[FIX] The link canary was blind to code spans, to wikilinks, and to its own class

The steward's 2026-08-09 to-do read "the gap is neither knowledge nor home but
the absence of an EXECUTABLE." The premise was false: classify_pointers has
existed since 19bddd5 (2026-08-08), wired to SessionStart, with controls. The
gap was that the executable was incomplete, and the incompleteness had already
produced a false positive.

Four defects, three named in the spec and one found by building it:

1. CODE SPANS. `](file.md)` inside backticks read as a pointer, so the single
   DEAD pointer reported on 2026-08-09 was the link pattern written inside
   MEMORY.md's own specification of this canary. An instrument that flags its
   own documentation flags it every wake forever, and the real signal drowns —
   the same "known canary bug" dismissal the 2026-07-28 block was written to
   end, arriving by a second route. Fences and inline spans are blanked with
   offsets preserved; inline spans may not cross a newline and an unterminated
   fence does not match, so a stray backtick can never blank the file and HIDE
   dead pointers.

2. WIKILINKS. reference-verification-ladder.md has specified this canary as
   covering "every `](file.md)` and `[[wikilink]]`" since 2026-07-06. Only the
   first half was ever built. 31 wikilinks now checked.

3. BREAKAGE AGE, derived from git rather than a stored prior run — a state file
   would make this the one cached section in a digest whose governing property
   is that it is computed. Where git cannot answer, it says so.

4. Found by running it: the first wikilink pass reported only UNWRITTEN, and
   both live hits were [[trust-prior-pass-frame]], whose file EXISTS as
   feedback-trust-prior-pass-frame.md. That is precisely the one-word alarm the
   comment ten lines above it was written to forbid. Wikilinks now report three
   outcomes and hand back the replacement slug. Both are repaired here.

The wake-up skill and the ladder now POINT AT the executable instead of
describing the check — the described-not-invoked gap is why it kept being
retyped by hand on 2026-08-08 and 2026-08-09.

Verify: python3 scripts/wake-digest.py --selftest   (61 checks, exit 0)
        python3 scripts/wake-digest.py | grep 'MEMORY POINTERS'
Induced red: blank_code reverted to a no-op (behaviour, not the symbol) →
        exit 2, five named failures, no traceback; direction controls held.

Not changed: the wrap_inside detector, which announced "PREVIOUS SESSION DID
NOT WRAP" for a session that wrapped at 19:48 and kept working until 21:54 —
a two-valued detector over a three-case state. Named in the ledger, not fixed.

