ -128,14 +128,14 @@ Read the thread, confirm it still holds, and then *do what the steward asks for
 1. ✅ DONE 2026-08-17 — AMENDMENT 1 placed by the steward (~/REVIEWED.md L1813) and A3 executed
    (`a3be778`, tagged REVIEWED-121-A1). The heading form worked: the register-integrity check now
    sees TWO amendments where it saw one.
-2. ⚠ OWED BY THE STEWARD — THE PLACED AMENDMENT IS TRUNCATED. It ends at A3's YAML block.
-   MISSING: A3's binding rule (*the latch may not be read without the count and the population in
-   the same read; a report may carry all three or none*), A4 entirely (the phantom-test citation
-   correction), and the closing disposition. The full draft is in the 2026-08-14 transcript, which
-   was cleared — ⚠ SO THE ONLY SURVIVING COPY OF THE BINDING RULE IS THE COMMENT IN
-   `corpus/v2-stratum-tags.yaml`, recorded there explicitly as the executor's draft awaiting
-   placement and NOT as ratified text. A4's substance survives in this file's "What was corrected"
-   and in commit `966168b`. Re-derive from those, or rule afresh.
+2. ✅ DONE 2026-08-17 — the truncation was completed by the steward and the unclosed ```yaml fence
+   closed at L1853. Verified rather than taken on report: fences balanced, heading still at column 0
+   (so `RE_HEAD` matches and register-integrity sees both amendments — had the HEADING been indented
+   by the re-paste, the entry would have gone invisible to the check), and all 10 substantive elements
+   present. A3's binding rule is now ratified and quoted verbatim in `corpus/v2-stratum-tags.yaml`
+   (`cd6d4bf`), superseding the "awaiting placement" disclaimer that had been true for exactly one
+   commit. ⚠ The paste stripped `**`/`` ` `` markers from the binding rule, A4 and the disposition —
+   cosmetic, nothing depends on it.
 3. WHEN THIS LINE RESUMES PROPERLY: the fence, or the 532-span exposure. NOT another ruling.
 ```