session 2026-08-17: PENDING-141 — an authorized batch that would break a running measurement

The 41 S2 ladder rows are authorized and unblocked, and appending them triples
the verification ladder from 20 entries WHILE a pre-registered trial measures
whether the ladder is reached (baseline 14%, graded at 84 transcripts). Ladder
SIZE is an uncontrolled variable in that design. /wake-up froze its own trial
line for exactly this reason; nobody froze the ladder's contents, because
nobody had noticed they were a variable.

⚠ MEMORY.md was actively pushing the next session into it — 'ALREADY
AUTHORIZED … needing execution not a ruling', 'unblocked'. True as to
authorization, misleading as to consequence. The index line is amended in the
SAME commit as the filing: a finding that leaves the misleading line standing
is a note, not a finding.

Recommendation (a) HOLD until graded — the null action, in force by default
while the item is open.

Also captured for the clear: the tooling menu the steward asked to leave OPEN
for wake-up (wrap_inside three-valued fix, recommended; S2 batch now blocked;
engine retrieval PENDING-97), and one micro-instance of the week's finding —
my first probe searched the legend format and returned 1 row against the true
41, nearly reporting MEMORY.md as stale when the probe was the defective
thing.

claude/memory/knowledge-graph.jsonl

@@ -661,3 +661,4 @@
 {"subject": "checker substrate access", "predicate": "drift-pattern-good-direction", "object": "THE VARIABLE THAT DECIDED WHETHER THE JURIST CAUGHT THE EXECUTOR WAS ACCESS, NOT BIAS. Without governance_read keys (2026-08-10, REVIEWED-116 pt 7) the jurist ruled on the executor's testimony and its own drafted A4 asserted a test 'is not doubted' about a function that does not exist. With four keys served (2026-08-14, after REVIEWED-117) it opened the files and returned three defects in one sitting — a false census marked verified, a cost on the wrong population, and an unamended §6.2 narrowing. Formation, role and incentive were IDENTICAL across both sittings. ⇒ Constraint 6's two axes (formation; role/information/incentive) may be necessary and radically insufficient: a differently-biased reader with no access checks the ACCOUNT, not the THING. Filed PENDING-140 [ESCALATE]. ⚠ n=1 per condition, self-reported by parties under measurement, and authored by the party whose checking is at issue.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 0.7, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}
 {"subject": "contamination-problem.md", "predicate": "scope-limit", "object": "IS A THEORY OF ONE MISALIGNMENT FLAVOUR, USED HERE AS THE THEORY OF EXECUTOR FAILURE IN GENERAL. Against Byrnes's four-flavour taxonomy (imitative→seven-sins · human-approval→glazing · automatic-verifiers→literal-genie · LLM-judges→trickster), every mitigation in the doc — behavioural observation, explicit permission structures, indirect questioning, longitudinal analysis — is calibrated against APPROVAL-SEEKING, i.e. glazing. A crude keyword probe over the 235 banked claude-code drift-patterns classified 106 and left 129 unclassified: 86 literal-genie, 12 trickster, 8 glazing, 0 seven-sins. ⚠ The classifier is keyword-matching over prose — the exact defect PENDING-139 names — so indicative, not measured. If the skew survives a real instrument, our doctrine is ~100% anti-sycophancy while our failures are dominated by verifier-Goodhart, against which a control is simply another proxy.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 0.6, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}
 {"subject": "a governed record's own formatting", "predicate": "drift-pattern", "object": "CAN MAKE AN ENTRY INVISIBLE TO THE CHECK THAT GUARDS IT, WHILE THE CHECK REPORTS CLEAN. REVIEWED-121 AMENDMENT 1 was placed truncated (ended mid-A3), then re-pasted with an unclosed ```yaml fence that swallowed A3's binding rule, all of A4 and the disposition — rendering them as code and stripping their emphasis — and would have swallowed the NEXT entry appended to REVIEWED.md. Register-integrity reported clean throughout, because its subject is HEADINGS, not fences. The re-paste also indented the body 2 spaces; had it indented the HEADING, RE_HEAD (^##\\s+) would have stopped matching and the amendment would have vanished from the check entirely with no alarm. Third instance in one week of a check whose subject sits adjacent to the property that matters.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 1.0, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}
+{"subject": "an AUTHORIZED-and-unblocked action", "predicate": "drift-pattern", "object": "CAN STILL BE THE WRONG ACT, AND THE MEMORY INDEX WAS PUSHING TOWARD IT. The 41 S2 ladder rows are authorized (2026-07-19) and MEMORY.md described them as 'needing execution not a ruling' and 'unblocked' — both true as to authorization. But appending them triples the verification ladder from 20 entries WHILE a pre-registered trial measures whether the ladder is reached (baseline 14%, graded at 84 transcripts), and ladder SIZE is an uncontrolled variable in that design. A session doing exactly the right procedural thing would have confounded the only check behind REVIEWED-95's causal claim. Filed PENDING-141, recommendation (a) HOLD. ⚠ The index line was amended in the SAME act as the filing — a finding that leaves the misleading line standing is a note, not a finding. Authorization answers 'may I', never 'should I now'.", "valid_from": "2026-08-17", "valid_to": null, "confidence": 1.0, "source_file": "session-2026-08-14-the-controls-tested-the-wrong-property.md", "extracted_at": "2026-08-17"}