claude/memory/MEMORY-reference.md

@@ -25,7 +25,7 @@ metadata:
 - [Session 2026-08-01 — the Fool, and the boundary I manufactured](session-2026-08-01-the-fool-and-the-manufactured-boundary.md) — closed the reset thread (PENDING-85 eyeballed → **Arcades verdict WRONG**, a ClearScan scan; PENDING-84 triaged via the **§VII quarantine lane**, *dispositioned not repaired*), then found the stuckness was largely mine: **three of the day's biggest closures were ALREADY authorized** — register split (166K→44K, 177 open readable), ladder Stroke 2 (21→**71 instruments**), classifier fix — and once I justified inaction by invoking **PENDING-88's own unratified rule**. Landed **spec v2.9.1** (0-of-17→0-of-14; the prior figure is **irreproducible**, recorded in the constitution). **REVIEWED-85 ruled, NOT placed.** ESCALATE doctrine package filed (*differently biased checkers*). **Derrida: the independent witness WORKS** — ocrmac recovered what olmOCR silently dropped (5,590 words / 152 spans, invisible to every wired gate). **PULLING THREAD: stabilize the Fool method** (Qwen 3.6 35B on the M4, 2 trials, protocol unstable) — and **v1 Chamber's paired GPT/Claude raw outputs survive in ARC**, a ready-made dataset. Detail in the session file.
 - [MemPalace KG object 128-char cap](feedback-mempalace-kg-object-128-char-cap.md) — `kg_add` `object` hard-caps at 128 chars; write KG objects as short keyword phrases on the FIRST pass, detail goes in the drawer. Recurs at every /wrap-up §5 — stop re-deriving it. *(Relocation note: palace-memory wound down 2026-07-07; wrap §5 now appends JSONL — the cap now matters only for typography-palace kg_adds, which are rare.)*
 - [MemPalace wing-filter broken](feedback-mempalace-wing-filter-broken.md) — wing-scoped search → 'Error finding id' (upstream #1665, open at HEAD); search UNSCOPED + post-filter by wing. Don't run `repair` (#1589). Affects wake-up §2.b.3. *(Relocation note: §2.b.3 was rewired to the files layer 2026-07-07; relevant only to the typography palace CLI now.)*
-- [Verify each post type after changes](feedback-verify-each-post-type-after-changes.md) — ARC: after any shared CSS/template/composition change, check EVERY content type on BOTH desktop and phone, not a sample on one viewport. Lesson from §II.d gate verified phone-only → desktop appearance surfaced 2 sessions late (no regression; just unseen). Per-type×per-viewport extension of [[trust-prior-pass-frame]]; belongs in the SCSS verification ladder.
+- [Verify each post type after changes](feedback-verify-each-post-type-after-changes.md) — ARC: after any shared CSS/template/composition change, check EVERY content type on BOTH desktop and phone, not a sample on one viewport. Lesson from §II.d gate verified phone-only → desktop appearance surfaced 2 sessions late (no regression; just unseen). Per-type×per-viewport extension of [[feedback-trust-prior-pass-frame]]; belongs in the SCSS verification ladder.
 - [Reading Compass is SVG, not type](feedback-reading-compass-is-svg-not-type.md) — ARC Compass sigils are SVG `<symbol>` artwork, NOT Plex Sans / nav typeface / Pattern 3. Recurring conflation; steward corrected 2026-06-03. Plex-Sans nav *text* = breadcrumb + version-stamp + post-type only.
 - [ARC chamber v1-legacy cluster](project-arc-chamber-v1-legacy-cluster.md) — ARC's `content/chamber/**` is intentional v1-Chamber legacy (not drift); deferred to-do = gather into a presentable cluster as a record of development. Out of §5 clause-1 audit scope. Confirmed 2026-05-29.
 
@@ -280,7 +280,7 @@ Split out of [MEMORY.md](MEMORY.md) on 2026-07-06 to keep the wake-loaded index
 - [Session 2026-06-17 — the cul-de-lampe designed, rolled out & shipped; Levi base settled & paused](session-2026-06-17-cul-de-lampe-designed-rolled-out-shipped-levi-base-settled.md) — **A long ARC-dominated day, fully shipped.** Designed the **cul-de-lampe** (confronted EB Garamond hederae U+E001/E002, tips meeting, central heart; drawn from real glyph outlines via fontTools), **sized to the text-em** (`height:1em` — em-anchored NOT a constant; the steward's "is there a mathematically right proportion?" pushed to a doctrine-consistent answer per REVIEWED-42 silver-ratio retirement), **`var(--fg)` opacity 0.7** (NOT grey — steward caught it; grey retired Stage M; CSS mask, white-fill luminance-safe, hand-written -webkit-). **Close-only** ruling; **type-applicability**: Essay/Hommage/Tombeau carry it, **Fragment refused**, Photo-essay declined; placement (end of text proper, before Sources) + **publication mandate**. Caught + fixed my own **Sources-as-apparatus over-claim** (steward flagged). **Rolled out to 7 essays**; **Vespers quieted** (titles→§XII.b register-marks I–VIII; ornaments→silence; §VIII image-caption fixed) + **Mushi-Ken revised** (analysed against type-spec = it IS an essay; dropped the pre-typology appendix); **both reworks VERSIONED** (ADR-005 genesis snapshots + /v/ routes; steward: "respect the versioning"). Spec'd (§IV + Sub-table 6 reconciled). **Committed `d736df1` + `68001a4`, deployed live, pushed origin + github-backup.** Began on **Levi/Camus** Position-I conversion: **Camus DONE**; **Levi base settled = ocrmac fresh OCR** (4-pass; reading-order fidelity decides) BUT **drop-caps lost at OCR-source level** → source-verified restoration + ingest **PAUSED** (verbatim-trust > speed). Steward ruled **Levi = whole book**. **PULLING THREAD reverts to Levi → the pattern-finder's first TRUE pass.** Captured **B5** (versioning-links rethink) in the open-work register; A2 → DONE.
 
