[FIX] Tarbuckle's body: the status line wired, and refreshInterval's real semantics

Tier 1 of §8's three. The body renders the name and one mark, every turn.

Verified against the substrate rather than assumed, because §13.2 gates §8 on it:
the statusLine schema is {type, command, padding?, refreshInterval?}, seconds, min 1.
The first name-match found was refreshIntervalMs, which belongs to the certificate
watcher — reading the context rather than trusting the match is what separated them.

⚠ One clause of PENDING-152 does not survive that read. It says the 20-minute tick is
"a counter over refreshes rather than over events" and that "no event-gating remains
within a session". refreshInterval re-runs the command every N seconds IN ADDITION TO
event-driven updates, so invocations burst with activity and a per-invocation counter
would be event-keyed — the v1 defect §8 exists to remove. The conclusion survives; the
mechanism named does not. The tick therefore consults the CLOCK, and the reasoning is
written into the script rather than left in this message.

The binding constraint — the variation must not correlate with anything — is carried by
render()'s signature: it takes the minute and nothing else, so a function that cannot
see the session cannot leak it. C3 asserts that structurally (argcount, co_names) and
C3n proves the assertion can fail by feeding it a deliberately leaky fixture. C4 asserts
len(MARKS) is coprime with the mumble interval, so the mark visible when a mumble lands
walks the whole cycle instead of announcing it; C4n catches a commensurate cycle.
16/16 controls, positive and negative, written before first execution.

Also placed: a STATE-CLAIM marker on the false "STEWARD OWES: place REVIEWED-127" line.
Steward-directed to defer the correction itself to the next session; this makes the
deferral machine-checked rather than remembered. It could NOT be placed beside the claim
— governance-drift-check.py scans */docs/**, claude/governance/**, PENDING.md and the
archive, and claude/memory/MEMORY.md matches none of them. The file read at the start of
every session is the one governance surface the checker cannot see.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J6hZXNYSxEfZseBGTni4sf

claude/memory/session-ledger-2026-08-25.md

@@ -7,6 +7,10 @@ type: feedback
 # Session Ledger — 2026-08-25
 
 ## Returns
+- 2026-08-25T16:03 — **Wake return: instance six of the staleness class, inside this session's own commit.** `2676a7e`'s message names the class — *"a line that went false the moment the steward acted"* — while the same commit writes `📌 STEWARD OWES: place REVIEWED-127` into MEMORY.md. REVIEWED-127 is placed **in that commit**, `~/REVIEWED.md:2218`, byte-identical to the draft. Caught by opening REVIEWED.md to check horizons. No mechanism saw it; it carries no `STATE-CLAIM` marker.
+- 2026-08-25T16:03 — **N-now re-measured rather than relayed: 41.** MEMORY.md records 51 today by the same method (`governance-drift-check.py:423`). The 30-day window is receding from the trial's 84 threshold, not approaching it — PENDING-147's complaint with a number attached. Not corrected: detection is executor work, the index line is not.
+- 2026-08-25T16:03 — Substrate-checked the resumption point's *"nothing is built"* instead of relaying it: no `statusLine` in any `~/.claude/*.json`, no fool/tarbuckle/mumble script in dotfiles, §13.1 absent from the seed dir. Claim holds.
+
 
 - 2026-08-25T15:0x — **Checked the steward's discharge premise instead of accepting it.** The claim was that the rename left no record of what discharged it. The forward pointer already existed in the block AND in `06b3d8b`'s message; what was genuinely missing was the reverse direction. Correction landed on my *report*, which under-described what I had written, not on the artifact. Reverse pointer now written — both ends.
 - 2026-08-25T15:0x — **Censused all 24 `abandon*` occurrences before editing any.** 13 in the trial-09 family were left standing: that is §6's own criterion about the jester form, and a blanket `sed` would have silently collided the two meanings the fix exists to separate. The ladder's *token-strip-hits-prose* entry is exactly this.
@@ -16,6 +20,8 @@ type: feedback
 - 2026-08-25T14:40 CEST — Caught the impulse to curl first and read the rule after. Yesterday's recalibration was *reported before reading, twice*; read FOOL-SEED-RULE.md end to end and derive_fool.py in full before any network call. The rule's §5a PROCEDURE clause (pass exactly as served) would have been easy to violate by habit.
 
 ## What held
+- 2026-08-25T16:03 — The literal question was answered with the command it named **and its voidness stated**: 2 tracked is unchanged, but zero sessions elapsed, so the counter tests nothing about adoption. Went to the substrate rather than reporting the number as an answer.
+
 
 - 2026-08-25T14:37 CEST — Wake verified the pulse epoch-ms independently (`1787659200000` → `2026-08-25T12:00:00Z`) rather than inheriting it from the wrap. Substrate check before an irreversible act.
 - 2026-08-25T14:39 — Re-ran `--selftest` at the moment of use instead of relaying "all 12 pass as of 2026-08-22". It now runs **16**; the relayed number was stale. The instrument was proven, not cited.
@@ -24,6 +30,10 @@ type: feedback
 - 2026-08-25T14:48 — Verified the drift-check AFTER discharging the trigger (4 tracked/1 due → 3 tracked/none due) rather than assuming the rename worked.
 
 ## Open horizons
+- **Wire Tarbuckle** — status-line body → 20-min tick → seam voice → §13.1 written last. No decisions left in it.
+- `~/dotfiles`: `M Brewfile` uncommitted, not from the wrap, provenance unknown.
+- ⚠ The MEMORY.md `STEWARD OWES` line is false and loads at every wake. Correcting a memory index is executor-safe — but patching it *while the adoption question is live* makes me both the author who forgets and the author who quietly repairs. Named, not acted on.
+
 
 - ~~The beacon derivation~~ ✅ **CLOSED 2026-08-25T14:45.** Peak SUCCESSION 96, dump ABSENCE 8.
 - Now unblocked by the beacon: §8 proportions · `abandonment`→`retirement` `[FIX]` · §8a body design (cond. 2) · PENDING-89 written to say the buddy fool contributes zero by construction · §5's stale "12 checks".
@@ -31,6 +41,8 @@ type: feedback
 - §8 proportions (unmet, no number) · `abandonment`→`retirement` [FIX] (deliberately after the beacon) · (b)/(c) remedy · PreToolUse payload-vs-disk correction.
 
 ## Confidence to recalibrate
+- 2026-08-25T16:03 — Yesterday's flag: *filed a non-defect as a defect, twice in one direction.* Today's first act was filing a defect, so the flag was applied before the claim: is `STEWARD OWES` stale, or working-as-intended? **Stale** — verified at `~/REVIEWED.md:2218` and in `git show 2676a7e` before naming it, not after. The reach for *something is broken* was checked this time.
+
 
 - ⚠ **`FOOL-SEED-RULE.md` §6 went false at 12:00Z and I did not notice while writing the derivation record.** "What has NOT happened — the target pulse has not been fetched, no bones derived" was falsified by the very act I was recording, and I wrote a 113-line record beside it without looking back at the document it governed. Caught an hour later, only because the retirement `[FIX]` sent me into the same file. **Nothing would have caught it otherwise** — the drift-check reads `~/CLAUDE.md`, not the fool's filed rule. Same class as PENDING-144.