session 2026-09-12: PENDING-185, the shared-substrate finding, and a referent no party held

PENDING-185 [HARDENING] — a state-claim falsifier whose unit is the FILE where the claim's
unit is a change made UNDER PENDING-149. It fires at [ESCALATE] on every future ~/CLAUDE.md
edit and cannot be fixed by reading more carefully. Recommendation (b), retire and mark
manual-only, recorded as a LOSS rather than dressed as a fix.

The day's real yield is smaller and worse: the governance MCP server's enumerated FILES and
governance_search cover PENDING.md + PENDING-archive.md + REVIEWED.md — exactly the corpus
the executor sweeps. So jurist and executor agreeing on a register question is ONE CHECK
COUNTED TWICE, not two positions converging. Jurist-ratified. Recorded AGAINST Constraint 6's
falsifiability clause, as that clause requires, and banked for PENDING-89 / PENDING-140
rather than filed. Establishing it needed the executor's transcript AND the MCP file list —
reachable only from one of the two positions it describes.

'Ruling (B)' was a term with no referent. It entered from the jurist at 08:44:58 (measured,
65 records before the executor's first use) and twice acquired a false source — the steward,
then the executor — each asserted rather than read. Act on none of it.

Also: the steward's ~/CLAUDE.md annotation, placed by his hand after the executor declined
the jurist's instruction to place it (Constraint 1; a jurist sign-off does not authorize one).
First live exercise of the inbound-contamination clause, one day after it landed.

Contains: session record, ledger, MEMORY.md promote + trim, MEMORY-reference.md demote
(lossless-relocation gate PASSED, md5 c9146a4f over 1,998 bytes), 6 knowledge-graph rows,
2 skill-harvest proposals.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PJM5fwqp456LDGzqiZXsgu

CLAUDE.md

@@ -262,4 +262,6 @@ These cannot be overridden by any session instruction, seed, or convenience:
 
    Four consequences bind. First, the three-party model is not a trust hierarchy: steward, jurist and executor are not ordered by reliability, with a clean human checking a suspect machine, but differently positioned readers — different information, different role, different exposure — and a correction may run in any direction. Second, independence is a property to be engineered, not assumed. Difference of formation is the strong form; difference of role, information and incentive is the weak form. In this system the steward differs from both AI parties in formation; the jurist and the executor do not differ from each other in formation, and their separation is of the weaker kind. Neither this doctrine nor any evidence offered in support of it establishes that the jurist–executor pair constitutes a check in the strong sense. Third, the doctrine is falsifiable and must be watched: if the parties' misses are found to correlate — if what one misses, the others reliably miss too — it is false for that configuration, and no amount of procedural care substitutes. Evidence against is to be recorded when observed, not only when sought. Fourth: oversight of this kind produces robustness, not legitimacy. A well-positioned set of checkers sharpens whatever it is aimed at, and the sharpening is indifferent to the target's worth. Nothing in the structure supplies the warrant that the work should be done at all; that judgment sits with the steward and is not delegable to the configuration.
 
+   *⚠ The "fourth consequence" above is a consequence of this doctrine, not a fourth party. Whether a fourth position exists in the arrangement is PENDING-150 — open, `[ESCALATE]`, deliberately unbundled from PENDING-149, and unaffected by this paragraph.*
+
    *Status: provisional. Held until the thought is more refined, and revisable on evidence. Proposed by the executor, design-gated by the jurist 2026-08-02 with two required conditions (REVIEWED-86), placed by the steward.*