 ## Archived (2026-06-17 — cul-de-lampe shipped + Levi base settled)
-- [Session 2026-06-16 (evening, post-/clear) — pattern-finder built + Station-I ingested + pass-1 contamination caught + ARC ornaments grounded](session-2026-06-16-evening-pattern-finder-build-station-i-contamination-arc-ornaments.md) — **The thread's first real build, and the engine catching its own error.** (1) **Station-I ingested** into studium-engine (5 authors/7 work-files; steward ruled FR-originals · Levi=Gray-Zone-only · both Weil; new manifest vocab `role:reading-source`+`station:I`; omnibus works sidecar-scoped; 15 sources/7282 drawers/verify HEALTHY). **[FIX] Mauss re-anchor** — the morning's own chamber-cleanup (`03de347`) broke the engine's pinned hash; gate caught it. (2) **Built `engine/pattern_finder.py`** — charter-L2 harness (three cognitions; generate-free/verify-tight; honest-silence; reasoner=Claude over FTS). (3) **PASS-1 CAUGHT ITS OWN FALSE GROUNDING** ([[feedback-tool-review-after-each-use]] PASS-BUT-FALSELY): "5/5 voices" partly false — **Camus la-chute span is mostly *Le Premier Homme*** (mislabelled mega-omnibus); **Musil/Arendt apparatus leak** (translator N.d.T. / Amos Elon intro / Bibliography-Index). The engine's thesis (§VII/§XV) *working*. Survivor: **P3 "complicity that depletes not damns"** (Weil↔Levi↔Arendt, 1947↔1986). **Return — frame-inheritance** ([[trust-prior-pass-frame]]): verified endpoints, not interior. (4) **Pass-2 fixes applied** (Musil/Arendt sidecars corrected, interior-verified; **Camus WITHDRAWN** pending clean re-source) — **NOT re-run/verified (Bash flaky); studium tree left inconsistent+uncommitted on purpose.** (5) **ARC ornaments grounded**: **cul-de-lampe** = confronted hederae, SVG from open EB Garamond, terminal-close, *ivy=lié=ligature binding dead-to-unborn-via-living* (steward's keystone); **triple point** = Penguin/Tschichold restraint citation at the opening threshold, "a touch more weight." Both → spec §IV + type-matrix (steward, tomorrow). **PULLING THREAD: the pattern-finder's first TRUE pass on Position I — gated now on a clean, complete source set the steward will assemble.** NEXT: re-source → re-run+verify pass-2 → clean grounding → marginalia → commit.
+- [Session 2026-06-16 (evening, post-/clear) — pattern-finder built + Station-I ingested + pass-1 contamination caught + ARC ornaments grounded](session-2026-06-16-evening-pattern-finder-build-station-i-contamination-arc-ornaments.md) — **The thread's first real build, and the engine catching its own error.** (1) **Station-I ingested** into studium-engine (5 authors/7 work-files; steward ruled FR-originals · Levi=Gray-Zone-only · both Weil; new manifest vocab `role:reading-source`+`station:I`; omnibus works sidecar-scoped; 15 sources/7282 drawers/verify HEALTHY). **[FIX] Mauss re-anchor** — the morning's own chamber-cleanup (`03de347`) broke the engine's pinned hash; gate caught it. (2) **Built `engine/pattern_finder.py`** — charter-L2 harness (three cognitions; generate-free/verify-tight; honest-silence; reasoner=Claude over FTS). (3) **PASS-1 CAUGHT ITS OWN FALSE GROUNDING** ([[feedback-tool-review-after-each-use]] PASS-BUT-FALSELY): "5/5 voices" partly false — **Camus la-chute span is mostly *Le Premier Homme*** (mislabelled mega-omnibus); **Musil/Arendt apparatus leak** (translator N.d.T. / Amos Elon intro / Bibliography-Index). The engine's thesis (§VII/§XV) *working*. Survivor: **P3 "complicity that depletes not damns"** (Weil↔Levi↔Arendt, 1947↔1986). **Return — frame-inheritance** ([[feedback-trust-prior-pass-frame]]): verified endpoints, not interior. (4) **Pass-2 fixes applied** (Musil/Arendt sidecars corrected, interior-verified; **Camus WITHDRAWN** pending clean re-source) — **NOT re-run/verified (Bash flaky); studium tree left inconsistent+uncommitted on purpose.** (5) **ARC ornaments grounded**: **cul-de-lampe** = confronted hederae, SVG from open EB Garamond, terminal-close, *ivy=lié=ligature binding dead-to-unborn-via-living* (steward's keystone); **triple point** = Penguin/Tschichold restraint citation at the opening threshold, "a touch more weight." Both → spec §IV + type-matrix (steward, tomorrow). **PULLING THREAD: the pattern-finder's first TRUE pass on Position I — gated now on a clean, complete source set the steward will assemble.** NEXT: re-source → re-run+verify pass-2 → clean grounding → marginalia → commit.
 
 ## Archived (2026-06-16 morning — officina + conversion tooling trustworthy + Station-I corpus complete)
 - [Session 2026-06-16 — officina established + conversion tooling made trustworthy + Station-I corpus complete](session-2026-06-16-officina-conversion-tooling-station-i.md) — **Long, two movements, almost entirely the prerequisite for the thread.** (1) **Officina** = ARC's in-repo writing workshop (genetic trail seeds/notes/fragments/drafts; never published; **ADR-008**; gates = Hakyll allowlist + both-remotes-private; sub-canonical sources → chamber `antechamber/`). Seeded by The Making (sketch + *Magnifica Humanitas* note [steward deeply affected] + reading list). (2) **The conversion-tooling marathon** (steward's deepest ask: *review every tool after each use until reliable* → [[feedback-tool-review-after-each-use]]): hardened **audit_cruft** (gate was passing falsely-clean → corpus never "1280 clean": 160→215 dirty), built **verify_conversion.py** (composite verifier **+ prose-safety `prose_delta`**), fixed **strip_cruft** + **repair_epub_headings**, wrote **`conversion-runbook.yaml`** (the single operational place) + **`tool-evolution-log.md`**. Prose-gated cleanup: **180 cleaned, 35 reconvert → honest 1245/35**. **Station I corpus-complete** (Camus *La Chute* + Musil ×2 converted/graduated; joins Weil/Levi/Arendt). **Return: the false alarm** — cried "destroyed prose," disproved it (cruft tokens, not prose; recalibration: content-aware compare, not token counts). All pushed (chamber `d9c6755`, ARC `7a0d4b6`). NEXT: ingest the five into the engine → build/run the pattern-finder's first pass.

claude/memory/reference-verification-ladder.md

@@ -23,7 +23,7 @@ Proven gates, each earned from a real catch. Reach for the one the claim's shape
 - **Delayer-diff** (2026-06-08) — for an `@layer`/structural-wrap refactor where the compiled output gains uniform wrappers: strip the `@layer X{`/closing-`}` wrappers from the compiled CSS (brace-aware script), diff vs the true baseline; byte-identical proves nothing *moved, dropped, or changed* — only got wrapped. Proven 3× in W3R Stage 2a. **CAUTION — byte-identical ≠ rendered-identical under `@layer`:** `@layer` overrides specificity, so a structural-wrap byte-proof is *necessary but not sufficient*; render-review is the gate when the cascade *basis* changes (a 5-layer wrap was byte-true yet produced 3 render inversions the diff could not see — the steward's eye caught them). Rendered-identity is then argued *by construction* (only already-winning rules promoted) AND render-reviewed — not inferred from the byte-diff.
 - **Hold or exclude volatile build-stamps** — a build-date/commit stamp (colophon `_build_info`) differs between baseline and post builds and falsely flags a byte-diff. Hold it constant or exclude it, and say which (2026-06-10, Stage-G close).
 - **Two-hat commit separation** — name the hat each commit wears: a *refactor* commit's compiled output is byte-identical (or carries a pre-stated classified delta); a *feature* commit is where rendered values change. Makes the gate above applicable per-commit instead of per-session (2026-06-08, from Fowler).
-- **Lossless-relocation gate** — restructuring an index or moving prose between files: line-range **slices, never retyping**, + md5-conservation per moved slice + a link-resolution canary over every `](file.md)` and `[[wikilink]]`. Proven on the MEMORY.md two-file split (2026-07-06) and again on the skill-harvest split (2026-08-01, archive byte-identical over 166,027 bytes).
+- **Lossless-relocation gate** — restructuring an index or moving prose between files: line-range **slices, never retyping**, + md5-conservation per moved slice + a link-resolution canary over every `](file.md)` and `[[wikilink]]`. Proven on the MEMORY.md two-file split (2026-07-06) and again on the skill-harvest split (2026-08-01, archive byte-identical over 166,027 bytes). **The canary is an executable — `python3 ~/dotfiles/scripts/wake-digest.py` (both link forms, four outcomes each, breakage dated from git; `--selftest` proves it). Never hand-type it: the hand version cannot strip code spans, and on 2026-08-09 its one "finding" was the link pattern inside its own specification** (2026-08-10).
 
 ## Mechanical text transforms ("strip/replace token X across the file")
 - **Token-strip hits prose** (2026-06-08) — a whole-file `sed s/…!important…//` (or any token strip) also removes the token from comments, code-refs, and docstrings, silently mangling prose. Scope the transform to declaration lines, OR compare raw-before vs clean-declaration counts and verify comment integrity after (caught 4 mangled comments via the 56-vs-70 count mismatch; restored). Same family as *Count first, then look* — the word lives in prose too.

claude/memory/session-ledger-2026-08-10.md

@@ -0,0 +1,50 @@
+---
+name: session-ledger-2026-08-10
+description: "Practice-of-return ledger maintained by /symmetria — returns, open horizons, recalibrations, authorization moves, sub-agent dialogues, bypasses."
+metadata: 
+  node_type: memory
+  type: feedback
+  originSessionId: bc984a6d-e8ce-47f5-99da-062703403e7d
+  modified: 2026-08-10T13:56:12.136Z
+---
+
+# Session Ledger — 2026-08-10
+
+## Returns
+
+- **09:xx — inherited premise checked before executing it (second consecutive wake).** The wrap's
+  steward-directed to-do asserted *"the gap is neither knowledge nor home but the absence of an
+  EXECUTABLE."* Substrate says otherwise: `~/dotfiles/scripts/wake-digest.py` already carries
+  `classify_pointers`/`sec_pointers` (built 2026-08-08, `19bddd5`), both indexes, four outcomes,
+  positive controls, wired to SessionStart. The task is therefore **completing an instrument**,
+  not building one. Named before starting work; the fix is scoped to the three real gaps.
+- **Reached the ladder before deriving a gate.** `reference-verification-ladder.md` already
+  specifies the canary under *lossless-relocation gate* — "a link-resolution canary over every
+  `](file.md)` and `[[wikilink]]`". The wikilink half was specified on the ladder and absent from
+  the code; read, not re-derived.
+
+## What held
+
+- The wake's own instrument reported its lone "dead" pointer honestly enough to be diagnosable —
+  the four-outcome design (2026-07-28 provenance) did what it was built to do.
+
+## Open horizons
+
+- **`wrap_inside` false alarm.** The digest announced "PREVIOUS SESSION DID NOT WRAP" for a session
+  that wrapped at 19:48 and then kept working until 21:54. Same defect family as the pointer alarm:
+  a two-valued detector over a state that has three cases (wrapped · wrapped-then-continued ·
+  never-wrapped). Named, not fixed — outside today's scope.
+- REVIEWED-114 stays OPEN on 4b (steward's marked answer key). No mechanism can cover it.
+- Skill-harvest: 41 `S2` rows authorized 2026-07-19, still unexecuted.
+
+## Confidence to recalibrate
+
+## Authorization moves
+
+- Canary completion treated as `[FIX]` — it resolves scoped bugs against an existing steward
+  specification (the 2026-08-09 to-do), on an instrument the steward directed be completed today.
+  No new architectural direction; no governance file touched.
+
+## Sub-agent dialogues
+
+## Bypasses